List and introduction by IT Governance
Update 30/08/2017: Well, this month’s total number of leaked records looked like it was going to be very low, but in fact it’s the highest one we’ve ever done. The discovery of the Onliner spambot has added 711 million records to the list.
August was – relatively speaking – a pretty quiet month. As far as I’m aware, just 4.6 million records were leaked, which is 139 million fewer than in July.
However, while the overall number this month is far lower, there were still plenty of incidents, including quite a few healthcare data breaches – one of which exposed the HIV status of 12,000 people.
Did I miss anything? Let me know.
Cyber attacks & ransomware
Malware attack disrupts hospitals
HBO hackers obtained all of HBO’s social media logins and GIPHY credentials
Another rough week for HBO as hackers and mistakes result in more leaks
Turkish hackers attack Armenian webpages again
Cyberattack on UCLA server potentially accesses student information
Pacific Alliance Medical Center notifies 266,123 patients of ransomware incident
South Korea LG service centers attacked by ransomware
FC Barcelona has its Twitter and Facebook accounts hijacked by the OurMine gang.
Sony social media accounts hijacked as hackers claims to have stolen PSN database
Attack on Ireland’s state-owned power provider blamed on state-sponsored hackers
Data breach
HIDS4U customers warned of free gift email attack after customer database leaks
Hackers claim to have leaked Game of Thrones season finale details
Oops! Aetna exposed 12,000 customers’ HIV statuses through envelope window
Indian Bank faulted for losing customer’s net banking credentials
Labor Department blames data breach for injury reporting site’s shutdown
OAIC investigating Flight Centre customer data leak
Anonymous hacker claims to have stolen the NHS medical records of 1.2million Brits
US Voting Machine Supplier Leaks 1.8 Million Chicago Voter Records
OSHA Suspends ITA Due to Security Breach
Error exposes private info on thousands of South Wash. Co. students
Islington Council faces huge fine after massive data breach hit 90,000 people
Lake Health investigating missing obstetrics records
Surgical Dermatology Group notifies patients after TekLinks hacked
Vancouver pot dispensary patient data breach highlights regulatory haze
State juror pool data breach exposed Social Security numbers
Personal data belonging to up to 21,000 TalkTalk customers could have been used for scams and fraud
Italian bank UniCredit admits data breaches affecting 400,000 customers
Medical clinic breaches 1000 people’s privacy
Data of 100,000 Dutch lease drivers leaked
Big data breach unmasks Bloomberg chat room users
GPAs mistakenly sent to parents, students
Patients’ records stolen from Walsall health worker’s car
UC Health hospital notifies patients of medical records being compromised
Personal Info of 650,000 Voters Discovered on Poll Machine Sold on Ebay
Kaleida Health notifies 2,789 patients about phishing incident
NHS staff personal data leaked in latest data breach
Nude photos of Anne Hathaway leaked online by hackers
Financial information
Oceanside investigating possible data theft on bill-paying website
Hacker Nets over $500,000 after Hacking Enigma before ICO Date
San Antonio Institute for Women’s Health warns patients personal data compromised in network hack
Other
Leak of >1,700 valid passwords could make the IoT mess much worse
BankBot trojan tries to sneak apps onto your Android smartphone without permission
Two zero-day vulnerabilities disclosed after Foxit refuses to patch PDF Reader
Vendor-neutral smart car bug has ‘dangerous’ and ‘even fatal’ consequences
Fighting back
Google awards student $10k for discovery of App Engine data leak flaw
Turkey Arrests Five Suspects in Qatar News Agency Hacking
UK government sets out tougher guidelines to protect smart cars from hackers
Former Air Force member sentenced for stealing fellow members’ information
Source: https://www.itgovernance.co.uk/blog/list-of-data-breaches-and-cyber-attacks-in-august-2017/