January 3, 2023

Queensland University of Technology disclose cyber attack after Royal ransomware starts to leak data

On Sunday 1st of January 2023, one of the largest universities in Australia, Queensland University of Technology disclosed a cyber attack that resulted in all their IT systems being shut down to prevent the spread of the attack. The university also stated that they were collaborating with external experts to respond to the security incident. According to the latest updates […]
January 3, 2023

Rail giant Wabtec discloses data breach following LockBit ransomware attack

On Friday 30th of December 2022, U.S. rail and locomotive company, Wabtec Corporation disclosed a data breach that exposed personal and sensitive information. The announcement revealed that the threat actors were able to breach their network and installed malware on specific systems as early as Tuesday 15th of March 2022. The announcement explained that on Sunday 26th of June 2022, […]
January 1, 2023

LockBit apologises with free decryptor after cyber attack against SickKids hospital

On Sunday 18th of December 2022, a teaching and research hospital in Toronto that focuses on providing healthcare to sick children, SickKids experienced a ransomware attack that impacted internal and corporate systems, hospital phone lines, and the website. The incident led to delays in receiving lab and imaging results and resulted in longer patient wait times. It was then revealed […]
December 30, 2022

Ransomware attack shuts down mill of Canadian mining firm

Late on Tuesday 27th of December 2022, The Canadian Copper Mountain Mining Corporation (CMMC) in British Columbia experienced a cyberattack that resulted in the CMMC’s engineers decided to shut down the mill as a preventative measure to determine the status of its control system, while other processes switched to manual operations. “The Company’s external and internal IT teams are continuing […]
December 30, 2022

Cyber attack on the Port of Lisbon Administration claimed by the LockBit ransomware operation

On Monday 26th of December 2022, the third-largest port in Portugal, the Port of Lisbon Administration (APL) shared with local media outlets that they had experienced a cyber attack that did not impact their operations. “All safety protocols and response measures provided for this type of occurrence were quickly activated, the situation being monitored by the National Cybersecurity Center and […]
December 28, 2022

Hive ransomware gang claim a cyber attack against Louisiana medical complex

On Friday 21st of October 2022, the largest medical complex in Lake Charles, Louisiana, The Lake Charles Memorial Health System experienced a cyber attack that involved the threat actors gaining unauthorized access to their network and stealing sensitive files. The files contained patient information such as: Full names Physical addresses Dates of birth Medical records Patient identification numbers Health insurance […]
December 16, 2022

BlackCat ransomware gang believed to be responsible for a cyber attack against Colombian energy supplier EPM

On Monday 12th of December 2022, the Colombian energy company Empresas Públicas de Medellín (EPM) experienced a ransomware attack that disrupted the company’s operations and took down online services. On Tuesday 13th of December 2022, the company told approximately 4,000 employees to work from home, with IT infrastructure down. Even though EPM did not disclose the ransomware operation behind the […]
December 12, 2022

Cyber attack against Belgium city of Antwerp claimed by Play ransomware

On Thursday 5th of December 2022, Digipolis, the IT company responsible for managing the Belgium city of Antwerp’s IT systems, suffered a ransomware attack that disrupted the city’s IT, email, and phone services. It was reported that many of the city’s Windows applications were no longer available, and City council member Alexandra d’Archambeau publicly tweeted that email was not available. It also […]
December 6, 2022

Cause of Rackspace outage confirmed to be ransomware attack

On Friday 6th of December 2022, the Texas-based cloud computing provider, Rackspace confirmed that a ransomware attack is a cause behind their ongoing Hosted Exchange outage that started on Friday 2nd of December 2022. In their update to the initial report, Rackspace stated they had become aware of suspicious activity and immediately took proactive measures to isolate the Hosted Exchange […]