Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇺🇸USA - Food Sciences Corporation After claiming the attack on the Central Pennsylvania Food Bank, the Fog hacking group now claims to have breached Food Sciences Corporation. Allegedly, 86 GB of data were exfiltrated, including client information (phones, addresses, and emails), internal financial data, human resources records, employee contact information, NDAs, customer information, and health condition certifications.

🚨DDoS Alert ‼️ 🇯🇵Japan - Yamanashi Prefecture and several other municipal websites experienced disruptions due to a suspected DDoS attack. Meanwhile, at Hackmanac, we detected DDoS attacks claimed by the hacktivist collective NoName057(16). Today, 16 October. Between 3:15 pm and 7:35 pm, Yamanashi Prefecture reported approximately 6.2 million access attempts from 69 countries, causing difficulties in accessing the site. Other affected areas include Fujisawa City in Kanagawa Prefecture, which experienced a one-hour outage, and several municipalities such as Tokyo's Adachi, Arakawa, and Suginami Wards. Additionally, several airline systems, including Peach Aviation’s check-in systems at Kansai, Narita, and New Chitose airports, encountered failures. Yesterday, 15 October, the hacktivist group also claimed responsibility for DDoS attacks on Oshima Shipbuilding, the Liberal Democratic Party of Japan, the Japanese Engineering Federation, Naikai Zosen, Japan Shipyard, and the Democratic Party of Japan.

🚨Cyberattack Alert ‼️ 🇵🇰Pakistan - Rahnuma FPAP (Family Planning Association of Pakistan) RansomHub hacking group claims to have breached Rahnuma FPAP, the largest service provider in the field of RH/FP in Pakistan. The sample provided shows patients' data. Ransom deadline: 21st Oct 24.

🚨Cyberattack Update ‼️ 🇯🇵Japan - Saizeriya (サイゼ) Confirms Ransomware Attack Saizeriya Co., Ltd. experienced a ransomware attack, leading to the partial suspension of services due to server outages. The company has confirmed that there is a high possibility of personal and confidential information leakage, including employee data, business partner information, and customer service inquiries. Systems were compromised, and servers were isolated from the internet and internal networks to prevent further damage. On October 14, at Hackmanac, we reported that the RansomHub ransomware group claimed to have attacked the company. Source: https://www.release.tdnet.info/inbs/140120241016598983.pdf

🚨Cyberattack Alert ‼️ 🇺🇸USA - G-Plans RansomHub hacking group claims to have breached G-Plans, a health technology company. Allegedly, 5 GB of customers' data were exfiltrated. Ransom deadline: 20th Oct 24.

🚨Cyberattack Alert ‼️ Synertrade Cactus hacking group claims to have breached Synertrade, a global provider of digital procurement solutions. Allegedly, 3 TB of data were exfiltrated, including personally identifiable information, database backups, corporate confidential documents, contracts, correspondence, projects, and customer confidential data. Based on the samples provided, it is likely that the breach involves Synertrade’s German branch.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Central Pennsylvania Food Bank Fog hacking group claims to have breached Central Pennsylvania Food Bank. Allegedly, 20 GB of data were exfiltrated, including client agreements, accounting records, human resources data, SSNs, passports, and driver's licenses.

🚨🚨🚨Cyberattack Alert ‼️ 🇺🇸USA - Boston Children's Health Physicians BianLian hacking group claims to have breached Boston Children's Health Physicians. Allegedly, exfiltrated data include finance data, HR data, mailboxes and internal/external email correspondence, database exports, PII and PHI records, health insurance records, and data related to children and minors.

🚨Cyberattack Alert ‼️ 🇺🇸USA - Henry County Schools, Rhysida Demands 20 BTC Rhysida hacking group claims to have breached Henry County Schools. NDAs (Non-Disclosure Agreements), SSNs (Social Security Numbers), and other personal data. Ransom demand: 20 BTC (approx. $1,350,000). Ransom deadline: 22nd Oct 24.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 09 - 15 October 2024 ⚠️190 cyberattacks across 44 countries ⚠️ ➡️The most active treat actor this week is Sarcoma, claiming responsibility for 32 attacks. ➡️The United States is the most affected country, accounting for 42% of the victims. ➡️The Manufacturing sector is the most impacted, representing 18% of the claimed targets, followed by the Professional, Scientific, and Technical sectors with 11% ➡️Overall, the claimed compromised data amounts to approximately 188,946.98 terabytes. ☣️The average ESIX® (Estimated Severity Index) is 4.4. Follow the link for list of referred victims: https://hackmanac.com/news/hack-tuesday-week-09-15-october-2024 #Hackmanac #HT #Cybersecurity

🟧 #HackTuesday 🟧 Hack Tuesday: Week 02 - 08 October 2024 ⚠️190 cyberattacks across 44 countries ⚠️ ➡️The most active treat actor this week is Sarcoma, claiming responsibility for 32 attacks. ➡️The United States is the most affected country, accounting for 42% of the victims. ➡️The Manufacturing sector is the most impacted, representing 18% of the claimed targets, followed by the Professional, Scientific, and Technical sectors with 11% ➡️Overall, the claimed compromised data amounts to approximately 188,946.98 terabytes. ☣️The average ESIX® (Estimated Severity Index) is 4.4. Follow the link for list of referred victims: https://hackmanac.com/news/hack-tuesday-week-09-15-october-2024 #Hackmanac #HT #Cybersecurity

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Kanagawa Prefectural Sewerage Public Corporation (神奈川県) On October 9, 2024, the Kanagawa Prefectural Sewerage Public Corporation experienced a ransomware attack by the Black Suit hacking group (the same group behind the KADOKAWA attack), infecting its internal network system. The infection affected a server and two PCs at the Yanagishima Water Reclamation Center. Personal information stored on the server, including data related to school competitions, tour applicants, Sewerage Festival participants, and employee recruitment, may have been exposed. Source: https://www.pref.kanagawa.jp/docs/h2v/prs/r7782814.html

🚨Cyberattacks Alert ‼️ The Play ransomware group has been particularly active in recent hours, listing 9 victims on its data leak site: 🇨🇦 Steel Art Signs 🇳🇱 Nora Biscuits 🇺🇸 Misionero 🇺🇸 Henneman Engineering 🇺🇸 Rescar Companies 🇺🇸 Concord 🇺🇸 OzarksGo 🇺🇸 Byerly Aviation 🇺🇸 Courtney Construction The ransom demands will expire between October 17 and 19.

🚨Cyberattack Alert ‼️ 🇱🇾Libya - Ministry of Internal Affairs of Libya Kill Security hacking group claims to have breached the Ministry of Internal Affairs of Libya. Allegedly, exfiltrated data include full employer information such as full names, national identification numbers, dates of birth, places of birth, email addresses, passport application details, and other identifying information like family names and places of residence.

🚨Cyberattack Alert ‼️ 🇮🇳India - Rudraksha Multispeciality Hospitals Kill Security hacking group claims to have breached Rudraksha Multispeciality Hospitals. Allegedly, sensitive information including personally identifiable information (PII), financial data, and confidential business details were exfiltrated. This includes names, business addresses, customer addresses, contact numbers, invoice details, amounts due, terms of payment, late charges, customer numbers, invoice numbers, and sales representative IDs. Ransom deadline: 21st Oct 24.

🚨Data Breach Alert ‼️ IntelBroker, in collaboration with EnergyWeaponUser and zjj, allegedly claims to be selling data from a recent Cisco breach. The compromised data reportedly includes GitHub and GitLab projects, SonarQube projects, source code, hardcoded credentials, certificates, customer SRCs, confidential Cisco documents, Jira tickets, API tokens, AWS private buckets, Cisco technology SRCs, Docker builds, Azure storage buckets, private and public keys, SSL certificates, and Cisco premium products. Several high-profile companies, including Verizon, AT&T, Bank of America, Barclays, British Telecom, Microsoft, Vodafone, and Chevron, are allegedly impacted. Samples have been provided.

🚨Cyberattack Alert ‼️ 🇨🇦Canada - Durham Region DragonForce ransomware group claims to have breached Durham Region. Allegedly, 19.9 GB of data were exfiltrated. Ransom deadline: 19th Oct 24.

Teraleak: Pokémon Developer Game Freak Hacked; Decades of Data Leaked https://hackread.com/teraleak-pokemon-developer-game-freak-hacked-data-leak/

🚨Cyberattack Alert ‼️ 🇲🇽Mexico - Medicato RansomHub ransomware group claims to have breached Medicato, a virtual healthcare app that connects you with online doctors. Samples have been provided. Ransom deadline: 19th Oct 24.

🚨Cyberattack Alert ‼️ 🇮🇱Israel - Modiin Ezrachi Meow hacking group claims to have breached Modiin Ezrachi, a private Israeli security group that provides security and guarding, armed courier and patrol and surveillance services. Allegedly, 486 GB of data were exfiltrated, including employee data, government and financial documents (such as accounting records, tax invoices, and bank statements), personal data (including dates of birth, passport scans, ID cards, and firearm licenses), employee cards, vehicle licenses, certificates, personal IDs, military documents, security passes, and medical and insurance documents.