Identity Attack Watch: December 2022

April 2022 roundup: FBI warning on BlackCat/ALPHV (dozens of victims); leaked Conti tools used against Russian firms; Hive breach exposed 850,000 Partnership HealthPlan members' data; Conti claimed the Panasonic Canada attack.

August 2021 roundup: LockFile exploited ProxyShell and PetitPotam to reach AD; LockBit 2.0 attacks surged (including Accenture); FBI issued a Hive alert after Memorial Health; Nokia's SAC Wireless hit by Conti.

October 2022 roundup: Microsoft warned of Prestige ransomware hitting Ukraine/Poland logistics via domain admin credentials; Hive attacked Tata Power; LockBit breached UK dealer Pendragon.

July 2022 roundup: LockBit claimed 100GB stolen from Italy's tax agency and hit small towns; Black Basta shut down manufacturer Knauf; BlackCat breached game publisher Bandai Namco.

December 2023 roundup: LockBit hit German hospital group KHO, Clop's MOVEit breach claimed Delta Dental (7M customers), and BlackCat/ALPHV attacked Norton Healthcare and HTC Global Services.

June 2022 roundup: Conti breached 40+ organizations in one month; CISA urged Exchange Online users onto Modern Auth; BlackCat targets Exchange servers for AD recon; Vice Society hit Palermo; Black Basta paired with QBot.