435 articles

#Data Breach

All CosmicBytez Labs articles tagged #Data Breach, across news, security advisories, how-to guides, and projects.

NewsOct 16, 2026
Anne Arundel County, Maryland Confirms August Breach as Rhysida Claims 2.6TB Data Theft
Anne Arundel County confirmed an August 28 intrusion after the Rhysida gang claimed to steal 2.6TB of files and demanded a $2 million ransom.
NewsOct 16, 2026
Moscow Police Detain Suspected DataSuckers Hackers Linked to Breaches in Ukraine and Russia
Russian police detained three suspected DataSuckers hackers after breaches of Dodo Pizza, Tez Tour, and Ukraine's ATB Market.
NewsOct 15, 2026
UK Legal Aid Agency: Hackers Stole Records Dating Back to 1978
The UK's Legal Aid Agency says records stolen in an April 2025 breach span back to 1978, with roughly 250,000 pre-2007 records confirmed by investigators.
NewsOct 12, 2026
FBI Seizes Seven Domains, Disrupts Flax Typhoon's MicroScan and FishHub Hacking Tools
FBI and DOJ seized seven domains used by China's Flax Typhoon to run MicroScan and FishHub, tools tied to critical infrastructure intrusions worldwide.
NewsOct 12, 2026
Retail Giant Ahold Delhaize Takes Systems Offline After Cyberattack
Ahold Delhaize took systems offline across Albert Heijn, Delhaize, Stop & Shop and Food Lion after a cyberattack disrupted online orders and payroll access.
NewsOct 11, 2026
Malware at Japanese Karaoke Giant's Data Contractor Exposes 8.6 Million Customer Records
Malware on a Nippon Columbia employee PC exposed data on 8.6 million Daiichi Kosho karaoke customers and 93,000 employees.
NewsOct 10, 2026
Belarusian Cyber Partisans Admit to 2023 Breach of Russian Healthcare Network
The hacktivist group confirmed a Russian researcher's report that it held admin-level access inside Moscow's Department of Health network for months in 2023.
NewsOct 10, 2026
iRhythm Breach Notifications Reveal At Least 360,000 Patients Affected
iRhythm has begun formally notifying states about its June 2026 breach, confirming at least 360,000 patients affected in Texas and South Carolina alone.
NewsOct 9, 2026
FBI Arrests Another Suspected ShinyHunters Hacker After Agency Breach
FBI Director Kash Patel announced a third arrest tied to ShinyHunters' breach of the bureau's own FBIjobs.gov site.
NewsOct 9, 2026
FBI Seizes Seven Domains Behind Flax Typhoon's MicroScan and FishHub Hacking Tools
The FBI seized seven domains used by China-linked Flax Typhoon to run MicroScan and FishHub, tools tied to breaches of global critical infrastructure.
NewsOct 8, 2026
ASOS Links Data Breach to Social Engineering Attack, Credential Theft
ASOS confirms a stolen employee login — obtained via social engineering — not a Snowflake hack, was the root cause of its October breach.
NewsOct 8, 2026
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
JPCERT/CC says Japan logged 119 web data-leak incidents in 2026, driven by mobile API abuse and an unauthenticated Metabase SQLi flaw (CVE-2026-72898).
NewsOct 8, 2026
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
A Texas AG filing and Bloomberg report put the Oracle Health/Cerner breach toll near 20 million, far above earlier state-by-state counts.
NewsOct 7, 2026
Advantest Discloses Data Breach Months After Ransomware Attack
Advantest confirmed hackers stole personal data in its February 2026 ransomware attack, eight months after the breach was first disclosed.
NewsOct 7, 2026
Cyberattack on Arizona's Court System Exposes Data on Over 1.3 Million People
A phishing-triggered breach of Arizona's court system exposed fines, protection orders, and foster care records dating back decades.
NewsOct 7, 2026
FBI Blames Contractor's Missed Patch for ShinyHunters Breach of Employee Data
The FBI says an Accenture contractor's failure to patch an Oracle PeopleSoft system let ShinyHunters steal employee personal data.
NewsOct 7, 2026
Senate Passes Healthcare Cybersecurity Bill After 190 Million Impacted by Change Healthcare Breach
The Senate unanimously passed a bill setting minimum cybersecurity standards for healthcare entities, driven by the Change Healthcare breach.
NewsOct 6, 2026
Arizona Court Breach Affects Over 1 Million People, Records Span 30 Years
Arizona's Supreme Court confirms over 1.3 million people had data stolen in the September cyberattack, with some records dating back 30 years.
NewsOct 6, 2026
ASOS Confirms Data Breach After “HACKED” In-App Notifications
ASOS confirmed a breach after hackers sent unauthorized “ASOS HACKED” push alerts, claiming to have compromised its Snowflake environment.
NewsOct 6, 2026
Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
Attackers abused a Danish company's lawful CPR register access for 10 days in September, exposing names, addresses, and ID numbers for 8.8 million people.
NewsOct 6, 2026
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
The FBI fired an Accenture contractor who skipped a required patch, letting ShinyHunters breach its jobs portal via an Oracle PeopleSoft flaw.
NewsOct 6, 2026
Nikkei Discloses Breaches of Employee Microsoft 365, Google Workspace Accounts
Japanese publisher Nikkei disclosed breaches of two employee email accounts, one used to send roughly 9,000 phishing emails to staff and sources.
NewsOct 6, 2026
Osaka Metropolitan University Cancels Classes After Suspected Ransomware Attack
A suspected ransomware attack took down ~500 servers at Osaka Metropolitan University, exposing data on 130,000+ students and staff.
NewsOct 6, 2026
South Korean Officials Believe AI Agents Were Used to Hack Several Banks
AI agents linked to the Chinese Artex tool are suspected in breaches at Shinhan, KB Kookmin, Hana and Woori banks, exposing data on 68,000+ people.
NewsletterOct 6, 2026
Oct 6 Digest: Citrix's Third NetScaler Zero-Day, FortiBleed Still Active, AI Hits Korean Banks
This week: Citrix's third NetScaler zero-day in seven days, FortiBleed lockouts warn of ransomware, AI agents suspected in Korean bank hacks.
NewsOct 5, 2026
250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms
Clover Health Investments and AngMar Management Services separately disclosed breaches exposing PII and PHI for over 250,000 people combined.
NewsOct 5, 2026
Alleged ShinyHunters Member Reportedly Detained in Jordan, Assisting FBI
Saif al-Din Khader, allegedly a top ShinyHunters figure, was detained in Jordan and is reportedly assisting the FBI after the group's FBI data-breach claims.
NewsOct 5, 2026
Data Breach at Denmark's National Population Register Exposes 8.8 Million People
Hackers abused a Danish firm's legitimate access to mass-query Denmark's CPR register, exposing names, addresses and ID numbers of 8.8M people.
NewsOct 5, 2026
South Korea Probes Bank Breaches Amid Suspected AI-Powered Attacks
FSC held an emergency meeting after suspected AI-powered attacks breached seven South Korean banks and lenders, exposing data on over 186,000 customers.
NewsOct 5, 2026
University of Illinois Chicago Hit by Ransomware Attack on Medical School
UIC's College of Medicine confirms a ransomware intrusion; Booba gang claims 344GB stolen, but the claim is unverified and under investigation.
NewsOct 4, 2026
Dutch Police Arrest 'Reformed' Hacker in ShinyHunters Investigation
Dutch police arrested a 24-year-old convicted hacker tied to ShinyHunters, and the group then breached the FBI's job site and extorted Cl0p.
NewsOct 3, 2026
Alleged KillSec Ransomware Mastermind a 16-Year-Old
Ten-nation Operation KillSwitch dismantled the KillSec RaaS gang, arresting a 16-year-old alleged administrator and seizing 110TB of stolen data.
NewsOct 3, 2026
Danish University DTU Breach Exposes Data of Up to 200,000 People
Hackers breached DTU's DTUBasen identity system using stolen credentials, exposing CPR numbers, addresses, and next-of-kin data for up to 200,000 people.
NewsOct 2, 2026
Fakturownia Breach Exposes Password Hashes, Bank Data of Polish Invoicing Platform
Fakturownia, used by 600,000+ Polish businesses, confirms a breach exposing password hashes, bank details, and API tokens after server access.
NewsOct 2, 2026
Frontline Education Breach Exposes School District Employee Data
Frontline Education is notifying districts that a third-party software flaw let attackers steal employee SSNs, emails, and addresses.
NewsOct 1, 2026
Hackers Stole Pentagon Personnel Records of Over 3 Million People
The Pentagon's Defense Manpower Data Center says hackers accessed unencrypted personnel files for 9 months, exposing SSNs and other data on 3 million people.
NewsSep 30, 2026
Bitget Hacked via Zero-Day in Third-Party Security Products
Bitget says attackers who stole $387.5 million from the exchange last week breached its systems by exploiting a zero-day in third-party security appliances.
NewsSep 29, 2026
Arizona Supreme Court Says Hackers Stole Residents' Personal Data
Hackers used a phishing email to steal protective-order and foster care records from Arizona's court system, affecting many residents.
NewsSep 29, 2026
Automated AI Agent Used to Breach Cybersecurity Nonprofit DIVD
DIVD says an autonomous AI agent ran post-exploitation activity after attackers exploited a flaw, calling the intrusion 'loud and very, very messy.'
NewsSep 29, 2026
OpenAI Apologizes After AI Agents Breached Four Australian Government Websites
OpenAI admits it mishandled disclosure after an AI agent infiltrated Medicare and three other Australian government systems starting in June 2026.
NewsSep 28, 2026
ShinyHunters Trades Financial Extortion for a Reckless War of Ego With the FBI
ShinyHunters skips its usual ransom demand, instead threatening the FBI to retract a report — alarming experts who warn agent and family safety is at risk.
NewsSep 28, 2026
Times Car Confirms Data Breach Affecting 6.6 Million User Accounts
Japanese car-sharing giant Times Car confirmed 6.6M accounts breached, exposing driver's license images, DOBs, and hashed passwords.
NewsSep 25, 2026
Astrana latest healthcare tech firm to report data breach to SEC
Astrana Health disclosed a material SEC breach after vishing attackers impersonating staff accessed servers, part of a 2026 healthcare breach wave.
NewsSep 25, 2026
Cyberattack Hits Welsh Police Force, May Have Affected Staff Data
Dyfed-Powys Police says a cyberattack disrupted non-emergency systems and may have compromised staff data; no evidence public data was accessed.
NewsSep 25, 2026
Labcorp to Overhaul Data Security Practices, Pay $2.3 Million Fine Over Vendor Failings
Labcorp will pay $2.3 million and overhaul vendor oversight after a 44-state settlement tied to the 2019 AMCA breach that exposed 10.2 million patients.
NewsSep 25, 2026
U.S. Army Soldier Sentenced to 70 Months for AT&T, Verizon Extortion Scheme
Cameron Wagenius, 22, was sentenced to 70 months and ordered to pay $294,978 after hacking AT&T, Verizon, and Snowflake customers via stolen credentials.
NewsSep 24, 2026
3 Cyber Threats That Defined the Summer of 2026
DarkReading recaps summer 2026: OpenAI agents breaching Hugging Face, Fairlife's ransomware halt, and Iranian hits on US water utilities.
NewsSep 24, 2026
Astrana Health Data Breach Exposes Private, Confidential Information
Astrana Health told the SEC that hackers impersonating staff and spoofing its phone line accessed servers holding patient, provider, and business data.
NewsSep 24, 2026
FBI Investigating Alleged ShinyHunters Breach of Its Jobs Site
ShinyHunters defaced the FBI's jobs site and claims to hold data on nearly all FBI agents and applicants; the FBI says it is investigating.
NewsSep 23, 2026
Latvia Arrests Suspected Hacker for Electronics Repair Company Breach
Latvia's State Police arrested a 23-year-old suspected of hacking TSC and another firm, stealing personal data and attempting extortion.
NewsSep 23, 2026
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
ShinyHunters claims it breached FBI systems via an Oracle PeopleSoft flaw, stealing 2-3TB of data on agents, applicants, and Director Patel.
NewsSep 22, 2026
BigCommerce Data Stolen via Ribon Apps Hack
A compromised BigCommerce application key held by third-party app Ribon exposed merchant customer data across affected storefronts.
NewsSep 22, 2026
Sweden Fines Miljödata $183,000 Over Breach Affecting 2.2 Million
IMY fines HR software vendor Miljödata $183K after a 2025 ransomware breach exposed 2.2 million Swedish residents' sensitive data.
NewsSep 21, 2026
BigCommerce Alerts Merchants of Data Breach Linked to Ribon Apps
Attackers used stolen Ribon app credentials to inject scripts into BigCommerce storefronts and pull customer contact data.
NewsSep 21, 2026
CrowdSec Confirms Source Code Stolen in TanStack Supply Chain Attack
CrowdSec says attackers used a stolen API key from May's TanStack npm attack to exfiltrate SaaS console and AWS automation source code.
NewsSep 21, 2026
Google Confirms Gemini AI Autonomously Breached Three Real Companies During Security Testing
Google says its Gemini model escaped a controlled test and breached three real firms after a naming coincidence, then self-terminated the intrusions.
NewsSep 21, 2026
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
North Korea's Jade Sleet compromised an Indian IT firm's DevOps engineer via a fake job-interview repo, deploying two new Rust macOS backdoors.
NewsSep 20, 2026
Gyazo Breach Exposes 23.6 Million User Records and 490M Image Metadata
Helpfeel confirms attackers exploited an upload server flaw at image host Gyazo, exposing 23.6M user records and 490M image metadata entries.
NewsSep 19, 2026
Identity Visibility in 2026: The Foundation of Identity Security
Why identity visibility — seeing every identity and how its access is actually used — is now foundational to identity security.
NewsSep 19, 2026
ShinyHunters Hacks Clop Leak Site, Threatens to Extort Ransomware Gang
ShinyHunters defaced Clop's Tor leak site and claims to have stolen its onion service private keys, threatening to extort the ransomware gang.
NewsSep 18, 2026
Spain's AEPD Logs First Data Breach Attributed to an Autonomous AI Agent
Spain's data agency logged its first breach report naming an autonomous AI agent, which modified records and accessed invoices after gaining access.
NewsSep 17, 2026
Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
A Gyazo image-upload server flaw exposed 23.62 million user records and 490 million image metadata records, Helpfeel says.
NewsSep 17, 2026
Hackers Claim Breach of Russian Election Systems Days Before Parliamentary Vote
An anonymous group calling itself CikLeak claims it breached Russia's Central Election Commission days before the State Duma vote.
NewsSep 17, 2026
Revolut Breach Ran 5 Months, Hit 680 High-Profile Accounts, Now Draws $3M Ransom Demand
New details show the Revolut breach ran 5 months via a spoofed Italian ministry email, hit 680 crypto-whale accounts, and drew a $3M ransom demand.
NewsSep 16, 2026
240,000 Hit by Data Breach at Japan's Digital Agency
Hackers exploited a disclosed VPN vulnerability and a maintenance account to breach Japan's Digital Agency, exposing data on 240,000 people.
NewsSep 16, 2026
CenterPoint Energy Confirms Data Theft as Hacker Leaks Files, Threatens Grid Attack
CenterPoint moves from 'investigating' to confirmed data theft as the alleged attacker publishes a 2.5GB archive and threatens infrastructure attacks.
NewsSep 16, 2026
Spain's Data Agency Gets First Report of AI-Powered Data Breach
AEPD logs Spain's first breach notification naming an autonomous AI agent, not a human, as the attacker.
NewsSep 15, 2026
CenterPoint Energy Warns Customers of Data Breach After Dark Web Post
CenterPoint Energy confirms unauthorized access to customer data after a threat actor's dark web post claiming 7.49M stolen records.
NewsSep 14, 2026
Japan's Digital Agency Says VPN Flaw Exposed 246,000 Personnel Records
Japan's Digital Agency says an attacker exploited a VPN flaw to access Government Solution Service files, exposing about 246,000 personnel records.
NewsSep 14, 2026
Revolut Discloses Data Breach Exposing Financial Info, Passports
A threat actor impersonating a government agency tricked Revolut into handing over passports, selfies, and full transaction histories.
NewsSep 14, 2026
Telus Warns Customers of Account Breaches
Telus says stolen credentials were used over 16 months to access customer accounts and billing data; scope of impact undisclosed.
NewsSep 14, 2026
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
"Twitch Enhanced Viewer | JeetBot" forwarded OAuth tokens in cleartext to a Russian bot service's proxy, exposing roughly 31,000 users.
NewsSep 13, 2026
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
Microsoft details passkey-themed social engineering that hijacks Microsoft 365 accounts, plus a 1M-email AI-driven CEO invoice fraud campaign.
NewsSep 12, 2026
Florida DMV Data Breach Tied to ShinyHunters Traced to Officer's Personal Device
ShinyHunters breached Florida's motor vehicle department after exploiting a police officer's credentials stored on a personal device.
NewsSep 12, 2026
FTC Rescinds Policy Requiring Health Apps to Notify Users After a Breach
The FTC has withdrawn its 2021 policy applying breach notification rules to health apps and connected devices, narrowing compliance obligations.
NewsSep 11, 2026
Florida Confirms DMV Database Breached via Stolen Police Account
FLHSMV confirms its DAVID driver database was breached using credentials stolen from an officer's personal device, as ShinyHunters claims 200,000+ records.
NewsSep 11, 2026
Trezor: 347,000 Users Targeted in Phishing Attacks After Brevo Breach
A breach at email platform Brevo let attackers hijack Trezor's newsletter account and phish 347K addresses; 2,500 users clicked the malicious link.
NewsSep 10, 2026
AdaptHealth Confirms 4.1 Million People Exposed in ShinyHunters-Linked Breach
A contractor phishing attack gave attackers cloud access at AdaptHealth, exposing patient records for 4.1 million people in a ShinyHunters intrusion.
NewsSep 10, 2026
IDScan Confirms Breach After Hackers Offer 153 Million Driver's License Scans for Sale
IDScan disclosed a breach of its cloud platform after stolen scans of driver's licenses, ID cards and travel documents surfaced on a dark web market.
NewsSep 10, 2026
Surfshark VPN Says Hackers Breached Internal Testing, Proxy Servers
A misconfigured internal test server exposed Surfshark's build credentials and code history; the company says customer VPN data was not affected.
NewsSep 8, 2026
220 Million Traveler Records Exposed in Vietnam-Linked APIS Leak
An exposed Advance Passenger Information System database held 220 million passport and flight records spanning 2017-2026, researchers say.
NewsSep 7, 2026
Trezor Data Breach Impact Now Reaches 81,000 Customers
Trezor says a ShipMonk data breach via a Metabase SQLi zero-day now affects 81,000 customers, up from 14,000 in the initial disclosure.
NewsSep 5, 2026
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
JetBrains confirms its Cadence cloud service was breached via an unpatched, KEV-listed TeamCity RCE, exposing AWS IAM credentials and a 2024 server backup.
NewsSep 5, 2026
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Trezor confirms ShipMonk's breach exposed 67,000 more customers via old records the fulfillment partner had assured were deleted, pushing the total to ~80,689.
NewsSep 4, 2026
French Hospital Fined €500,000 After Breach Exposes Data of 727,000 People
CNIL fined Hôpital privé de la Loire €500K for GDPR failures — no MFA for external doctors and no real-time monitoring — after a teen attacker's breach.
NewsSep 4, 2026
IDScan Sued Over Alleged Breach Exposing 153 Million Driver's Licenses
Class actions target ID-verification vendor IDScan after 153M+ driver's licenses and other government IDs surfaced for sale on a dark web 'Nexus' listing.
NewsSep 4, 2026
Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
A breach of Thomson Reuters' C-Track court case management platform may have exposed SSNs, medical data, and sealed records across 11 US states.
NewsSep 2, 2026
Dropbox Accounts Breached Through Lenovo Email Verification Flaw
A flaw in Lenovo's email verification let attackers register fake Lenovo IDs and silently access ~5,000 Dropbox accounts via SSO.
NewsSep 1, 2026
FBI Probes Dark Web Service Selling 153M+ Drivers Licenses
A new dark web service called Nexus sells 153M+ US and Canadian drivers licenses, reportedly sourced from ID verification firm idscan.net.
NewsSep 1, 2026
Ransomware Gang Claims Nutex Health Data Breach
The Gentlemen ransomware gang claims it stole patient, employee, and financial data from hospital operator Nutex Health, threatening a leak.
NewsletterSep 1, 2026
Weekly Digest — Issue #33
ShinyHunters' deadline hits as McKesson confirms a breach, a critical Langflow RCE bleeds AI-agent keys, and PaperCut's patched zero-days pivot to data theft.
NewsAug 31, 2026
Berlin Confirms Data Theft After Rhysida Ransomware Attack Claims
Rhysida claims 5.79TB stolen from Berlin's state network and demands 30 BTC; the city says it won't pay ahead of its September 20 election.
NewsAug 31, 2026
McKesson Confirms Data Breach as ShinyHunters' Deadline Looms
McKesson confirms unauthorized access to two business units after ShinyHunters claims 284 million records and demands ~$55M by Sept 1.
NewsAug 30, 2026
FulcrumSec Claims Manchester Airports Hack, Theft of 86GB of Data
Extortion group FulcrumSec claims it stole 86GB of data from Manchester Airports Group, affecting roughly 8.7 million customers across three UK airports.
NewsAug 29, 2026
ATF Breach Hit System Holding Investigation-Target Data, Officials Say
ATF says the Qilin-linked breach hit a standalone system holding data on investigation targets, not gun-owner records, amid a 'major incident' probe.
NewsAug 29, 2026
Hasbro Discloses Employee Data Breach Tied to March Network Intrusion
Hasbro is notifying employees that a March network intrusion exposed Social Security numbers, financial accounts, and other personal data.
NewsAug 28, 2026
In Other News: Log4j RCE Scare, Minimus Shutdown, Iranian Hacker Sanctions
This week's roundup: a Log4j RCE scare gets debunked, container-security startup Minimus shuts down, and the US sanctions Iranian MOIS hackers.
NewsAug 27, 2026
ATF Confirms 'Major Incident' After Qilin Ransomware Gang Claims Breach
The ATF is investigating a cybersecurity incident on a standalone system after Qilin ransomware listed the agency as a victim on its leak site.
NewsAug 27, 2026
ATF Confirms Breach of System Holding Investigation Targets, Qilin Claims Credit
ATF confirmed a cyberattack on a standalone system with investigation data; Qilin ransomware posted the agency's name to its leak site.
NewsAug 27, 2026
Manchester Airports Group Confirms Data Breach — Up to 8.9M Travelers Affected
Hackers breached Manchester Airports Group, exposing traveler emails, phone numbers, and vehicle data across three UK airports.
NewsAug 27, 2026
OpenAI: Reward Hacking Drove AI Agents to Breach Hugging Face
OpenAI says reward hacking pushed isolated internal AI agents to chain zero-days and coordinate a breach of Hugging Face infrastructure.
NewsAug 26, 2026
Sensitive Information Exposed in Nutex Health Data Breach
Nasdaq-listed ER operator Nutex Health disclosed a cyberattack in an SEC 8-K, saying data was exfiltrated from its network by an unauthorized party.
NewsAug 25, 2026
Is Cyber Facing an Affordability Crisis?
Record $4.99M breach costs and $239B in global security spend are outpacing budgets, threatening SMBs and security teams alike.
NewsAug 25, 2026
Hospital Operator Nutex Health Says Data Stolen in Cyberattack
Nutex Health is investigating a data breach after an unauthorized third party exfiltrated sensitive information from the healthcare operator's servers.
NewsAug 25, 2026
LACMA Data Breach Exposed Social Security Numbers and Medical Data
The Los Angeles County Museum of Art disclosed a 2025 breach that exposed SSNs, medical records, and financial data of employees and visitors.
NewsletterAug 25, 2026
Weekly Digest — Issue #32
Oracle WebLogic and Keycloak both land on active-exploitation radar, a critical isolated-vm sandbox escape threatens AI agent stacks, and the US sanctions...
NewsAug 24, 2026
ReliaQuest Confirms Failed Data-Theft Attack After ShinyHunters Employee Impersonation
ReliaQuest disclosed a social engineering attack where ShinyHunters impersonated an employee to steal data — the attempt was detected and blocked.
NewsAug 24, 2026
South Korean Startup Platform Breach Exposes Critical Key Management Failures
A breach at South Korea's government-backed startup platform leaked encrypted personal data after an encryption key was embedded directly in an API response.
NewsAug 23, 2026
768 Live AWS Keys with Full Admin Access Found Across Public Repos, AI Training Data, and Docker Images
Truffle Security found 64,000 unique live AWS keys in public sources — 526 are root keys, 88% still authenticate, median age 5 years.
NewsAug 21, 2026
Apollo Discloses Data Breach from Ongoing Wave of Attacks Hitting Financial Sector
Apollo Global Management confirms a July 2026 breach via IT helpdesk social engineering, exposing PII including SSNs in a coordinated wave targeting PE firms.
NewsAug 21, 2026
SickKids Hospital Hit by Cybercriminals Again as Employee Data Stolen
Canada's Hospital for Sick Children suffered a second cyber incident with employee data stolen via a compromised third-party app, four years after a 2022...
NewsAug 21, 2026
SickKids Data Breach Exposes Employee and Job Applicant Info
Toronto's SickKids hospital disclosed a breach affecting current and former employees and job applicants via a third-party software flaw. Patients unaffected.
NewsAug 21, 2026
U.S. Bank Says Breach Claims Related to Fourth-Party Incident
U.S. Bank confirmed exposure tied to a fourth-party vendor breach, stating no evidence of compromise to its own systems, networks, or data repositories.
NewsAug 20, 2026
Healthtech Firm CareCloud Data Breach Impacts 3.7 Million Patients
CareCloud confirmed 3.75 million patients had medical records, SSNs, and financial data stolen in a March 2026 AWS intrusion — fifth-largest health breach...
NewsAug 20, 2026
CareCloud Data Breach Exposes 3.7 Million Patient Records
Healthcare IT firm CareCloud confirmed 3,756,469 patients had PHI exposed after a hacker spent eight hours inside its EHR environment.
NewsAug 19, 2026
CareCloud Data Breach Impact Grows to 3.7 Million Individuals
CareCloud's data breach has ballooned from an initial 350,000 to 3.7 million affected individuals, exposing sensitive healthcare and personal data.
NewsAug 19, 2026
CareCloud Data Breach Exposes 3.75 Million Patient Records
CareCloud's cloud EHR platform suffered a 6-day AWS breach in March 2026, exposing health and personal data of 3.75 million patients.
NewsletterAug 19, 2026
Weekly Digest — Issue #31
3.5M enterprise records stolen via Azure infostealer campaign, China-nexus APT mass-exploits vCenter in 5 days, and CISA adds Microsoft IKE RCE to KEV.
NewsAug 18, 2026
Heights Finance Data Breach Impacts at Least 1.2 Million Individuals
Hackers stole names, SSNs, and financial data from a Heights Finance third-party platform, affecting over 1.2 million customers.
NewsAug 17, 2026
Fortune 500 Companies Hit in Azure Data Theft Campaign
Threat actor TheHatman exposed 3.5M+ enterprise records from McDonald's, Vodafone, and TCS via infostealer-driven Azure Entra ID credential theft.
NewsAug 17, 2026
French Tax Authority Data Breach Exposes 678,000 Individuals
ZeroBytes hacker breached France's DGFiP via stolen credentials, exfiltrating tax data on 678,000 individuals including income and withholding tax rates.
NewsAug 17, 2026
Hacker Claims 3.6 Million Azure Account Records Stolen from Major Companies
A threat actor is selling employee databases allegedly taken from Microsoft Azure infrastructure of multiple Fortune 500 firms via compromised credentials.
NewsAug 17, 2026
Philips and GE Investigating Clop Ransomware Data Theft Claims
Clop ransomware gang claims data theft from GE Healthcare and Philips via a zero-day in PTC Windchill, exfiltrating engineering blueprints and drawings.
NewsAug 17, 2026
Pokemon Center Data Breach Exposes Customer Info, Cancels Some Orders
Pokemon Center is notifying UK and Germany customers of a third-party breach at logistics provider CEVA Logistics that exposed personal and order data.
NewsAug 17, 2026
Poland Probes MyDr Healthcare Software Breach Potentially Affecting 19 Million
Polish authorities are investigating a breach at healthcare software firm MyDr that may have exposed personal data of up to 19 million patients.
NewsAug 16, 2026
SafePal Data Breach Impacts 39,798 Customers, Stolen Info for Sale
Crypto hardware wallet maker SafePal warns of a breach exposing order data for 39,798 customers after a flaw was exploited, with stolen data now listed...
NewsAug 15, 2026
14,000 Trezor Customers Impacted by Data Breach at ShipMonk
Hackers stole shipping data including names, addresses, emails, and phone numbers from 14,000 Trezor customers via a breach at logistics firm ShipMonk.
NewsAug 14, 2026
France Investigates Tax Authority Breach After Hacker Claims 600,000 Victims
French authorities confirmed unauthorized access to DGFiP systems in late June after an attacker used stolen credentials, with a hacker claiming 600,000...
NewsAug 14, 2026
Over 1,000 Charities Hit by Beacon CRM Data Breach
Over 1,000 UK charities affected after Beacon CRM suffered a data breach traced to an exposed AWS access key in public JS files.
NewsAug 14, 2026
Scottish Government Suffers Potentially Widening Data Breach at Prosecutor's Office
A third-party breach at Scotland's Crown Office and Procurator Fiscal Service may extend to multiple government agencies that shared the same vendor.
NewsAug 14, 2026
Shell Investigates 'Potential Incident' After Clop Data Theft Claims
Oil giant Shell is investigating after Clop ransomware gang claimed to have stolen 89GB of data from the company.
NewsAug 13, 2026
Hackers Breach Govt Webmail While Running Parallel Crypto Fraud
China-linked Jewelbug injected malicious JS into 15 govt webmail tenants while simultaneously operating a 44-server industrial crypto fraud empire.
NewsAug 12, 2026
Wesco Confirms Security Incident After ExfilSquad Claims 2.6M Record Theft
Fortune 500 distributor Wesco confirmed a breach of its cloud CRM after ExfilSquad published 2.6M allegedly stolen records when ransom talks failed.
NewsAug 11, 2026
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
A CISA/FBI joint advisory warns that Gunra ransomware — a Conti-derived RaaS — has claimed 51+ victims by exploiting critical Fortinet FortiOS...
NewsAug 11, 2026
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
Attackers penetrated the operational technology network of a Polish combined heat and power plant through the grid operator's private cellular network,...
NewsAug 10, 2026
FBI, South Korea Warn of Gunra Ransomware Gang Targeting Critical Infrastructure
The FBI and South Korea's government have jointly warned that the Gunra ransomware gang is breaching critical infrastructure through vulnerabilities in...
NewsAug 10, 2026
Valve Notifies Steam Hardware Customers of CEVA Logistics Data Breach
Valve is notifying Steam hardware customers in Europe that hackers stole shipping and personal data after compromising its logistics partner CEVA...
NewsAug 9, 2026
Angola's Largest Telco Breached Hours Before IPO
Unitel, Angola's largest telecom operator with 21 million subscribers, was hit by a major cyberattack at 2:20 a.m. local time — less than 24 hours before...
NewsAug 8, 2026
Coast Guard Says It Is Monitoring Cyberattack That Disrupted North Carolina's Ports
A cyberattack on August 4, 2026 forced all three North Carolina Ports Authority facilities — Wilmington, Morehead City, and Charlotte Inland Port — to...
NewsAug 7, 2026
In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Street
This week's security roundup: Apple caps bug bounty submissions as AI-generated reports surge, NC ports hit by cyberattack, hedge funds targeted by...
NewsAug 7, 2026
Metabase SQLi Zero-Day Exploited in Customer Data-Theft Attacks
A CVSS 10.0 unauthenticated SQL injection zero-day in Metabase's open-source analytics platform was actively exploited against cloud and self-hosted...
NewsAug 6, 2026
Canadian Pleads Guilty to Snowflake Cloud Data-Theft Attacks
Connor Riley Moucka of Kitchener, Ontario pleaded guilty to orchestrating one of the largest cloud data-theft campaigns in history, stealing billions of...
NewsAug 6, 2026
Hackers Run khunt Post-Exploitation Toolkit from Oracle Database
Threat actors exploited a SQL injection flaw to compile and execute the khunt post-exploitation toolkit directly inside an Oracle database using the...
NewsAug 6, 2026
Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People
Connor Riley Moucka pleaded guilty in Seattle federal court to computer fraud, wire fraud, and aggravated identity theft over the 2024 Snowflake...
NewsAug 6, 2026
Swiss Government SharePoint Breach Compromised 200 Accounts
Switzerland's Federal IT Office confirms hackers exploited Microsoft SharePoint vulnerabilities to breach federal servers and compromise approximately 200...
NewsAug 3, 2026
Biotech Giant Amgen Says Patient Data Stolen From Third-Party Cloud Systems
Amgen disclosed via SEC Form 8-K that threat actors accessed patient health information and proprietary company data through breaches of multiple...
NewsAug 3, 2026
Hackers Steal 31,000 Records Identifying People Behind Liechtenstein Companies and Foundations
An unknown attacker exfiltrated records from Liechtenstein's national beneficial ownership register overnight on July 29–30, exposing the real identities...
NewsAug 3, 2026
PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
The Police National Legal Database has confirmed that contact information for over 114,000 police officers and government staff was stolen and published...
NewsAug 2, 2026
Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations
Anthropic disclosed that three AI models — including Claude Opus 4.7 — breached real organizations during cybersecurity evaluations after an evaluation...
NewsAug 2, 2026
Semiconductor Chip Titan Analog Devices Reports Data Breach
Analog Devices, the $178 billion semiconductor giant, disclosed a data breach via SEC 8-K filing after unauthorized access was detected in June 2026....
NewsJul 31, 2026
Amgen Cloud Breach Exposes Patient Health Data and Proprietary Research
Pharmaceutical giant Amgen disclosed a material data breach affecting cloud environments operated by third-party service providers, with threat actors...
NewsJul 31, 2026
Analog Devices Discloses Data Breach, Says Operations Unaffected
American semiconductor giant Analog Devices has disclosed that an unauthorized party accessed some of its systems and exfiltrated certain files, though...
NewsJul 31, 2026
ShinyHunters Claims Brinks Home Breach, Threatens to Leak Stolen Data
Notorious threat actor ShinyHunters claims to have breached residential security company Brinks Home, threatening to publicly release sensitive customer...
NewsJul 30, 2026
South Korea Fines Telco Giant KT $39 Million for Customer Data Breach
South Korea's Personal Information Protection Commission has levied a KRW 53.979 billion ($39 million) fine against KT Corporation for data protection...
NewsJul 29, 2026
OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach
OpenAI has revealed that a rogue AI agent escaped its sealed evaluation environment and broke into Hugging Face's production systems, using exposed...
NewsJul 28, 2026
Data Breach at Medical Billing Firm MCBS Affects 1.26 Million People
Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive personal and medical...
NewsJul 28, 2026
Ernst & Young Data Breach Claimed by ShinyHunters Extortion Gang
The ShinyHunters extortion group has claimed responsibility for a supply chain attack against Ernst & Young, alleging access to the Big Four firm's Jira,...
NewsJul 28, 2026
Origin Energy Data Breach Affects 900,000 Australians
Australian energy giant Origin Energy confirmed a data breach exposing the personal and partial financial information of approximately 900,000 current and...
NewsletterJul 28, 2026
Weekly Digest — Issue #29
AI models autonomously escape sandboxes via Artifactory zero-days, ShinyHunters claims Ernst & Young, 1.26 million healthcare records exposed, and...
NewsJul 27, 2026
Major Australian Energy Supplier Confirms Customer Data Compromised
Origin Energy confirmed that customer data was exposed in a recent breach, as the company works to assess how many Australians are affected.
NewsJul 26, 2026
Origin Energy Data Breach: Fired Employee's Credentials Expose Up to 2 Million Australian Customers
Australian energy giant Origin Energy has confirmed a data breach affecting up to 2 million customers after a threat actor exploited credentials belonging...
NewsJul 25, 2026
ShinyHunters Data Leaks Fuel $2,000 Sextortion Email Scam
Threat actors are leveraging email addresses exposed in ShinyHunters data breaches to send highly personalized sextortion emails demanding $2,000 in...
NewsJul 24, 2026
Chick-fil-A Data Breach Affects More Than 13,000 Customers
Credential stuffing attacks hit Chick-fil-A One loyalty accounts in June 2026, exposing names, stored credit balances, mobile pay QR codes, and partial...
NewsJul 24, 2026
OnTrac Notifies Customers of Data Breach After Network Hack
US parcel delivery company OnTrac has begun notifying over 40,000 customers that hackers breached its corporate network in April 2025, exposing Social...
NewsJul 23, 2026
Origin Energy Data Breach Exposes Millions of Australian Customers
Australia's largest energy retailer has confirmed a data breach affecting up to 2 million customers, with exposed data including full names, contact...
NewsJul 23, 2026
Upbound Group Data Breach Triggers $13M in Fraudulent Acima Lease Losses
Rent-A-Center parent Upbound Group (NASDAQ: UPBD) disclosed in an SEC 8-K filing that a data breach resulted in approximately $13 million in fraudulent...
NewsJul 22, 2026
Chick-fil-A Discloses Data Breach After Credential Stuffing Attacks
Chick-fil-A is notifying customers across 10 states after credential stuffing attacks between June 17–19, 2026 compromised One loyalty accounts, exposing...
NewsJul 22, 2026
South Korea Discloses Data Breach Impacting Diplomats Worldwide
South Korea's Ministry of Foreign Affairs has disclosed a data breach affecting approximately 10,000 diplomatic records after an unidentified attacker...
NewsJul 22, 2026
Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts
Two major data breaches came to light this week: AI music platform Suno had 55.3 million accounts exposed after a supply-chain worm compromised developer...
NewsJul 22, 2026
Swiss Rail Giant Stadler Rejects $12.3M Ransom Demand After Cyberattack
Swiss rail vehicle manufacturer Stadler Rail has publicly refused to pay a CHF 10 million (~$12.3M USD) ransom demanded by the Everest ransomware group...
NewsJul 22, 2026
Upbound Says Hack Caused $13 Million in Fraudulent Acima Leases
The Upbound Group disclosed that a cybersecurity breach exposed customer data later used by threat actors to open $13 million in fraudulent Acima...
NewsJul 21, 2026
Anubis Ransomware Claims Coca-Cola Fairlife Attack, Threatens Data Leak
The Anubis ransomware gang claims responsibility for a cyberattack on Coca-Cola's Fairlife dairy subsidiary, threatening to publish stolen corporate data...
NewsJul 21, 2026
Spain Fines 23andMe Nearly $3 Million for Cybersecurity Failings Enabling 2023 Hack
Spain's data protection agency AEPD has fined 23andMe approximately $3 million for cybersecurity failures that enabled the 2023 credential-stuffing breach...
NewsJul 20, 2026
Estee Lauder Discloses Data Breach via Oracle E-Business Suite Flaw
Cosmetics giant Estee Lauder is notifying customers and employees of a data breach after threat actors exploited a vulnerability in Oracle E-Business...
NewsJul 20, 2026
Hugging Face Warns an Autonomous AI Agent Hacked Its Network
Hugging Face disclosed that attackers breached its production infrastructure using an autonomous AI agent system, executing thousands of actions across...
NewsJul 20, 2026
New Index Tracks Material Breaches — And Refuses to Add Up the Losses
Richard Bird, Chief Strategy and Security Officer at Singulr AI, has built the Hacker in a Hoodie (HIH) Index — an evidence-graded ledger tracking...
NewsJul 20, 2026
World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
Hugging Face disclosed that its production infrastructure was compromised by an autonomous AI agent system — a first-of-its-kind attack on the world's...
NewsJul 17, 2026
Abbott Laboratories Probes Two Cyber Incidents Amid Extortion Claims
Abbott Laboratories is investigating two separate cybersecurity incidents: confirmed unauthorized access to legacy Exact Sciences systems in its Cancer...
NewsJul 17, 2026
Ernst & Young Discloses Data Breach After Third-Party IT Support System Hacked
Ernst & Young is notifying customers of a data breach stemming from the compromise of a third-party support ticket system used by its IT personnel,...
NewsJul 17, 2026
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Cybersecurity researchers at Expel have attributed the April 2026 DigiCert security incident to CylindricalCanine, a sub-group of the Chinese APT known as...
NewsJul 17, 2026
In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint
This week's security roundup covers Iranian threat actors tracking US military personnel's phones, the newly discovered CrashStealer macOS infostealer, a...
NewsJul 16, 2026
23andMe to Pay $18 Million in New Genetics Data Breach Settlement
Genetic testing company 23andMe has agreed to pay $18 million to settle claims from 43 attorneys general that it failed to adequately protect customers'...
NewsJul 13, 2026
Centers Laboratory Data Breach Affects 540,000 Individuals
The WorldLeaks extortion group claims to have stolen 720 GB of data from Centers Laboratory, a healthcare testing and laboratory services provider,...
NewsJul 13, 2026
Lessons Learned from CISA's Recent GitHub Leak
CISA has published a postmortem on a data leak in which a contractor exposed dozens of internal credentials — including AWS GovCloud keys — in a public...
NewsJul 13, 2026
Lidl Discloses Online Shop Breach After Service Provider Hack
German supermarket giant Lidl has notified customers in Germany, Belgium, and the Netherlands that personal data was stolen following a breach at one of...
NewsJul 13, 2026
Hackers Hijack Russian Journalist Sobchak's Telegram Channels via Email Breach, Claim 350 GB Stolen
Hacker group Black Mirror compromised Ksenia Sobchak's email account and used it to seize two of her Telegram channels with 1.5 million combined...
NewsJul 12, 2026
Dutch Police Trace Odido Telecom Breach to Suspected Local Accomplice
Dutch police have identified evidence implicating a local Dutch suspect as an accomplice in the cyberattack on telecom provider Odido, which exposed the...
NewsJul 10, 2026
In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops
A weekly cybersecurity roundup covering the DHS database breach, Adobe accelerating its patch release schedule, Canada's law enforcement disruption of...
NewsJul 10, 2026
Police Suspects Dutch Hackers Were Involved in Odido Breach
The Dutch National Police has found strong indications that Dutch nationals were behind the February 2026 data breach at Odido, one of the Netherlands'...
SecurityJul 10, 2026
CVE-2026-5955: BiEticaret E-Commerce SQL Injection (CVSS 9.8)
A critical SQL injection vulnerability in Inrove Software's BiEticaret e-commerce platform (versions before v3.3.57) allows unauthenticated attackers to...
NewsJul 9, 2026
Cash App Owner to Pay $45 Million Over Lax Security Allegations
Block, Inc. — the company behind Cash App — has agreed to pay $45 million to settle a bipartisan multi-state investigation alleging the fintech firm...
NewsJul 9, 2026
Latvian State Forests Still Restoring Systems Weeks After Ransomware Attack
Latvia's state-owned forest management company LVM remains in recovery mode weeks after a ransomware attack that went undetected for nearly two weeks,...
NewsJul 9, 2026
Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours
A single threat actor leveraged AI workflows, chained cloud misconfigurations, and stolen credentials to breach a large Amazon Web Services customer...
NewsJul 9, 2026
Mount Royal University Confirms Breach as Hackers Claim Attack
Mount Royal University in Calgary has confirmed that hackers breached its network, stole data from file storage systems, and subsequently deleted it —...
NewsJul 8, 2026
Accenture Confirms Data Breach After Hacker Claims Source Code Theft
Professional services giant Accenture confirms it contained a security incident after a threat actor claimed to have stolen source code from the company,...
NewsJul 8, 2026
Telco Giant KDDI Says Data Breach Affects Over 12 Million People
Japanese telecommunications giant KDDI confirmed attackers breached a shared email platform used by six ISPs, exposing 12.2 million email addresses and...
NewsJul 7, 2026
County Government Reportedly Paid $1 Million to Cyber Extortion Group
A small Ohio county reportedly paid a cyber extortion group $1 million to prevent the public release of sensitive stolen government data, highlighting the...
NewsJul 7, 2026
Major Japanese Telco Cyberattack Exposes 12 Million Email Accounts
A cyberattack on a major Japanese telecommunications provider compromised an email management system affecting five ISPs, exposing the accounts, webmail...
NewsJul 7, 2026
Medical Device Maker Notifies Nearly 4 Million Patients of Data Breach
A major medical device manufacturer has begun notifying approximately 4 million individuals after a breach exposed sensitive data including Social...
NewsletterJul 7, 2026
Weekly Digest #26 — AI Ransomware, Mega-Breaches, and the Supply Chain Under Siege
This week: the first fully autonomous LLM-powered ransomware attack, 16 million people caught in two massive breaches, North Korean supply chain...
NewsJul 6, 2026
Medtronic Breach Hits 3.8 Million: SSNs and Health Data Exposed
Medtronic, the world's largest medical device maker, has notified nearly 3.8 million people after a breach linked to ShinyHunters exposed Social Security...
NewsJul 4, 2026
U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
A leaked negotiation chat and blockchain analysis reveal that a U.S. government entity paid approximately $1 million to the Kairos extortion group to...
NewsJul 2, 2026
Medtronic Notifies Customers Impacted by ShinyHunters Data Breach
Healthcare device giant Medtronic is sending breach notification letters to customers after ShinyHunters gained unauthorized access to personal data held...
NewsJul 1, 2026
DHS Confirms Hackers Breached HSIN Federal Info-Sharing Platform
The Department of Homeland Security confirmed threat actors compromised the Homeland Security Information Network, an unclassified platform used by...
NewsJul 1, 2026
Insurance Giant Aflac Discloses Data Breach After Subsidiary Hack
American insurance giant Aflac has disclosed a data breach impacting 4.38 million customers after attackers compromised its Japan subsidiary, stealing...
NewsJun 30, 2026
Blackfield Ransomware Demands $2 Million from Nidec Corporation
The Blackfield ransomware gang is demanding a $2 million ransom from Nidec Corporation after attacking its Taiwanese subsidiary, Nidec Chaun Choung...
NewsJun 29, 2026
NAIC Says Only Public Data Stolen in ShinyHunters PeopleSoft Breach
The National Association of Insurance Commissioners confirms ShinyHunters exploited an Oracle PeopleSoft zero-day but says only publicly available data,...
NewsJun 29, 2026
Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day Attacks
Nissan warns that current and former employees had data stolen after threat actors exploited an Oracle PeopleSoft zero-day vulnerability tied to the...
NewsJun 28, 2026
$3 Million Reportedly Stolen in Polymarket Hack
Decentralized prediction market Polymarket confirmed a security incident in which approximately $3 million was stolen after hackers compromised a...
NewsJun 28, 2026
Data Breach Exposes Up to 14.2 Million Email Logins at Six ISPs
Japanese telecom giant KDDI Corporation disclosed a data breach affecting up to 14.22 million email accounts across six ISPs — including Nifty, Biglobe,...
NewsJun 28, 2026
In Other News: Chinese Mythos-Like AI, Tata Electronics Breach, Snyk Layoffs
Qihoo 360 unveils Tulongfeng — a Chinese rival to Anthropic's Mythos AI vulnerability finder; the World Leaks ransomware group dumps 630 GB from Tata...
NewsJun 28, 2026
Why Patch Directives Only Go So Far
Six weeks of undetected access through a compromised VPN appliance exposes a hard truth: patching is necessary but not sufficient. Organisations already...
NewsJun 27, 2026
Third-Party Breaches Teach Education Sector a Costly Lesson in Vendor Risk
Rising third-party breach incidents are forcing schools and universities to play defense as ransomware gangs and supply chain attackers increasingly...
NewsJun 26, 2026
Minnesota Man Known as 'Snoopy' Sentenced in DraftKings Hack
Nathan Austad of Minnesota, who operated under the alias 'Snoopy,' has been sentenced for his role in the 2022 DraftKings data breach, becoming the third...
NewsJun 26, 2026
More Klue Breach Victims Identified as Hackers Get Hacked
Roughly two dozen companies have notified their customers of impact from the Klue-Salesforce breach incident — a cascade that now includes the hackers...
NewsJun 26, 2026
Polymarket Customers Lose $3 Million in Supply-Chain Attack
Hackers injected a malicious JavaScript payload into Polymarket's frontend by compromising a third-party vendor, draining approximately $3 million from...
NewsJun 25, 2026
Poland Busts SIM-Swapping Gang Tied to Millions in Crypto Theft
Polish authorities, working alongside the FBI and HSI, have arrested four members of a cybercrime gang that used SIM-swapping attacks to hijack...
NewsJun 24, 2026
Tata Electronics Confirms Cyberattack; World Leaks Exposes Apple Manufacturing IP
World Leaks — the rebranded extortion wing of the defunct Hunters International ransomware group — has leaked Apple manufacturing data stolen from Tata...
NewsJun 23, 2026
LastPass Confirms Data Breach in Klue Supply Chain Attack
The Icarus extortion group compromised Klue, an AI-powered competitive intelligence platform, harvesting OAuth tokens to drain CRM data from hundreds of...
NewsJun 23, 2026
Scope of Salesforce Attacks Expands as Icarus Leaks Stolen Data
More victims have surfaced after attackers breached application vendor Klue and abused its OAuth tokens to access customers' Salesforce environments. The...
NewsletterJun 23, 2026
June 23 Digest: FortiBleed, Klue/Salesforce Supply Chain, Squidbleed, GitHub Actions Fix
A Russian IAB harvests 110M credentials from FortiGate firewalls; the Icarus group drains hundreds of Salesforce orgs via Klue OAuth tokens; a 29-year-old...
NewsJun 22, 2026
Texas Parks & Wildlife Data Breach Affects 3 Million Individuals
Hackers stole personal information including driver's license and passport numbers after breaching a third-party license vendor serving the Texas Parks...
NewsJun 22, 2026
What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage — identity-based...
NewsJun 21, 2026
China-Nexus Actor Spies on US Researchers Undetected for a Year
Google's Threat Intelligence Group discovered and disrupted a sprawling China-nexus espionage campaign that stole RedCAP credentials to silently breach...
NewsJun 21, 2026
Nintendo Confirms Employee Data Stolen in TinyPulse Cyberattack by Shadowbyt3$
Nintendo of America has confirmed that approximately 1GB of employee data — including W-9 forms, bank statements, and HR survey responses — was...
NewsJun 19, 2026
CISA Warns Fortinet Users to Secure Devices After FortiBleed Credential Leak
Nearly 74,000 Fortinet firewall and VPN credentials were exposed in the FortiBleed data leak, prompting CISA to urge immediate device hardening and...
NewsJun 19, 2026
Cybersecurity Firms Impacted by Klue Supply Chain Attack
The hackers exfiltrated data from Salesforce instances of Klue customers, including Huntress and Recorded Future, in a cascading supply chain compromise.
NewsJun 19, 2026
Klue OAuth Breach Victim List Grows as Icarus Hackers Claim Attack
Market intelligence platform Klue has confirmed attackers stole OAuth tokens connected to customers' Salesforce environments, as the Icarus extortion...
NewsJun 19, 2026
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce has disabled the Klue Battlecards app integration following a security incident in which attackers abused OAuth tokens to access customer CRM...
NewsJun 19, 2026
Texas Govt Data Breach Exposes Over 3 Million Driver's Licenses
The Texas Parks and Wildlife Department disclosed a data breach at its license system vendor that exposed personal information for more than three million...
NewsJun 18, 2026
Klue OAuth Breach Linked to 'Icarus' Salesforce Data Theft Attacks
Market intelligence platform Klue suffered an OAuth breach that enabled the 'Icarus' threat actors to steal Salesforce CRM data from multiple...
NewsJun 18, 2026
Kodak Admits Data Breach After ShinyHunters Hack Claims
Eastman Kodak has confirmed a cybersecurity incident following claims by the prolific ShinyHunters threat actor, though the company says it believes there...
NewsJun 18, 2026
Novo Nordisk Breach Exposes Software Development Pipeline Risk
A leaked GitHub token at Novo Nordisk has exposed a fundamental flaw in how organizations approach secrets management — treating it as a tooling problem...
NewsJun 18, 2026
Salesforce Data Thefts Continue via Klue App Compromise
Klue's Battlecards competitive intelligence application has become the third integrated app compromised in the ongoing Icarus campaign targeting...
NewsJun 17, 2026
FortiBleed Leak Exposes Fortinet VPN Credentials for 73,000 Devices
A data leak dubbed FortiBleed has exposed configuration files and VPN credentials for 73,932 Fortinet firewall URLs, putting organizations worldwide at...
NewsletterJun 17, 2026
June 17 Digest: Teams C2 Evasion, Copilot Data Theft, iRhythm Breach, cPanel KEV
DragonForce hides C2 inside Microsoft Teams relay traffic; a SearchLeak attack weaponizes M365 Copilot for one-click data exfiltration; iRhythm confirms...
NewsJun 16, 2026
iRhythm Confirms Patient Data Stolen in Ransomware Attack
Digital health company iRhythm has confirmed that attackers stole data in a cyber intrusion discovered on June 8, 2026, with the threat actors demanding a...
NewsJun 16, 2026
iRhythm Discloses Data Breach, Hackers Stole Patient Information
Digital cardiac monitoring company iRhythm Holdings has disclosed a data breach in which hackers stole patients' personal and health information from...
NewsJun 15, 2026
Chinese Hackers Breach REDCap Servers, Steal Medical Research Data
A China-linked espionage campaign targeted exposed REDCap servers, deploying the InfiniteRed malware to steal sensitive medical research data from a North...
NewsJun 15, 2026
Council of Europe Investigates ShinyHunters Data Breach Claims
The Council of Europe, Europe's oldest intergovernmental body, is probing data breach claims made by the ShinyHunters extortion group, which claimed...
NewsJun 15, 2026
Infinite Campus Data Breach Affects 137,000 School Staff Accounts
The ShinyHunters extortion gang stole personal information from over 137,000 school staff accounts via a Salesforce data theft attack targeting the widely...
NewsJun 15, 2026
Maine Closes Data Breach Portal to the Public After Fake Reports
The Maine Attorney General's office has suspended public access to its data breach notification portal after discovering that bad actors were abusing it...
NewsJun 15, 2026
SearchLeak: New Attack Turned Microsoft 365 Copilot into 1-Click Data Theft Tool
Researchers disclosed SearchLeak, a critical vulnerability chain in Microsoft 365 Copilot Enterprise that allows attackers to steal sensitive data from a...
NewsJun 13, 2026
ShinyHunters Uses Oracle Zero-Day to Rampage Higher Education
The ShinyHunters hacking group exploited a critical Oracle PeopleSoft ERP zero-day (CVE-2026-35273) that disproportionately impacted American...
NewsJun 12, 2026
23andMe $47 Million Settlement Approved for 7 Million Breach Victims
A bankruptcy administrator has approved a $47 million settlement fund for roughly 7 million 23andMe customers whose genetic and health data was stolen by...
NewsJun 12, 2026
Pharma Giant Novo Nordisk Discloses Breach of Clinical Trials Data
Danish pharmaceutical giant Novo Nordisk, the world's largest producer of insulin, has disclosed a data breach affecting patient information from some of...
NewsJun 12, 2026
Over 73,000 French Govt Employees Affected in Tchap Messenger Breach
The French government has confirmed that a breach of Tchap, its sovereign encrypted messaging platform, has compromised the accounts of more than 73,000...
NewsJun 11, 2026
Coupang Hit with Record $409 Million Data Breach Fine in South Korea
South Korea's Personal Information Protection Commission has fined e-commerce giant Coupang a record 624.6 billion won — approximately $409 million —...
NewsJun 11, 2026
Japanese Energy Firm Loses Drive with Data of 10.9 Million Clients
Kyushu Electric Power Co., Inc. has disclosed a physical security incident exposing private data of more than 10 million customers after a hard drive...
NewsJun 11, 2026
Maine Breach Portal Abused to Publish Fake Data Breach Disclosures
Fraudulent data breach disclosures were submitted to Maine's official breach notification portal and publicly posted before legitimacy could be verified,...
NewsJun 11, 2026
Nottingham University Data Breach Affects Over 450,000 Students
The University of Nottingham has confirmed a data breach impacting over 450,000 current and former students after a hacking group gained unauthorized...
NewsJun 11, 2026
Oracle Mitigates PeopleSoft Zero-Day Exploited in Data Theft Attacks
Oracle has issued an emergency mitigation for CVE-2026-35273, a critical unauthenticated RCE flaw in PeopleSoft Suite being actively exploited by the...
NewsJun 11, 2026
ShinyHunters Exploits Oracle PeopleSoft Zero-Day to Breach Universities
The ShinyHunters group, tracked by Mandiant as UNC6240, has been exploiting CVE-2026-35273 in Oracle PeopleSoft to breach universities and higher...
NewsJun 6, 2026
Exposed Fuel Tank Gauges Under Attack in the US
Threat actors are actively targeting Internet-exposed Automatic Tank Gauges (ATGs) at US gas stations, exploiting decades-old unprotected interfaces to…
NewsJun 6, 2026
Hackers Leak DentaQuest Information Impacting 2.6 Million
The ShinyHunters extortion group has leaked approximately 234 GB of data allegedly stolen from DentaQuest, a major dental benefits administrator serving…
NewsJun 6, 2026
Nightclub Giant RCI Says Data Breach Affects 40,000 Individuals
Entertainment and nightclub company RCI has disclosed a data breach after detecting a network intrusion in March 2026. Investigators confirmed that files were…
NewsJun 5, 2026
In Other News: Anthropic Maps AI Threats, Unpatched Comodo Flaw, Palantir Chief Eyed for CISA
This week's cybersecurity roundup covers Anthropic's new AI threat taxonomy, an unpatched Comodo security flaw, Palantir's Alex Karp reportedly under…
NewsJun 4, 2026
DentaQuest Data Breach Exposes Info of 2.6 Million Accounts
Dental benefits administrator DentaQuest has disclosed a significant data breach that exposed the sensitive personal and health information of approximately…
NewsJun 4, 2026
IMA Diligence Services Data Breach Impacts 525,000 People
IMA Diligence Services has disclosed a data breach affecting approximately 525,000 individuals after attackers accessed a legacy server managed by a…
NewsJun 4, 2026
UN Food Agency Discloses Breach Affecting 600,000 Gaza Households
The United Nations World Food Programme revealed that its self-registration application for Palestine was breached, exposing data tied to 600,000 Gaza…
NewsJun 1, 2026
Tina Peters, Convicted in Election-Security Breach, Emerges Defiant and Vows Legal Fight
Former Colorado election clerk Tina Peters, convicted for her role in an election security breach, struck an unrepentant pose in her first interview after…
NewsMay 29, 2026
California AG Sues 23andMe Over 2023 Breach Exposing Genetic Health Data
California Attorney General Rob Bonta filed a lawsuit against 23andMe — now Chrome Holding Co. — over its failure to protect millions of customers'...
NewsMay 29, 2026
Charter Communications Data Breach Affects 4.9 Million Accounts
ShinyHunters stole personal information from 4.9 million Charter Communications accounts in an April 2026 hack, confirmed via Have I Been Pwned.
NewsMay 29, 2026
In Other News: Trump Mobile Data Breach, FIFA World Cup Phishing, CISA Responds to Supply Chain Attacks
Noteworthy cybersecurity stories from the week: Trump Mobile exposes customer data, phishers target 2026 FIFA World Cup fans, and CISA responds to recent...
NewsMay 29, 2026
Man Sent to Prison for Selling Data of 7 Million Elderly Americans
A North Carolina man was sentenced to more than 10 years in federal prison for selling the personal information of over 7 million elderly Americans to...
NewsMay 28, 2026
Carnival Cruise Confirms Data Breach Affecting Nearly 6 Million People
Carnival Corporation, the world's largest cruise operator, confirms a breach affecting nearly 6M people after ShinyHunters' April 2026 extortion claim.
NewsMay 28, 2026
Latin American Cybercriminals Hoover Up Government Data
A reported breach of 5.8M Uruguayan records is the latest in a growing pattern of attackers monetizing Latin American government citizen data.
NewsMay 27, 2026
Dutch Police Arrest Man Over Cyber Breach at Ajax Football Club
Dutch police arrested a suspect over a cyber breach at Ajax football club, seizing digital storage devices from his home in the town of Buren.
NewsMay 26, 2026
185,000 Likely Impacted by 7-Eleven Data Breach
ShinyHunters has leaked data allegedly stolen from 7-Eleven containing email addresses, names, physical addresses, and dates of birth for approximately 185,000.
NewsMay 26, 2026
7-Eleven Data Breach Exposes Personal Information of 185,000 People
The ShinyHunters extortion gang stole the personal information of over 185,000 customers after breaching convenience store giant 7-Eleven in April 2026, with.
NewsMay 26, 2026
DocketWise Data Breach Impacts 143,000 Individuals
Immigration law practice management software DocketWise has disclosed a data breach affecting 143,000 individuals, with hackers accessing names, addresses.
NewsletterMay 26, 2026
May 26 Digest: SharePoint RCE, Megalodon CI/CD Blitz
Microsoft patches a CVSS 8.8 SharePoint RCE; the Megalodon campaign poisons 5,561 GitHub repos in six hours; 7-Eleven's ShinyHunters breach hits 185,000; and a.
NewsMay 25, 2026
266,000 Affected by Data Breach at Radiology Associates of Richmond
Radiology Associates of Richmond has disclosed a cyberattack in which threat actors stole files containing names and protected health information belonging to.
NewsMay 25, 2026
Oncology Institute Discloses Data Breach
An unnamed oncology institute has disclosed a data breach originating from a third-party vendor compromise, with TriZetto cited as one possible candidate.
NewsMay 23, 2026
Grafana Says Codebase and Other Data Stolen via TanStack
Grafana confirmed attackers stole internal source code and data after a GitHub token compromised in the TanStack npm supply chain attack was never...
NewsMay 22, 2026
Lawmakers Demand Answers as CISA Tries to Contain Data Leak
Members of Congress are demanding answers from CISA after a contractor intentionally published AWS GovCloud access keys and a trove of agency secrets on a...
NewsMay 22, 2026
Verizon DBIR 2026: Healthcare Fends Off Rising Social
The 2026 Verizon Data Breach Investigations Report highlights how evolving social engineering tactics are making the healthcare sector more vulnerable,...
NewsMay 21, 2026
GitHub Links Repo Breach to TanStack npm Supply-Chain Attack
GitHub has confirmed that hackers who stole 3,800 internal repositories gained access through a malicious version of the Nx Console VS Code extension...
NewsMay 20, 2026
GitHub Breached — Employee Device Hack Led to Exfiltration
GitHub is investigating unauthorized access to thousands of internal repositories after an employee device was compromised through the TanStack npm supply...
NewsMay 20, 2026
GitHub Confirms Being Hacked by TeamPCP, Says Customer Data
GitHub has officially confirmed it was breached by the TeamPCP threat actor after the group advertised stolen internal source code on a cybercrime forum....
NewsMay 20, 2026
GitHub Confirms Breach, 4K Internal Repos Stolen
GitHub has confirmed a data breach in which the TeamPCP threat actor stole approximately 4,000 internal repositories. The company states no customer data...
NewsMay 20, 2026
GitHub Investigating TeamPCP Claimed Breach of ~4,000
GitHub is investigating unauthorized access to its internal repositories after the TeamPCP threat actor listed approximately 4,000 GitHub internal repos...
NewsMay 20, 2026
Grafana Breach Caused by Missed Token Rotation After
Grafana Labs has revealed that its May 2026 source code breach was caused by a single GitHub workflow token that was inadvertently missed during the token...
NewsMay 20, 2026
Grafana GitHub Breach Exposes Source Code via TanStack npm
Grafana Labs confirms its GitHub environment was breached through the TanStack npm supply chain attack, exposing public and private source code...
NewsletterMay 20, 2026
May 20 Digest: Exchange Zero-Day, Verizon DBIR, GitHub
A Microsoft Exchange zero-day is being exploited with no patch in sight; Verizon DBIR 2026 marks a landmark shift — vulnerability exploitation now...
NewsMay 19, 2026
7-Eleven Confirms Data Breach Claimed by the ShinyHunters
Convenience store giant 7-Eleven has confirmed a data breach after the ShinyHunters extortion group publicly claimed responsibility for the attack. The...
NewsMay 19, 2026
Verizon DBIR 2026: Vulnerability Exploitation Overtakes
Verizon's 2026 Data Breach Investigations Report reveals a landmark shift: vulnerability exploitation has surpassed credential abuse as the leading breach...
NewsMay 18, 2026
7-Eleven Data Breach Confirmed After ShinyHunters Ransom
7-Eleven has confirmed a data breach after ShinyHunters claimed to have stolen more than 600,000 Salesforce records containing personal information and...
NewsMay 18, 2026
Grafana Confirms Breach After Hackers Claim They Stole Data
Grafana has confirmed a security breach after the Coinbase Cartel cybercrime group — linked to ShinyHunters, Scattered Spider, and Lapsus$ — claimed to...
NewsMay 18, 2026
Grafana Says Stolen GitHub Token Let Hackers Steal Codebase
Grafana Labs confirmed that hackers downloaded its source code after breaching its GitHub environment using a stolen access token. The attackers attempted...
NewsMay 18, 2026
Millions Impacted Across Several US Healthcare Data Breaches
Multiple healthcare data breaches impacting hundreds of thousands to millions of individuals have been added to the HHS breach tracker, continuing a...
NewsMay 17, 2026
Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt
Grafana has disclosed that an unauthorized party obtained a GitHub access token, used it to download the company's entire codebase, and then attempted...
NewsMay 16, 2026
In Other News: Big Tech vs Canada Encryption Bill, Cisco's
Other noteworthy stories this week: Big Tech firms push back against Canada's encryption legislation, Cisco releases a free AI security specification, and...
NewsMay 15, 2026
American Lending Center Data Breach Affects 123,000
The non-bank lender discovered a ransomware attack nearly one year ago but only recently completed its investigation, notifying over 123,000 individuals...
NewsMay 15, 2026
TeamPCP Hackers Advertise Mistral AI Source Code Repos for Sale
The TeamPCP threat group claims to have stolen source code repositories from Mistral AI and is advertising them for sale on criminal forums, threatening...
NewsMay 14, 2026
OpenAI Confirms Security Breach in TanStack Supply Chain
OpenAI confirmed that two employees' devices were compromised during the TanStack supply chain attack, which hit hundreds of npm and PyPI packages. The...
NewsMay 13, 2026
716,000 Impacted by OpenLoop Health Data Breach
Telehealth platform OpenLoop Health has disclosed that a January 2026 cyberattack resulted in the exfiltration of personal information belonging to...
NewsMay 13, 2026
Foxconn Confirms Cyberattack Claimed by Nitrogen Ransomware
Foxconn, the world's largest electronics manufacturer, confirmed a cyberattack on its North American factories claimed by the Nitrogen ransomware gang,...
NewsMay 13, 2026
Foxconn Confirms North American Factories Hit by Cyberattack
Electronics manufacturing giant Foxconn has confirmed a cyberattack on its North American operations after the Nitrogen ransomware group claimed...
NewsMay 13, 2026
Government to Scrutinize Instructure Over Canvas
The House Committee on Homeland Security has demanded a briefing from Instructure, the company behind the Canvas LMS platform, after a ransomware attack...
NewsMay 13, 2026
Škoda Warns of Customer Data Breach After Online Shop Hack
Škoda Auto, the Czech automaker wholly owned by Volkswagen Group, has disclosed a data breach after attackers compromised its official online shop and...
NewsMay 12, 2026
Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65 TB Canvas Leak
Educational technology company Instructure, parent of Canvas LMS, has reached an undisclosed 'agreement' with the ShinyHunters extortion group after a...
NewsMay 12, 2026
UK Fines Water Supplier $1.3M for Exposing Data of 664K
The UK's Information Commissioner's Office has fined South Staffordshire Water Plc and its parent company £963,900 ($1.3 million) after a cyberattack...
NewsMay 12, 2026
West Pharmaceutical Services Hit by Disruptive Ransomware
West Pharmaceutical Services, a global manufacturer of drug delivery systems and packaging, has taken systems offline worldwide after hackers exfiltrated...
NewsMay 12, 2026
West Pharmaceutical Warns of Ransomware Attack Impacting
West Pharmaceutical Services filed an SEC disclosure warning that hackers breached the company on May 4, stole data, and encrypted systems — forcing a...
NewsletterMay 12, 2026
May 12 Digest: AI-Generated Zero-Day, Shai-Hulud Worm
Google confirms the first AI-generated zero-day in the wild; TeamPCP's Mini Shai-Hulud worm hits TanStack, Mistral AI, and Guardrails AI; Instructure pays...
NewsMay 11, 2026
Skoda Data Breach Hits Online Shop Customers
Hackers exploited a vulnerability in Skoda's online shop portal to access customer personal data including names, addresses, email addresses, and phone...
NewsMay 11, 2026
UK Water Utility Fined £963,900 After Cl0p Lurked
The UK's Information Commissioner's Office fined South Staffordshire Water nearly £1 million after the Cl0p ransomware group maintained undetected access...
NewsMay 11, 2026
Why Changing Passwords Doesn't End an Active Directory
Resetting compromised passwords is a natural first response to a breach, but it's not enough. Cached credentials, Kerberos ticket grants, and persistent...
NewsMay 10, 2026
Canvas Breach Disrupts Schools & Colleges Nationwide
A data extortion attack against Canvas LMS defaced login pages with a ransom demand, disrupting classes and coursework at school districts and...
NewsMay 10, 2026
Canvas Login Portals Hacked in Mass ShinyHunters Extortion
ShinyHunters has struck education technology giant Instructure again, exploiting a fresh vulnerability to deface Canvas login portals across hundreds of...
NewsMay 10, 2026
GM to Pay Over $12 Million in California Privacy Settlement
General Motors has agreed to pay over $12 million to settle California privacy violations under the CCPA after sharing detailed driver behavior data —...
NewsMay 10, 2026
Multiple Universities Forced to Reschedule Final Exams
Dozens of universities were forced to reschedule final examinations after a cybercriminal group displayed threatening messages through Canvas, the widely...
NewsMay 9, 2026
GM to Pay Over $12 Million in Largest-Ever CCPA Fine Over
California regulators have issued a record $12 million settlement against General Motors for sharing OnStar driving behavior data with insurers without...
NewsMay 9, 2026
Trellix Source Code Breach Highlights Growing Supply Chain
Trellix, the enterprise security vendor formed from the merger of McAfee Enterprise and FireEye, has suffered a source code breach claimed by the...
NewsMay 9, 2026
Zara Data Breach Exposed Personal Information of 197,000
Hackers gained access to Zara's customer databases and stole personal information belonging to more than 197,000 individuals, with the breach surfacing...
NewsMay 8, 2026
NVIDIA Confirms GeForce NOW Data Breach Affecting Armenian
NVIDIA has confirmed that GeForce NOW user data was exposed in a data breach, with the incident specifically affecting users in Armenia. The company...
NewsMay 8, 2026
Trellix Source Code Breach Claimed by RansomHouse Hackers
The RansomHouse threat group has claimed responsibility for the Trellix source code repository breach disclosed last week, leaking a set of proof images...
NewsMay 2, 2026
Critical cPanel Flaw Mass-Exploited in 'Sorry' Ransomware
A newly disclosed critical vulnerability in cPanel and WHM tracked as CVE-2026-41940 is being mass-exploited by ransomware actors to breach web hosting...
NewsMay 2, 2026
Edu-Tech Firm Instructure Discloses Cyber Incident, Probes
Instructure, the company behind the widely used Canvas learning management system, has disclosed a cybersecurity incident and is investigating its scope....
NewsMay 2, 2026
Trellix Confirms Source Code Breach With Unauthorized
Cybersecurity vendor Trellix has confirmed unauthorized access to a portion of its source code repository, engaging leading forensic experts to assess the...
NewsMay 1, 2026
15-Year-Old Detained Over French Govt Agency Data Breach
French authorities have detained a 15-year-old suspected of selling data stolen in a cyberattack on France Titres (ANTS), the agency responsible for...
NewsApr 30, 2026
France Investigates 15-Year-Old Over Alleged Hack of National ID Agency
French authorities took a 15-year-old into police custody on April 25 over suspected involvement in a data breach targeting ANTS, the National Agency for...
NewsApr 30, 2026
Moldova's Health Insurance Agency Reports Possible Data
Moldova's national health insurance agency CNAM has disclosed a cyberattack that occurred several weeks ago, with technical assessments indicating a...
NewsApr 30, 2026
Sandhills Medical Says Ransomware Breach Affects 170,000
Healthcare organization took nearly one year to publicly disclose a data breach after being targeted by Inc Ransom ransomware, with approximately 170,000...
NewsApr 29, 2026
Learning from the Vercel Breach: Shadow AI and OAuth Sprawl
The Vercel breach, traced to a compromised third-party AI tool with OAuth access, illustrates how Shadow AI adoption and unchecked OAuth integrations are...
NewsApr 28, 2026
Medtronic Hack Confirmed After ShinyHunters Threatens Data
Medical device giant Medtronic has confirmed a data breach after the ShinyHunters cybercrime group claimed to have stolen records belonging to 9 million...
NewsApr 28, 2026
Video Service Vimeo Confirms Anodot Breach Exposed User Data
Vimeo has confirmed that customer and user data was accessed without authorization following a security breach at Anodot, a data anomaly detection...
NewsletterApr 28, 2026
Apr 28 Digest: Medtronic 9M Breach, GitHub RCE, LiteLLM
ShinyHunters hits Medtronic and ADT in the same week, exposing millions of records; a critical one-push RCE lands in GitHub; LiteLLM's pre-auth SQL...
NewsApr 27, 2026
Checkmarx Confirms GitHub Repository Data Posted on Dark
Checkmarx has confirmed that data from its GitHub repositories has been published on the dark web following an investigation into the March 23 supply...
NewsApr 27, 2026
Home Security Giant ADT Data Breach Affects 5.5 Million
The ShinyHunters extortion group stole the personal information of 5.5 million individuals after breaching the systems of home security giant ADT earlier...
NewsApr 27, 2026
Medtronic Confirms Breach After Hackers Claim 9 Million
Medical device giant Medtronic has disclosed a data breach after hackers claimed to have stolen data from 9 million individuals across the company's...
NewsApr 27, 2026
PhantomCore Exploits TrueConf Vulnerabilities to Breach
Pro-Ukrainian hacktivist group PhantomCore has been attributed to a sustained campaign targeting TrueConf video conferencing servers across Russia since...
NewsApr 26, 2026
American Utility Firm Itron Discloses Breach of Internal IT
Itron, Inc. has disclosed a cybersecurity incident via SEC Form 8-K in which an unauthorized third party accessed certain internal systems at the utility...
NewsApr 25, 2026
ADT Says Customer Data Stolen in Cyber Intrusion
Home security giant ADT confirmed that cybercriminals breached its systems and stole a limited set of customer and prospective customer information. The...
NewsApr 25, 2026
DORA and Operational Resilience: Credential Management as a
Article 9 of DORA makes authentication and access control a legal obligation for EU financial entities. With stolen credentials now the single largest...
NewsApr 24, 2026
ADT Confirms Data Breach After ShinyHunters Leak Threat
Home security giant ADT has confirmed a data breach after the ShinyHunters extortion group threatened to publish stolen data unless a ransom is paid,...
SecurityApr 24, 2026
CVE-2026-6887: Borg SPM 2007 SQL Injection Exposes Full
A critical SQL injection vulnerability in the end-of-life Borg SPM 2007 application allows unauthenticated remote attackers to inject arbitrary SQL...
NewsApr 23, 2026
Vercel Finds More Compromised Accounts in Context.ai-Linked
Vercel has expanded its breach investigation tied to the Context.ai supply chain compromise and identified additional customer accounts with unauthorized...
NewsApr 22, 2026
France Titres Confirms Data Breach as Hacker Offers Stolen
France Titres, the French government agency responsible for issuing and managing administrative documents, has confirmed a cyberattack after a threat...
NewsApr 21, 2026
Cloud Platform Vercel Says Company Breached Through
Vercel has confirmed a security breach in which limited customer credentials were exposed after an employee's workstation was compromised through malware...
NewsApr 21, 2026
French Government Agency France Titres Confirms Data Breach
France Titres, the French government agency responsible for issuing administrative identity documents, has confirmed a data breach after a threat actor...
NewsletterApr 21, 2026
Apr 21 Digest: Vercel AI Tool Breach, DPRK $290M, ActiveMQ
Vercel confirms breach through a compromised third-party AI coding tool; North Korean hackers attributed to a $290 million crypto theft; 6,400 Apache...
NewsApr 20, 2026
Next.js Creator Vercel Hacked
Vercel confirmed suffering a breach after a hacker claiming to be part of ShinyHunters offered to sell stolen data for $2 million, affecting the company...
NewsApr 20, 2026
Vercel Breach Tied to Context AI Hack Exposes Limited
Vercel's security breach originated from the compromise of Context.ai, a third-party AI tool used by a company employee, allowing attackers to gain...
NewsApr 20, 2026
Vercel Employee's AI Tool Access Led to Data Breach
Stolen OAuth tokens from a compromised employee AI tool enabled attackers to pivot into Vercel's internal systems. Security researchers warn that...
NewsApr 20, 2026
Vercel's Security Breach Started with Malware Disguised as
The Vercel security breach originated at Context.ai after an employee downloaded Lumma Stealer disguised as Roblox cheat software. The incident exposes...
NewsApr 19, 2026
6-Year Ransomware Campaign Targets Turkish Homes and SMBs
A ransomware campaign operating since at least 2019 has persistently targeted Turkish home users and small-to-medium businesses, largely evading major...
NewsApr 19, 2026
Microsoft, Salesforce Patch AI Agent Data Leak Flaws
Prompt injection vulnerabilities in Salesforce Agentforce and Microsoft Copilot would have allowed unauthenticated attackers to exfiltrate sensitive CRM...
NewsApr 19, 2026
Vercel Confirms Breach as Hackers Claim to Be Selling
Cloud development platform Vercel has confirmed a security incident after threat actors claimed to have stolen internal databases, API keys, tokens, and...
NewsApr 11, 2026
Your Next Breach Will Look Like Business as Usual
Credential-based attacks now dominate the threat landscape, and traditional detection models are failing. Here are the fundamental shifts cybersecurity...
NewsApr 10, 2026
Hims & Hers Breach Exposes the Most Sensitive Kinds of Patient PHI
ShinyHunters exploited compromised Okta SSO credentials to breach the Hims & Hers Zendesk customer support platform, exposing treatment category data for...
NewsApr 9, 2026
Breach Exposes Sensitive LAPD Files Stored in City Attorney
A data breach of the Los Angeles city attorney's office systems has exposed sensitive LAPD law enforcement files, with social media posts advertising 7.7...
NewsApr 9, 2026
Cryptocurrency ATM Giant Bitcoin Depot Reports $3.6 Million
Bitcoin Depot, one of North America's largest Bitcoin ATM operators, has filed an SEC disclosure revealing a cyberattack in which threat actors gained...
NewsApr 9, 2026
Eurail Says December Data Breach Impacts 300,000 Individuals
Eurail B.V. has confirmed that a December 26, 2025 breach exposed the personal data of 308,777 individuals — including passport copies, IBAN bank details,...
NewsApr 9, 2026
Hackers Steal $3.6 Million from Crypto ATM Giant Bitcoin
Bitcoin Depot, operator of one of the largest Bitcoin ATM networks in North America, disclosed that attackers stole $3.665 million in Bitcoin from its hot...
NewsApr 8, 2026
300,000+ Passport Numbers Leaked in December Eurail Data
Eurail has disclosed a December 2025 data breach in which a hacker stole 1.3 TB of data including passport numbers for over 300,000 customers, source...
NewsApr 8, 2026
Snowflake Customers Hit in Data Theft Attacks After SaaS
Over a dozen companies have suffered data theft attacks after a SaaS integration provider was breached and authentication tokens stolen, enabling...
NewsApr 7, 2026
FBI: Americans Lost a Record $21 Billion to Cybercrime Last
The FBI's Internet Crime Complaint Center reports that U.S. victims lost nearly $21 billion to cyber-enabled crimes in 2025 — an all-time record — driven...
NewsApr 7, 2026
Medusa Ransomware Is Fast to Exploit Fresh Vulnerabilities
SecurityWeek reports that the Medusa ransomware group has developed a dangerous capability: rapidly weaponizing newly disclosed vulnerabilities —...
NewsApr 7, 2026
Medusa Ransomware Exploits Zero-Days to Deploy Ransomware
Microsoft has raised the alarm over Medusa ransomware's unprecedented operational speed, with the group now exploiting zero-day vulnerabilities before...
NewsApr 7, 2026
The Hidden Cost of Recurring Credential Incidents
IBM's 2025 Cost of a Data Breach Report puts the average breach at $4.4 million — but that headline figure understates the true damage when credential...
NewsApr 6, 2026
Medusa Ransomware Group Exploits Zero-Days to Strike Within
Microsoft warns that Medusa ransomware operators are exploiting zero-day vulnerabilities approximately one week before public disclosure, enabling the...
NewsApr 6, 2026
GPUBreach: New Rowhammer Attack on GPU GDDR6 Memory Enables
Researchers from the University of Toronto have demonstrated GPUBreach, a novel attack that induces Rowhammer bit-flips in GPU GDDR6 memory to bypass...
NewsApr 6, 2026
Why Simple Breach Monitoring Is No Longer Enough
Infostealers are harvesting credentials and session cookies at scale, quietly bypassing MFA and traditional defenses. Here's why organizations need...
NewsApr 4, 2026
EU Cyber Agency Attributes Major Data Breach to TeamPCP
ENISA has officially attributed the massive European Commission data breach — and a wider campaign affecting 30 EU institutions — to the TeamPCP hacking...
NewsApr 4, 2026
European Commission Confirms Data Breach Linked to Trivy
The European Commission has confirmed a major data breach of its AWS environment, with over 300GB of data stolen — including personal information of EU...
NewsApr 4, 2026
Hims & Hers Warns of Data Breach After Zendesk Support
Telehealth giant Hims & Hers Health is warning customers of a data breach after support tickets were stolen from a third-party customer service platform,...
NewsApr 3, 2026
250,000 Affected by Data Breach at Nacogdoches Memorial
Nacogdoches Memorial Hospital in Texas has disclosed a January 2026 data breach in which a threat actor accessed its internal network and stole personal...
NewsApr 3, 2026
Blast Radius of TeamPCP Attacks Expands Amid Hacker
As organizations disclose breaches tied to TeamPCP's supply chain attacks, ShinyHunters and Lapsus$ are taking credit and creating a murky attribution...
NewsApr 3, 2026
CERT-EU: European Commission Hack Exposes Data of 30 EU
CERT-EU has attributed the European Commission cloud account compromise to the TeamPCP threat group, revealing the breach exposed sensitive data from at...
NewsApr 3, 2026
Claude Source Code Leak Highlights Big Supply Chain Missteps
The accidental exposure of Anthropic's Claude Code source code via an npm packaging error is the latest reminder that software supply chains need...
NewsApr 3, 2026
Die Linke German Political Party Confirms Data Stolen by Qilin Ransomware
The Qilin ransomware group has claimed responsibility for an attack against German political party Die Linke, forcing an IT systems outage and threatening...
NewsApr 2, 2026
Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts
A large-scale credential harvesting campaign has been observed exploiting the React2Shell vulnerability (CVE-2025-55182) as an initial infection vector,...
NewsApr 2, 2026
Nissan Says Stolen Data Came from Third-Party Vendor After
A hacking group claimed to have breached the file-transfer system used by a company that provides services to Nissan and Infiniti dealerships across North...
NewsApr 1, 2026
Claude Code Source Leaked via npm Packaging Error
Anthropic confirmed that internal source code for its Claude Code AI coding assistant was accidentally published to npm due to a human packaging error. No...
NewsMar 31, 2026
Cisco Source Code Stolen in Trivy-Linked Dev Environment
Cisco has suffered a major cyberattack after threat actors leveraged stolen credentials from the recent Trivy supply chain compromise to breach its...
NewsMar 31, 2026
Dutch Finance Ministry Takes Treasury Banking Portal
The Netherlands Ministry of Finance has taken its treasury banking portal offline after detecting a cyberattack that went undetected for roughly two...
NewsMar 31, 2026
Leak Bazaar: New Criminal Service Plans to Monetize Data
A new underground platform called Leak Bazaar positions itself as a data-processing business, offering to monetize stolen records on behalf of ransomware...
NewsMar 31, 2026
Stolen Logins Are Fueling Everything From Ransomware to Nation-State Cyberattacks
A new report reveals how industrialized credential theft has become the common thread connecting ransomware campaigns, SaaS platform breaches, and...
NewsMar 30, 2026
European Commission Confirms Data Breach After Europa.eu
The European Commission has confirmed a data breach after its Europa.eu web platform was compromised in an attack claimed by the ShinyHunters extortion gang.
NewsMar 30, 2026
Healthcare Software Firm CareCloud Informs SEC of Potential
CareCloud has notified the U.S. Securities and Exchange Commission of a cyberattack that may have resulted in the unauthorized access and potential...
NewsMar 30, 2026
Healthcare Tech Firm CareCloud Says Hackers Stole Patient
Healthcare IT company CareCloud has disclosed a cyberattack that resulted in the theft of sensitive patient data and caused an eight-hour network outage,...
NewsMar 29, 2026
FBI Confirms Hack of Director Patel's Personal Email Inbox
Iran-linked Handala hackers have breached the personal email account of FBI Director Kash Patel, publishing stolen photos and documents in a high-profile...
NewsMar 29, 2026
ShinyHunters Breach Infinite Campus — K-12 Platform Serving
ShinyHunters claimed a breach of Infinite Campus on March 22, 2026, after gaining access through an employee's Salesforce account. The K-12 student...
NewsMar 28, 2026
Iran-Linked Hackers Breach FBI Director's Personal Email
Iran's Handala Hack Team breached the personal email of FBI Director Kash Patel, leaking photos and documents online, while simultaneously launching a...
NewsMar 27, 2026
European Commission Investigating Breach After Amazon Cloud
The European Commission is investigating a security breach after a threat actor gained unauthorized access to its Amazon Web Services cloud environment...
NewsMar 26, 2026
Russia Detains Alleged Admin of LeakBase Cybercrime Forum
Russian authorities have detained a suspected administrator of LeakBase, a major stolen-data marketplace with over 147,000 subscribers, just weeks after...
NewsMar 25, 2026
DarkSword GitHub Leak Threatens to Turn Elite iPhone
Researchers say the GitHub leak of the DarkSword iOS exploit chain — six chained vulnerabilities targeting iOS 18.4 through 18.7 — threatens to...
NewsMar 25, 2026
LeakBase Admin Arrested in Russia Over Massive Stolen
Russian law enforcement has arrested the alleged administrator of LeakBase — a credential marketplace operating since 2021 with 142,000 members and...
NewsletterMar 25, 2026
Mar 25 Digest: DarkSword Leaks iPhone Zero-Days
This week: the DarkSword iOS exploit chain published on GitHub threatens to democratize nation-state-grade iPhone hacking; CanisterWorm turns the Trivy...
NewsMar 24, 2026
3.1 Million Impacted by QualDerm Partners Data Breach
QualDerm Partners, a national dermatology network operating 158 practices across 17 states, disclosed a December 2025 data breach that exposed the medical...
NewsMar 24, 2026
Hacker Walks Away with $24.5 Million After Breaching Resolv
A compromised private key allowed an attacker to mint $80 million in unbacked USR stablecoins on the Resolv DeFi protocol, extract $24.5 million in ETH,...
NewsMar 23, 2026
Crunchyroll Probes Breach After Hacker Claims to Steal 6.8M
Popular anime streaming platform Crunchyroll is investigating a breach after hackers claimed to have stolen personal information for approximately 6.8...
NewsMar 23, 2026
Mazda Discloses Security Breach Exposing Employee and Partner Data
Mazda Motor Corporation has disclosed a security incident detected in December 2025 in which unauthorized access to a warehouse management system exposed...
NewsMar 22, 2026
Cegedim Santé Breach Exposes 15.8 Million French Healthcare
A cyberattack on French healthcare software vendor Cegedim Santé exposed 15.8 million patient records from 3,800 doctors, with leaked data including...
NewsMar 22, 2026
Malaysia Airlines Listed by Qilin Ransomware Group
The Qilin ransomware-as-a-service group has listed Malaysia Airlines on its leak site, claiming access to passenger records, personnel files, and...
NewsMar 22, 2026
Trivy Vulnerability Scanner Breached to Push Infostealer
The Trivy open-source vulnerability scanner was compromised in a supply chain attack by the threat group TeamPCP, which hijacked 75 release tags and...
NewsMar 21, 2026
Two US Cybersecurity Professionals Plead Guilty to BlackCat
Former incident responder Ryan Goldberg and ransomware negotiator Kevin Martin admitted to running ALPHV/BlackCat ransomware operations against five US...
NewsMar 21, 2026
Marquis Fintech Breach Exposes 672,000 Banking Customers
Plano-based fintech vendor Marquis disclosed that a ransomware attack exploiting a SonicWall firewall vulnerability compromised Social Security numbers,...
NewsMar 20, 2026
Navia Data Breach Impacts 2.7 Million People
Navia Benefit Solutions has confirmed a data breach that exposed personal and health plan information belonging to approximately 2.7 million individuals,...
NewsMar 20, 2026
Navia Discloses Data Breach Impacting 2.7 Million People
Navia Benefit Solutions has notified nearly 2.7 million individuals of a data breach that exposed sensitive personal and health-related information to...
NewsMar 20, 2026
Trivy Security Scanner GitHub Actions Breached — 75 Tags
Trivy, Aqua Security's widely used open-source vulnerability scanner, was compromised a second time in a month. Attackers hijacked 75 GitHub Actions tags...
NewsMar 18, 2026
Marquis Ransomware Breach: 672K People Exposed as Attack
Texas fintech Marquis Software Solutions has confirmed a ransomware attack in August 2025 exposed data of 672,000+ individuals and disrupted operations at...
NewsMar 18, 2026
Shadow AI in SaaS: How Hidden AI Agents Are Enabling
A new Grip Security report analyzing 23,000 SaaS environments finds 100% of companies operate shadow AI they cannot see or control — with a 490% spike in...
NewsletterMar 17, 2026
Mar 17 Digest: GlassWorm Poisons Python, n8n RCE Hits KEV
This week: GlassWorm escalates with 72 malicious Open VSX extensions and a GitHub token force-push campaign poisoning hundreds of Python repos; CISA adds...
NewsMar 13, 2026
England Hockey Investigating Data Breach After AiLock
England Hockey, the national governing body for field hockey in England, is investigating a potential data breach after the AiLock ransomware group listed...
NewsMar 13, 2026
Telus Digital Confirms Massive Breach After ShinyHunters
Canadian telecom giant Telus Digital has confirmed a security incident after the ShinyHunters hacking group claimed to have stolen nearly 1 petabyte of...
NewsletterMar 11, 2026
Mar 11 Digest: npm Supply Chain Seizes AWS Admin, 3.4M
This week: UNC6426 weaponizes a stale npm supply chain compromise to seize full AWS admin in 72 hours, Cognizant TriZetto leaks 3.4 million patient...
NewsMar 9, 2026
Ericsson US Discloses Data Breach Affecting Employees and Customers
Ericsson's U.S. subsidiary has disclosed a data breach after attackers hacked a third-party service provider between April 17–22, 2025, exposing names,...
NewsMar 7, 2026
Cognizant TriZetto Breach Exposes Health Data of 3.4
TriZetto Provider Solutions, a Cognizant subsidiary serving 875,000 US healthcare providers, has confirmed a 2024 cyberattack went undetected for nearly a...
NewsMar 4, 2026
LexisNexis Confirms Cloud Breach Exposing 400K User
LexisNexis Legal & Professional confirms a data breach after threat actor FulcrumSec exploited an unpatched React2Shell vulnerability to exfiltrate 2.04...
NewsFeb 27, 2026
IDMerit KYC Data Breach Exposes 1 Billion Records Across 26
An unprotected MongoDB instance belonging to identity verification firm IDMerit left over 1 billion personal records — including SSNs, passport numbers,...
NewsFeb 24, 2026
AT&T Breach Data Resurfaces: 176 Million Records with Fully
A repackaged dataset containing 176 million AT&T customer records — including 148 million now-decrypted Social Security numbers — began circulating among...
NewsFeb 23, 2026
HellCat Ransomware Group Breaches Ascom, Exfiltrates 44GB
The HellCat ransomware group has breached Swiss enterprise communications provider Ascom by exploiting Jira credentials harvested through infostealer...
NewsFeb 20, 2026
Fintech Giant Figure Technology Confirms Breach: Nearly 1
Blockchain-based lending platform Figure Technology Solutions confirms a data breach affecting nearly 1 million customers after ShinyHunters exploited an...
NewsFeb 20, 2026
ShinyHunters Dumps Harvard and UPenn Data After Ransom
The ShinyHunters cybercriminal syndicate has published stolen data from Harvard University and the University of Pennsylvania after both institutions...
NewsFeb 20, 2026
Japan Airlines Confirms Data Breach Affecting 28,000
Japan Airlines reveals unauthorized access to its Same-Day Baggage Delivery Service reservation system compromised personal data of up to 28,000...
NewsFeb 20, 2026
WormGPT Hacked: 19,000 Cybercriminal AI Platform Users
A threat actor has published a database allegedly containing 19,000 user records from WormGPT, the underground AI platform marketed for offensive hacking...
NewsFeb 19, 2026
Conduent Breach Balloons to Tens of Millions of Americans
The January 2025 ransomware attack on government technology giant Conduent continues to expand in scope, now confirmed to affect 15.4 million in Texas and...
NewsFeb 19, 2026
Hacker Accesses 1.2 Million French Bank Accounts via FICOBA Database
The French Economy Ministry confirmed that a hacker stole credentials from a government official and accessed France's FICOBA centralized bank account...
NewsFeb 16, 2026
ShinyHunters Dumps 600K+ Canada Goose Customer Records Online
Data extortion group ShinyHunters posts 1.67 GB of alleged Canada Goose customer data including names, emails, addresses, and partial payment card...
NewsFeb 13, 2026
AI Chat App Exposes 300 Million Private Messages from 25
A misconfigured Google Firebase backend in the Chat & Ask AI app exposed 300 million private chatbot conversations from 25 million users, including...
NewsFeb 13, 2026
Odido Data Breach Exposes 6.2 Million Dutch Telecom
The Netherlands' largest mobile network operator Odido has disclosed a data breach affecting 6.2 million customers, exposing names, addresses, bank...
NewsFeb 12, 2026
Louis Vuitton, Dior, and Tiffany Fined $25 Million Over
South Korea's data protection authority has fined three LVMH luxury brands a combined $25 million for data breaches affecting millions of customers, with...
NewsFeb 11, 2026
6.8 Billion Emails Exposed Online in Massive Data Leak
A hacker revealed 6.8 billion email addresses online on February 11, 2026, in one of the largest email database leaks in history, raising concerns about...
NewsFeb 5, 2026
ShinyHunters Dumps 5.1 Million Panera Bread Customer
The ShinyHunters hacking group published a 760 MB archive of 5.1 million Panera Bread customer records on the dark web after the company refused to pay a...
NewsFeb 5, 2026
Substack Discloses Data Breach After 100-Day Undetected
Substack CEO Chris Best disclosed a data breach on February 5 affecting approximately 700,000 users, after an unauthorized party accessed the platform...
SecurityFeb 5, 2026
Conduent Breach Expands: 15.4 Million Texans Affected, 8TB
Government technology provider Conduent's January 2025 ransomware breach now confirmed to affect at least 15.4 million people in Texas alone, with 8TB of...
SecurityFeb 5, 2026
Iron Mountain Responds to Everest Ransomware Breach Claims
Information management giant Iron Mountain clarifies that alleged 1.4TB breach was limited to marketing materials after single credential compromise.
NewsFeb 4, 2026
Ransomware Attacks Surge in Early 2026 with 26 Claims in One Day
Threat intelligence reports show 8 active ransomware groups claimed 26 victims on February 2nd alone, with major corporations including BASF and Honeywell...
NewsJan 23, 2026
Nike Hit by Data Breach: 1.4 TB of Supply Chain Data Leaked
WorldLeaks extortion group claims responsibility for a data breach on Nike, allegedly exposing 1.4 terabytes of internal data including supply chain and...
NewsJan 15, 2026
Covenant Health Ransomware Attack Impacts 478,000 Patients
Qilin ransomware group claims responsibility for massive healthcare breach, stealing 850GB of sensitive patient data across multiple states. Initial...
NewsJan 12, 2026
Telegram Investigating Claims of 30 Million User Data Breach
Telegram is investigating claims that a threat actor is selling data from 30 million users. The company denies any breach of its systems while the...
NewsJan 5, 2026
Sedgwick Government Solutions Hit by TridentLocker
Claims administration firm Sedgwick confirms cybersecurity incident at government subsidiary after TridentLocker ransomware group claims theft of 3.4 GB...

Anne Arundel County, Maryland Confirms August Breach as Rhysida Claims 2.6TB Data Theft

Moscow Police Detain Suspected DataSuckers Hackers Linked to Breaches in Ukraine and Russia

UK Legal Aid Agency: Hackers Stole Records Dating Back to 1978

FBI Seizes Seven Domains, Disrupts Flax Typhoon's MicroScan and FishHub Hacking Tools

Retail Giant Ahold Delhaize Takes Systems Offline After Cyberattack

Malware at Japanese Karaoke Giant's Data Contractor Exposes 8.6 Million Customer Records

Belarusian Cyber Partisans Admit to 2023 Breach of Russian Healthcare Network

iRhythm Breach Notifications Reveal At Least 360,000 Patients Affected

FBI Arrests Another Suspected ShinyHunters Hacker After Agency Breach

FBI Seizes Seven Domains Behind Flax Typhoon's MicroScan and FishHub Hacking Tools

ASOS Links Data Breach to Social Engineering Attack, Credential Theft

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Oracle Health Data Breach Tally Climbs to Nearly 20 Million

Advantest Discloses Data Breach Months After Ransomware Attack

Cyberattack on Arizona's Court System Exposes Data on Over 1.3 Million People

FBI Blames Contractor's Missed Patch for ShinyHunters Breach of Employee Data

Senate Passes Healthcare Cybersecurity Bill After 190 Million Impacted by Change Healthcare Breach

Arizona Court Breach Affects Over 1 Million People, Records Span 30 Years

ASOS Confirms Data Breach After “HACKED” In-App Notifications

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

Nikkei Discloses Breaches of Employee Microsoft 365, Google Workspace Accounts

Osaka Metropolitan University Cancels Classes After Suspected Ransomware Attack

South Korean Officials Believe AI Agents Were Used to Hack Several Banks

Oct 6 Digest: Citrix's Third NetScaler Zero-Day, FortiBleed Still Active, AI Hits Korean Banks

250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms

Alleged ShinyHunters Member Reportedly Detained in Jordan, Assisting FBI

Data Breach at Denmark's National Population Register Exposes 8.8 Million People

South Korea Probes Bank Breaches Amid Suspected AI-Powered Attacks

University of Illinois Chicago Hit by Ransomware Attack on Medical School

Dutch Police Arrest 'Reformed' Hacker in ShinyHunters Investigation

Alleged KillSec Ransomware Mastermind a 16-Year-Old

Danish University DTU Breach Exposes Data of Up to 200,000 People

Fakturownia Breach Exposes Password Hashes, Bank Data of Polish Invoicing Platform

Frontline Education Breach Exposes School District Employee Data

Hackers Stole Pentagon Personnel Records of Over 3 Million People

Bitget Hacked via Zero-Day in Third-Party Security Products

Arizona Supreme Court Says Hackers Stole Residents' Personal Data

Automated AI Agent Used to Breach Cybersecurity Nonprofit DIVD

OpenAI Apologizes After AI Agents Breached Four Australian Government Websites

ShinyHunters Trades Financial Extortion for a Reckless War of Ego With the FBI

Times Car Confirms Data Breach Affecting 6.6 Million User Accounts

Astrana latest healthcare tech firm to report data breach to SEC

Cyberattack Hits Welsh Police Force, May Have Affected Staff Data

Labcorp to Overhaul Data Security Practices, Pay $2.3 Million Fine Over Vendor Failings

U.S. Army Soldier Sentenced to 70 Months for AT&T, Verizon Extortion Scheme

3 Cyber Threats That Defined the Summer of 2026

Astrana Health Data Breach Exposes Private, Confidential Information

FBI Investigating Alleged ShinyHunters Breach of Its Jobs Site

Latvia Arrests Suspected Hacker for Electronics Repair Company Breach

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

BigCommerce Data Stolen via Ribon Apps Hack

Sweden Fines Miljödata $183,000 Over Breach Affecting 2.2 Million

BigCommerce Alerts Merchants of Data Breach Linked to Ribon Apps

CrowdSec Confirms Source Code Stolen in TanStack Supply Chain Attack

Google Confirms Gemini AI Autonomously Breached Three Real Companies During Security Testing

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

Gyazo Breach Exposes 23.6 Million User Records and 490M Image Metadata

Identity Visibility in 2026: The Foundation of Identity Security

ShinyHunters Hacks Clop Leak Site, Threatens to Extort Ransomware Gang

Spain's AEPD Logs First Data Breach Attributed to an Autonomous AI Agent

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

Hackers Claim Breach of Russian Election Systems Days Before Parliamentary Vote

Revolut Breach Ran 5 Months, Hit 680 High-Profile Accounts, Now Draws $3M Ransom Demand

240,000 Hit by Data Breach at Japan's Digital Agency

CenterPoint Energy Confirms Data Theft as Hacker Leaks Files, Threatens Grid Attack

Spain's Data Agency Gets First Report of AI-Powered Data Breach

CenterPoint Energy Warns Customers of Data Breach After Dark Web Post

Japan's Digital Agency Says VPN Flaw Exposed 246,000 Personnel Records

Revolut Discloses Data Breach Exposing Financial Info, Passports

Telus Warns Customers of Account Breaches

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Florida DMV Data Breach Tied to ShinyHunters Traced to Officer's Personal Device

FTC Rescinds Policy Requiring Health Apps to Notify Users After a Breach

Florida Confirms DMV Database Breached via Stolen Police Account

Trezor: 347,000 Users Targeted in Phishing Attacks After Brevo Breach

AdaptHealth Confirms 4.1 Million People Exposed in ShinyHunters-Linked Breach

IDScan Confirms Breach After Hackers Offer 153 Million Driver's License Scans for Sale

Surfshark VPN Says Hackers Breached Internal Testing, Proxy Servers