State of (in)security - Week 40, 2023

published: Oct. 9, 2023

Take action: Building secure systems is much harder than breaking them. A dangerous hacker group has exposed their own systems by misconfiguring a fairly trivial security action on their own systems. Invest in building your systems security, and in reviewing it persistently


Learn More

In the week between Oct. 2, 2023, midnight and Oct. 9, 2023, midnight we witnessed a total of:
  • 8 advisory/vulnerability events
  • 19 incident/data breach events

Week over Week comparison of week 40 vs week 39 is an improvement:

Total impacted individuals via the events of the week

There were a total of 899,883 impacted individuals across 7 incidents, with the largest breach being the RansomedVC claim theft of voter data from DC Board of Elections incident exposing 600,000 individuals. Since not all incidents report a number of impacted individuals, the real number is definitely higher than that.

Cause breakdown of incidents
Cause Number of incidents
ransomware 5
third party breach 3
email account breach 2
phishing 1
server misconfiguration 1
Industry breakdown of incidents
Industry Number of incidents
Healthcare 4
Finance 3
IT/Software/Technology 2
Government 2
Non-profit/Charity 1
Construction 1
Telecommunications 1
Education 1
Entertainment/Leisure 1
Hospitality/Events 1
Read the Event Details of the Week

Vulnerabilities

Incidents

State of (in)security - Week 40, 2023