1-15 July 2017 Cyber Attacks Timeline

Last Updated on August 8, 2017

Et voilà, time has come to publish the first timeline of July, covering the main cyber attacks occurred during the first two weeks of July.

And even if the numbers of attacks has sensibly decreased, the July sun has brought us the real extent of the breach to Sabre Hospitality Solutions! The company has acknowledged the incident, occurred earlier in May, and immediately afterwards the list of the affected company has become to populate, including Google, Hard Rock Hotels & Casinos, Loews Hotels, Four Seasons Hotels and Resorts and, once again, Trump International Hotels Management.

Other interesting events include what is probably the biggest breach in India (120 million Reliance Jio customers), the discovery of a breach suffered by Avanti Markets, a cyber attack against the energy network running the Republic of Ireland’s national grid, and the discovery of yet another operation against the critical infrastructures and energy companies around the world, primarily in Europe and the United States.

As usual scroll down the whole list for all the events happened in this fortnight. And if you want to have an idea of how fragile our electronic identity is inside the cyberspace, have a look at the timelines of the main Cyber Attacks in 2011, 2012, 2013, 2014, 2015 and 2016 (regularly updated). You may also want to have a look at the Cyber Attack Statistics that are regularly published, and follow @paulsparrows on Twitter for the latest updates.

Additionally, feel free to submit remarkable incidents that in your opinion deserve to be included in the timelines (and charts), and if useful, you can access the timeline in Google Sheet format.

ID	Date	Author	Target	Description	Attack	Target Class	Attack Class	Country
1	01/07/2017	?	PVHS-ICM Employee Health and Wellness	PVHS-ICM Employee Health and Wellness notifies his patients to have been hit by a ransomware attack.	Malware	Healthcare	CC	US
2	03/07/2017	?	Medicare	The Guardian reveals that a darknet trader is illegally selling the Medicare patient details of any Australian on request by “exploiting a vulnerability” in a government system.	Undisclosed Vulnerability	Healthcare	CC	AU
3	03/07/2017	?	Google	In the wake of the breach occurred to Sabre Hospitality Solutions earlier in May, the personal details of a small number of Google staffers have been exposed, according to a notification letter Google sends out to affected employees.	Account Hijacking	Industry: Internet Services	CC	US
4	06/07/2017	?	Hard Rock Hotels & Casinos	Another consequence of the Sabre breach, Hard Rock Hotels & Casinos reveals that for seven months, attackers had unauthorized access to a third-party reservation system, which allowed them to attain unencrypted credit card payment information, as well as guest names, addresses and phone numbers.	Account Hijacking	Industry: Hotel and Hospitality	CC	US
5	06/07/2017	?	Loews Hotels	And the same happens for luxury hotel chain Loews Hotels.	Account Hijacking	Industry: Hotel and Hospitality	CC	US
6	06/07/2017	?	Four Seasons Hotels and Resorts	And the list of the victims of the Sabre attack also includes Four Seasons Hotels and Resorts.	Account Hijacking	Industry: Hotel and Hospitality	CC	US
7	06/07/2017	?	Android Devices	Check Point reveals the details of CopyCat, a new strain of a malware that has infected more than 14 million Android devices around the world, rooting phones and hijacking apps to make millions in fraudulent ad revenue.	Malware	Single Individuals	CC	>1
8	06/07/2017	?	Android Devices	Trend Micro reveals the details of SLocker, a variant of the oldest lock-screen and file-encrypting, using the WannaCry interface.	Malware	Single Individuals	CC	>1
9	07/07/2017	?	gandi.net	French domain registrar Gandi loses control over 751 customer domains, which have their DNS records altered to point incoming traffic to websites hosting exploits kits.	DNS Hijacking	Industry: Web Hosting	CC	FR
10	07/07/2017	?	B&B Theatres	B&B Theatres, a company that owns and operates the 7th-largest theater chain in America, says it is investigating a breach of its credit card systems starting in September 2015.	Malware	Industry: Entertainment	CC	US
11	07/07/2017	?	Critical infrastructure and energy companies around the world, primarily in Europe and the United States	Talos reveals the details of an email-based attack targeting the energy sector, including nuclear power for multiple energy companies around the world, primarily in Europe and the US.	Targeted Attack	Utility: Energy	CE	>1
12	08/07/2017	?	Avanti Markets	Avanti Markets, a self-service payment kiosks vendors acknowledges to have suffered of breach of its internal networks in which hackers were able to push malicious software out to payment devices.	Malware	Industry: Payment Kiosks	CC	US
13	08/07/2017	?	Deep Hosting	Deep Hosting, a Dark Web hosting service, admits to have suffered a major security incident during which "some sites have been exported"	Remote Shell	Dark Web Hosting	CC	N/A
14	09/07/2017	?	Reliance Jio	Personal details of some 120 Million Reliance Jio customers are exposed on the Internet in probably the biggest breach of personal data ever in India.	Unknown	Industry: Telco	CC	IN
15	09/07/2017	?	Real Estate Business Services (REBS)	Real Estate Business Services (REBS), a subsidiary of the California Association of Realtors, acknowledges to have suffered a data breach that exposed user information for a two-month period earlier this year.	PoS Malware	Org: Real Estate	CC	US
16	10/07/2017	?	Swiss Banks	Researchers from Trend Micro discover a new variant of the Operation Emmental, targeting the Swiss banks using a variant of the DoK Mac OS X malware.	Malware	Finance	CC	CH
17	10/07/2017	?	Android Devices	Researchers from McAfee reveal the details of a mobile ransomware known as LeakerLocker, threatening to dox users as a mean of extortion.	Malware	Single Individuals	CC	>1
18	11/07/2017	?	Trump International Hotels Management	Trump International Hotels Management reveals that the data breach to Sabre Corp, occurred in May 2017, compromised card payment details at 14 of its properties. The compromised information included payment card numbers and card security codes for some of the hotel chain's reservations.	Malware	Industry: Hotel and Hospitality	CC	US
19	11/07/2017	?	Single Individuals	Trend Micro reveals the details of a surging campaign using a remote access tool (RAT) known as Adwind, which has the ability to steal passwords, collect keystrokes and covertly record audio using an infected device's microphone.	Malware	Single Individuals	CC	US
20	11/07/2017	?	Mansfield 103.2	The UK Communications Regulator (Ofcom) is hunting a pirate who persistently overrides frequency of Mansfield 103.2 to play a modified version of "The Winker’s Song".	Unknown	Radio Station	CC	UK
21	11/07/2017	?	Community Care of St. Catharines and Thorold	Community Care of St. Catharines and Thorold notifies to be still recovering from a cyberattack that shut its computers down for more than a week.	Malware	Org: Non-Profit	CC	US
22	13/07/2017	?	Unfinished Wordpress Installations	Researchers from security firm Wordfence say they have observed a wave of web attacks that took aim at unfinished WordPress installations.	Account Hijacking	Single Individuals	CC	>1
23	14/07/2017	?	Square Enix	Square Enix attributes the connectivity issues that have plagued Final Fantasy 14's Stormblood expansion since its release in June on continuous distributed denial-of-service (DDoS) attacks from a third party.	DDoS	Industry: Video Games	CC	JP
24	14/07/2017	?	Peachtree Neurological Clinic	While investigating a ransomware incident, Peachtree Neurological Clinic discovers that its computer system previously had been accessed without its knowledge by unauthorized individuals between February 2016 and May 2017.	Unknown	Healthcare	CC	US
25	15/07/2017	?	Republic of Ireland’s Power Grid	The Times reveals that hackers backed by the Russian government have attacked energy networks running the national grid in parts of the UK. In particular the hackers targeted the Republic of Ireland’s energy sector, aiming to infiltrate control systems	Targeted Attack	Utility: Energy	CW	UK

Related Posts

Like this:

Leave a Reply Cancel reply