In March, we discovered 88 publicly disclosed cyber security incidents, accounting for 3,987,593 breached records.
That brings the total number of breached records in the first quarter of 2022 to 75,099,482. We’ll be providing more stats from Q1 2022 in our quarterly review of cyber security incidents, which will be published on our website in the coming days.
Be sure to check our blog to find that article, or subscribe to our Weekly Round-up to make sure you get the latest content delivered straight to your inbox.
Meanwhile, you can find the full list of cyber attacks and data breaches for March 2022 below.
Contents
Cyber attacks
- Ferry operator Wightlink flags potential data breach after ‘highly sophisticated’ cyber attack (unknown)
- Destructive malware targeting organisations in Ukraine (unknown)
- Hackers interrupt Catholic charity’s online press conference on Ukraine (unknown)
- Monongalia Health System in West Virginia hacked (398,164)
- Crossroads Health of Lake County discloses security incident (10,324)
- The Puerto Rican Organization to Motivate, Enlighten, and Serve Addicts discloses 2020 data breach (30,220)
- Duncan Regional Hospital notifies patients of data security incident (92,398)
- Adafruit discloses data leak from ex-employee’s GitHub repo (unknown)
- Pro-Russian hackers launch email attack to disrupt Ukraine refugee rescue attempts (unknown)
- Minnesota District 518 investigating employee email account hack (unknown)
- China state-backed hackers compromised networks of at least 6 U.S. state governments (unknown)
- Russian government sites hacked in supply chain attack (unknown)
- Unable to determine what files were accessed, Norwood Clinic notifies all patients (228,103)
- South Denver Cardiology Associates patients notified of breach (287,652)
- Capital Region reaching out to patients about cyber attack (unknown)
- Labette Health discloses data security incident (unknown)
- Another Technology Management Resources client reports a security incident (unknown)
- Molson Coors Beverage Company discloses ongoing security breach (unknown)
- Bako Diagnostics discloses unauthorised access to it systems (unknown)
- Central Bank confirms unauthorised access to sensitive consumer information (4,747)
- Ascension Michigan confirms security incident (27,177)
- Louisiana-based First Guaranty Bank confirms security incident (unknown)
- Israeli government websites crash after ‘massive’ cyber attack (unknown)
- East Tennessee Children’s Hospital statement on security issue (unknown)
- Iranian hackers leak Mossad chief’s personal information (unknown)
- Philippines’ Commission on Elections’ service contractor Smartmatic confirms security incident (unknown)
- Chelan Douglas Health District warning residents of 2021 security breach (unknown)
- French healthcare insurer l’Assurance maladie suffers cyber attack (519,000)
- Dialyze Direct, LLC in New Jersey suffers ‘IT incident’ (14,203)
- Horizon Actuarial Services says it was hacked (39,418)
- Dairy supplier Hood suffers cyber security incident (unknown)
- Hackers hit background-check firm used by state agencies (164,000)
- BlockFi confirms unauthorised access to client data hosted on Hubspot (unknown)
- Sudler Property Management says its systems were compromised (unknown)
- FCI Constructors, Inc. confirms security incident (2,117)
- American Financial Resources confirms security incident (unknown)
- TOPS Staffing says employee data was compromised in cyber attack (7,118)
- Absolute Results Productions suffers malware attack (unknown)
- East Windsor Township computer system hacked (unknown)
- Morgan Stanley client accounts breached in social engineering attacks (unknown)
- WebsterRogers reports cyber security incident (unknown)
- TBK Bank says an employee’s account was breached (unknown)
- Liberty of Oklahoma files notice of recent data breach (5,746)
- Highmark Health suffers security incident (unknown)
- Southwest Health victim of cyber attack (unknown)
- Mansfield company hacked, personal information stolen (164,000)
- Lapsus$ found a spreadsheet of accounts as they breached Okta (366)
- French health insurance data leak (510,000)
If you’re facing a cyber security disaster, IT Governance is here to help. Our Cyber Incident Response service provides the help you need to deal with the threat, as our experts guide you through the recovery process.
They’ll review the breach, mitigate the damage and ensure that you are up and running again as soon as possible.
Ransomware
- Threat actors leak data from Scottish Association for Mental Health (unknown)
- Ransomware gang leak 190GB of alleged Samsung data, source code (unknown)
- Pennsylvania-based Fleetwood Area School District hit by ransomware (unknown)
- Ubisoft says it experienced a ‘cyber security incident’, LAPSUS$ group claims credit for attack (unknown)
- PracticeMax discloses security incident (165,698)
- Wagstaff, Inc. hit by ransomware (unknown)
- TransUnion hackers demand R224-million ransom (unknown)
- Wheeling Health Right victim of ransomware attack (unknown)
- New Jersey Brain and Spine notifies those affected by ransomware (92,453)
- Argentina’s senate reveals that its website was hit by ransomware (unknown)
- Microsoft confirms it was hacked by Lapsus$ extortion group (unknown)
- Hundreds of companies potentially hit by Okta hack (unknown)
- Oklahoma City Indian Clinic impacted by Suncrypt’s ransomware attack (20,000)
Data breaches
- Isle of Wight children’s details sent out in email gaffe (90)
- Hilliard City Schools evaluating protocols after leaking the names of students (4,200)
- Nespresso data leak in South Africa (unknown)
- State Bar breach exposed thousands more confidential records than original estimates (322,525)
- A security lapse exposed India’s CISF personnel files and health records (unknown)
- Japanese medical online consultation site leaking consumer-submitted images of symptoms (12,000)
- Hotel WiFi across MENA compromised and exposing private data (unknown)
- CareOregon Advantage files notice of recent data breach (10,467)
- Christie Clinic, CSI Laboratories report breaches (unknown)
- Personal Data of 820,000 NYC Students Exposed (820,000)
- Names and addresses of 620 FSB officers published in data breach (620)
- Confidential documents were blown into gardens in data breach (1)
- Infinity’s Ronin Network Says About $620M Stolen In Major Security Breach (0)
- Apple and Meta Gave User Data to Hackers Who Used Forged Legal Requests (unknown)
- 120 patients victims of CKHA privacy breach (120)
Financial information
- Dominican Republic hackers steal US$2.7M in welfare cards (30,000)
- Fresno lost more than $600,000 to a phishing scam (unknown)
- Bonita Springs Utilities detects suspicious activity on customer payments (4,419)
Malicious insiders and miscellaneous incidents
- Canada-based GreenSlate makes notification of data breach (unknown)
- Litchfield School District employee wrongdoing created student data security incident (198)
- St. Joe’s fires employee who snooped into medical records ‘out of curiosity’ (49)
In other news…
- Breach notification: Poor transparency complicates response
- NIS 2.0—the EU looks to bolster its cybersecurity laws
- Oxford teen accused of being multi-millionaire cyber criminal
No Responses