Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2226 articles
Attackers remotely triggered defrosting in supermarket refrigeration systems, affecting an estimated 250 to 350 stores across several French chains and causing food waste. Authorities have opened an investigation; the attack method is not yet known.
Ledger confirmed an unauthorized hardware implant in at least one device linked to reports of stolen cryptocurrency from wallets sold through CryptoBilis. Researchers say implants captured screen output and button presses, then sent seed phrases over LTE.
A ransomware.live post says threat actor N0n encrypted files at Florida-based Company #22 and claims stolen data will be exposed on October 14, 2026. The claims have not been independently confirmed.
Egide says a cyberattack detected at an external IT provider on October 6, 2026, may have affected systems at its Bollène site, where some operations were suspended as investigations and restoration continue.
Malware found on contractor Nippon Columbia’s system exposed records for 8.63 million Daiichi Kosho customers and 93,000 employees. Data theft has not been confirmed; the contractor reset credentials and is investigating.
Arizona court officials say attackers targeted the state court system and may have copied personally identifiable information. The courts are notifying people believed affected and supporting an FBI investigation.
iRhythm says attackers used social engineering to access third-party business applications from June 3 to June 8 and steal personal, patient and insurance information affecting at least 360,000 people. Clinical systems and operations were not disrupted.
Kassel district hospitals say a cyberattack was detected early and prompted emergency IT measures. Care at Hofgeismar and Wolfhagen continues without disruption, while investigators assess whether personal data was exposed.
A cyber incident disrupted phones and internet in North Platte and Lincoln County, Nebraska, prompting office closures and state assistance. Officials said emergency services remained operational and the breach was contained, but data access and restoration timing were未
A Chinese-speaking hacker used ARTEX AI and Claude agents to target South Korean banks, exposing customer and credit-card data and causing outages. Researchers linked the activity to infrastructure containing AI-tool session records.
Pathao confirmed malicious actors obtained some users’ names, email addresses and phone numbers in an October 4 incident that disrupted services. The number affected and access method remain unknown; the investigation is ongoing.
A cyberattack left Corby Rock Mill’s computer systems inoperable. Its poultry mill is running at reduced capacity, while its ruminant mill remains shut down; the company has not confirmed the incident’s exact nature.
A cyberattack led the Brandenburg Memorial Sites Foundation to take its main, affiliated memorial, and project websites offline. Authorities have been notified, an investigation is underway, and restoration is expected to take at least a week.
IDC Frontier reported a ransomware attack affecting IDCF Cloud’s East Japan Region 1 and 495 companies and local government organizations. The company isolated the network and shut down systems to contain the incident.
Ricardo says unauthorized access exposed names, postal addresses, and phone numbers for nearly 890,000 accounts. The company says it fixed the vulnerability, is notifying affected users, and reported the incident to Swiss authorities.
A seller claims to offer administrator access to Moveciti and an exported database containing about 1.18 million documents. The access, data, counts and sale have not been independently verified.
A ransomware attack on a server in Nissui Butsuryu’s cloud data center caused a system outage and disrupted inbound and outbound product operations. The company is investigating whether personal data was compromised.
Easthampton Public Schools’ network was taken offline by a cyber incident. Students report limited access to temporary hotspots, and the district is investigating with digital forensics experts.
A cyberattack on October 8 disrupted St-Pierre-des-Corps’ phone system and partially paralyzed its IT network. The municipality mobilized cybersecurity experts and launched an investigation, notifying France’s CNIL and ANSSI to assess potential data impact.
Hijacks of the .gh, .sl, and .as country-code domains let attackers alter DNS records and obtain unauthorized HTTPS certificates for Google and other organizations. Google blocked its affected certificates in Chrome and recommends monitoring CT logs and publishing stric
Attackers used stolen employee credentials to access ASOS customer information, including contact details, dates of birth, and website searches. ASOS says passwords and payment card data were not accessed and has secured affected platforms.
A cyberattack hit the Hochschulservicezentrum Baden-Württemberg in Reutlingen, prompting a crisis team. The state cybersecurity agency and specialists are investigating the circumstances.
Attackers who accessed an ASOS employee’s account reportedly reached third-party platforms, including its app notification system, and obtained customer information. The breach path and claimed Snowflake access remain unconfirmed.
Unbefugte accessed personal data linked to about 890,000 Ricardo accounts, including names, addresses and phone numbers. Ricardo says the flaw is fixed, passwords and email addresses were not affected, and users are being notified.
