State of (in)security - Week 44, 2023
Take action: When you are handed huge amounts of data of individuals, you are handed huge responsibility. It's not easy to secure such a data set, so communicate risks and be pessimistic. Because we saw from the lastpass breach that if someone sees value in breaching your data, they will invest a lot of time and money.
Learn More
In the week between Oct. 30, 2023, midnight and Nov. 6, 2023, midnight we witnessed a total of:
- 6 advisory/vulnerability events
- 22 incident/data breach events
Week over Week comparison of week 44 vs week 44 is - terrifying:
- If we look at advisories and incident numbers, the week is an improvement, with 6 advisories versus 7 the previous week and 22 incidents versus 24 in the previous week.
- The scary part is with the known impacted individuals from data breaches: in week 44 we had the largest record breaking incident with over 815 million individuals exposed.
We also shared 2 practical knowledge items
Total impacted individuals via the events of the week
There were a total of 815,824,025 impacted individuals across 8 incidents, with the largest breach being the The data of 815 million citizens of India for sale via breach of Covid19 data records incident exposing 815,000,000 individuals. Since not all incidents report a number of impacted individuals, the real number is definitely higher than that.
Cause breakdown of incidents
| Cause | Number of incidents |
|---|---|
| ransomware | 9 |
| third party breach | 5 |
| email account breach | 2 |
| database configuration error, exposed w/o password online | 1 |
| sql injection | 1 |
Industry breakdown of incidents
| Industry | Number of incidents |
|---|---|
| Healthcare | 4 |
| IT/Software/Technology | 4 |
| Finance | 4 |
| Manufacturing | 2 |
| Government | 2 |
| Telecommunications | 1 |
| Consulting/Professional Services | 1 |
| Education | 1 |
| Retail | 1 |
| Aviation | 1 |
Read the Event Details of the Week
Knowledge
- active exploit | F5 BIG-IP Vulnerabilities actively exploited by hacker groups
- active attack | Apache ActiveMQ Vulnerability actively exploited, HelloKitty Ransomware gang leading the attacks
Vulnerabilities
- critical vulnerability | Another critical Confluence vulnerability - patch ASAP
- critical vulnerability | phpFox Social Platform fixes critical remote code execution flaw
- critical vulnerability | INEA reports critical vulnerability in ME RTU device
- critical vulnerability | Weintek EasyBuilder Pro reports critical vulnerability
- critical vulnerability | Cisco Issues Critical Advisory on Firepower Management Center
- critical vulnerability | Devolutions reports critical flaw in Remote Desktop Manager
Incidents
- critical vulnerability | DoJ and DoD email addresses exposed in MOVEit related breach
- data breach | Toronto Public Library suffers cyber attack
- data breach | The data of 815 million citizens of India for sale via breach of Covid19 data records
- data breach | LastPass stolen seed phrases used to steal $4.4 Million in crypto
- data breach | Ace Hardware cooperative reports cyberattack, impacting IT systems
- data breach | "World in HD" torrent community leaks user data
- data breach | LockBit lists Summit Health on their breach site, claims data breach
- data breach | RansomEXX publishes Digicel Group data dump
- data breach | Western Washington Medical Group reports data breach, exposing patient data
- data breach | Resort Data Processing reports data breach
- data breach | Drug Free Workplaces reports data breach exposing data of 37k people
- data breach | North Mississippi Health Services reports MOVEit related data breach
- data breach | Piscataqua Savings Bank reports MOVEit related data breach
- data breach | Okta reports another data breach, this time exposing employees
- data breach | ITW Food Equipment Group reports data breach affecting customers
- data breach | Strike reports data leak of customer emails after initially denying any issues
- data breach | Hilb Group insurance brokers report data breach exposing 81k
- data breach | Mortgage giant Mr. Cooper reports cyberattack as cause for outage
- ransomware | Crime group Play claims they have hacked Dallas County
- ransomware | American Airlines Pilots Union reports ransomware attack
- ransomware | Ontario hospitals attacked by ransomware, patient and employee data exposed
- ransomware | Shimano targeted by ransomware attack
