List of data breaches and cyber attacks in August 2017

Update 30/08/2017: Well, this month’s total number of leaked records looked like it was going to be very low, but in fact it’s the highest one we’ve ever done. The discovery of the Onliner spambot has added 711 million records to the list.

August was – relatively speaking – a pretty quiet month. As far as I’m aware, just 4.6 million records were leaked, which is 139 million fewer than in July.

However, while the overall number this month is far lower, there were still plenty of incidents, including quite a few healthcare data breaches – one of which exposed the HIV status of 12,000 people.

Did I miss anything? Let me know.

Cyber attacks & ransomware

Malware attack disrupts hospitals

HBO hackers obtained all of HBO’s social media logins and GIPHY credentials

Another rough week for HBO as hackers and mistakes result in more leaks

Turkish hackers attack Armenian webpages again

Cyberattack on UCLA server potentially accesses student information

Pacific Alliance Medical Center notifies 266,123 patients of ransomware incident

South Korea LG service centers attacked by ransomware

FC Barcelona has its Twitter and Facebook accounts hijacked by the OurMine gang.

Sony social media accounts hijacked as hackers claims to have stolen PSN database

Attack on Ireland’s state-owned power provider blamed on state-sponsored hackers

Data breach

HIDS4U customers warned of free gift email attack after customer database leaks

Hackers claim to have leaked Game of Thrones season finale details

Oops! Aetna exposed 12,000 customers’ HIV statuses through envelope window

Indian Bank faulted for losing customer’s net banking credentials

Labor Department blames data breach for injury reporting site’s shutdown

OAIC investigating Flight Centre customer data leak

 Anonymous hacker claims to have stolen the NHS medical records of 1.2million Brits

US Voting Machine Supplier Leaks 1.8 Million Chicago Voter Records

OSHA Suspends ITA Due to Security Breach

Error exposes private info on thousands of South Wash. Co. students

Islington Council faces huge fine after massive data breach hit 90,000 people

Medical records of Norfolk patients found in a petrol station, a King’s Lynn restaurant and on the pavement

Lake Health investigating missing obstetrics records

Surgical Dermatology Group notifies patients after TekLinks hacked

Vancouver pot dispensary patient data breach highlights regulatory haze

State juror pool data breach exposed Social Security numbers

Personal data belonging to up to 21,000 TalkTalk customers could have been used for scams and fraud

Italian bank UniCredit admits data breaches affecting 400,000 customers

Medical clinic breaches 1000 people’s privacy

Data of 100,000 Dutch lease drivers leaked

Big data breach unmasks Bloomberg chat room users

GPAs mistakenly sent to parents, students

Patients’ records stolen from Walsall health worker’s car

​UC Health hospital notifies patients of medical records being compromised

Personal Info of 650,000 Voters Discovered on Poll Machine Sold on Ebay

Kaleida Health notifies 2,789 patients about phishing incident

NHS staff personal data leaked in latest data breach

Nude photos of Anne Hathaway leaked online by hackers

Financial information

Oceanside investigating possible data theft on bill-paying website

Hacker Nets over $500,000 after Hacking Enigma before ICO Date

San Antonio Institute for Women’s Health warns patients personal data compromised in network hack

Other

Leak of >1,700 valid passwords could make the IoT mess much worse

BankBot trojan tries to sneak apps onto your Android smartphone without permission

Two zero-day vulnerabilities disclosed after Foxit refuses to patch PDF Reader

Vendor-neutral smart car bug has ‘dangerous’ and ‘even fatal’ consequences

Fighting back

Google awards student $10k for discovery of App Engine data leak flaw

Turkey Arrests Five Suspects in Qatar News Agency Hacking

UK government sets out tougher guidelines to protect smart cars from hackers

Former Air Force member sentenced for stealing fellow members’ information