Union County, Pennsylvania, confirmed a ransomware attack on March 13 that led to the exfiltration of residents’ personal data, including Social Security and driver’s license numbers.
Continue Reading
A hacker breached New York University’s website on March 22, replacing its homepage with racialized test score charts and links to datasets containing personal information on over 1 million applicants. Though the hacker claimed the data was redacted, cybersecurity experts confirmed that names, addresses, GPAs, emails, and more were exposed.
Continue Reading
Elon Musk’s social media platform X (formerly Twitter) experienced widespread outages on March 10, 2025, which Musk claimed stemmed from a “massive cyberattack” with IP addresses traced to Ukraine. The attack reportedly caused platform access issues for tens of thousands of users globally, with disruptions peaking around 10 a.m. ET and subsiding later in the day.
Continue Reading
Grubhub announced a data breach caused by unauthorized access via a third-party support provider’s account.
Continue Reading
The crypto industry suffered $73.9 million in losses from 19 hacks and exploits in January 2025, a ninefold increase from December, according to blockchain security firm Immunefi. However, losses were down 44.6% compared to January 2024.
Continue Reading
Conduent has confirmed a cybersecurity incident after multiple U.S. state agencies, including those in Wisconsin and Oklahoma, reported service outages. The Wisconsin Department of Children and Families noted that the disruption affected payments in at least four states and was linked to a “global network issue” at Conduent.
Continue Reading
A new ransomware threat called Codefinger is targeting Amazon Web Services (AWS) S3 users, leveraging AWS’s server-side encryption with customer-provided keys (SSE-C). Once attackers gain account credentials—often through reused or weak passwords—they encrypt user data with AES-256 keys that are not stored on AWS, making recovery impossible without the attacker’s key.
Continue Reading
In December 2024, Chinese state-sponsored hackers breached the U.S. Treasury Department by exploiting a vulnerability in a third-party cybersecurity provider, BeyondTrust.
Continue Reading
A ransomware attack in September 2024 on multiple medical institutions in Lubbock and El Paso, Texas, compromised the data of over 1.4 million patients.
Continue Reading
The White House confirmed that a Chinese hacking campaign has affected at least eight U.S. telecommunications firms and dozens of countries, granting Beijing access to private communications, including texts and calls of some senior U.S. officials and political figures.
Continue Reading
