InfoSecBulletin Cybersecurity for mankind
According to IT Governance, a global provider of cyber risk and privacy management solutions, 4.3 million records were compromised by cyberattacks across the world in April 2023. This represents an 89% decrease from April 2022. However, organizations must not let this lull them into a false sense of security. Cybercriminals are constantly evolving their tactics, and even with a decrease in attacks, there is always the potential for a breach.
Three of the biggest data breaches that occurred in April 2023 impacted Shields Health Care Group, NCB Management, and Kodi.
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
Microsoft Patch Tuesday September 2026 Fixed 973 Flaws Fixed, 2 Zero-Days
ALSO READ:
Antivirus bypass capabled malware “Daam” attack thousands of smartphone! CERT Alert
Shields Health Care Group, a medical services provider based in Massachusetts, suffered the largest data breach in April 2023. 2.3 million individuals had their personal data stolen by cybercriminals who gained unauthorized access to the organization’s systems. The sensitive information stolen included patients’ Social Security numbers, dates of birth, home addresses, healthcare provider information, healthcare history, billing information, insurance numbers, and other financial details. Shields said in a statement that they take the “confidentiality, privacy, and security of information seriously” and have taken steps to secure their systems and enhance data security.
Nearly one million financial records were stolen in a recent cyberattack on NCB Management, a provider of debt collection services. A criminal hacker infiltrated the system on February 1, 2023, according to the internal investigation, although it is unknown how long they went undiscovered. The attacker was able to get credit card information from past-due Bank of America accounts. The compromised information included people’s first and last names, address, phone number, email address, date of birth, work status, pay amount, licence number, Social Security number, account number, credit card number, routing number, account balance, and/or account status. Bank of America reported the issue to the appropriate authorities, although it is unclear what involvement the bank had in the breach beyond the fact that its clients were impacted. This breach creates the possibility for various scams, given that these individuals had been pursued by a debt collection agency.
Kodi’s MyBB forum database was breached last month by an unauthorised actor who stole personal data of 400,635 users. The attackers gained access to the database through a trusted but inactive member of the admin team’s account. They downloaded nightly backups of the entire database, including usernames, email addresses and encrypted passwords, as well as all public forum posts, team forum posts, and direct messages. Fortunately, Kodi reported that the attackers didn’t access the underlying server hosting the MyBB software.
In addition to these three major breaches, IT Governance also identified 120 other publicly disclosed security incidents in April 2023. These incidents included a wide range of attacks, such as phishing, ransomware, and data breaches.
The April 2023 statistics show that organizations are still under attack from cybercriminals. However, the decline in attacks is a positive sign. Organizations should continue to take steps to improve their cybersecurity posture to protect themselves from future attacks.
Here are some tips for organizations to improve their cybersecurity posture:
Implement a layered security approach that includes employee training, network security, and regular security assessments.
Keep software up to date with the latest security patches.
Use strong passwords and two-factor authentication.
Be careful about what information you share online.
Report any suspicious activity to the appropriate authorities.
