Mitigate Baron SameEdit (CVE-2021-3156) vulnerability

Weekly Breach Report – March 1st 2021

Mar 1, 2021By Shaina Raskin

A snapshot of last week’s reported cybersecurity breaches and vulnerabilities


Several companies in the US, Canada, Netherlands and Singapore had their data stolen after hackers breached US enterprise-firewall company Accellion. Dark Reading:

Sequoia Capital

Sequoia Capital warned investors that sensitive information might have been exposed in a data breach at the firm. Dark Reading:–/d/d-id/1340224


This audio-based social app recently experienced a data breach due to a third-party developer from China, who had designed an app enabling Android users to eavesdrop on the invite-only, iPhone-only service. SiliconAngle:

Beneteau SA

This French boat maker shut down systems and curtailed production following a cyberattack. Business Insurance:

Firefox extension

Researchers found a new Chinese hacking campaign that spies on Tibetan communities worldwide by deploying malicious Firefox extensions on target systems. The Hacker News:

Ukrainian System of Electronic Interaction of Executive Bodies 

Russian hackers targeted the SEI EB with a supply-chain attack that distributed malicious documents to officials. The Hacker News:


North Korean state-sponsored hackers are attacking the defense industry using so-called “ThreatNeedle” malware. This delivers COVID-themed emails with malicious attachments that, if opened, run a macro to execute payloads on targeted systems. The Hacker News:


This Canadian airline manufacturer announced that it had suffered a cyberattack, and that hackers had accessed confidential information belonging to employees, customers and suppliers. BNN:

French medical laboratories

Hackers released the confidential medical data of 500,000 French people online. The information came from 30 medical laboratories in northwest France. Connexion:

Cobb County School District, Atlanta

Hackers targeted this school district with a cyberattack that made the emergency alert system malfunction and placed 112 schools on lockdown. AJC:

Oxford University

Oxford University is investigating a cyberattack at one of its COVID-19 research labs. Evening Standard:

Covenant HealthCare

A Michigan hospital is alerting 45,000 patients of a data breach that compromised two employee email accounts. ABC12:

?nova Yönetim

This Turkish actuarial consultancy accidentally exposed 15,000 cases involving people killed or injured in traffic accidents due to a cloud misconfiguration. Infosecurity Magazine:

Like the report? Sign up below and get it in your inbox.

The registered trademark Linux® is used pursuant to a sublicense from the Linux Foundation, the exclusive licensee of Linus Torvalds, owner of the mark on a world­wide basis.