# Breach report collection from BushidoUK

Source: https://github.com/BushidoUK/Breach-Report-Collection
Kiwi News: https://news.kiwistand.com/stories/Breach-report-collection-from-BushidoUK?index=0x64f8a42dae261575ecd0398c6ead73132022ea52c2f7ca72a6ea69b0616a6db13ea7d870
Submitted by plasmacorral.eth on 2023-09-06 UTC, 2 upvotes, 0 comments

## Summary

A compiled list of data breach reports, dated from April 2011 to July 2026, pairs each affected organization with an incident date, an attributed threat actor, and links to the source and an archived copy. Examples include Microsoft (CozyBear, January 2024), Okta (0ktapus, August 2022), Equifax (CN APT, May 2017), and Beacon CRM (unknown eCrime actor, July 2026). Actors are grouped as ransomware, eCrime, or state-linked APT groups, and many entries are listed as Unknown. The title credits the collection to BushidoUK.

## Article

Beacon CRM July 2026 Unknown (eCrime) Beacon CRM / (archived) DigiCert April 2026 GoldenEyeDog (CN APT) bugzilla.mozilla.org / (archived) F5 Networks October 2025 Unknown (APT) my.f5.com / (archived) BeyondTrust December 2024 Unknown (CN APT) beyondtrust.com / (archived) State of Rhode Island December 2024 Brain Cipher (Ransomware) rhodeislandcurrent.com / (archived) MITRE April 2024 UTA0178/UNC5325 (CN APT) MITRE Blog / (archived) Microsoft January 2024 CozyBear (RU APT) microsoft.com (1), microsoft.com (2) / (archived) Mandiant January 2024 CLICKSINK (eCrime) mandiant.com / (archived) Nissan Australia December 2023 Akira (Ransomware) nissan.com.au / (archived) Cloudflare November 2023 Unknown cloudflare.com (1), cloudflare.com (2) / (archived) 23andMe October 2023 "Anna/Dazhbog" (eCrime) ico.org.uk / (archived) Boeing November 2023 LockBit (Ransomware) cisa.gov / (archived) British Library October 2023 Rhysida (Ransomware) bl.uk / (archived) BeyondTrust October 2023 Unknown beyondtrust.com / (archived) Okta October 2023 Unknown sec.okta.com / (archived) BHI Energy October 2023 Akira (Ransomware) documentcloud.org / (archived) Gap Personnel October 2023 Unknown ico.org.uk / (archived) D-Link October 2023 "succumb" (eCrime) dlink.com / (archived) Kroll August 2023 Unknown (eCrime) kroll.com / (archived) Microsoft July 2023 Storm-0558 (CN APT) microsoft.com / (archived) JumpCloud July 2023 UNC4899 (DPRK APT) jumpcloud.com / (archived) Dragos May 2023 "KyivWarrior" (eCrime) dragos.com / (archived) Capita March 2023 BlackBasta (Ransomware) ico.org.uk / (archived) 3CX March 2023 UNC4736 (DPRK APT) mandiant.com / (archived) Coinbase February 2023 0ktapus (suspected) (eCrime) coinbase.com / (archived) Reddit February 2023 0ktapus (suspected) (eCrime) reddit.com / (archived) CircleCI January 2023 Jade Sleet (DPRK APT) circleci.com / (archived) LastPass October 2022 Unknown (eCrime) blog.lastpass.com / ico.org.uk / (archived) Uber September 2022 Lapsus$ (eCrime) uber.com / (archived) South Staffordshire Water August 2022 Clop (Ransomware) ico.org.uk / (archived) Advanced Computer Software Group August 2022 LockBit (Ransomware) ico.org.uk / (archived) Okta August 2022 0ktapus (eCrime) sec.okta.com / (archived) Twilio August 2022 0ktapus (eCrime) twilio.com / (archived) DPP Law June 2022 BlackBasta (Ransomware) ico.org.uk / (archived) Cisco May 2022 Yanluowang (Ransomware) blog.talosintelligence.com / (archived) GitHub April 2022 Unknown github.blog / (archived) Okta April 2022 Lapsus$ (eCrime) okta.com / (archived) Microsoft March 2022 Lapsus$ (eCrime) microsoft.com / (archived) Gloucester Council November 2021 Conti (Ransomware) democracy.gloucester.gov.uk / (archived) Direct Clothing Co. UK (DDCUK) August 2021 Magecart (suspected) (eCrime) ico.org.uk / (archived) Kaseya July 2021 REvil (Ransomware) helpdesk.kaseya.com / (archived) Viasat KA-SAT February 2022 Sandworm (RU APT) news.viasat.com / (archived) UK Electoral Commission August 2021 Unknown (CN APT) ico.org.uk / (archived) Irish HSE May 2021 Conti (Ransomware) hse.ie / (archived) Microsoft February 2021 CozyBear (RU APT) msrc.microsoft.com / archived New Zealand Reserve Bank January 2021 Clop (Ransomware) rbnz.govt.nz / (archived) Qualys December 2020 Clop (Ransomware) blog.qualys.com / (archived) FireEye December 2020 CozyBear (RU APT) fireeye.com / (archived) SolarWinds December 2020 CozyBear (RU APT) solarwinds.com / (archived) London Borough of Hackney October 2020 Pysa (Ransomware) ico.org.uk / (archived) Equinix September 2020 Netwalker (Ransomware) datacenterdynamics.com / (archived) Chartered Institute for Securities & Investment (CISI) February 2020 Magecart (suspected) (eCrime) ico.org.uk / (archived) CapitalOne July 2019 "ERRAT1C" (aka Paige Thompson) (eCrime) capitalone.com / (archived) Equifax May 2017 CN APT oversight.house.gov / (archived) Avast/CCleaner September 2016 WickedPanda (CN APT) blog.avast,com / (archived) Kaspersky June 2015 Duqu 2.0 (APT) kaspersky.com / (archived) SK Communications July 2011 Unknown (CN APT) (archived) RSA April 2011 Unknown (CN APT) (archived)