Global Cyber Pulse: 07 April 2025

Cyber Attack
April 7, 2025 | Cybersecurity
By Ashwani Mishra, Editor-Technology, 63SATS

Jammu & Kashmir Cyber Police uncovered 7,200 mule accounts used in laundering scams via crypto. In Taiwan, a 20-year-old hacker dubbed “Crazyhunter” crippled MacKay Memorial Hospital, later leaking patient data online. Australia’s pension sector was rocked as hackers breached over 20,000 retirement accounts, prompting a national response.

In the U.S., the Port of Seattle confirmed a ransomware attack impacting 90,000 individuals and airport operations. Meanwhile, Europcar Mobility Group suffered a GitLab breach, exposing source code and customer data of 200,000 users. These incidents underline growing threats across finance, healthcare, transportation, and enterprise tech.

Kashmir Cyber Police Busts 7,200 Mule Accounts in Massive Scam

Jammu & Kashmir Cyber Police has dismantled a large-scale cyber fraud operation involving over 7,200 mule accounts created this year. These accounts, used to launder crores through fake investment schemes and betting platforms, were rented via Telegram and Facebook and controlled by overseas handlers.

Designed for short-term use, they channeled funds through cryptocurrency and complex layering techniques. Authorities have arrested 21 individuals in connection with the scam. The incident highlights growing misuse of local bank accounts for cybercrime and underscores the need for stronger financial monitoring and public awareness to curb the rise of digital fraud networks.

Chinese Hacker Charged in Taipei Hospital Ransomware Case

Taiwan’s Criminal Investigation Bureau has identified a 20-year-old Chinese man, known as “Crazyhunter,” as the attacker behind the ransomware incident at MacKay Memorial Hospital. On February 6, he crippled hospital systems and demanded a ransom for restoring access.

When the hospital refused to pay, stolen patient data appeared for sale on a hacker forum by February 28. A joint investigation with Taipei prosecutors confirmed the extortion attempt. The case highlights the growing threat of ransomware attacks on healthcare institutions, where data sensitivity and operational urgency make them prime targets for cybercriminals seeking financial gain.

Australian Pension Sector Hit as Hackers Compromise 20,000+ Accounts

Hackers have breached more than 20,000 retirement accounts in a targeted cyberattack on Australia’s pension funds, with losses reported from members of the country’s largest fund. National Cyber Security Coordinator Michelle McGuinness confirmed the attacks and announced a coordinated response involving government agencies, regulators, and industry leaders.

The A$4.2 trillion ($2.63 trillion) retirement sector is now under heightened alert. Officials are urging fund managers to tighten cybersecurity protocols and affected members to monitor their accounts. The breach underscores the increasing frequency and sophistication of financially motivated cyberattacks targeting critical infrastructure and high-value personal data.

Seattle Port Cyberattack Affects 90,000 People and Disrupts Operations

The Port of Seattle has disclosed a data breach that compromised personal information of around 90,000 individuals during a ransomware attack in August 2024. The breach, later attributed to the Rhysida ransomware group, caused a significant IT outage that disrupted systems across Seattle-Tacoma International Airport—including flight displays, reservation check-ins, and the flySEA app.

The attack also temporarily disabled key digital services at the seaport. Affected individuals are being notified. The incident highlights how cyberattacks on public infrastructure can ripple across transportation services, affecting both data privacy and operational continuity at critical urban hubs.

Europcar GitLab Breach Hits 200,000 Customers, Source Code Leaked

A cybercriminal has breached the GitLab repositories of Europcar Mobility Group, stealing mobile app source code and personal data of up to 200,000 customers. The hacker, posing under Europcar’s name, threatened to leak 37GB of stolen data, including SQL backups and internal configurations, unless demands were met.

The exposed data also contains sensitive information about the company’s cloud infrastructure. Europcar operates globally under brands like Goldcar and Ubeeqo, spanning 140 countries. This breach underscores rising threats to DevOps environments, where exposed repositories and weak access controls can jeopardize customer data and core business applications.