Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2226 articles
Ovar Municipality says a cyberattack left its systems inoperable. Many in-person and online services will remain closed to the public through Wednesday, October 21, while response and recovery work continues.
Huntress observed unauthorized sign-ins to 173 Microsoft 365 tenants using a compromised ConnectWise Cloud Backup credential. ConnectWise disabled app access; it says it found no evidence backup data was compromised.
ConnectWise shut down Cloud Backup after attackers abused application identities to access Microsoft 365 tenants. Huntress identified at least 162 compromised tenants; the victim count and extent of data theft remain unclear.
An actor claims live access to an unnamed conference-space company’s support platform and exposure of user and ticket data. The breach, dataset contents and client relationships have not been independently verified.
An actor using the handle “0xRune” claims a 20 GB Cast AI archive contains AWS and GCP infrastructure backups and GitLab data. The archive and its contents have not been independently verified.
An actor using the handle “Shenron” claims to have released an APICRYPT-associated dataset listing 852,757 rows and 60,911 users. Its authenticity, source, counts and availability have not been independently verified.
A security incident affecting BAE Systems’ Bankruptcy Noticing Center has stopped federal bankruptcy courts from sending notices since October 9. The cause, any data compromise, and a restoration date remain unknown.
Vercel says an attacker used a compromise at Context[.]ai to access an employee’s Google Workspace account, pivot into Vercel systems and decrypt some non-sensitive customer environment variables. Remediation is complete; no Vercel npm packages were compromised.
A cyberattack in April encrypted teaching files and disrupted 1,285 computers at a Béziers high school. Investigators reportedly identified the Russian group Medusa; no sensitive data was reported stolen, and the school replaced hundreds of computers.
The Tenerife Medical Association says a cyberattack affected its technology infrastructure. It disconnected its network and is investigating after an automated note claimed related data was encrypted and stolen; no data leak has been detected so far.
Romania’s Central Depository says a cyberattack exposed users’ personal data, including national ID numbers and IBANs, and temporarily disrupted its investor enrollment app. It notified the national cybersecurity directorate and brought in specialists.
An Oregon filing put the potential scope of iRhythm's breach at 8.2 million people. The company previously told the SEC that a threat actor stole patient health information, personal information and proprietary data, then demanded payment.
A cybersecurity incident affecting BAE Systems’ Bankruptcy Noticing Center halted bankruptcy notice production and delivery nationwide from Oct. 9. The cause, any data access and a restoration date have not been disclosed.
Bristol City Council says attackers exported records from Southville Primary School’s management system. The school notified affected families and regulators; officials are investigating the breach and a possible, unconfirmed link to an earlier schools-network attack.
Burger King Japan says attackers accessed a server between October 2 and 7, exposing 11.18 million app-user records. The company says payment-card numbers and credentials were not stored there and reports no confirmed secondary harm.
The US Courts say a cyberattack on BAE Systems took down federal bankruptcy court notice systems and halted production and distribution of notices. BAE is investigating and working to restore operations.
A second attack on Southville Primary School reportedly exported records. An earlier attack disrupted the shared network at 88 Bristol schools; 84 had limited internet access restored by Oct. 14. Investigations continue.
The article says researchers found SIM-enabled hardware implants in Ledger wallets that steal recovery seeds. It claims more than $100 million has been stolen, but says the full scope is unknown.
The Clinique vétérinaire Voltaire in Dijon confirmed a cyberattack on October 13, 2026. Its website and online appointments remained unavailable on October 15; the clinic reported no data leak or public attacker claim.
A forensic review found that the UK Legal Aid Agency breach compromised records dating to 1978, including personal data of legal aid applicants, practitioners and some probation service users. The agency says it has no evidence the data was released or sold.
France’s cybersecurity agency expanded its alert to Copeland and Dixell controllers after a refrigeration attack affected about 700 supermarkets. The access method is unknown; authorities recommend disconnecting exposed controllers and securing remote access.
DarkOwl traced the resale of a dataset advertised as more than 160 million North American identity documents. IDScan disclosed possible unauthorized access, but DarkOwl could not independently confirm the dataset came from the company.
CenterPoint Energy reported that 1,062,060 Texas residents were affected by a data breach involving names, addresses, Social Security numbers, and driver’s license numbers. The total impact across other states remains unclear.
A cyberattack on a contractor-run FMCSA contact center disrupted its website and phone services. The Transportation Department said agency data was not compromised; the investigation is ongoing.
