Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇧🇩Bangladesh - Confidence Group RansomHub hacking group claims to have breached Confidence Group, one of the largest conglomerates in Bangladesh, involved in the manufacturing of mid-tech engineering products. Allegedly, 350 GB of data were exfiltrated. Ransom deadline: 19th Oct 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Cathexis Holdings LP Interlock hacking group claims to have breached Cathexis Holdings LP. Allegedly, 3.8 TB of data, including SQL databases, email backups, and corporate documents, were exfiltrated.

🚨Cyberattack Alert ‼️ 🇦🇺Australia - Funlab Lynx ransomware group claims to have breached Funlab. Sample has been provided.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Saizeriya (サイゼ) RansomHub hacking group claims to have breached Saizeriya. Allegedly, 23 GB of data were exfiltrated. Ransom deadline: 19th Oct 24.

Top 400 passwords used as per 'The ultimate HIBP downloader' https://github.com/dinosn/top_400_passwords/blob/main/top400.txt

🚨Data Leak Alert ‼️ 🇵🇪Peru - DIRESA JUNÍN A potential data leak involving the data of 240K users of DIRESA JUNÍN - Dirección Regional de Salud de Junín has been detected on a hacking forum. According to the leaked information, this includes data on minors, such as DNI, physical addresses, full names, medical records, visit dates, birth dates, and other personal information. The confirmation or denial of these claims has yet to be verified, but in the meantime, users of DIRESA JUNÍN - Dirección Regional de Salud de Junín are advised to be cautious of potential phishing attempts.

🚨Cyberattack Alert ‼️ 🇵🇪Peru - World Vision Perú Medusa ransomware group claims to have breached World Vision Perú, a social action organization focused on empowering children and develop the potential. Allegedly, exfiltrated data include employees' data, project information, invoices, financial data, vaccination certificates, personal data (DNI, phone numbers, addresses), and more. Ransom demand: $100,000. Ransom deadline: 22nd Oct 24.

🚨Cyberattack Alert ‼️ 🇬🇭Ghana - Volta River Authority Black Suit hacking group claims to have breached Volta River Authority. Allegedly, 135 GB of data were exfiltrated and fully leaked.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Ascires Biomedical Group Stormous hacking group claims to have breached Ascires Biomedical Group. Allegedly, 700 GB of data were exfiltrated, including client data, medical reports, financial status (bank reports, taxes, etc.), annual accounts, personal information, new projects, patient-related data, and business plans. Samples have been provided

🚨Cyberattack Alert ‼️ 🇫🇷France - Therabel Lucien Pharma SAS Hunters International hacking group claims to have breached Therabel Lucien Pharma SAS. Allegedly, 338 GB of data were exfiltrated, including confidential data, clients' data, correspondence, contracts, batch records, preclinical studies, clinical trials, and financial data. Ransom deadline: 15th Oct 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Protective Industrial Products Hunters International hacking group claims to have breached Protective Industrial Products. Allegedly, 4.6 TB (925,429 files) of data, including financial data and QuickBooks information, were exfiltrated. Ransom deadline: 15th Oct 24. This is the second time the company has been threatened by a hacking group: last September 16, the Play ransomware group also listed Protective Industrial Products among its victims.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Rumpke Consolidated Companies Hunters International hacking group claims to have breached Rumpke Consolidated Companies, one of the nation's largest waste and recycling companies. Allegedly, 3.3 TB of data, including PII, financial data, customer and employee data, confidential documents, and contracts, were exfiltrated. Ransom deadline: 15th Oct 24.

🚨🚨Cyberattack Alert ‼️ 🇺🇸USA - PracticeSuite RansomHub hacking group claims to have breached PracticeSuite, a medical practice management software. Allegedly, 26 GB of data, including 45,000 client clinics' data, were exfiltrated. Ransom deadline: 17th Oct 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - PROMISE Technology Abyss hacking group claims to have breached PROMISE Technology. Allegedly, 1.8 TB of data were exfiltrated.

🚨Cryptocurrency Theft🚨 Deekay Kwon, a Web3 artist, recently fell victim to cybercrime, losing all his life savings during a 14-hour flight from Korea to New York. His wallets were compromised, but his NFTs remained unaffected. He suspects the breach may have occurred due to a leak of his seed phrase, which was stored as a photo in Google Drive.

The American digital librarian Brewster Kahle states that the data from Internet Archive has not been corrupted "Services are currently stopped to upgrade internal systems"

🚨Cyberattack Alert ‼️ 🇺🇸USA - Law Office of Omar O. Vargas, threatened for the third time in three months Meow hacking group claims to have breached the Law Office of Omar O. Vargas, P.C. Allegedly, 14 GB of data were exfiltrated, including employee data, client information, scanned payment documents, personal data (such as dates of birth, Social Security numbers, driver's license scans, and client tax forms), medical records, court documents, internal financial documents, agreements, and certificates. Previously, on July 17, the law office was listed among the victims of Everest, and on September 17 by the RansomHub ransomware group.

🚨Cyberattack Alert ‼️ 🇮🇳India - Extramarks Education Kill Security hacking group claims to have breached Extramarks Education. Allegedly, exfiltrated data include company details (names, addresses, Corporate Identity Numbers (CIN), GSTIN numbers), personal information (names of authorized signatories, contact numbers), financial data (invoice amounts, bank account numbers, IFSC codes), tax information (PAN numbers, GST details), educational institution details (school names, addresses), service specifics, course details, class schedules, and pricing information. Ransom deadline: 19th Oct 24.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Doctors Regional Cancer Center INC Ransom ransomware group claims to have breached Doctors Regional Cancer Center. Samples have been provided.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Oklahoma Sleep Institute ThreeAM hacking group claims to have breached Oklahoma Sleep Institute.