Skip to content

Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,281 reports398 publishers97 added in the past week

861–880 of 1,281 reports · page 44 of 65

Added Thu 9 Apr

Check Point · Web page · Published 20 Aug
Ryuk Ransomware: A Targeted Campaign Break-Down
Over the past two weeks, Ryuk, a targeted and well-planned Ransomware, has attacked various organizations worldwide. So far the campaign has targeted several enterprises, while encrypting hundreds of PC, storage and data centers in each infected company.…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 18 Dec
If at first you don't succeed, screw it up again?
Unfortunately for AlphV, they did not seem to know that the law wasn’t in effect yet. Today, BlackCat tried again. Their leak site now lists Viking Therapeutics as a victim. Instead of providing any proof of claims, however, they posted that they got…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 6 Oct
Revenge telecom hacking by DESORDEN Group; third attack threatened
DESORDEN Group has added a new transparency demand to their attacks against Malaysian entities: victims must disclose the breach publicly if they have not paid the attackers. If the victim doesn’t disclose and Malaysian media does not report the incident,…
Original (new tab)
DataBreaches.net · Web page · Published 1 Jul
Still think you can negotiate with REvil and get your files back? Read this first.
The government and professionals involved in ransomware incident response have often advised victims not to pay the ransom because even if you pay, you may not get your data back, and you may not get your data deleted by criminals who pinky swear that they…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 25 Sep
"BlackCat" attempts to up the pressure on Suffolk County; starts to leak data?
Since September 8, Suffolk County has been trying to recover from a cyberattack by a ransomware group known as “ALPHV” or “BlackCat.” The attack disabled the county’s 911 system as well as other services. The county reverted to older methods for handling…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 15 Sep
AlphV responds to MGM incident and sloppy reporting
AlphV has posted a statement about their attack on MGM Resorts. They also post some scathing criticisms of journalists and news outlets for reporting inaccurately and not verifying sources. Of note, their statement also asserts, “The ALPHV ransomware group…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 1 Jan
Hacked on Christmas, DEphoto starts notifying customers, only to be attacked again
According to 0mid16B, they attacked DEphoto on December 25, and acquired the personal information of 555,952 customers, 429,597 orders with detailed personal information of 240,307 orders, and 16,213 records with plain text credit card details (full card…
Original (new tab)
DataBreaches.net · Web page · Published 22 Sep
DESORDEN leaks more data from Indonesia; "Indo data is officially worthless"
The DESORDEN group recently announced that due to the flood of personal information on Indonesians, they were giving up on attacking Indonesian entities. But they also noted that they already had some attacks in progress that they would still be leaking.…
Original (new tab)
DataBreaches.net · Web page · Published 2 Sep
Customer data from hundreds of Indonesian and Malaysian restaurants hacked by DESORDEN
Hackers known as DESORDEN have hit another big Indonesian business. This time, their victim was BOGA Group, which operates more than 200 restaurants and outlets across Indonesia and Malaysia under brand names including Bakerzin, Pepper Lunch, Paradise…
Original (new tab)
DataBreaches.net · Web page · Published 29 Jul
Alleged member of ShinyHunters held in Morocco on Interpol Red Notice, U.S. seeking extradition -- reports
A report by Vincent Monnier in a French news magazine, L’OBS, claims that an alleged member of ShinyHunters was arrested on June 1 as he attempted to board a flight at Rabat to Brussels. In translation, the report says: Arrested on June 1 at Rabat airport,…
Takedowns and arrests Original (new tab)
DataBreaches.net · Web page · Published 1 Jan
Los Angeles' Housing Authority hit by LockBit - Claim
If folks in Los Angeles were upset about the ransomware incident involving the Los Angeles Unified School District, they might want to buckle up before reading this: It appears that LockBit 3.0 has managed to compromise and exfiltrate data from the Housing…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 27 Feb
LAPSUS and the Terrible, Horrible, No Good, Very Bad Ransom Day 1 (UPDATED)
First they thought their victim hacked them back. Then they appeared to be trolled by a “negotiator” who wasn’t. I don’t know if the Brazilian threat actors who call themselves LAPSUS felt like moving to Australia after a bad day at the ransom office…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 16 Oct
Acer under fire: Now hackers claim to have hit Acer Taiwan, too
DESORDEN threat actors are still going after Acer, it seems. In addition to their recent revelation that they exfiltrated 60 GB of data from Acer India — a breach that Acer confirmed — they have alerted DataBreaches.net that they have also successfully…
Original (new tab)
DataBreaches.net · Web page · Published 17 Sep
"I'm Not Pro-Russia and I'm Not a Terrorist!" —- InfraGard and Airbus Hacker “USDoD” Unveils His New Campaigns
The first time DataBreaches remembers hearing about the man who calls himself “USDoD” was when he posted a sales listing for member data from InfraGard. He had not only managed to acquire data on 80,000 members of an organization dedicated to protecting…
Original (new tab)
DataBreaches.net · Web page · Published 6 Sep
ALTDOS claims some of their servers were seized but they did not lose data
It would be great if the good guys had backups as good as the threat actors have. Threat actors who call themselves “ALTDOS” have re-emerged after a brief hiatus that had left this site wondering if something had happened to them following a joint advisory…
Takedowns and arrests Original (new tab)
DataBreaches.net · Web page · Published 12 Sep
LockBit updates leak site with post about Sud-Francilien hospital
Weeks after everyone knew that LockBit was responsible for the attack, they added the hospital to their leak site and gave them nine more days to respond. Consistent with the usual rhetoric we see from threat actors in such circumstances, LockBit tries to put…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 15 Nov
AlphV files an SEC complaint against MeridianLink for not disclosing a breach to the SEC (2)
The attack was last Tuesday, November 7. According to AlphV, they did not encrypt any files, but did exfiltrate files. MeridianLink was aware of it the day it happened. According to AlphV, no security upgrades were made following the discovery, but “once we…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 3 Aug
Are Scattered Spider and ShinyHunters one group or two? And who did France arrest? (1)
When DataBreaches was a kid, the “new math” they were experimenting with had us learning binary and other systems. It didn’t go over well with us, our teachers, or our parents back then. Now the “new math” for me is UNCs — specifically 6040, 5537, 3944, and…
Takedowns and arrests Original (new tab)
DataBreaches.net · Web page · Published 3 Dec
AlphV claims an attack before even alerting the victim. How will that work out for them? (1)
So AlphV (aka BlackCat) is trying something different again, it seems. This time, it seems they are claiming a victim before they have even attempted to contact the victim or extort them. They post no proof of claims. They state that they are taking this…
Ransomware Original (new tab)
DataBreaches.net · Web page · Published 31 Jul
Thai entities continue to fall prey to cyberattacks and leaks
For over one year, DataBreaches.net has highlighted some breaches of ASEAN victims by groups such as ALTDOS and DESORDEN. In addition to those two groups, there are also numerous other leaks and breaches, as DataBreaches noted in our recent post about leaks…
Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.