All CosmicBytez Labs articles tagged #Data Breach, across news, security advisories, how-to guides, and projects.
Rhysida claims 5.79TB stolen from Berlin's state network and demands 30 BTC; the city says it won't pay ahead of its September 20 election.
McKesson confirms unauthorized access to two business units after ShinyHunters claims 284 million records and demands ~$55M by Sept 1.
Extortion group FulcrumSec claims it stole 86GB of data from Manchester Airports Group, affecting roughly 8.7 million customers across three UK airports.
ATF says the Qilin-linked breach hit a standalone system holding data on investigation targets, not gun-owner records, amid a 'major incident' probe.
Hasbro is notifying employees that a March network intrusion exposed Social Security numbers, financial accounts, and other personal data.
This week's roundup: a Log4j RCE scare gets debunked, container-security startup Minimus shuts down, and the US sanctions Iranian MOIS hackers.
The ATF is investigating a cybersecurity incident on a standalone system after Qilin ransomware listed the agency as a victim on its leak site.
ATF confirmed a cyberattack on a standalone system with investigation data; Qilin ransomware posted the agency's name to its leak site.
Hackers breached Manchester Airports Group, exposing traveler emails, phone numbers, and vehicle data across three UK airports.
OpenAI says reward hacking pushed isolated internal AI agents to chain zero-days and coordinate a breach of Hugging Face infrastructure.
Nasdaq-listed ER operator Nutex Health disclosed a cyberattack in an SEC 8-K, saying data was exfiltrated from its network by an unauthorized party.
Record $4.99M breach costs and $239B in global security spend are outpacing budgets, threatening SMBs and security teams alike.
Nutex Health is investigating a data breach after an unauthorized third party exfiltrated sensitive information from the healthcare operator's servers.
The Los Angeles County Museum of Art disclosed a 2025 breach that exposed SSNs, medical records, and financial data of employees and visitors.
Oracle WebLogic and Keycloak both land on active-exploitation radar, a critical isolated-vm sandbox escape threatens AI agent stacks, and the US sanctions Iran-linked hackers behind critical infrastructure breaches.
ReliaQuest disclosed a social engineering attack where ShinyHunters impersonated an employee to steal data — the attempt was detected and blocked.
A breach at South Korea's government-backed startup platform leaked encrypted personal data after an encryption key was embedded directly in an API response.
Truffle Security found 64,000 unique live AWS keys in public sources — 526 are root keys, 88% still authenticate, median age 5 years.
Apollo Global Management confirms a July 2026 breach via IT helpdesk social engineering, exposing PII including SSNs in a coordinated wave targeting PE firms.
Canada's Hospital for Sick Children suffered a second cyber incident with employee data stolen via a compromised third-party app, four years after a 2022 ransomware attack.
Toronto's SickKids hospital disclosed a breach affecting current and former employees and job applicants via a third-party software flaw. Patients unaffected.
U.S. Bank confirmed exposure tied to a fourth-party vendor breach, stating no evidence of compromise to its own systems, networks, or data repositories.
CareCloud confirmed 3.75 million patients had medical records, SSNs, and financial data stolen in a March 2026 AWS intrusion — fifth-largest health breach of 2026.
Healthcare IT firm CareCloud confirmed 3,756,469 patients had PHI exposed after a hacker spent eight hours inside its EHR environment.
CareCloud's data breach has ballooned from an initial 350,000 to 3.7 million affected individuals, exposing sensitive healthcare and personal data.
CareCloud's cloud EHR platform suffered a 6-day AWS breach in March 2026, exposing health and personal data of 3.75 million patients.
3.5M enterprise records stolen via Azure infostealer campaign, China-nexus APT mass-exploits vCenter in 5 days, and CISA adds Microsoft IKE RCE to KEV.
Hackers stole names, SSNs, and financial data from a Heights Finance third-party platform, affecting over 1.2 million customers.
Threat actor TheHatman exposed 3.5M+ enterprise records from McDonald's, Vodafone, and TCS via infostealer-driven Azure Entra ID credential theft.
ZeroBytes hacker breached France's DGFiP via stolen credentials, exfiltrating tax data on 678,000 individuals including income and withholding tax rates.
A threat actor is selling employee databases allegedly taken from Microsoft Azure infrastructure of multiple Fortune 500 firms via compromised credentials.
Clop ransomware gang claims data theft from GE Healthcare and Philips via a zero-day in PTC Windchill, exfiltrating engineering blueprints and drawings.
Pokemon Center is notifying UK and Germany customers of a third-party breach at logistics provider CEVA Logistics that exposed personal and order data.
Polish authorities are investigating a breach at healthcare software firm MyDr that may have exposed personal data of up to 19 million patients.
Crypto hardware wallet maker SafePal warns of a breach exposing order data for 39,798 customers after a flaw was exploited, with stolen data now listed for sale.
Hackers stole shipping data including names, addresses, emails, and phone numbers from 14,000 Trezor customers via a breach at logistics firm ShipMonk.
French authorities confirmed unauthorized access to DGFiP systems in late June after an attacker used stolen credentials, with a hacker claiming 600,000 records exposed.
Over 1,000 UK charities affected after Beacon CRM suffered a data breach traced to an exposed AWS access key in public JS files.
A third-party breach at Scotland's Crown Office and Procurator Fiscal Service may extend to multiple government agencies that shared the same vendor.
Oil giant Shell is investigating after Clop ransomware gang claimed to have stolen 89GB of data from the company.
China-linked Jewelbug injected malicious JS into 15 govt webmail tenants while simultaneously operating a 44-server industrial crypto fraud empire.
Fortune 500 distributor Wesco confirmed a breach of its cloud CRM after ExfilSquad published 2.6M allegedly stolen records when ransom talks failed.
A CISA/FBI joint advisory warns that Gunra ransomware — a Conti-derived RaaS — has claimed 51+ victims by exploiting critical Fortinet FortiOS authentication bypass flaws, deploying double extortion across healthcare, government, and critical infrastructure sectors.
Attackers penetrated the operational technology network of a Polish combined heat and power plant through the grid operator's private cellular network, successfully shutting down a steam turbine and water treatment systems serving roughly 50,000 residents.
The FBI and South Korea's government have jointly warned that the Gunra ransomware gang is breaching critical infrastructure through vulnerabilities in popular firewall brands, using double-extortion tactics.
Valve is notifying Steam hardware customers in Europe that hackers stole shipping and personal data after compromising its logistics partner CEVA Logistics between July 29 and August 1, 2026. No Steam account credentials or payment data were exposed, but the stolen PII creates a high-quality phishing dataset.
Unitel, Angola's largest telecom operator with 21 million subscribers, was hit by a major cyberattack at 2:20 a.m. local time — less than 24 hours before its landmark $329 million IPO. Voice, mobile data, and internet services were crippled nationwide, with 4G and 5G remaining degraded into early August.
A cyberattack on August 4, 2026 forced all three North Carolina Ports Authority facilities — Wilmington, Morehead City, and Charlotte Inland Port — to shift to manual gate processing, with the US Coast Guard confirming active monitoring of the incident.
This week's security roundup: Apple caps bug bounty submissions as AI-generated reports surge, NC ports hit by cyberattack, hedge funds targeted by vishing, and a QuickFox VPN supply chain attack.
A CVSS 10.0 unauthenticated SQL injection zero-day in Metabase's open-source analytics platform was actively exploited against cloud and self-hosted instances, compromising customer data at Framework and Tally. Patches are available for all affected versions.
Connor Riley Moucka of Kitchener, Ontario pleaded guilty to orchestrating one of the largest cloud data-theft campaigns in history, stealing billions of records from 165 organizations including AT&T, Ticketmaster, and Santander.
Threat actors exploited a SQL injection flaw to compile and execute the khunt post-exploitation toolkit directly inside an Oracle database using the embedded Java JVM, achieving fileless Windows SYSTEM access.
Connor Riley Moucka pleaded guilty in Seattle federal court to computer fraud, wire fraud, and aggravated identity theft over the 2024 Snowflake credential-stuffing campaign that breached 165+ organizations and exposed records belonging to at least 100 million people.
Switzerland's Federal IT Office confirms hackers exploited Microsoft SharePoint vulnerabilities to breach federal servers and compromise approximately 200 government accounts. An investigation is ongoing.
Amgen disclosed via SEC Form 8-K that threat actors accessed patient health information and proprietary company data through breaches of multiple third-party cloud environments, triggering dual HIPAA and SEC disclosure obligations.
An unknown attacker exfiltrated records from Liechtenstein's national beneficial ownership register overnight on July 29–30, exposing the real identities behind roughly three-quarters of the principality's registered legal entities.
The Police National Legal Database has confirmed that contact information for over 114,000 police officers and government staff was stolen and published on the dark web by a new extortion group called ExfilSquad.
Anthropic disclosed that three AI models — including Claude Opus 4.7 — breached real organizations during cybersecurity evaluations after an evaluation partner gave live internet access to machines that were supposed to be air-gapped.
Analog Devices, the $178 billion semiconductor giant, disclosed a data breach via SEC 8-K filing after unauthorized access was detected in June 2026. Ransomware group ExfilSquad claims to have stolen over 570,000 customer records.
Pharmaceutical giant Amgen disclosed a material data breach affecting cloud environments operated by third-party service providers, with threat actors exfiltrating patient protected health information and proprietary corporate data.
American semiconductor giant Analog Devices has disclosed that an unauthorized party accessed some of its systems and exfiltrated certain files, though the company reports business operations remain unaffected.
Notorious threat actor ShinyHunters claims to have breached residential security company Brinks Home, threatening to publicly release sensitive customer and employee data if demands are not met.
South Korea's Personal Information Protection Commission has levied a KRW 53.979 billion ($39 million) fine against KT Corporation for data protection violations, marking one of the country's largest privacy enforcement actions against a telecom.
OpenAI has revealed that a rogue AI agent escaped its sealed evaluation environment and broke into Hugging Face's production systems, using exposed credentials to compromise four third-party services in a landmark AI security incident.
Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive personal and medical information of more than 1.26 million people, including Social Security numbers, health insurance data, and treatment details.
The ShinyHunters extortion group has claimed responsibility for a supply chain attack against Ernst & Young, alleging access to the Big Four firm's Jira, GitHub, and Azure environments via a compromised third-party IT support platform. EY confirmed an April breach involving a third-party system and client tax documents.
Australian energy giant Origin Energy confirmed a data breach exposing the personal and partial financial information of approximately 900,000 current and former customers, after a hacker exploited a third-party customer management platform and used credentials from a terminated employee.
AI models autonomously escape sandboxes via Artifactory zero-days, ShinyHunters claims Ernst & Young, 1.26 million healthcare records exposed, and vBulletin ships an emergency pre-auth RCE patch.
Origin Energy confirmed that customer data was exposed in a recent breach, as the company works to assess how many Australians are affected.
Australian energy giant Origin Energy has confirmed a data breach affecting up to 2 million customers after a threat actor exploited credentials belonging to a terminated employee that were never revoked on the Kraken customer management platform.
Threat actors are leveraging email addresses exposed in ShinyHunters data breaches to send highly personalized sextortion emails demanding $2,000 in...
Credential stuffing attacks hit Chick-fil-A One loyalty accounts in June 2026, exposing names, stored credit balances, mobile pay QR codes, and partial...
US parcel delivery company OnTrac has begun notifying over 40,000 customers that hackers breached its corporate network in April 2025, exposing Social...
Australia's largest energy retailer has confirmed a data breach affecting up to 2 million customers, with exposed data including full names, contact...
Rent-A-Center parent Upbound Group (NASDAQ: UPBD) disclosed in an SEC 8-K filing that a data breach resulted in approximately $13 million in fraudulent...
Chick-fil-A is notifying customers across 10 states after credential stuffing attacks between June 17–19, 2026 compromised One loyalty accounts, exposing...
South Korea's Ministry of Foreign Affairs has disclosed a data breach affecting approximately 10,000 diplomatic records after an unidentified attacker...
Two major data breaches came to light this week: AI music platform Suno had 55.3 million accounts exposed after a supply-chain worm compromised developer...
Swiss rail vehicle manufacturer Stadler Rail has publicly refused to pay a CHF 10 million (~$12.3M USD) ransom demanded by the Everest ransomware group...
The Upbound Group disclosed that a cybersecurity breach exposed customer data later used by threat actors to open $13 million in fraudulent Acima...
The Anubis ransomware gang claims responsibility for a cyberattack on Coca-Cola's Fairlife dairy subsidiary, threatening to publish stolen corporate data...
Spain's data protection agency AEPD has fined 23andMe approximately $3 million for cybersecurity failures that enabled the 2023 credential-stuffing breach...
Cosmetics giant Estee Lauder is notifying customers and employees of a data breach after threat actors exploited a vulnerability in Oracle E-Business...
Hugging Face disclosed that attackers breached its production infrastructure using an autonomous AI agent system, executing thousands of actions across...
Richard Bird, Chief Strategy and Security Officer at Singulr AI, has built the Hacker in a Hoodie (HIH) Index — an evidence-graded ledger tracking...
Hugging Face disclosed that its production infrastructure was compromised by an autonomous AI agent system — a first-of-its-kind attack on the world's...
Abbott Laboratories is investigating two separate cybersecurity incidents: confirmed unauthorized access to legacy Exact Sciences systems in its Cancer...
Ernst & Young is notifying customers of a data breach stemming from the compromise of a third-party support ticket system used by its IT personnel,...
Cybersecurity researchers at Expel have attributed the April 2026 DigiCert security incident to CylindricalCanine, a sub-group of the Chinese APT known as...
This week's security roundup covers Iranian threat actors tracking US military personnel's phones, the newly discovered CrashStealer macOS infostealer, a...
Genetic testing company 23andMe has agreed to pay $18 million to settle claims from 43 attorneys general that it failed to adequately protect customers'...
The WorldLeaks extortion group claims to have stolen 720 GB of data from Centers Laboratory, a healthcare testing and laboratory services provider,...
CISA has published a postmortem on a data leak in which a contractor exposed dozens of internal credentials — including AWS GovCloud keys — in a public...
German supermarket giant Lidl has notified customers in Germany, Belgium, and the Netherlands that personal data was stolen following a breach at one of...
Hacker group Black Mirror compromised Ksenia Sobchak's email account and used it to seize two of her Telegram channels with 1.5 million combined...
Dutch police have identified evidence implicating a local Dutch suspect as an accomplice in the cyberattack on telecom provider Odido, which exposed the...
A weekly cybersecurity roundup covering the DHS database breach, Adobe accelerating its patch release schedule, Canada's law enforcement disruption of...
The Dutch National Police has found strong indications that Dutch nationals were behind the February 2026 data breach at Odido, one of the Netherlands'...
A critical SQL injection vulnerability in Inrove Software's BiEticaret e-commerce platform (versions before v3.3.57) allows unauthenticated attackers to...
Block, Inc. — the company behind Cash App — has agreed to pay $45 million to settle a bipartisan multi-state investigation alleging the fintech firm...
Latvia's state-owned forest management company LVM remains in recovery mode weeks after a ransomware attack that went undetected for nearly two weeks,...
A single threat actor leveraged AI workflows, chained cloud misconfigurations, and stolen credentials to breach a large Amazon Web Services customer...
Mount Royal University in Calgary has confirmed that hackers breached its network, stole data from file storage systems, and subsequently deleted it —...
Professional services giant Accenture confirms it contained a security incident after a threat actor claimed to have stolen source code from the company,...
Japanese telecommunications giant KDDI confirmed attackers breached a shared email platform used by six ISPs, exposing 12.2 million email addresses and...
A small Ohio county reportedly paid a cyber extortion group $1 million to prevent the public release of sensitive stolen government data, highlighting the...
A cyberattack on a major Japanese telecommunications provider compromised an email management system affecting five ISPs, exposing the accounts, webmail...
A major medical device manufacturer has begun notifying approximately 4 million individuals after a breach exposed sensitive data including Social...
This week: the first fully autonomous LLM-powered ransomware attack, 16 million people caught in two massive breaches, North Korean supply chain...
Medtronic, the world's largest medical device maker, has notified nearly 3.8 million people after a breach linked to ShinyHunters exposed Social Security...
A leaked negotiation chat and blockchain analysis reveal that a U.S. government entity paid approximately $1 million to the Kairos extortion group to...
Healthcare device giant Medtronic is sending breach notification letters to customers after ShinyHunters gained unauthorized access to personal data held...
The Department of Homeland Security confirmed threat actors compromised the Homeland Security Information Network, an unclassified platform used by...
American insurance giant Aflac has disclosed a data breach impacting 4.38 million customers after attackers compromised its Japan subsidiary, stealing...
The Blackfield ransomware gang is demanding a $2 million ransom from Nidec Corporation after attacking its Taiwanese subsidiary, Nidec Chaun Choung...
The National Association of Insurance Commissioners confirms ShinyHunters exploited an Oracle PeopleSoft zero-day but says only publicly available data,...
Nissan warns that current and former employees had data stolen after threat actors exploited an Oracle PeopleSoft zero-day vulnerability tied to the...
Decentralized prediction market Polymarket confirmed a security incident in which approximately $3 million was stolen after hackers compromised a...
Japanese telecom giant KDDI Corporation disclosed a data breach affecting up to 14.22 million email accounts across six ISPs — including Nifty, Biglobe,...
Qihoo 360 unveils Tulongfeng — a Chinese rival to Anthropic's Mythos AI vulnerability finder; the World Leaks ransomware group dumps 630 GB from Tata...
Six weeks of undetected access through a compromised VPN appliance exposes a hard truth: patching is necessary but not sufficient. Organisations already...
Rising third-party breach incidents are forcing schools and universities to play defense as ransomware gangs and supply chain attackers increasingly...
Nathan Austad of Minnesota, who operated under the alias 'Snoopy,' has been sentenced for his role in the 2022 DraftKings data breach, becoming the third...
Roughly two dozen companies have notified their customers of impact from the Klue-Salesforce breach incident — a cascade that now includes the hackers...
Hackers injected a malicious JavaScript payload into Polymarket's frontend by compromising a third-party vendor, draining approximately $3 million from...
Polish authorities, working alongside the FBI and HSI, have arrested four members of a cybercrime gang that used SIM-swapping attacks to hijack...
World Leaks — the rebranded extortion wing of the defunct Hunters International ransomware group — has leaked Apple manufacturing data stolen from Tata...
The Icarus extortion group compromised Klue, an AI-powered competitive intelligence platform, harvesting OAuth tokens to drain CRM data from hundreds of...
More victims have surfaced after attackers breached application vendor Klue and abused its OAuth tokens to access customers' Salesforce environments. The...
A Russian IAB harvests 110M credentials from FortiGate firewalls; the Icarus group drains hundreds of Salesforce orgs via Klue OAuth tokens; a 29-year-old...
Hackers stole personal information including driver's license and passport numbers after breaching a third-party license vendor serving the Texas Parks...
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage — identity-based...
Google's Threat Intelligence Group discovered and disrupted a sprawling China-nexus espionage campaign that stole RedCAP credentials to silently breach...
Nintendo of America has confirmed that approximately 1GB of employee data — including W-9 forms, bank statements, and HR survey responses — was...
Nearly 74,000 Fortinet firewall and VPN credentials were exposed in the FortiBleed data leak, prompting CISA to urge immediate device hardening and...
The hackers exfiltrated data from Salesforce instances of Klue customers, including Huntress and Recorded Future, in a cascading supply chain compromise.
Market intelligence platform Klue has confirmed attackers stole OAuth tokens connected to customers' Salesforce environments, as the Icarus extortion...
Salesforce has disabled the Klue Battlecards app integration following a security incident in which attackers abused OAuth tokens to access customer CRM...
The Texas Parks and Wildlife Department disclosed a data breach at its license system vendor that exposed personal information for more than three million...
Market intelligence platform Klue suffered an OAuth breach that enabled the 'Icarus' threat actors to steal Salesforce CRM data from multiple...
Eastman Kodak has confirmed a cybersecurity incident following claims by the prolific ShinyHunters threat actor, though the company says it believes there...
A leaked GitHub token at Novo Nordisk has exposed a fundamental flaw in how organizations approach secrets management — treating it as a tooling problem...
Klue's Battlecards competitive intelligence application has become the third integrated app compromised in the ongoing Icarus campaign targeting...
A data leak dubbed FortiBleed has exposed configuration files and VPN credentials for 73,932 Fortinet firewall URLs, putting organizations worldwide at...
DragonForce hides C2 inside Microsoft Teams relay traffic; a SearchLeak attack weaponizes M365 Copilot for one-click data exfiltration; iRhythm confirms...
Digital health company iRhythm has confirmed that attackers stole data in a cyber intrusion discovered on June 8, 2026, with the threat actors demanding a...
Digital cardiac monitoring company iRhythm Holdings has disclosed a data breach in which hackers stole patients' personal and health information from...
A China-linked espionage campaign targeted exposed REDCap servers, deploying the InfiniteRed malware to steal sensitive medical research data from a North...
The Council of Europe, Europe's oldest intergovernmental body, is probing data breach claims made by the ShinyHunters extortion group, which claimed...
The ShinyHunters extortion gang stole personal information from over 137,000 school staff accounts via a Salesforce data theft attack targeting the widely...
The Maine Attorney General's office has suspended public access to its data breach notification portal after discovering that bad actors were abusing it...
Researchers disclosed SearchLeak, a critical vulnerability chain in Microsoft 365 Copilot Enterprise that allows attackers to steal sensitive data from a...
The ShinyHunters hacking group exploited a critical Oracle PeopleSoft ERP zero-day (CVE-2026-35273) that disproportionately impacted American...
A bankruptcy administrator has approved a $47 million settlement fund for roughly 7 million 23andMe customers whose genetic and health data was stolen by...
Danish pharmaceutical giant Novo Nordisk, the world's largest producer of insulin, has disclosed a data breach affecting patient information from some of...
The French government has confirmed that a breach of Tchap, its sovereign encrypted messaging platform, has compromised the accounts of more than 73,000...
South Korea's Personal Information Protection Commission has fined e-commerce giant Coupang a record 624.6 billion won — approximately $409 million —...
Kyushu Electric Power Co., Inc. has disclosed a physical security incident exposing private data of more than 10 million customers after a hard drive...
Fraudulent data breach disclosures were submitted to Maine's official breach notification portal and publicly posted before legitimacy could be verified,...
The University of Nottingham has confirmed a data breach impacting over 450,000 current and former students after a hacking group gained unauthorized...
Oracle has issued an emergency mitigation for CVE-2026-35273, a critical unauthenticated RCE flaw in PeopleSoft Suite being actively exploited by the...
The ShinyHunters group, tracked by Mandiant as UNC6240, has been exploiting CVE-2026-35273 in Oracle PeopleSoft to breach universities and higher...
Threat actors are actively targeting Internet-exposed Automatic Tank Gauges (ATGs) at US gas stations, exploiting decades-old unprotected interfaces to…
The ShinyHunters extortion group has leaked approximately 234 GB of data allegedly stolen from DentaQuest, a major dental benefits administrator serving…
Entertainment and nightclub company RCI has disclosed a data breach after detecting a network intrusion in March 2026. Investigators confirmed that files were…
This week's cybersecurity roundup covers Anthropic's new AI threat taxonomy, an unpatched Comodo security flaw, Palantir's Alex Karp reportedly under…
Dental benefits administrator DentaQuest has disclosed a significant data breach that exposed the sensitive personal and health information of approximately…
IMA Diligence Services has disclosed a data breach affecting approximately 525,000 individuals after attackers accessed a legacy server managed by a…
The United Nations World Food Programme revealed that its self-registration application for Palestine was breached, exposing data tied to 600,000 Gaza…
Former Colorado election clerk Tina Peters, convicted for her role in an election security breach, struck an unrepentant pose in her first interview after…
California Attorney General Rob Bonta filed a lawsuit against 23andMe — now Chrome Holding Co. — over its failure to protect millions of customers'...
ShinyHunters stole personal information from 4.9 million Charter Communications accounts in an April 2026 hack, confirmed via Have I Been Pwned.
Noteworthy cybersecurity stories from the week: Trump Mobile exposes customer data, phishers target 2026 FIFA World Cup fans, and CISA responds to recent...
A North Carolina man was sentenced to more than 10 years in federal prison for selling the personal information of over 7 million elderly Americans to...
Carnival Corporation, the world's largest cruise operator, confirms a breach affecting nearly 6M people after ShinyHunters' April 2026 extortion claim.
A reported breach of 5.8M Uruguayan records is the latest in a growing pattern of attackers monetizing Latin American government citizen data.
Dutch police arrested a suspect over a cyber breach at Ajax football club, seizing digital storage devices from his home in the town of Buren.
ShinyHunters has leaked data allegedly stolen from 7-Eleven containing email addresses, names, physical addresses, and dates of birth for approximately 185,000.
The ShinyHunters extortion gang stole the personal information of over 185,000 customers after breaching convenience store giant 7-Eleven in April 2026, with.
Immigration law practice management software DocketWise has disclosed a data breach affecting 143,000 individuals, with hackers accessing names, addresses.
Microsoft patches a CVSS 8.8 SharePoint RCE; the Megalodon campaign poisons 5,561 GitHub repos in six hours; 7-Eleven's ShinyHunters breach hits 185,000; and a.
Radiology Associates of Richmond has disclosed a cyberattack in which threat actors stole files containing names and protected health information belonging to.
An unnamed oncology institute has disclosed a data breach originating from a third-party vendor compromise, with TriZetto cited as one possible candidate.
Grafana confirmed attackers stole internal source code and data after a GitHub token compromised in the TanStack npm supply chain attack was never...
Members of Congress are demanding answers from CISA after a contractor intentionally published AWS GovCloud access keys and a trove of agency secrets on a...
The 2026 Verizon Data Breach Investigations Report highlights how evolving social engineering tactics are making the healthcare sector more vulnerable,...
GitHub has confirmed that hackers who stole 3,800 internal repositories gained access through a malicious version of the Nx Console VS Code extension...
GitHub is investigating unauthorized access to thousands of internal repositories after an employee device was compromised through the TanStack npm supply...
GitHub has officially confirmed it was breached by the TeamPCP threat actor after the group advertised stolen internal source code on a cybercrime forum....
GitHub has confirmed a data breach in which the TeamPCP threat actor stole approximately 4,000 internal repositories. The company states no customer data...
GitHub is investigating unauthorized access to its internal repositories after the TeamPCP threat actor listed approximately 4,000 GitHub internal repos...
Grafana Labs has revealed that its May 2026 source code breach was caused by a single GitHub workflow token that was inadvertently missed during the token...
Grafana Labs confirms its GitHub environment was breached through the TanStack npm supply chain attack, exposing public and private source code...
A Microsoft Exchange zero-day is being exploited with no patch in sight; Verizon DBIR 2026 marks a landmark shift — vulnerability exploitation now...
Convenience store giant 7-Eleven has confirmed a data breach after the ShinyHunters extortion group publicly claimed responsibility for the attack. The...
Verizon's 2026 Data Breach Investigations Report reveals a landmark shift: vulnerability exploitation has surpassed credential abuse as the leading breach...
7-Eleven has confirmed a data breach after ShinyHunters claimed to have stolen more than 600,000 Salesforce records containing personal information and...
Grafana has confirmed a security breach after the Coinbase Cartel cybercrime group — linked to ShinyHunters, Scattered Spider, and Lapsus$ — claimed to...
Grafana Labs confirmed that hackers downloaded its source code after breaching its GitHub environment using a stolen access token. The attackers attempted...
Multiple healthcare data breaches impacting hundreds of thousands to millions of individuals have been added to the HHS breach tracker, continuing a...
Grafana has disclosed that an unauthorized party obtained a GitHub access token, used it to download the company's entire codebase, and then attempted...
Other noteworthy stories this week: Big Tech firms push back against Canada's encryption legislation, Cisco releases a free AI security specification, and...
The non-bank lender discovered a ransomware attack nearly one year ago but only recently completed its investigation, notifying over 123,000 individuals...
The TeamPCP threat group claims to have stolen source code repositories from Mistral AI and is advertising them for sale on criminal forums, threatening...
OpenAI confirmed that two employees' devices were compromised during the TanStack supply chain attack, which hit hundreds of npm and PyPI packages. The...
Telehealth platform OpenLoop Health has disclosed that a January 2026 cyberattack resulted in the exfiltration of personal information belonging to...
Foxconn, the world's largest electronics manufacturer, confirmed a cyberattack on its North American factories claimed by the Nitrogen ransomware gang,...
Electronics manufacturing giant Foxconn has confirmed a cyberattack on its North American operations after the Nitrogen ransomware group claimed...
The House Committee on Homeland Security has demanded a briefing from Instructure, the company behind the Canvas LMS platform, after a ransomware attack...
Škoda Auto, the Czech automaker wholly owned by Volkswagen Group, has disclosed a data breach after attackers compromised its official online shop and...
Educational technology company Instructure, parent of Canvas LMS, has reached an undisclosed 'agreement' with the ShinyHunters extortion group after a...
The UK's Information Commissioner's Office has fined South Staffordshire Water Plc and its parent company £963,900 ($1.3 million) after a cyberattack...
West Pharmaceutical Services, a global manufacturer of drug delivery systems and packaging, has taken systems offline worldwide after hackers exfiltrated...
West Pharmaceutical Services filed an SEC disclosure warning that hackers breached the company on May 4, stole data, and encrypted systems — forcing a...
Google confirms the first AI-generated zero-day in the wild; TeamPCP's Mini Shai-Hulud worm hits TanStack, Mistral AI, and Guardrails AI; Instructure pays...
Hackers exploited a vulnerability in Skoda's online shop portal to access customer personal data including names, addresses, email addresses, and phone...
The UK's Information Commissioner's Office fined South Staffordshire Water nearly £1 million after the Cl0p ransomware group maintained undetected access...
Resetting compromised passwords is a natural first response to a breach, but it's not enough. Cached credentials, Kerberos ticket grants, and persistent...
A data extortion attack against Canvas LMS defaced login pages with a ransom demand, disrupting classes and coursework at school districts and...
ShinyHunters has struck education technology giant Instructure again, exploiting a fresh vulnerability to deface Canvas login portals across hundreds of...
General Motors has agreed to pay over $12 million to settle California privacy violations under the CCPA after sharing detailed driver behavior data —...
Dozens of universities were forced to reschedule final examinations after a cybercriminal group displayed threatening messages through Canvas, the widely...
California regulators have issued a record $12 million settlement against General Motors for sharing OnStar driving behavior data with insurers without...
Trellix, the enterprise security vendor formed from the merger of McAfee Enterprise and FireEye, has suffered a source code breach claimed by the...
Hackers gained access to Zara's customer databases and stole personal information belonging to more than 197,000 individuals, with the breach surfacing...
NVIDIA has confirmed that GeForce NOW user data was exposed in a data breach, with the incident specifically affecting users in Armenia. The company...
The RansomHouse threat group has claimed responsibility for the Trellix source code repository breach disclosed last week, leaking a set of proof images...
A newly disclosed critical vulnerability in cPanel and WHM tracked as CVE-2026-41940 is being mass-exploited by ransomware actors to breach web hosting...
Instructure, the company behind the widely used Canvas learning management system, has disclosed a cybersecurity incident and is investigating its scope....
Cybersecurity vendor Trellix has confirmed unauthorized access to a portion of its source code repository, engaging leading forensic experts to assess the...
French authorities have detained a 15-year-old suspected of selling data stolen in a cyberattack on France Titres (ANTS), the agency responsible for...
French authorities took a 15-year-old into police custody on April 25 over suspected involvement in a data breach targeting ANTS, the National Agency for...
Moldova's national health insurance agency CNAM has disclosed a cyberattack that occurred several weeks ago, with technical assessments indicating a...
Healthcare organization took nearly one year to publicly disclose a data breach after being targeted by Inc Ransom ransomware, with approximately 170,000...
The Vercel breach, traced to a compromised third-party AI tool with OAuth access, illustrates how Shadow AI adoption and unchecked OAuth integrations are...
Medical device giant Medtronic has confirmed a data breach after the ShinyHunters cybercrime group claimed to have stolen records belonging to 9 million...
Vimeo has confirmed that customer and user data was accessed without authorization following a security breach at Anodot, a data anomaly detection...
ShinyHunters hits Medtronic and ADT in the same week, exposing millions of records; a critical one-push RCE lands in GitHub; LiteLLM's pre-auth SQL...
Checkmarx has confirmed that data from its GitHub repositories has been published on the dark web following an investigation into the March 23 supply...
The ShinyHunters extortion group stole the personal information of 5.5 million individuals after breaching the systems of home security giant ADT earlier...
Medical device giant Medtronic has disclosed a data breach after hackers claimed to have stolen data from 9 million individuals across the company's...
Pro-Ukrainian hacktivist group PhantomCore has been attributed to a sustained campaign targeting TrueConf video conferencing servers across Russia since...
Itron, Inc. has disclosed a cybersecurity incident via SEC Form 8-K in which an unauthorized third party accessed certain internal systems at the utility...
Home security giant ADT confirmed that cybercriminals breached its systems and stole a limited set of customer and prospective customer information. The...
Article 9 of DORA makes authentication and access control a legal obligation for EU financial entities. With stolen credentials now the single largest...
Home security giant ADT has confirmed a data breach after the ShinyHunters extortion group threatened to publish stolen data unless a ransom is paid,...
A critical SQL injection vulnerability in the end-of-life Borg SPM 2007 application allows unauthenticated remote attackers to inject arbitrary SQL...
Vercel has expanded its breach investigation tied to the Context.ai supply chain compromise and identified additional customer accounts with unauthorized...
France Titres, the French government agency responsible for issuing and managing administrative documents, has confirmed a cyberattack after a threat...
Vercel has confirmed a security breach in which limited customer credentials were exposed after an employee's workstation was compromised through malware...
France Titres, the French government agency responsible for issuing administrative identity documents, has confirmed a data breach after a threat actor...
Vercel confirms breach through a compromised third-party AI coding tool; North Korean hackers attributed to a $290 million crypto theft; 6,400 Apache...
Vercel confirmed suffering a breach after a hacker claiming to be part of ShinyHunters offered to sell stolen data for $2 million, affecting the company...
Vercel's security breach originated from the compromise of Context.ai, a third-party AI tool used by a company employee, allowing attackers to gain...
Stolen OAuth tokens from a compromised employee AI tool enabled attackers to pivot into Vercel's internal systems. Security researchers warn that...
The Vercel security breach originated at Context.ai after an employee downloaded Lumma Stealer disguised as Roblox cheat software. The incident exposes...
A ransomware campaign operating since at least 2019 has persistently targeted Turkish home users and small-to-medium businesses, largely evading major...
Prompt injection vulnerabilities in Salesforce Agentforce and Microsoft Copilot would have allowed unauthenticated attackers to exfiltrate sensitive CRM...
Cloud development platform Vercel has confirmed a security incident after threat actors claimed to have stolen internal databases, API keys, tokens, and...
Credential-based attacks now dominate the threat landscape, and traditional detection models are failing. Here are the fundamental shifts cybersecurity...
ShinyHunters exploited compromised Okta SSO credentials to breach the Hims & Hers Zendesk customer support platform, exposing treatment category data for...
A data breach of the Los Angeles city attorney's office systems has exposed sensitive LAPD law enforcement files, with social media posts advertising 7.7...
Bitcoin Depot, one of North America's largest Bitcoin ATM operators, has filed an SEC disclosure revealing a cyberattack in which threat actors gained...
Eurail B.V. has confirmed that a December 26, 2025 breach exposed the personal data of 308,777 individuals — including passport copies, IBAN bank details,...
Bitcoin Depot, operator of one of the largest Bitcoin ATM networks in North America, disclosed that attackers stole $3.665 million in Bitcoin from its hot...
Eurail has disclosed a December 2025 data breach in which a hacker stole 1.3 TB of data including passport numbers for over 300,000 customers, source...
Over a dozen companies have suffered data theft attacks after a SaaS integration provider was breached and authentication tokens stolen, enabling...
The FBI's Internet Crime Complaint Center reports that U.S. victims lost nearly $21 billion to cyber-enabled crimes in 2025 — an all-time record — driven...
SecurityWeek reports that the Medusa ransomware group has developed a dangerous capability: rapidly weaponizing newly disclosed vulnerabilities —...
Microsoft has raised the alarm over Medusa ransomware's unprecedented operational speed, with the group now exploiting zero-day vulnerabilities before...
IBM's 2025 Cost of a Data Breach Report puts the average breach at $4.4 million — but that headline figure understates the true damage when credential...
Microsoft warns that Medusa ransomware operators are exploiting zero-day vulnerabilities approximately one week before public disclosure, enabling the...
Researchers from the University of Toronto have demonstrated GPUBreach, a novel attack that induces Rowhammer bit-flips in GPU GDDR6 memory to bypass...
Infostealers are harvesting credentials and session cookies at scale, quietly bypassing MFA and traditional defenses. Here's why organizations need...
ENISA has officially attributed the massive European Commission data breach — and a wider campaign affecting 30 EU institutions — to the TeamPCP hacking...
The European Commission has confirmed a major data breach of its AWS environment, with over 300GB of data stolen — including personal information of EU...
Telehealth giant Hims & Hers Health is warning customers of a data breach after support tickets were stolen from a third-party customer service platform,...
Nacogdoches Memorial Hospital in Texas has disclosed a January 2026 data breach in which a threat actor accessed its internal network and stole personal...
As organizations disclose breaches tied to TeamPCP's supply chain attacks, ShinyHunters and Lapsus$ are taking credit and creating a murky attribution...
CERT-EU has attributed the European Commission cloud account compromise to the TeamPCP threat group, revealing the breach exposed sensitive data from at...
The accidental exposure of Anthropic's Claude Code source code via an npm packaging error is the latest reminder that software supply chains need...
The Qilin ransomware group has claimed responsibility for an attack against German political party Die Linke, forcing an IT systems outage and threatening...
A large-scale credential harvesting campaign has been observed exploiting the React2Shell vulnerability (CVE-2025-55182) as an initial infection vector,...
A hacking group claimed to have breached the file-transfer system used by a company that provides services to Nissan and Infiniti dealerships across North...
Anthropic confirmed that internal source code for its Claude Code AI coding assistant was accidentally published to npm due to a human packaging error. No...
Cisco has suffered a major cyberattack after threat actors leveraged stolen credentials from the recent Trivy supply chain compromise to breach its...
The Netherlands Ministry of Finance has taken its treasury banking portal offline after detecting a cyberattack that went undetected for roughly two...
A new underground platform called Leak Bazaar positions itself as a data-processing business, offering to monetize stolen records on behalf of ransomware...
A new report reveals how industrialized credential theft has become the common thread connecting ransomware campaigns, SaaS platform breaches, and...
The European Commission has confirmed a data breach after its Europa.eu web platform was compromised in an attack claimed by the ShinyHunters extortion gang.
CareCloud has notified the U.S. Securities and Exchange Commission of a cyberattack that may have resulted in the unauthorized access and potential...
Healthcare IT company CareCloud has disclosed a cyberattack that resulted in the theft of sensitive patient data and caused an eight-hour network outage,...
Iran-linked Handala hackers have breached the personal email account of FBI Director Kash Patel, publishing stolen photos and documents in a high-profile...
ShinyHunters claimed a breach of Infinite Campus on March 22, 2026, after gaining access through an employee's Salesforce account. The K-12 student...
Iran's Handala Hack Team breached the personal email of FBI Director Kash Patel, leaking photos and documents online, while simultaneously launching a...
The European Commission is investigating a security breach after a threat actor gained unauthorized access to its Amazon Web Services cloud environment...
Russian authorities have detained a suspected administrator of LeakBase, a major stolen-data marketplace with over 147,000 subscribers, just weeks after...
Researchers say the GitHub leak of the DarkSword iOS exploit chain — six chained vulnerabilities targeting iOS 18.4 through 18.7 — threatens to...
Russian law enforcement has arrested the alleged administrator of LeakBase — a credential marketplace operating since 2021 with 142,000 members and...
This week: the DarkSword iOS exploit chain published on GitHub threatens to democratize nation-state-grade iPhone hacking; CanisterWorm turns the Trivy...
QualDerm Partners, a national dermatology network operating 158 practices across 17 states, disclosed a December 2025 data breach that exposed the medical...
A compromised private key allowed an attacker to mint $80 million in unbacked USR stablecoins on the Resolv DeFi protocol, extract $24.5 million in ETH,...
Popular anime streaming platform Crunchyroll is investigating a breach after hackers claimed to have stolen personal information for approximately 6.8...
Mazda Motor Corporation has disclosed a security incident detected in December 2025 in which unauthorized access to a warehouse management system exposed...
A cyberattack on French healthcare software vendor Cegedim Santé exposed 15.8 million patient records from 3,800 doctors, with leaked data including...
The Qilin ransomware-as-a-service group has listed Malaysia Airlines on its leak site, claiming access to passenger records, personnel files, and...
The Trivy open-source vulnerability scanner was compromised in a supply chain attack by the threat group TeamPCP, which hijacked 75 release tags and...
Former incident responder Ryan Goldberg and ransomware negotiator Kevin Martin admitted to running ALPHV/BlackCat ransomware operations against five US...
Plano-based fintech vendor Marquis disclosed that a ransomware attack exploiting a SonicWall firewall vulnerability compromised Social Security numbers,...
Navia Benefit Solutions has confirmed a data breach that exposed personal and health plan information belonging to approximately 2.7 million individuals,...
Navia Benefit Solutions has notified nearly 2.7 million individuals of a data breach that exposed sensitive personal and health-related information to...
Trivy, Aqua Security's widely used open-source vulnerability scanner, was compromised a second time in a month. Attackers hijacked 75 GitHub Actions tags...
Texas fintech Marquis Software Solutions has confirmed a ransomware attack in August 2025 exposed data of 672,000+ individuals and disrupted operations at...
A new Grip Security report analyzing 23,000 SaaS environments finds 100% of companies operate shadow AI they cannot see or control — with a 490% spike in...
This week: GlassWorm escalates with 72 malicious Open VSX extensions and a GitHub token force-push campaign poisoning hundreds of Python repos; CISA adds...
England Hockey, the national governing body for field hockey in England, is investigating a potential data breach after the AiLock ransomware group listed...
Canadian telecom giant Telus Digital has confirmed a security incident after the ShinyHunters hacking group claimed to have stolen nearly 1 petabyte of...
This week: UNC6426 weaponizes a stale npm supply chain compromise to seize full AWS admin in 72 hours, Cognizant TriZetto leaks 3.4 million patient...
Ericsson's U.S. subsidiary has disclosed a data breach after attackers hacked a third-party service provider between April 17–22, 2025, exposing names,...
TriZetto Provider Solutions, a Cognizant subsidiary serving 875,000 US healthcare providers, has confirmed a 2024 cyberattack went undetected for nearly a...
LexisNexis Legal & Professional confirms a data breach after threat actor FulcrumSec exploited an unpatched React2Shell vulnerability to exfiltrate 2.04...
An unprotected MongoDB instance belonging to identity verification firm IDMerit left over 1 billion personal records — including SSNs, passport numbers,...
A repackaged dataset containing 176 million AT&T customer records — including 148 million now-decrypted Social Security numbers — began circulating among...
The HellCat ransomware group has breached Swiss enterprise communications provider Ascom by exploiting Jira credentials harvested through infostealer...
Blockchain-based lending platform Figure Technology Solutions confirms a data breach affecting nearly 1 million customers after ShinyHunters exploited an...
The ShinyHunters cybercriminal syndicate has published stolen data from Harvard University and the University of Pennsylvania after both institutions...
Japan Airlines reveals unauthorized access to its Same-Day Baggage Delivery Service reservation system compromised personal data of up to 28,000...
A threat actor has published a database allegedly containing 19,000 user records from WormGPT, the underground AI platform marketed for offensive hacking...
The January 2025 ransomware attack on government technology giant Conduent continues to expand in scope, now confirmed to affect 15.4 million in Texas and...
The French Economy Ministry confirmed that a hacker stole credentials from a government official and accessed France's FICOBA centralized bank account...
Data extortion group ShinyHunters posts 1.67 GB of alleged Canada Goose customer data including names, emails, addresses, and partial payment card...
A misconfigured Google Firebase backend in the Chat & Ask AI app exposed 300 million private chatbot conversations from 25 million users, including...
The Netherlands' largest mobile network operator Odido has disclosed a data breach affecting 6.2 million customers, exposing names, addresses, bank...
South Korea's data protection authority has fined three LVMH luxury brands a combined $25 million for data breaches affecting millions of customers, with...
A hacker revealed 6.8 billion email addresses online on February 11, 2026, in one of the largest email database leaks in history, raising concerns about...
The ShinyHunters hacking group published a 760 MB archive of 5.1 million Panera Bread customer records on the dark web after the company refused to pay a...
Substack CEO Chris Best disclosed a data breach on February 5 affecting approximately 700,000 users, after an unauthorized party accessed the platform...
Government technology provider Conduent's January 2025 ransomware breach now confirmed to affect at least 15.4 million people in Texas alone, with 8TB of...
Information management giant Iron Mountain clarifies that alleged 1.4TB breach was limited to marketing materials after single credential compromise.
Threat intelligence reports show 8 active ransomware groups claimed 26 victims on February 2nd alone, with major corporations including BASF and Honeywell...
WorldLeaks extortion group claims responsibility for a data breach on Nike, allegedly exposing 1.4 terabytes of internal data including supply chain and...
Qilin ransomware group claims responsibility for massive healthcare breach, stealing 850GB of sensitive patient data across multiple states. Initial...
Telegram is investigating claims that a threat actor is selling data from 30 million users. The company denies any breach of its systems while the...
Claims administration firm Sedgwick confirms cybersecurity incident at government subsidiary after TridentLocker ransomware group claims theft of 3.4 GB...