How many school districts have to get massively hacked by the same method before the U.S. Department of Education, CISA, and states start really pressuring public school districts to address well-known vulnerabilities that are being exploited? Maybe that shouldn’t be a rhetorical question. Last night, DataBreaches was contacted by the same threat actors who claimed…
Category: Hack
Boeing Confirms ‘Cyber Incident’ from LockBit Hacking Group
Rojoef Manuel reports: Boeing has confirmed a “cyber incident” in its parts and distributions business days after a ransomware group published threats against the company. The acknowledgment came after LockBit hackers said on Friday they had tapped “a tremendous amount” of classified data from Boeing that would be leaked online if the company does not…
Town of Iowa in Louisiana victim of ransomware attack: ALPHV publishes a portion of the exfiltrated documents
Marco A. De Felice reports: The ransomware group ALPHV (BlackCat) has published a first part of exfiltrated data from the Town of Iowa in the state of Louisiana. Approximately 250 scanned documents in PDF format have been released, some of which contain visible Social Security numbers (SSNs) of employees, employee salaries, balance sheets, birthdates, addresses,…
Exclusive: Advarra hacked, threat actors threatening to leak data (1)
Advarra describes itself as providing integrated solutions to safeguard trial participants, empowering clinical sites, ensuring compliance, and optimizing research performance for thousands of sponsors, contract research organizations, institutions, academic medical centers, and research consortia that it services. On or about October 25, Advarra was hacked and data was exfiltrated. According to one of the people…
Exclusive: Hackers claim they still have access to Clark County School District (CCSD), and reveal more details about hack and stolen data
When reviews of data breaches in the education sector are written for 2023, they will almost certainly mention the 2022 attack on the Los Angeles Unified School District that wasn’t fully disclosed until 2023 and the Minneapolis Public Schools breach. Both of those incidents involved threat actors leaking sensitive information on students. But any 2023…
IL: Morrison Community Hospital patient data leaked by threat actors
On October 13, BlackCat (AlphV) threat actors first threatened to leak data from Morrison Community Hospital (MCH) in Illinois. Shortly thereafter, the listing was removed, only to be re-listed on October 19 with a claim by BlackCat that because the hospital had not given them a clear response, they were going to leak a little…