Clearance Incident Response. Free through May 1, 2027, so you have time to patch.Estimate your Blast Radius in 60 secondsEstimate

aviatrix logoAviatrix
Under Active Attack
Industry Category

Information Services

Breach intelligence, attack campaigns, and threat reports targeting the Information Services sector.

5 threat reports
Page 1 of 1
Explore Other Sectors
AccountingAerospaceAerospace/AviationAgricultureAirlines/AviationAnimationApparel/FashionArchitecture/PlanningArtificial IntelligenceArtificial Intelligence/Machine LearningArts/CraftsAutomotiveAviation/AerospaceBanking/MortgageBiotechnology/GreentechBlockchain/CryptocurrencyBroadcast MediaBroadcasting MediaBroadcasting/MediaBuilding MaterialsBusiness Supplies/EquipmentCapital Markets/Hedge Fund/Private EquityChemicalChemicalsCivic/Social OrganizationCivil EngineeringCloud ComputingCloud Computing/SaaSCloud Native Security Fabric (CNSF)Cloud ServicesCommercial FacilitiesCommercial Real EstateComputer GamesComputer HardwareComputer NetworkingComputer Software/EngineeringComputer/Network SecurityConstructionConsultingConsumer ElectronicsConsumer GoodsConsumer ServicesCosmeticsCosmeticsCritical ManufacturingCryptocurrenciesCryptocurrencyCustomer ServicesCybersecurityDairyDating/Personal ServicesDating/Social PlatformsDefense/SpaceDesignE-LearningEducation ManagementElectrical/Electronic ManufacturingEmergency ServicesEnergyEnergy/Oil/Solar/GreentechEntertainment/Movie ProductionEnvironmental ServicesEvents ServicesExecutive OfficeFacilities ServicesFarmingFashion/ApparelFinancial ServicesFine ArtFisheryFood ProductionFood/BeveragesFortune 500 companiesFranchisingFundraisingGambling/CasinosGamingGaming/CasinosGovernment AdministrationGovernment FacilitiesGovernment RelationsGraphic Design/Web DesignHealth Care / Life SciencesHealthcareHigher Education/AcadamiaHospitalityHospitalsHuman Resources/HRImport/ExportIndividual/Family ServicesIndustrial AutomationInformation ServicesInformation Technology/ITInsuranceInternational AffairsInternational Trade/DevelopmentInternetInvestment Banking/VentureInvestment Management/Hedge Fund/Private EquityJudicialJudiciaryLaw EnforcementLaw Practice/Law FirmsLegal ServicesLegislative OfficeLeisure/TravelLogistics/ProcurementLuxury Goods/JewelryMachineryManagement ConsultingManufacturingMaritimeMarket ResearchMarketing/Advertising/SalesMechanical or Industrial EngineeringMedia ProductionMedical EquipmentMedical PracticeMilitary IndustryMining/MetalsMobileMuseums/InstitutionsMusicNewspapers/JournalismNon-Profit/VolunteeringOil/Energy/Solar/GreentechOnline PublishingOther IndustryOutsourcing/OffshoringPackage/Freight DeliveryParkingPharmaceuticalsPhilanthropyPhotographyPlasticsPolitical OrganizationPrimary/Secondary EducationProfessional ServicesProfessional TrainingPublic Relations/PRPublic SafetyPublishing IndustryRailroad ManufactureReal Estate/MortgageRecreational Facilities/ServicesReligious InstitutionsRenewables/EnvironmentResearch IndustryRestaurantsRetail IndustryRoboticsRural HealthcareSecurity/InvestigationsSemiconductorsShipbuildingSocial Media/InternetSporting GoodsSportsStaffing/RecruitingSupermarketsTechnologyTechnology/ITTelecommunicationsThink TanksToys and GamesTransportationTravel/TourismTrucking/FreightUtilitiesVenture Capital/VCWarehousingWater and Waste ManagementWater and WastewaterWater and Wastewater SystemsWater and Wastewater TreatmentWater TreatmentWater, Waste, Steam, and Air Conditioning ServicesWater/Waste ManagementWater/WastewaterWater/Wastewater ManagementWater/Wastewater/UtilitiesWholesaleWine/SpiritsWirelessWriting/Editing

Information Services Threat Reports

Showing 1–5 / 5 reports
LexisNexis 2026 Third-Party Vendor Breach: A Wake-Up Call for Supply Chain Security
Legal Services3 months ago

LexisNexis 2026 Third-Party Vendor Breach: A Wake-Up Call for Supply Chain Security

In August 2026, LexisNexis identified unusual activity on servers managed by a third-party vendor, leading to the immediate shutdown of its Diligence, Metabase API, and Newsdesk services. The company is collaborating with a cybersecurity forensic firm to investigate the incident and is rebuilding affected systems in a new environment before restoring services. This incident underscores the critical importance of securing third-party vendor relationships, as vulnerabilities in external systems can directly impact core business operations. Organizations must implement stringent vendor risk management practices to mitigate such risks.

Medium impact

Kill Chain

ICInitial Compromise(medium)
PEPrivilege Escalation(low)
LMLateral Movement(low)
C&CCommand & Control(low)
EExfiltration(low)
IImpact(medium)
Read report
Oxford University CareerConnect Data Breach Exposes User Information
Higher Education/Acadamia5 months ago

Oxford University CareerConnect Data Breach Exposes User Information

On May 28, 2026, Oxford University's CareerConnect platform, managed by third-party provider Group GTI, was compromised. Attackers accessed users' first names, last names, email addresses, and encrypted passwords for those not using Single Sign-On (SSO). Students using SSO were less affected, with only their names and email addresses exposed. GTI has since addressed the security vulnerability and implemented additional measures. ([careers.ox.ac.uk](https://www.careers.ox.ac.uk/article/careerconnect-secured-and-safe-to-use-following-data-security-incident?utm_source=openai)) This incident underscores the risks associated with third-party service providers in educational institutions. It highlights the importance of robust security measures and vigilant monitoring to protect sensitive user data from unauthorized access.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(low)
LMLateral Movement(low)
C&CCommand & Control(low)
EExfiltration(low)
IImpact(high)
Read report
Data Broker Sentenced for Selling Elderly Americans' Personal Information
Financial Services5 months ago

Data Broker Sentenced for Selling Elderly Americans' Personal Information

Between 2016 and 2023, Troy Murray, a 57-year-old from North Carolina, operated under the alias "Steve Dixon" to sell personal information of over 7 million elderly Americans to Jamaican scammers. These "lead lists" included names, phone numbers, addresses, and email addresses, which were used to perpetrate lottery fraud schemes. Murray charged approximately $500 per list, generating over $5.2 million in illicit profits. He was sentenced in May 2026 to 121 months in prison, three years of supervised release, and ordered to forfeit $5.2 million. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/man-sent-to-prison-for-selling-data-of-7-millions-elderly-americans/amp/?utm_source=openai)) This case underscores the escalating threat of elder fraud, with the FBI reporting a 37% increase in complaints from individuals aged 60 and older in 2025 compared to the previous year. Total losses for this demographic reached nearly $7.8 billion, highlighting the urgent need for enhanced protective measures and regulatory oversight to safeguard vulnerable populations. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/man-sent-to-prison-for-selling-data-of-7-millions-elderly-americans/amp/?utm_source=openai))

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
LexisNexis Data Breach: A Wake-Up Call for Third-Party Platform Security
Legal Services8 months ago

LexisNexis Data Breach: A Wake-Up Call for Third-Party Platform Security

In December 2024, LexisNexis Risk Solutions experienced a data breach when an unauthorized party accessed data stored on GitHub, a third-party platform used for software development. The breach, discovered in April 2025, exposed personal information of over 364,000 individuals, including names, contact details, Social Security numbers, driver's license numbers, and dates of birth. The company has since notified affected individuals and offered two years of complimentary identity protection and credit monitoring services. This incident underscores the critical importance of securing third-party platforms and the potential risks associated with their use. Organizations must ensure robust security measures are in place to protect sensitive data, especially when utilizing external services for development purposes.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(low)
C&CCommand & Control(low)
EExfiltration(high)
IImpact(high)
Read report
Iron Mountain's 2026 Data Breach: A Closer Look
Information Services9 months ago

Iron Mountain's 2026 Data Breach: A Closer Look

In February 2026, Iron Mountain, a global leader in information management services, experienced a security incident involving unauthorized access to a single folder on a public-facing file-sharing site. The Everest ransomware group claimed responsibility, alleging the theft of 1.4 TB of internal documents containing client information. However, Iron Mountain clarified that the breach was limited to marketing materials, accessed through a compromised login credential, with no evidence of ransomware deployment or further system compromise. This incident underscores the persistent threat posed by ransomware groups like Everest, which have increasingly targeted organizations across various sectors. Their tactics often involve exploiting compromised credentials to gain unauthorized access, emphasizing the need for robust access controls and vigilant monitoring to prevent such breaches.

Low impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(high)
Read report
[ INCIDENT RESPONSE // UNDER ATTACK? ]

Stop Active Cloud Data Exfiltration

Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.

Under Attack

Looking for threats in a different sector?

Browse All Threat Reports