EVOITSEC

EDITION #29

INFORMATION SECURITY DIGEST
  • Computer hardware manufacturer Cooler Master suffered a data breach after a threat actor breached the company's website and claimed to steal the Fanzone member information of 500,000 customers.The threat actor who goes by the alias 'Ghostr' claimed to have stolen 103 GB of data from Cooler Master.

  • The BBC has emailed more than 25,000 current and former employees on one of its pension schemes after an unauthorized party broke into a database and stole their personal data. Names, insurance numbers, dates of birth, and home addresses were included in the data that was exposed via a cloud database used by the BBC Pension Scheme's admin team.

  • AddComm's systems were recently hit by a ransomware attack. Cybercriminals have given themselves access to AddComm customer data. They also encrypted systems and data was stolen.

  • A little-known hacker group Head Mare claimed responsibility for an attack that has disrupted service at CDEK, one of Russia’s largest delivery companies. The hackers said they encrypted the company’s servers with ransomware and destroyed backup copies of its corporate systems.

  • The Islamabad Safe City Authority’s online system was knocked down by hacker(s) leading to its shut down. The hacker(s) entered the main server of the system and then the server having data and record of criminals.

  • Prestigious Auckland department store Smith & Caughey’s has fallen victim to a cyberattack, on the same day it announced it proposed to close in early 2025, after 144 years, with the loss of almost 250 jobs. The attack has affected internal computer systems the department store.

  • One of Victoria's largest childcare providers has been targeted in a cyber attack with thousands of families believed to be affected.

  • A popular brand of recording software (JAVS) used widely in courtrooms, jails and prisons has been compromised by hackers, allowing them to gain full control of a system through a backdoor implanted in an update to the tool.