List of data breaches and cyber attacks in March 2021

You can find April 2021’s list of data breaches and cyber attacks here.

Don’t be fooled by the fact that we only recorded 20,995,371 breached records in March; it was one of the leakiest months we’ve ever seen, with 151 recorded incidents.

By comparison, there was a seemingly Lilliputian 82 recorded breaches in January and 118 in February.

The issue is that in far more cases than we’d expect, the number of breached records wasn’t included in the notification, so we can’t include it here.

We typically expect ambiguity when it comes to ransomware, because organisations are locked out of their files and can’t calculate what’s been affected. But there were dozens of other cyber attacks and data breaches where the organisation either didn’t know or reveal the extent of the damage.

You can find our full list of incidents below, with those affecting UK organisations listed in bold.

Meanwhile, you can stay up to date with the latest news by subscribing to our Weekly Round-up or visiting our blog.

Contents

Cyber attacks
Ransomware
Data breaches
Financial information
Malicious insiders and miscellaneous incidents
In other news…

Cyber attacks

Ransomware

Fifteen schools in Nottinghamshire crippled by cyber attack (unknown)
South and City College Birmingham closed for a week after ransomware attack (unknown)
South Gloucestershire schools hit by ransomware attack (unknown)
MBA Group held to ransom by cyber attackers (unknown)
Dutch e-Ticketing platform Ticketcounter has suffered a security incident (1.9 million)
Lot-et-Garonne firefighters victims of a cyber attack (unknown)
Israeli car financing company KLS Capital hacked (unknown)
Tri County Sheriff Dispatch hit with ransomware attack (unknown)
Hackers hit Indians with ransomware supporting farmers (unknown)
Crypto firm Tether says it won’t pay $24 million ransom (unknown)
The Accellion breach also impacted Qualys; threat actors start dumping files (unknown)
Southern Illi n ois University School of Medicine impacted by Accellion breach (unknown)
Payroll giant PrismHR outage likely caused by ransomware attack (unknown)
Atlanta Allergy & Asthma hit by Nefilim threat actors (unknown)
Navajo Nation hospital targeted by large-scale ransomware hack (unknown)
AllyAlign notifies members and providers of ransomware attack (76,348)
Woodcreek Provider Services notifies patients of ransomware incident (210,000)
Spirit Airlines hit by Nefilim ransomware (unknown)
Arizona Complete Health notifies plan members of Accellion breach (27,390)
Sandhills Medical Foundation notifies patients of vendor breach (39,602)
Texas Medicaid subcontractor dumped after data breach in ransomware attack (unknown)
Japanese consulting firm hit with ransomware (350)
Arillium Community Health Plan in Oregon affected by Acceliion breach (unknown)
Nova Scotia health-care workers may have been compromised by Accellion breach (50,000)
French hospital Centre Hospitalier Général d’Oloron falls victim to ransomware (unknown)
Spain’s public employment system was attacked by ransomware (unknown)
Transport NSW documents posted on dark web after Accellion hack (unknown)
Flagstar Bank loses customers’ social security numbers after Accellion attack (unknown)
Outage at Molson Coors suggests ransomware attack (unknown)
City of Covington, Louisiana hit by ransomware (unknown)
Preferred Home Care of New York notifies those affected by ransomware attack (92,283)
Buffalo Public Schools hit by ransomware (unknown)
Total Life Healthcare data breached in ransomware attack (50,000)
Newberry County Memorial Hospital experienced ransomware attack (unknown)
The Metropolitan Area of Barcelona hit by ransomware (unknown)
Pimpri-Chinchwad Municipal Corporation Smart City suffers ransomware attack (unknown)
Tech manufacturer Acer hit by ransomware (unknown)
Stratus Technologies hit suffers ransomware attack (unknown)
Canada’s Sierra Wireless announces ransomware attack (unknown)
City of Frankfort, Kentucky, held to ransom (unknown)
Mili t ary supplier PDI Group hit by ransomware (unknown)
Alton, IL, hit by suspected ransomware attack (unknown)
Personal Touch Holding Corp. hit by ransomware attack at MSP (750,000)
Broward County Public Schools suffers ransomware attack (unknown)
Hackers demand ransom from Town of Didsbury in cyber attack (unknown)
Hackers hit Harris Foundation in latest ‘highly sophisticated’ cyber attack (unknown)
Gene therapy firm YposKesi targeted by ransomware (unknown)
Ransomware gang is threatening to release data stolen from shipping firm ECU Worldwide (unknown)

Data breaches

Financial information

Midlands News Association exposed journalists’ personal data (unknown)
Fatface says customers’ card details were hacked, asked them to keep it secret (unknown)
Hollywood’s elite private schools hacked (unknown)
Delco School District says hackers stole millions of dollars (unknown)
Security Industry Specialists notifies those affected by malware attack (36,762)
WeLeakInfo leaked customer payment info (24,000)
Florida’s Leon County Schools website hacked during spring break (unknown)

Malicious insiders and miscellaneous incidents

In other news…

Will you be next?

No one thinks their organisation will fall victim to a security incident until it happens to them – but as we’ve demonstrated here, data breaches are so prevalent that everyone must have a plan.

If you find yourself staring down disaster, IT Governance is here to help. Our Cyber Incident Response service provides the help you need to deal with the threat, as our experts guide you through the recovery process.

They’ll review the breach, mitigate the damage and ensure that you are up and running again as soon as possible.

Find out more