Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2226 articles
JBA said a ransomware attack took its servers offline and damaged data. Its chair said backups were stored in the same cloud as the original data, making restoration impossible; member and credit-card data were reportedly not exposed.
Koike Sanso Industry says a cyberattack caused system outages and disrupted some business. Files suspected of leaking were published online; the scope is under investigation, and the company reported a potential personal-information leak to Japan’s privacy regulator.
Seetelhotels says it detected a ransomware attack, isolated and took its systems offline, and is investigating whether personal data was exposed. Police are investigating, and guests are warned to watch for phishing.
For.um IT-Service confirmed an October 6, 2026 cyberattack affecting parts of its IT infrastructure. The company says it immediately isolated affected systems and took further measures with IT security experts.
A cyberattack breached Heber City’s government network; systems were back online Thursday, with no essential services suspended. A separate attack disrupted Bernalillo services. Data access and removal remain unknown.
A cybersecurity incident disrupted electronic and paper bankruptcy notices nationwide, delaying communications and affecting access to creditor mailing lists. The judiciary said BAE Systems was investigating; restoration timing and whether data was stolen were unknown.
Maruki Medical Equipment said suspicious access on Oct. 15, 2026, disabled its core ordering and inventory system, halting normal orders and shipments. It is investigating and accepting orders by fax; recovery timing is unknown.
Bernalillo officials said a cyberattack froze public-facing systems, blocking online water-bill payments and closing the motor vehicle office. Emergency services remained operational; officials have not said whether resident information was exposed.
The UK Legal Aid Agency says attackers who breached its systems in April 2025 stole records dating back to 1978, including sensitive applicant, recipient and provider data. The agency says there is no evidence the data has been published.
Attacks manipulated refrigeration systems at more than 400 grocery and retail stores, spoiling food and reportedly causing small fires. The actor is unknown; outdated firmware and exposed systems are cited as risks.
An actor claims to have copied 10 Ampath Laboratories databases containing patient, employee, financial and system data, including 80M+ admission records. The claim and data have not been independently verified.
An OpenAI engineering lead was arrested and charged with allegedly placing a concealed recording device in an executive conference room to capture sensitive conversations. OpenAI said it found no evidence of access to or theft of model weights, source code, or customer
Tangerhütte took its digital town hall offline after attackers exploited a software flaw. The developer suspects AI based on attack speed and changing actions; he says access was limited to test accounts, and police investigations continue.
Colmobil says it detected a cybersecurity incident and is investigating. Service centers remain open but are operating on a limited basis; the company has not disclosed whether systems or customer data were compromised.
Sangre de Cristo Electric Association says a criminal group accessed a server with internal files in September. The breach temporarily disrupted bill-payment and phone services; the cooperative says member payment data and the electric grid were unaffected.
Unknown attackers accessed an Offerz test environment containing a copy of order data for about 115,000 customers. Offerz could not confirm whether data was taken; it disabled the environment, reset passwords, and notified authorities.
A campaign using the ARTEX agentic penetration-testing framework targeted South Korean financial firms, exploiting internet-facing applications and exfiltrating personal information belonging to about 67,000 people.
Ledger confirmed that modified wallets sold through resellers contained LTE-connected implants that stole recovery phrases. It ordered a sales halt across Southeast Asia and Hong Kong while investigating; Trezor is also tightening reseller oversight.
An OpenAI employee was arrested after the company found a concealed recording device in a conference room. The company said it found no indication that he accessed or exfiltrated model weights, source code, or customer data.
A threat actor used compromised credentials and a poorly configured third-party gateway to access a European bank, scan its network, and target internal systems. Cortex XDR stopped an attempted WSUS exploit before persistence or lateral movement.
Attackers exploited an unknown vulnerability in software used by Tangerhütte’s digital town hall, which was taken offline. The provider suspects AI involvement, but it has not been independently confirmed; no real citizen data was reportedly accessed.
Attackers used a stolen employee credential to access Meta GitHub repositories, taking mostly business code and a small amount of personal data. Meta says its internal systems were not breached and has rotated repository secrets and added safeguards.
An actor using the handle “Feel” claims to have leaked IAD France agent, property and photo data. The dataset, its source and the stated counts have not been independently verified.
Eichstätt took all city servers offline after a cyberattack, disrupting administration and closing the town hall. Authorities are investigating a suspected ransomware attack; data theft is unconfirmed. The city warns residents to check purported bills carefully.
