From the desk of: Sam C. Chan

Advisory: Notable Breaches

First Published 2004   Last Updated: JULY 2018


2019
Capital One 106 million acct usatoday
Citrix data breach by IRIDIUM, lateral movement not id'ed
Baltimore ransomware nightmare -sun
Georgia Tech exposes info 1.3 million -BC
Albany NY hit by ransomware -TU -cnet
FaceBook millions records found unsecured on AWS

2018

Marriott 500m users -kroll   wp   forbes 
FaceBook breach single sign-on
T-Mobile 
BMO & Simplii (100k cust)
Orbitz
Under Armour

2017

Defense Integrated Data Center (S Korea)
Deloitte email breach DoD DHS DoS USPS
Erie County Medical Center
Equifax $600m fine in 2019
Grozio Chirurgija
Heathrow Airport
Taringa!
Uber
DLA Piper

2016

21st Century Oncology
Apple Health Medicaid
Central Coast Credit Union
Philippines Commission on Elections
Cox Communications
Democratic Nat Committee DNC
DHS
EyeWire
Friend Finder Networks
Gyft
Inuvik hospital
KM.RU
Nival Networks
Ofcom
Rosen Hotels
Taobao
TaxSlayer.com
UC Berkeley
U of Central Florida
Verizon Communications
Weebly

2015

Anthem $16m HIPAA fine 79m records
Ashley Madison, again in
Australian Immigration Department
Bailey's Inc.
British Airways
CareFirst BlueCross Blue Shield -Md
CVS
Excellus BlueCross BlueShield
Experian T-Mobile US
Hilton Hotels
Hyatt Hotels
Internal Revenue Service
Landry's, Inc.
Medical Informatics Engineering
Natural Grocers
US Office of Personnel Management OPM
Premera
Scottrade
Slack
Starwood Hotels incl Westin & Sheraton
Twitch.tv
UCLA Medical Ctr, Santa Monica
VTech
Walmart
Wendy's
Xat.com
AT&T Mx call ctr (280k cust)

2014

AOL
Community Health Sys
Domino's Pizza (France)
eBay
European Central Bank
Gmail
Home Depot
JP Morgan Chase
Korea Credit Bureau
LexisNexis
MacRumors.com
Mandarin Oriental Hotels
Michaels
Mozilla
NASDAQ
Neiman Marcus
New York Taxis
Sony Pictures
Supervalu
Target Corporation
Trump Hotels
Uber
U of Maryland, College Park
UPS
Yahoo

2013

Adobe Systems
Advocate Medical Group
Apple
Central Hudson Gas & Electric
Citigroup
Crescent Health Inc., Walgreens
Drupal
Dun & Bradstreet
Evernote
Facebook
Florida dept of Juvenile Justice
Kirkwood Community College
Kroll Background America
Living Social
Nintendo
OVH
Scribd
SnapChat
South Africa police
TerraCom & YourTel
Tumblr
Twitter
Ubisoft
Ubuntu
Vodafone
Washington State court system
Yahoo
Yahoo Japan

2012

Apple, Inc./BlueToad
Barnes & Noble
~Bedford/St. Martin's
Blizzard Entertainment
California dept Child Support Services
Dropbox
Emory Healthcare
Formspring
Gamigo
Global Payments
Greek gov
Iranian banks (Saderat, Eghtesad Novin, and Saman)
KT Corporation
LinkedIn, eHarmony, Last.fm
Massive usbiz hack incl 7-Eleven & Nasdaq
US Medicaid
Militarysingles.com
New York State Electric & Gas
Office of the Texas Attorney General
Rambler.ru
South Carolina gov
Syrian gov (Syria Files)
TD Bank
Yahoo! Voices
Zappos

2011

Accendo Insurance Co.
Bethesda Game Studios
China Software Developer Network
CN gaming sites (Duowan, 7K7K, 178.com)
Citigroup
Countrywide Financial Corp
Eisenhower Medical Center
Health Net — IBM
Honda Canada
Massachusetts Gov
Memorial Healthcare Sys
Morgan Stanley Smith Barney
Nemours Foundation
Nexon Korea Corp
NHS
Oregon Department of Transportation
Restaurant Depot
RSA SecurID (EMC) 2FA
San Francisco Public Utilities Commission
Sega
Sony Online Entertainment
Sony Pictures
Sony PlayStation Network
Southern California Medical-Legal Consultants
Spartanburg Regional Healthcare System
State of Texas
Steam
Stratfor
Sutter Medical Center
Tianya Club
Tricare
U of Wisconsin–Milwaukee
US Army
US law enforcement (70 different agencies)
Washington Post
Writerspace.com

2010

Ankle & Foot Center of Tampa Bay, Inc.
AT&T
Betfair
Colorado gov
Educational Credit Management Corporation
Embassy Cables
Emergency Healthcare Physicians, Ltd.
Federal Reserve Bank of Cleveland
Gawker
JP Morgan Chase
Lincoln Medical & Mental Health Center
New York City Health & Hospitals Corp.
Ohio State University
Puerto Rico Department of Health
Seacoast Radiology, PA
South Shore Hospital, Massachusetts
Triple-S Salud, Inc.
US Army (classified Iraq War docs)
US gov (US diplomatic cables)
Yale University

2009

2009 Affinity Health Plan, Inc.
2009 AvMed, Inc.
2009 BlueCross BlueShield of Tennessee
2009 CheckFree Corporation
2009 Health Net
2009 Heartland
2009 Network Solutions
2009 RockYou!
2009 UC Berkeley
2009 U.S. Department of Defense
2009 Nat Archives & Records Adm (US mil vet)
2009 National Guard of the United States
2009 Virginia Department of Health
2009 Virginia Prescription Monitoring Program

2008
2008 AT&T
2008 Auction.co.kr
2008 The Bank of New York Mellon
2008 Data Processors Intl: MC Visa Disc AX
2008 GS Caltex
2008 Jefferson County, West Virginia
2008 Ministry of Education (Chile)
2008 Norwegian Tax Administration
2008 RBS Worldpay
2008 Service Personnel and Veterans Agency (UK)
2008 Stanford University
2008 Starbucks
2008 UK Home Office
2008 UK Ministry of Defence
2008 U of Miami
2008 U of Utah Hospital & Clinics

2007
2007 City and Hackney Teaching Primary Care Trust
2007 Compass Bank
2007 Dai Nippon Printing
2007 UK Driving Standards Agency
2007 Fidelity National Information Services
2007 Gap Inc.
2007 Hannaford Brothers Supermarket Chain
2007 Monster.com
2007 TD Ameritrade
2007 Texas Lottery
2007 TK / TJ Maxx
2007 UK Revenue & Customs

2006

2006 AOL
2006 Countrywide Financial Corp
2006 Hewlett Packard
2006 KDDI
2006 T-Mobile, Deutsche Telecom
2006 U.S. Department of Veteran Affairs

2005
2005 Ameritrade
2005 Automatic Data Processing
2005 CardSystems Solutions: MC Visa Disc AX
2005 Citigroup
2005 Bank of America
2005 DSW Inc.

2004

2004 AOL

Copyright @2004-2019   Bravo Technology Center  *  Bravo:GO  *  Contact Us