Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2226 articles
Attackers forced refrigeration controllers at supermarkets in France and other countries into defrost mode, spoiling stock and reportedly causing fires. The intrusion method and perpetrators remain unknown; CERT-FR advised operators to restrict controller access.
A cyberattack disrupted Danfoss refrigeration systems at supermarkets across France, spoiling food and damaging equipment. Attackers reportedly extended defrost cycles; the attackers remain unidentified, and CERT-FR recommends restricting access and resetting affected,с
Ledger says signers sold through Southeast Asian reseller CryptoBilis were modified with an implant that captured recovery phrases and sent them over LTE. Investigators estimate losses may exceed $86 million; Ledger has not confirmed the total.
Ahold Delhaize took some systems offline after identifying a security issue. Stores remain open, but local media reported delivery and online-order impacts at brands in Belgium and the Netherlands.
Attackers remotely manipulated Danfoss refrigeration controllers at hundreds of French supermarkets, warming some units to 50°C and causing food losses. Authorities have not identified the attackers or confirmed how they gained access.
A cyberattack reportedly changed refrigeration controller settings, spoiling food at hundreds of European supermarkets. The attack’s connection to previously disclosed Danfoss vulnerabilities has not been confirmed.
A U.K. cryptocurrency investor who says they bank with Revolut reported being robbed of about $800,000 in crypto and valuables. The article suggests a possible link to Revolut’s reported data breach, but does not confirm one.
A ransomware attack disrupted the Philippines’ DTI accounting database. COA reported that inaccessible cloud backups and no offline copies left the agency rebuilding records with documents obtained from auditors.
The Foschini Group said a cyber incident disrupted some IT systems at its UK operations, affecting Phase Eight, Hobbs and Whistles. An investigation into possible data compromise is ongoing; African and Australian operations are unaffected.
The contractor building the Fehmarn Belt link reported a cyber incident. Swedish media reported central systems were down, access cards were not working, staff were told to avoid computers, and several construction vessels were idle.
Mandurah SES confirmed unauthorized access to a server holding pre-2022 records. Historical data was later published online, but the unit says operations continue normally and there is no evidence other systems were affected.
Interseguro acknowledged unauthorized access to some customers’ information and said it contained the incident. Ransomware group Direwolf separately claimed to have stolen 2.5 TB, but that claim and the alleged data exposure have not been independently verified.
A former OpenAI engineer was arrested and charged with illegally intercepting oral communications after recording devices were allegedly found in company offices. OpenAI said it had no indication that company or customer data was accessed or taken.
TFG London says a cyberattack detected October 11 disrupted IT systems used by Phase Eight, Hobbs, and Whistles. Some systems remain unavailable; stores are open. The company is investigating possible customer data exposure.
A third-party IT security incident disrupted the UK Housing Ombudsman Service’s case management system. New complaints are temporarily unavailable online while the service investigates possible personal-data impact and restores systems.
An attacker reportedly used a leaked former employee password to abuse Pays ApS’s authorized CPR register access, exposing information on about 8.8 million people. Unusually high search activity was noticed after a large bill drew attention to it.
Canonical said a sustained DDoS attack disrupted its primary websites and some related services for a little over four hours. Most services were accessible again the next day; the attack’s origin and size remain undisclosed.
Ledger found an unauthorized hardware implant in one device sold by CryptoBilis and is investigating reports of stolen funds. It advises affected users to take precautions; the reseller has paused hardware wallet sales during the probe.
iRhythm says hackers accessed third-party-hosted business applications and stole patient and account data between June 3 and 8. The company has reported at least 360,000 affected people and says it found no impact to its operations or patient safety.
Publica says data leaked after a cyberattack on supplier PK Softech in late September. The data involved and any exposure of sensitive personal information remain under investigation; federal prosecutors have opened an inquiry.
A cyberattack disrupted refrigeration controls at nearly 150 Intermarché stores and affected other French supermarket chains, spoiling fresh and frozen food. Initial findings point to Danfoss equipment; repairs and security work are underway.
A cyber incident disrupted phone service at Alaska’s North Slope Borough School District. The district warned personal information may have been accessed, but disclosed no affected count and said it found no evidence of misuse or publication.
A cyberattack disrupted U.S.NEXT-hosted websites and email, affecting Mississippi counties and other customers. The company says it is working with federal teams and that certain databases and customer account information were not compromised; access to hosted contentor
Ahold Delhaize took some systems offline to contain a cybersecurity incident. Stores remain open, but employees and customers reported disrupted access to schedules, pay information, websites, apps, and order services.
