Finnish Parliament (Eduskunta)
State-sponsored APT compromised MP email accounts — Chinese APT31 attributed
Latest Disclosures
Scottish Environment Protection Agency
Conti ransomware stole 1.2GB of data — published 4,000+ files
SolarWinds (email)
Email system compromise continued even after Orion fix
Accellion FTA (Global Impact)
Zero-day exploitation compromised 100+ organizations — Clop published data
Leon Medical Centers
500K patient records exposed in vendor breach
California State University system
Data breach affected payroll records across multiple campuses
Ledger
1,075,241 records exposed — Email addresses, Names, Phone numbers, Physical addresses
Bykea
400M ride records including GPS data exposed
Elara Caring
100K patient home health records exposed in phishing attack
City of Gary IN
Ransomware encrypted city systems for weeks
Hancom Group (Korea)
Office software company breached — government document templates compromised
SolarWinds (SEC filing)
SolarWinds confirmed 18K customers installed trojanized Orion
SolarWinds / CISA
Cybersecurity agency itself compromised in SolarWinds attack
SolarWinds / Orion
18K organizations downloaded trojanized update in Russian SVR supply chain attack
SolarWinds (Global Impact)
Russian SVR compromised IT monitoring platform — 18,000+ orgs including global governments
SolarWinds / US Dept of Energy
DOE and NNSA networks compromised via SolarWinds
SolarWinds / US Dept of State
State Dept email systems compromised in supply chain attack
SolarWinds / US Dept of Homeland Security
DHS email accounts accessed by Russian intelligence
SolarWinds / US Dept of Commerce
NTIA email systems compromised in SolarWinds supply chain
SolarWinds / US Treasury
Russian SVR accessed US Treasury email systems via SolarWinds
SolarWinds / US Dept of Justice
DOJ email accounts accessed including 3,000+ employees
Blue Shield of California (2020)
67K member records exposed
European Medicines Agency
State-sponsored actors stole COVID vaccine documents — Pfizer/BioNTech data
FireEye / Mandiant
Red team tools stolen by Russian SVR in SolarWinds-related breach