Major Cyber Attacks Witnessed Globally
SOCRadar, the early warning system for cyber incidents, closely monitors major cyber attacks witnessed globally. Below is a list of selected attacks.
Get free access to SOCRadar now to see how an early warning system for cybersecurity works.
2024
2023
2022
2021
Q4
Q3
Q2
Q1
Company / Country
Interbank (Peru)
Industry
Finance
Attack Vector
API credentials compromise
Threat Group
kzoldyck
Company / Country
Free ISP (France)
Industry
Telecommunications
Attack Vector
Internal system breach
Threat Group
Unknown
Company / Country
Change Healthcare (US)
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
BlackCat (ALPHV), RansomHub
Company / Country
Cisco DevHub (US)
Industry
Technology
Attack Vector
Unauthorized DevHub access
Threat Group
IntelBroker
Company / Country
Game Freak (Japan)
Industry
Gaming
Attack Vector
Server breach
Threat Group
Unknown
Company / Country
Casio (Japan)
Industry
Manufacturing
Attack Vector
Ransomware
Threat Group
Underground Ransomware
Company / Country
Internet Archive (US)
Industry
Nonprofit
Attack Vector
GitLab config file exposure
Threat Group
Breach Actor Unknown, DDoS by BlackMeta
Company / Country
LEGO (Denmark)
Industry
Consumer Goods
Attack Vector
Website compromise
Threat Group
Unknown
Company / Country
American Water (US)
Industry
Water Utilities
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
FBCS (US)
Industry
Financial Services
Details*
4.2 million individuals' data breached, including sensitive data from Comcast and Truist customers
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
Multiple Cloudflare Customers (Global)
Industry
Various, including Finance, Internet, and Telecom
Attack Vector
DDoS using ASUS router exploit
Threat Group
Unknown
Company / Country
T-Mobile (US)
Industry
Telecommunications
Attack Vector
Unauthorized Access
Threat Group
Salt Typhoon
Company / Country
Blue Yonder (Global)
Industry
Supply Chain
Attack Vector
Ransomware
Threat Group
Termite
Company / Country
Finastra (Global)
Industry
Financial Software
Attack Vector
Credential Compromise
Threat Group
abyss0
Company / Country
Aléo Santé (France)
Industry
Healthcare
Attack Vector
Credential Compromise
Threat Group
nears
Company / Country
DemandScience (US)
Industry
Software Development
Attack Vector
Misconfigured System
Threat Group
KryptonZambie
Company / Country
Hot Topic (US)
Industry
Retail
Attack Vector
Malware Infection
Threat Group
Satanic
Company / Country
Amazon, HSBC & Other (Global)
Industry
Various Sectors
Attack Vector
Data Leak
Threat Group
Nam3L3ss
Company / Country
Halliburton (US)
Industry
Energy
Attack Vector
Ransomware
Threat Group
RansomHub
Company / Country
Nokia (Global)
Industry
Telecommunications
Attack Vector
Supply Chain
Threat Group
IntelBroker
Company / Country
HealthEquity (US)
Industry
Healthcare/Finance
Details*
4.3 million individuals' health and personal data exposed via a partner's compromised credentials
Attack Vector
Credential compromise
Threat Group
Unknown
Company / Country
MediSecure (Australia)
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
WazirX (India)
Industry
Cryptocurrency
Attack Vector
Exploitation of vulnerability
Threat Group
Unknown
Company / Country
Rite Aid (US)
Industry
Retail/Pharmacy
Details*
2.2 million people's data compromised in ransomware attack; 10 GB of customer information stolen
Attack Vector
Ransomware
Threat Group
RansomHub
Company / Country
AT&T (US)
Industry
Telecommunications
Details*
Phone records of 110 million customers breached; data copied from a third-party cloud platform
Attack Vector
Cloud platform compromise
Threat Group
ShinyHunters
Company / Country
Evolve Bank & Trust (US)
Industry
Finance
Attack Vector
Ransomware
Threat Group
LockBit
Company / Country
Neiman Marcus (US)
Industry
Retail
Details*
Data of high-profile individuals leaked by ShinyHunters; threatened further celebrity data leaks
Attack Vector
Data theft
Threat Group
ShinyHunters
Company / Country
Twilio Authy (US)
Industry
Technology
Attack Vector
API vulnerability
Threat Group
ShinyHunters
Company / Country
Prudential Financial (US)
Industry
Finance
Attack Vector
Ransomware
Threat Group
BlackCat (ALPHV)
Company / Country
Park'N Fly (Canada)
Industry
Airport Services
Attack Vector
Unknown
Threat Group
RansomHub
Company / Country
Young Consulting (US)
Industry
Software
Attack Vector
Ransomware
Threat Group
BlackSuit
Company / Country
Patelco Credit Union (US)
Industry
Financial Services
Attack Vector
Ransomware
Threat Group
RansomHub
Company / Country
Halliburton (US)
Industry
Energy
Attack Vector
Ransomware
Threat Group
RansomHub
Company / Country
Toyota (Global)
Industry
Automotive
Attack Vector
Supply Chain
Threat Group
ZeroSevenGroup
Company / Country
National Public Data (US)
Industry
Data Services
Attack Vector
Hacking
Threat Group
Unknown
Company / Country
Progress Software (US)
Industry
Software
Details*
Investigation is concluded; MOVEit Transfer vulnerability affected 95M+ individuals globally.
Attack Vector
SQL Injection
Threat Group
Clop
Company / Country
Keytronic (US)
Industry
Manufacturing
Attack Vector
Ransomware
Threat Group
Black Basta
Company / Country
BingX (Singapore)
Industry
Cryptocurrency
Attack Vector
Network access to hot wallet
Threat Group
Unknown
Company / Country
Transport for London (UK)
Industry
Transport
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
Indodax (Indonesia)
Industry
Cryptocurrency
Attack Vector
Withdrawal system compromise
Threat Group
Unknown
Company / Country
Fortinet (US)
Industry
Technology
Attack Vector
Cloud-based Sharepoint breach
Threat Group
"Fortibitch"
Company / Country
Slim CD (US)
Industry
Finance
Attack Vector
https://www.scworld.com/news/electronic-payment-firm-slim-cd-notifies-17m-customers-of-data-breach
Threat Group
Unknown
Company / Country
Medicare MOVEit (US)
Industry
Healthcare
Attack Vector
Software vulnerability
Threat Group
Clop
Company / Country
Penpie (Singapore)
Industry
Cryptocurrency
Attack Vector
Vulnerability exploit
Threat Group
Unknown
Company / Country
VK (Russia)
Industry
Social Media
Attack Vector
Third-party data breach
Threat Group
"HikkI-Chan"
| Company / Country | Industry | Details* | Attack Vector | Threat Group | ||
|---|---|---|---|---|---|---|
| UAE Government, UAE | Government | Hackers demand $8.9 million ransom for data breach. | unknown | The Five Families | ||
| FBCS, USA | Debt Collection | Data breach affecting 1.9 million people. | Unauthorized network activity | unknown | ||
| Dell, USA | Technology | Sale of 49 million customer records on hacking forum. | unknown | unknown | ||
| Various, Ukraine | Critical Infrastructure | Sandworm targets 20 critical infrastructure organizations. | Exploiting weak cybersecurity practices | Sandworm (APT44) | ||
| PandaBuy, Global | E-commerce | Breach exposes over a million customer records. | Vulnerability exploitation | CyberNiggers (Sanggiero, IntelBroker) | ||
| DMM Bitcoin, Japan | Cryptocurrency | $308 million stolen in Bitcoin heist. | Unauthorized access to wallet | Unknown | ||
| Snowflake, USA | Cloud Services | Data breach affecting high-profile clients. | Compromised machine with malware | Whitewarlock, Sp1d3r, ShinyHunters | ||
| Internet Archive, USA | Digital Library | 3-day DDoS attack disrupted services. | DDoS attack | SN_Blackmeta | ||
| Sav-Rx, USA | Prescription Management | Data breach exposed 2.8 million customers' data. | Unauthorized access | Unknown | ||
| Coinbase, USA | Cryptocurrency Exchange | $37 million stolen through phishing scam. | Phishing site/Impersonation | Chirag Tomar | ||
| Cencora, USA | Pharmaceutical Services | Data breach exposed patient data of major firms. | Unauthorized access to systems | Unknown | ||
| WebTPA, USA | Healthcare Administration | Data breach affected 2.5 million individuals. | Suspicious network activity | Unknown | ||
| Nissan North America, USA | Automotive | Data breach exposed 53,000 employees' information. | Ransomware attack | Unknown | ||
| Newsquest Media Group, UK | Media | Newspaper websites defaced by alleged Russian hackers. | Defacement | Unknown | ||
| TeamViewer, Germany | Software | Data breach detected in internal corporate IT environment. | Espionage | APT29/CozyBear | ||
| Polyfill, China | Technology | Supply chain attack impacted over 100,000 websites. | Malicious code injection | Funnull | ||
| UwU Lend | Cryptocurrency | Theft of nearly $20 million in Ethereum (ETH). | Exploit | Unknown | ||
| The New York Times, UK | Media | Personal information of freelance contributors leaked on 4Chan. | Credential exploitation | Unknown | ||
| PandaBuy, China | E-commerce | Threat actor offered 17 million user records for sale. | Data leak | Sanggiero/CyberNiggers | ||
| London Hospitals, UK | Healthcare | Ransomware attack disrupted operations at multiple hospitals. | Ransomware | Qilin | ||
| Indonesia's National Data Center, Indonesia | Government | Ransomware attack affected over 200 government agencies. | Ransomware | Brain Cipher |
Company / Country
UAE Government, UAE
Industry
Government
Attack Vector
unknown
Threat Group
The Five Families
Company / Country
FBCS, USA
Industry
Debt Collection
Attack Vector
Unauthorized network activity
Threat Group
unknown
Company / Country
Dell, USA
Industry
Technology
Attack Vector
unknown
Threat Group
unknown
Company / Country
Various, Ukraine
Industry
Critical Infrastructure
Attack Vector
Exploiting weak cybersecurity practices
Threat Group
Sandworm (APT44)
Company / Country
PandaBuy, Global
Industry
E-commerce
Attack Vector
Vulnerability exploitation
Threat Group
CyberNiggers (Sanggiero, IntelBroker)
Company / Country
DMM Bitcoin, Japan
Industry
Cryptocurrency
Attack Vector
Unauthorized access to wallet
Threat Group
Unknown
Company / Country
Snowflake, USA
Industry
Cloud Services
Attack Vector
Compromised machine with malware
Threat Group
Whitewarlock, Sp1d3r, ShinyHunters
Company / Country
Internet Archive, USA
Industry
Digital Library
Attack Vector
DDoS attack
Threat Group
SN_Blackmeta
Company / Country
Sav-Rx, USA
Industry
Prescription Management
Attack Vector
Unauthorized access
Threat Group
Unknown
Company / Country
Coinbase, USA
Industry
Cryptocurrency Exchange
Attack Vector
Phishing site/Impersonation
Threat Group
Chirag Tomar
Company / Country
Cencora, USA
Industry
Pharmaceutical Services
Attack Vector
Unauthorized access to systems
Threat Group
Unknown
Company / Country
WebTPA, USA
Industry
Healthcare Administration
Attack Vector
Suspicious network activity
Threat Group
Unknown
Company / Country
Nissan North America, USA
Industry
Automotive
Attack Vector
Ransomware attack
Threat Group
Unknown
Company / Country
Newsquest Media Group, UK
Industry
Media
Attack Vector
Defacement
Threat Group
Unknown
Company / Country
TeamViewer, Germany
Industry
Software
Attack Vector
Espionage
Threat Group
APT29/CozyBear
Company / Country
Polyfill, China
Industry
Technology
Attack Vector
Malicious code injection
Threat Group
Funnull
Company / Country
UwU Lend
Industry
Cryptocurrency
Attack Vector
Exploit
Threat Group
Unknown
Company / Country
The New York Times, UK
Industry
Media
Attack Vector
Credential exploitation
Threat Group
Unknown
Company / Country
PandaBuy, China
Industry
E-commerce
Attack Vector
Data leak
Threat Group
Sanggiero/CyberNiggers
Company / Country
London Hospitals, UK
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
Qilin
Company / Country
Indonesia's National Data Center, Indonesia
Industry
Government
Attack Vector
Ransomware
Threat Group
Brain Cipher
Company / Country
Perry Johnson & Associates/USA
Industry
Healthcare
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
Lush/UK
Industry
Cosmetics
Attack Vector
Ransomware
Threat Group
Akira
Company / Country
Trello/USA
Industry
Technology
Attack Vector
Data leak
Threat Group
Unknown
Company / Country
loanDepot/USA
Industry
Financial Services
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
VF Corp./USA
Industry
Apparel
Attack Vector
Ransomware
Threat Group
ALPHV/BlackCat
Company / Country
Hathway/India
Industry
Internet Service
Attack Vector
Vulnerability exploit
Threat Group
dawnofdevil
Company / Country
U.S. Securities and Exchange Commission (SEC)/USA
Industry
Financial Regulatory
Attack Vector
SIM swapping
Threat Group
Unknown
Company / Country
Cross Switch
Industry
Online Payments
Attack Vector
Unknown
Threat Group
IntelBroker
Company / Country
Change Healthcare / United States
Industry
Healthcare Technology
Attack Vector
Ransomware
Threat Group
BlackCat/ALPHV
Company / Country
Los Angeles International Airport / United States
Industry
Aviation
Attack Vector
Vulnerability exploit
Threat Group
IntelBroker
Company / Country
Medical Management Resource Group (MMRG) / United States
Industry
Healthcare
Attack Vector
Network Server Hack
Threat Group
Unknown
Company / Country
FixedFloat
Industry
Cryptocurrency Exchange
Attack Vector
Wallet drainer attack
Threat Group
Unknown
Company / Country
Schneider Electric
Industry
Energy and Automation
Attack Vector
Ransomware
Threat Group
Cactus Ransomware
Company / Country
Integris Health / United States
Industry
Healthcare
Attack Vector
Unauthorized Access
Threat Group
Unknown
Company / Country
PlayDapp
Industry
Cryptocurrency
Attack Vector
Minting
Threat Group
Unknown or Lazarus Group
Company / Country
Romanian Hospitals
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
Backmydata Ransomware
Company / Country
Viamedis / France
Industry
Healthcare Services
Attack Vector
Phishing
Threat Group
Unknown
Company / Country
AT&T/USA
Industry
Telecommunications
Details*
Data breach affecting 73 million customers leaked by Shiny Hunters, confirmed by "MajorNelson".
Attack Vector
Data Breach/Leak
Threat Group
Shiny Hunters, MajorNelson
Company / Country
Hot Topic/USA
Industry
Retail
Attack Vector
Credential Stuffing
Threat Group
Unknown
Company / Country
UnitedHealth Group/USA
Industry
Healthcare
Attack Vector
Data Breach
Threat Group
RansomHub
Company / Country
NHS Scotland/UK
Industry
Healthcare
Attack Vector
Data Breach
Threat Group
INC Ransom
Company / Country
Viber
Industry
Technology
Attack Vector
Unknown
Threat Group
Handala Hack
Company / Country
France Travail/France
Industry
Employment
Attack Vector
Data Breach
Threat Group
Unknown
Company / Country
GEPF (Government Employees Pension Fund)/South Africa
Industry
Finance
Attack Vector
Ransomware
Threat Group
LockBit
Company / Country
CISA (Cybersecurity and Infrastructure Security Agency)/USA
Industry
Government
Attack Vector
Vulnerability exploit
Threat Group
Unknown
Company / Country
American Express/USA
Industry
Finance
Attack Vector
Third-party data breach
Threat Group
Unknown
Q4
Q3
Q2
Q1
Company / Country
ICMR/India
Industry
Healthcare
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
LastPass/USA
Industry
Cybersecurity
Attack Vector
Data breach
Threat Group
Unknown
Company / Country
Cloudflare
Industry
Cybersecurity
Attack Vector
Vulnerability exploit
Threat Group
Unknown
Company / Country
Airbnb
Industry
Hospitality
Attack Vector
Unknown
Threat Group
Sheriff
Company / Country
US Claims Solutions/USA
Industry
Insurance
Attack Vector
Ransomware
Threat Group
Knight
Company / Country
23andMe/USA
Industry
Genetics
Attack Vector
Credential stuffing
Threat Group
Golem
Company / Country
CDW Corporation/USA
Industry
Technology
Attack Vector
Ransomware/data breach
Threat Group
LockBit
Company / Country
QSI Banking
Industry
Finance
Attack Vector
Ransomware
Threat Group
BlackCat
Company / Country
Facebook
Industry
Social Media
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
Royal.uk/United Kingdom
Industry
Government
Attack Vector
DDoS
Threat Group
Killnet
Company / Country
Südwestfalen IT/Germany
Industry
Government
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
Henry Schein Healthcare/USA
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
BlackCat
Company / Country
LinkedIn
Industry
Social Media
Attack Vector
Web scraping
Threat Group
USDoD
Company / Country
Perry Johnson & Associates (PJ&A)/USA
Industry
Healthcare
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
OpenAI
Industry
Artificial Intelligence
Attack Vector
DDoS
Threat Group
Anonymous Sudan
Company / Country
McLaren Health Care/USA
Industry
Healthcare
Attack Vector
Unknown
Threat Group
ALPHV/BlackCat
Company / Country
Poloniex
Industry
Cryptocurrency
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
Truepill/USA
Industry
Healthcare
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
Welltok/USA
Industry
Healthcare
Attack Vector
Vulnerability Exploit
Threat Group
Unknown
Company / Country
KyberSwap
Industry
Cryptocurrency
Attack Vector
Exploitative swaps
Threat Group
Unknown
Company / Country
Okta/USA
Industry
Cybersecurity
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
Dollar Tree/USA
Industry
Retail
Attack Vector
Third-party breach
Threat Group
Unknown
Company / Country
Ongoing Operations/USA
Industry
IT Services
Attack Vector
Vulnerability exploit
Threat Group
Unknown
Company / Country
Tipalti/USA
Industry
FinTech
Attack Vector
Ransomware
Threat Group
ALPHV/BlackCat
Company / Country
Kyivstar/Ukraine
Industry
Telecom
Attack Vector
DDoS
Threat Group
KillNet
Company / Country
Russian Tax Service/Russia
Industry
Government
Attack Vector
Malware
Threat Group
Ukraine’s defense intelligence directorate (GUR)
Company / Country
Delta Dental/USA
Industry
Healthcare
Attack Vector
Vulnerability exploit
Threat Group
Cl0p Ransomware
Company / Country
Mr. Cooper/USAMr. Cooper/USA
Industry
Mortgage Servicer
Attack Vector
Unauthorized access
Threat Group
Unknown
Company / Country
Comcast Cable/USA
Industry
Telecommunications
Attack Vector
Citrix server breach
Threat Group
Unknown
Company / Country
ESO Solutions/USA
Industry
Healthcare
Details*
Ransomware attack targeting ESO Solutions led to supply-chain compromise, affecting 2.7M patients.
Attack Vector
Ransomware
Threat Group
Unknown
* Details given to these events might be claims by the threat actors.
Company / Country
BAZAN Group/Israel
Industry
Energy, Oil
Attack Vector
Vulnerability Exploit
Threat Group
Cyber Avengers
Company / Country
Activision/USA
Industry
Video Games
Attack Vector
Malware
Threat Group
Unknown
Company / Country
NATO COI
Industry
Political/Defense
Attack Vector
Data Theft
Threat Group
SiegedSec
Company / Country
Alphapo
Industry
Cryptocurrency
Attack Vector
Wallet Exploit
Threat Group
Lazarus
Company / Country
CoinsPaid
Industry
Cryptocurrency
Attack Vector
Malware
Threat Group
Lazarus
Company / Country
Ministry of Health and Population/Egypt
Industry
Government Agency
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
Tampa General Hospital/USA
Industry
Healthcare
Attack Vector
Network Breach
Threat Group
Unknown
Company / Country
HCA Healthcare/USA
Industry
Healthcare
Attack Vector
Data Breach
Threat Group
Unknown
Company / Country
Directorate General of Immigration/Indonesia
Industry
Government Agency
Details*
Hacktivist offered personal information of 35 million Indonesian passport holders on the dark web.
Attack Vector
Data Leak
Threat Group
Bjorka
Company / Country
Multichain
Industry
Cryptocurrency
Attack Vector
Fraudulent Transactions
Threat Group
Unknown
Company / Country
Nickelodeon
Industry
Entertainment
Attack Vector
Unauthorized Access
Threat Group
Unknown
Company / Country
Poly Network
Industry
Cryptocurrency
Attack Vector
Fraudulent Transactions
Threat Group
Unknown
Company / Country
Microsoft
Industry
Technology
Attack Vector
Data Theft
Threat Group
Anonymous Sudan
Company / Country
Exactly Protocol
Industry
Cryptocurrency
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
Duolingo/Global
Industry
Online Education
Attack Vector
Data Scraping
Threat Group
Unknown
Company / Country
Discord.io
Industry
Software
Attack Vector
Unknown
Threat Group
Akhirah
Company / Country
IBM
Industry
Technology
Attack Vector
Vulnerability Exploit
Threat Group
Clop Ransomware
Company / Country
Fukushima Power Plant/Japan
Industry
Energy
Attack Vector
DDoS
Threat Group
EUTNAIOA/Anonymous Italia Collective
Company / Country
Colorado Department of Higher Education (CDHE)/USA
Industry
Education
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
Mom’s Meals/USA
Industry
Food and Beverage/Healthcare
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
Multiple Banks/Italy
Industry
Financial
Attack Vector
DDoS
Threat Group
NoName057(16)
Company / Country
Salesforce
Industry
Software
Attack Vector
Vulnerability Exploit
Threat Group
Unknown
Company / Country
Motel One/Germany
Industry
Hospitality
Attack Vector
Ransomware
Threat Group
BlackCat (ALPHV)
Company / Country
McLaren HealthCare/USA
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
BlackCat (ALPHV)
Company / Country
Leonardo/Russia
Industry
Aviation
Attack Vector
DDoS
Threat Group
IT Army
Company / Country
Johnson Controls/Global
Industry
Technology
Attack Vector
Ransomware
Threat Group
Dark Angels Team
Company / Country
Sony
Industry
Technology
Attack Vector
Ransomware/Data Leak
Threat Group
RansomedVC/MajorNelson
Company / Country
Mixin Network
Industry
Cryptocurrency
Attack Vector
Third-party
Threat Group
Unknown
Company / Country
MGM Resorts
Industry
Entertainment/Hospitality
Attack Vector
Social Engineering
Threat Group
Scattered Spider
Company / Country
Airbus/Global
Industry
Aviation
Attack Vector
Account Breach
Threat Group
USDoD
* Details given to these events might be claims by the threat actors.
Company / Country
3CX / Global
Industry
Telecommunications
Attack Vector
Supply Chain Attack
Threat Group
UNC4736
Company / Country
American Bar Association / Global
Industry
Legal
Attack Vector
Unauthorized Access
Threat Group
Unknown
Company / Country
Hundred Finance / Global
Industry
Cryptocurrency
Attack Vector
Flash Loan Attack
Threat Group
Unknown
Company / Country
Bitrue / Global
Industry
Cryptocurrency
Attack Vector
Wallet Exploit
Threat Group
Unknown
Company / Country
Hyundai / France, Italia
Industry
Automotive
Details*
Hackers gained access to information of French and Italian Hyundai customers who booked test drives.
Attack Vector
Unauthorized Access
Threat Group
Unknown
Company / Country
Yum! Brands / UK
Industry
Foodservice
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
Yellow Pages Group / Global
Industry
Media
Attack Vector
Ransomware
Threat Group
Black Basta Ransomware
Company / Country
Skolkovo Foundation / Russia
Industry
Technology
Attack Vector
Unauthorized Access
Threat Group
SUDO RM-RF
Company / Country
RaidForums
Industry
Forum
Details*
The administrator of Exposed leaked the RaidForums database for nearly 479,000 members’ information.
Attack Vector
Unknown
Threat Group
Impotent
Company / Country
Jimbos Protocol
Industry
Cryptocurrency
Details*
Due to exploitation of a liquidity conversion vulnerability, 4,000 ETH ($7.5 million) was lost.
Attack Vector
Vulnerability Exploit
Threat Group
Unknown
Company / Country
MCNA Dental
Industry
Healthcare Insurance
Attack Vector
Unauthorized Access
Threat Group
LockBit
Company / Country
Luxottica / Global
Industry
Retail
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
Bank Syariah Indonesia (BSI) / Indonesia
Industry
Finance
Attack Vector
Ransomware
Threat Group
LockBit
Company / Country
PharMerica / USA
Industry
Healthcare Retail
Attack Vector
Unauthorized Access
Threat Group
Money Message
Company / Country
Discord / Global
Industry
Communication
Attack Vector
Third-Party Data Breach
Threat Group
Unknown
Company / Country
Fullerton India / India
Industry
Finance
Attack Vector
Ransomware
Threat Group
LockBit
Company / Country
Brightline / USA
Industry
Healthcare
Attack Vector
Vulnerability Exploit
Threat Group
Clop
Company / Country
Level Finance
Industry
Cryptocurrency
Details*
Hackers exploited a smart contract vulnerability in Level Finance, stealing 214,000 LVL tokens.
Attack Vector
Vulnerability Exploit
Threat Group
Unknown
Company / Country
HWL Ebsworth
Industry
Legal
Attack Vector
Ransomware
Threat Group
BlackCat (ALPHV)
Company / Country
TSMC / Taiwan
Industry
Semiconductor Manufacture
Attack Vector
Ransomware
Threat Group
National Hazard Agency (LockBit)
Company / Country
Shell / Global
Industry
Energy
Attack Vector
Ransomware
Threat Group
Clop
Company / Country
Fort Worth Government / USA
Industry
Public
Attack Vector
Data Breach
Threat Group
SiegedSec
Company / Country
CalPERS / USA
Industry
Public
Attack Vector
Ransomware
Threat Group
Clop
Company / Country
University of Manchester / UK
Industry
Education
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
Onix Group / USA
Industry
Real Estate
Details*
Attackers accessed 319,500 patients’ and employees’ information during a ransomware attack.
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
DBSA / Southern Africa
Industry
Finance
Details*
Attackers accessed 319,500 patients’ and employees’ information during a ransomware attack.
Attack Vector
Ransomware
Threat Group
Akira
Company / Country
Zacks Investment Research
Industry
Investment
Attack Vector
Data Breach
Threat Group
Unknown
Company / Country
Intellihartx / USA
Industry
Healthcare Revenue Management
Attack Vector
Ransomware
Threat Group
Clop
Company / Country
Atomic Wallet
Industry
Cryptocurrency
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
Enzo Biochem / USA
Industry
Biotechnology
Attack Vector
Ransomware
Threat Group
Unknown
* Details given to these events might be claims by the threat actors.
Company / Country
T-Mobile / Global
Industry
Telecommunication
Attack Vector
Unauthorized Access
Threat Group
Unknown
Company / Country
Deezer / Global
Industry
Music Streaming
Attack Vector
Third Party
Threat Group
Unknown
Company / Country
Zacks Investment Research
Industry
Investment
Attack Vector
Unauthorized Access
Threat Group
Unknown
Company / Country
Cellebrite / Israel
Industry
Digital Intelligence
Details*
Threat actors stole 1.7TB of data, including Cellebrite’s software and other documentation.
Attack Vector
Unauthorized Access
Threat Group
Unknown
Company / Country
RailYatri / India
Industry
Travel
Attack Vector
Misconfiguration
Threat Group
Unknown
Company / Country
Regal Medical Group / Southern California
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
AT&T / Global
Industry
Telecommunications
Attack Vector
Third-Party Breach
Threat Group
Unknown
Company / Country
Akamai / Asia-Pacific (APAC)
Industry
Unknown
Attack Vector
DDoS
Threat Group
Unknown
Company / Country
Euler Finance / Global
Industry
Cryptocurrency
Attack Vector
Flash Loan Attack
Threat Group
Jacob
Company / Country
Independent Living Systems / USA
Industry
Healthcare
Attack Vector
Unauthorized Access
Threat Group
Unknown
Company / Country
Latitude Financial / Australia
Industry
Finance
Attack Vector
Unauthorized Access (Employee Credentials)
Threat Group
Unknown
Company / Country
TMX Finance / USA
Industry
Finance
Attack Vector
Unauthorized Access
Threat Group
Unknown
* Details given to these events might be claims by the threat actors.
Q4
Q3
Company / Country
MyDeal / Australia
Industry
Retail
Attack Vector
Unauthorized Access
Threat Group
Undetermined
Company / Country
Bundeskriminalamt (BKA) / Germany
Industry
Finance
Attack Vector
Phishing
Threat Group
Unknown
Company / Country
Kingfisher / UK
Industry
Retail
Attack Vector
Ransomware
Threat Group
LockBit
Company / Country
Medibank / Australia
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
Undetermined
Company / Country
Aarti Drugs / India
Industry
Healthcare
Details*
The BianLian ransomware organization exposed Aarti Drugs’ private information on a dark web forum.
Attack Vector
Ransomware
Threat Group
BianLian
Company / Country
Wynncraft Minecraft Server
Industry
Video Games
Attack Vector
DDoS
Threat Group
Mirai Botnet
Company / Country
Concorsi Sanitari Integral / Barcelona
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
RansomExx
Company / Country
Tata Power / India
Industry
Power Industry
Attack Vector
Ransomware
Threat Group
Hive
Company / Country
Whoosh / Russia
Industry
Transportation
Attack Vector
Data Leak
Threat Group
Undetermined
Company / Country
Banks and Telecommunication Services / Africa
Industry
Finance, Telecommunication
Attack Vector
Network Breach
Threat Group
OPERA1ER
Company / Country
Medibank / Australia
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
REvil
Company / Country
AirAsia / Malaysia
Industry
Airline
Attack Vector
Ransomware
Threat Group
Daixin
Company / Country
Deribit
Industry
Cryptocurrency
Attack Vector
Unauthorized Access
Threat Group
Unknown
Company / Country
Continental / Germany
Industry
Tire Manufacture
Attack Vector
Ransomware
Threat Group
LockBit
Company / Country
The Indian Railways / India
Industry
Transportation
Attack Vector
Unauthorized Acces
Threat Group
Shadohacker
Company / Country
BTC.com
Industry
Cryptocurrency
Attack Vector
Undetermined
Threat Group
Unknown
Company / Country
Twitter
Industry
Social Media
Attack Vector
Vulnerability Exploit
Threat Group
Unknown
Company / Country
Okta / USA
Industry
Software
Details*
Private GitHub repositories of Okta were compromised, resulting in the theft of source code.
Attack Vector
Unauthorized Access
Threat Group
Unknown
Company / Country
Gemini
Industry
Cryptocurrency
Attack Vector
Third-Party Data Breach
Threat Group
Unknown
Company / Country
Centers for Medicare and Medicaid Services of HHS / Global
Industry
Healthcare
Attack Vector
Ransomware
Threat Group
Unknown
* Details given to these events might be claims by the threat actors.
Company / Country
Shields Health Care Group / U.S.A.
Industry
Healthcare
Attack Vector
Unauthorized access
Threat Group
Undetermined
Company / Country
University of Pisa / Italy
Industry
Education
Attack Vector
Unauthorized access
Threat Group
Blackcat
Company / Country
Akamai / Eastern Europe
Industry
Unknown
Attack Vector
DDoS
Threat Group
Unknown
Company / Country
Wintermute
Industry
Cryptocurrency
Attack Vector
Vulnerability Exploit
Threat Group
Unknown
Company / Country
Rockstar Games
Industry
Video Games
Attack Vector
Unauthorized access
Threat Group
TeaPot
Company / Country
Uber / U.S.A.
Industry
Transportation
Attack Vector
Unauthorized access
Threat Group
TeaPot
Company / Country
European Union Citizens/ Ukraine
Industry
Healthcare
Attack Vector
Malware infection
Threat Group
Unknown
Company / Country
Military and Police Organizations / Central America
Industry
Military
Attack Vector
Undetermined
Threat Group
Guacamaya
Company / Country
Indian Citizens / Republic of India
Industry
Finance
Attack Vector
Phishing
Threat Group
Unknown
* Details given to these events might be claims by the threat actors.
Q4
Q3
Q2
Q1
| Company / Country | Industry | Details* | Attack Vector | Threat Group | ||
|---|---|---|---|---|---|---|
| Twitch / Global | Live Streaming Service | On hacker forums, a torrent link to a 125GB archive containing data allegedly stolen from roughly 6,000 internal Twitch Git repositories is shared | Misconfigured server | Undetermined | ||
| JVCKenwood / Japan, Global | Electronics | The ransomware group claimed to have stolen 1.7 TB of data | Unauthorized access | Conti | ||
| * Details given to these events might be claims by the threat actors. |
Company / Country
Twitch / Global
Industry
Live Streaming Service
Attack Vector
Misconfigured server
Threat Group
Undetermined
Company / Country
JVCKenwood / Japan, Global
Industry
Electronics
Attack Vector
Unauthorized access
Threat Group
Conti
* Details given to these events might be claims by the threat actors.
| Company / Country | Industry | Details* | Attack Vector | Threat Group | ||
|---|---|---|---|---|---|---|
| MyRepublic / Singapore, New Zealand, and Australia | Telecommunication/ISP | Personal information data of 80K mobile subscribers are exposed | Access through a third-party data storage platform | Unknown | ||
| Yandex / Russia | Technology Solutions and Search Engine Provider | DDoS attacks with 21.8 million requests per second (world record so far) | DDoS attack | Mēris Botnet | ||
| Fortinet / USA | Cybersecurity Solution Provider | 500 Fortinet VPN credentials are leaked | Ransomware | Groove | ||
| Bangkok Airways / Thailand | Airline | 6TB data stolen by using credentials leaked from breached Accenture systems | Ransomware | LockBit 2.0 | ||
| Neiman Marcus / USA | Luxury Retail | Neiman Marcus sent notices of a data breach (online account credentials) to 4.3 million customers. The data breach started in May 2020 until it was discovered in September 2021 | Undetermined | Undetermined | ||
| Microsoft Exchange Autodiscover Bug / Global | IT | A bug in the Microsoft Exchange Autodiscover leaked around 100,000 credentials for Windows domains worldwide | N/A | Guardicore’s AVP of Security Research discovered the bug | ||
| * Details given to these events might be claims by the threat actors. |
Company / Country
MyRepublic / Singapore, New Zealand, and Australia
Industry
Telecommunication/ISP
Attack Vector
Access through a third-party data storage platform
Threat Group
Unknown
Company / Country
Yandex / Russia
Industry
Technology Solutions and Search Engine Provider
Attack Vector
DDoS attack
Threat Group
Mēris Botnet
Company / Country
Fortinet / USA
Industry
Cybersecurity Solution Provider
Attack Vector
Ransomware
Threat Group
Groove
Company / Country
Bangkok Airways / Thailand
Industry
Airline
Attack Vector
Ransomware
Threat Group
LockBit 2.0
Company / Country
Neiman Marcus / USA
Industry
Luxury Retail
Attack Vector
Undetermined
Threat Group
Undetermined
Company / Country
Microsoft Exchange Autodiscover Bug / Global
Industry
IT
Attack Vector
N/A
Threat Group
Guardicore’s AVP of Security Research discovered the bug
* Details given to these events might be claims by the threat actors.
| Company / Country | Industry | Details* | Attack Vector | Threat Group | ||
|---|---|---|---|---|---|---|
| Colonial Pipeline / USA | Oil | Affected its computerised equipment managing the pipeline, disrupting the fuel supply to most of the US East Coast for days | Ransomware | DarkSide | ||
| CNA / USA | Finance | Majority of policyholder data impacted | Ransomware | Phoenix Locker | ||
| Brenntag / Germany | Chemical distribution | Stolen 150 GB of data | Ransomware | DarkSide | ||
| LinkedIn / USA | Social Media | 500 M accounts leaked | Data Breach | Unknown | ||
| Facebook / USA | Social Media | Impacted 533 Million Users | Data Breach | Unknown | ||
| University of California Schools / USA | Education | Copied and transferred UC files by exploiting a vulnerability in Accellion’s file transfer service | Ransomware | Unknown | ||
| Washington DC Police Department / USA | Government | Leak of 250 GB data that includes the PII of confidential informants, persons of interests, and employees | Ransomware | Babuk | ||
| The Scripps Health / USA | Health | Stolen all patient records (a half-million patients per year through 2,600 affiliated physicians) | Ransomware | Ryuk | ||
| The Health Service Executive (HSE) / Ireland | Government | Stolen 700 GB of data | Ransomware | ContiLocker | ||
| JBS Foods / Brazil | Food | Unknown | Ransomware | REvil | ||
| McDonalds | Fast food | Exposed all U.S. business information, customer data in South Korea and Taiwan | Data Breach | Unknown | ||
| * Details given to these events might be claims by the threat actors. |
Company / Country
Colonial Pipeline / USA
Industry
Oil
Attack Vector
Ransomware
Threat Group
DarkSide
Company / Country
CNA / USA
Industry
Finance
Attack Vector
Ransomware
Threat Group
Phoenix Locker
Company / Country
Brenntag / Germany
Industry
Chemical distribution
Details*
Stolen 150 GB of data
Attack Vector
Ransomware
Threat Group
DarkSide
Company / Country
LinkedIn / USA
Industry
Social Media
Details*
500 M accounts leaked
Attack Vector
Data Breach
Threat Group
Unknown
Company / Country
Facebook / USA
Industry
Social Media
Details*
Impacted 533 Million Users
Attack Vector
Data Breach
Threat Group
Unknown
Company / Country
University of California Schools / USA
Industry
Education
Details*
Copied and transferred UC files by exploiting a vulnerability in Accellion’s file transfer service
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
Washington DC Police Department / USA
Industry
Government
Attack Vector
Ransomware
Threat Group
Babuk
Company / Country
The Scripps Health / USA
Industry
Health
Details*
Stolen all patient records (a half-million patients per year through 2,600 affiliated physicians)
Attack Vector
Ransomware
Threat Group
Ryuk
Company / Country
The Health Service Executive (HSE) / Ireland
Industry
Government
Details*
Stolen 700 GB of data
Attack Vector
Ransomware
Threat Group
ContiLocker
Company / Country
JBS Foods / Brazil
Industry
Food
Details*
Unknown
Attack Vector
Ransomware
Threat Group
REvil
Company / Country
McDonalds
Industry
Fast food
Attack Vector
Data Breach
Threat Group
Unknown
* Details given to these events might be claims by the threat actors.
| Company / Country | Industry | Details* | Attack Vector | Threat Group | ||
|---|---|---|---|---|---|---|
| Channel Nine / Australia | Television/Broadcasting | Broadcasting and publishing systems were rendered unable | Cyber espionage | Unknown | ||
| Harris Federation / UK | Education | Temporarily disabled the devices and email systems, resulting in over 37,000 students being unable to access their coursework | Ransomware | Unknown | ||
| CNA Financial / USA | Insurance | Ransomware | Evil Corp. | |||
| Kia Motors / South Korea | Automobile | Apps, phone services, payment systems, owner’s portal and internal sites are impacted | Ransomware | DoppelPaymer | ||
| Bonobos / USA | Retail | 70 GB SQL database leaked | Data Breach | Data Breach | ||
| Bangkok Airways / Thailand | Airline | 6 TB data stolen by using credentials leaked from breached Accenture systems | Ransomware | LockBit 2.0 | ||
| Florida Water System / USA | Supply Chain | Attempted to Poison Water Supply in Florida | Data Breach | Unknown | ||
| Microsoft’s Exchange Server / USA | Software | Expose millions of users worldwide | Zero-day exploits | Unknown | ||
| Bombardier / Canada | Aerospace | Confidential data of customers, suppliers and employees compromised | Data Breach | Unknown | ||
| Acer / Taiwan | Electronics | Acer Suffered the Highest Ransom Demand in History of $50 Million | Ransomware | REvil | ||
| University of the Highlands and Islands (UHI) / UK | Education | Caused disruption to services | Unknown | Unknown | ||
| Sierra Wireless / Multinational | Electronics | Internal operations disrupted | Ransomware | Unknowns | ||
| Accellion / China | Supply Chain | Customer data being stolen or compromised | Zero-day exploits | FIN11 | ||
| * Details given to these events might be claims by the threat actors. |
Company / Country
Channel Nine / Australia
Industry
Television/Broadcasting
Attack Vector
Cyber espionage
Threat Group
Unknown
Company / Country
Harris Federation / UK
Industry
Education
Attack Vector
Ransomware
Threat Group
Unknown
Company / Country
CNA Financial / USA
Industry
Insurance
Details*
Attack Vector
Ransomware
Threat Group
Evil Corp.
Company / Country
Kia Motors / South Korea
Industry
Automobile
Attack Vector
Ransomware
Threat Group
DoppelPaymer
Company / Country
Bonobos / USA
Industry
Retail
Details*
70 GB SQL database leaked
Attack Vector
Data Breach
Threat Group
Data Breach
Company / Country
Bangkok Airways / Thailand
Industry
Airline
Attack Vector
Ransomware
Threat Group
LockBit 2.0
Company / Country
Florida Water System / USA
Industry
Supply Chain
Attack Vector
Data Breach
Threat Group
Unknown
Company / Country
Microsoft’s Exchange Server / USA
Industry
Software
Details*
Expose millions of users worldwide
Attack Vector
Zero-day exploits
Threat Group
Unknown
Company / Country
Bombardier / Canada
Industry
Aerospace
Attack Vector
Data Breach
Threat Group
Unknown
Company / Country
Acer / Taiwan
Industry
Electronics
Attack Vector
Ransomware
Threat Group
REvil
Company / Country
University of the Highlands and Islands (UHI) / UK
Industry
Education
Details*
Caused disruption to services
Attack Vector
Unknown
Threat Group
Unknown
Company / Country
Sierra Wireless / Multinational
Industry
Electronics
Details*
Internal operations disrupted
Attack Vector
Ransomware
Threat Group
Unknowns
Company / Country
Accellion / China
Industry
Supply Chain
Attack Vector
Zero-day exploits
Threat Group
FIN11
* Details given to these events might be claims by the threat actors.
