Skip to content

Ransomware & Threat Intel

Ransomware campaigns, breach analysis and threat actor intelligence.

DaVita Ransomware Data Breach: 2.7 Million Patients Affected in Healthcare Sector Attack

On March 24, 2025, DaVita, a large provider of kidney care, reported what seems to have been a significant ransomware attack. Some of the specifics remain unclear, and timelines could shift as more forensic evidence is gathered. Public disclosures so far suggest that nearly 2.7 million patient records may have been exposed. The case highlights… Read More »DaVita Ransomware Data Breach: 2.7 Million Patients Affected in Healthcare Sector Attack

CoinDCX Cryptocurrency Exchange Breach

Overview: Indian crypto exchange CoinDCX was breached, with attackers stealing wallet credentials and transaction data, causing $1.2M in losses. Technical Details: Attack Vector: Exploited CVE-2025-20281 (Cisco ISE injection vulnerability, CVSS 10.0) in a third-party payment gateway’s API endpoint (/admin/XXX) integrated with CoinDCX. Exploitation: Attackers sent crafted POST requests (Content-Type: application/json) with malicious SQL payloads (‘… Read More »CoinDCX Cryptocurrency Exchange Breach

Dior Data Breach

Overview French luxury brand Dior suffered a data breach exposing customer and employee data, attributed to Chinese state-sponsored actors, likely DCHSpy, linked to the ShinyHunters group via a third-party vendor breach (LVMH). Technical Details: Attack Vector: Exploited a misconfigured AWS S3 bucket with public read permissions (“Effect”: “Allow”, “Principal”: “*”) and no IAM role-based controls,… Read More »Dior Data Breach

Radiology Associates of Richmond Data Breach: Protecting Healthcare Data

Overview On July 18, 2025, Radiology Associates of Richmond disclosed a data breach exposing protected health and personal information of patients. The breach, reported by SecurityWeek, involved unauthorized access to systems, likely via phishing or exploited vulnerabilities. Explanation Attackers gained access through social engineering (e.g., phishing) or exploited vulnerabilities in public-facing systems, exfiltrating sensitive data.… Read More »Radiology Associates of Richmond Data Breach: Protecting Healthcare Data

M&S, Co-op, and Harrods Cyberattacks: Mitigating Social Engineering Risks

On July 9, 2025, the UK’s National Crime Agency (NCA) arrested four individuals, aged 17 to 20, in connection with coordinated cyberattacks targeting UK retailers M&S, Co-op, and Harrods. The attacks are attributed to the threat actor group known as Scattered Spider and involved advanced social engineering techniques, phishing emails, and infostealer malware. Customer data… Read More »M&S, Co-op, and Harrods Cyberattacks: Mitigating Social Engineering Risks

Use Cases
Technology
About
Partner
Resources

FireCompass – An EC Council Ecosystem Company.
©2025 . All Rights Reserved.

Firecompass ranked #1 AI on HackerOne. Read more →