Monday , June 16 2025

Cyberattacks Compromise 4.3 Million Records in April 2023

According to IT Governance, a global provider of cyber risk and privacy management solutions, 4.3 million records were compromised by cyberattacks across the world in April 2023. This represents an 89% decrease from April 2022. However, organizations must not let this lull them into a false sense of security. Cybercriminals are constantly evolving their tactics, and even with a decrease in attacks, there is always the potential for a breach.

Three of the biggest data breaches that occurred in April 2023 impacted Shields Health Care Group, NCB Management, and Kodi.

Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems

WestJet, Canada's second-largest airline, is looking into a cyberattack that has affected some internal systems during its response to the...
Read More
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems

Paraguay 7.4 Million Citizen Records Leaked on Dark Web

Resecurity found 7.4 million records of Paraguayan citizens' personal information leaked on the dark web today. Last week, cybercriminals attempted...
Read More
Paraguay 7.4 Million Citizen Records Leaked on Dark Web

High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation

HashiCorp has revealed a critical vulnerability in its Nomad tool that may let attackers gain higher privileges by misusing the...
Read More
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation

SoftBank: Over 137,000 personal info leaked

SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked...
Read More
SoftBank: Over 137,000 personal info leaked

Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code

Serious security vulnerabilities in Trend Micro Apex One could allow attackers to inject malicious code and elevate their privileges within...
Read More
Alert  Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code

Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Action

Aim Labs discovered a zero-click AI vulnerability named “EchoLeak” in Microsoft 365 Copilot and reported several ways to exploit it...
Read More
Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Action

Adobe Releases Patch Fixing 254 Vulnerabilities With High-Severity Security Gaps

On Tuesday, Adobe released security updates for 254 vulnerabilities in its software, mainly affecting Experience Manager (AEM). There are 254...
Read More
Adobe Releases Patch Fixing 254 Vulnerabilities With High-Severity Security Gaps

Alert
40,000 + live internet cameras exposed globally !

A new report from Bitsight reveals that over 40,000 internet-connected security cameras around the world are exposed, broadcasting live footage...
Read More
Alert  40,000 + live internet cameras exposed globally !

Microsoft patch Tuesday fix exploited zero-day and 65 vuls patched

Microsoft's June Patch Tuesday update has arrived, addressing 66 vulnerabilities across its product line. One of these flaws was actively...
Read More
Microsoft patch Tuesday fix exploited zero-day and 65 vuls patched

84,000+ Roundcube instances vulnerable to actively exploited flaw

More than 84,000 Roundcube webmail installations are at risk due to CVE-2025-49113, a severe remote code execution (RCE) vulnerability that...
Read More
84,000+ Roundcube instances vulnerable to actively exploited flaw

ALSO READ:

Antivirus bypass capabled malware “Daam” attack thousands of smartphone! CERT Alert

Shields Health Care Group, a medical services provider based in Massachusetts, suffered the largest data breach in April 2023. 2.3 million individuals had their personal data stolen by cybercriminals who gained unauthorized access to the organization’s systems. The sensitive information stolen included patients’ Social Security numbers, dates of birth, home addresses, healthcare provider information, healthcare history, billing information, insurance numbers, and other financial details. Shields said in a statement that they take the “confidentiality, privacy, and security of information seriously” and have taken steps to secure their systems and enhance data security.

Nearly one million financial records were stolen in a recent cyberattack on NCB Management, a provider of debt collection services. A criminal hacker infiltrated the system on February 1, 2023, according to the internal investigation, although it is unknown how long they went undiscovered. The attacker was able to get credit card information from past-due Bank of America accounts. The compromised information included people’s first and last names, address, phone number, email address, date of birth, work status, pay amount, licence number, Social Security number, account number, credit card number, routing number, account balance, and/or account status. Bank of America reported the issue to the appropriate authorities, although it is unclear what involvement the bank had in the breach beyond the fact that its clients were impacted. This breach creates the possibility for various scams, given that these individuals had been pursued by a debt collection agency.

Kodi’s MyBB forum database was breached last month by an unauthorised actor who stole personal data of 400,635 users. The attackers gained access to the database through a trusted but inactive member of the admin team’s account. They downloaded nightly backups of the entire database, including usernames, email addresses and encrypted passwords, as well as all public forum posts, team forum posts, and direct messages. Fortunately, Kodi reported that the attackers didn’t access the underlying server hosting the MyBB software.

In addition to these three major breaches, IT Governance also identified 120 other publicly disclosed security incidents in April 2023. These incidents included a wide range of attacks, such as phishing, ransomware, and data breaches.

The April 2023 statistics show that organizations are still under attack from cybercriminals. However, the decline in attacks is a positive sign. Organizations should continue to take steps to improve their cybersecurity posture to protect themselves from future attacks.

Here are some tips for organizations to improve their cybersecurity posture:

Implement a layered security approach that includes employee training, network security, and regular security assessments.
Keep software up to date with the latest security patches.
Use strong passwords and two-factor authentication.
Be careful about what information you share online.
Report any suspicious activity to the appropriate authorities.

Check Also

AI Vulnerability

Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Action

Aim Labs discovered a zero-click AI vulnerability named “EchoLeak” in Microsoft 365 Copilot and reported …

Leave a Reply

Your email address will not be published. Required fields are marked *