And even in this timeline we found several massive hacks against organizations operating in the fintech space, for example Mixin Network lost the equivalent of $200 million, making it the largest hack suffered in 2023 (so far). Other “minor” incidents include the loss of $7.9 million worth from crypto exchange HTX, and the loss of “only” $238,000 worth from Balancer.

And the list of mega breaches continued to grow also in the second half of September: McLaren HealthCare suffered an ALPHV/BlackCat ransomware attack compromising the information of 2.5 million individuals, and more than 2 million Pakistani citizens had their data compromised when attackers got access to a private company-made database used by hundreds of restaurants.

Threat actors driven by cyber espionage were quite active in this fortnight with multiple operations carried out by known attackers such as APT29, APT34, APT36, the Lazarus group, but also new mysterious threat actors such as Sandman, targeting telecommunication service providers in the Middle East, Western Europe, and South Asia. But this month the list is really too long to be summarized in a few words.

In terms of hacktivism: the pro-Russia hacktivists from NoName057(16) were particularly active against organizations in two countries in particular: Canada and Italy.

Of course, my suggestion is always the same: browse the timeline, and obviously share it to support my work in spreading the risk awareness across the community. And don’t forget to follow @paulsparrows on Twitter, or even connect on Linkedin, or Mastodon for the latest updates.