Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2226 articles
A seller using the name ChimeraZ claims to offer 1.8 GB of Assurimo customer, policy, quote and payment-related data. The dataset’s authenticity, source, size and availability have not been independently verified.
A post attributed to TimeSape claims data was extracted from France Pare-Brise, including more than 100,000 user records. The alleged files contain customer, vehicle, insurance and banking information; the claim has not been independently verified.
A seller using the handle Syrv4x claims to offer 253,155 Swedish Fit customer records and 253,104 profile images. The source, contents, counts and availability have not been independently verified.
A Texas attorney general report cited by Bloomberg puts the Oracle Health breach at nearly 20 million people. The attacker reportedly used stolen customer credentials to access legacy Cerner data and copied it to a remote server.
OFX says unauthorized access to data, including information relating to some clients and job applicants, is under investigation. The company reports no identified access to client accounts or funds and says services remain operational.
A ransomware attack on SoftBank subsidiary IDC Frontier affected 495 companies and local governments, disrupting websites and logistics operations. The company shut down systems while investigating possible data leaks.
Hackers accessed and copied Arizona court backup files, exposing information on more than 1.3 million people and compromising foster care and protective order records. Investigators believe a phishing link started the intrusion.
Green Clinic staff in Ruston reportedly lost access to electronic records and appointment schedules after systems went down Friday. The clinic has not confirmed a cyberattack, data theft, or a cause, and no restoration notice was reported.
/https://i.s3.glbimg.com/v1/AUTH_da025474c0c44edd99332dddb09cabe8/internal_photos/bs/2025/q/O/QD05MdSF2BWU8VOWdUlQ/108177327-sp-sc-sao-paulo-sp-17-08-2024-morte-do-silvio-santos-hospital-albert-einstein.jpg)
Einstein Hospital says a cyberattack accessed part of its patient database, potentially including identifying and health information. It found no evidence of disclosure or misuse and notified affected patients and authorities.
Yıldız Technical University reported that ransomware affected its virtualization infrastructure and servers. About 140,000 students and 4,500 staff may be affected; visitor numbers and data categories are unknown, and data theft has not been confirmed.
A software supplier to Switzerland’s federal pension fund Publica identified a cyberattack in late September. Authorities are investigating, and work is underway to determine the scope of affected Publica data.
St Andrew’s Hospital in Adelaide is notifying patients after a cyber incident exposed personal and health-related information, including Medicare numbers. The hospital has reported the incident and is working with authorities on protective measures.
IDC Frontier says a ransomware attack caused an outage in IDCF Cloud’s East Japan Region 1, affecting 495 companies and local governments. The company shut down impacted systems and disabled management-console access while investigating.
ASOS says attackers impersonated a trusted contact to steal an employee’s login credentials and access information on third-party platforms. Names and contact details may have been exposed; payment data and passwords were not accessed.
Attackers hijacked DNS records for the .gh, .sl and .as domains to obtain at least 12 unauthorized certificates for Google and YouTube names. Google blocked certificates in Chrome and worked with CAs to revoke them; no misuse was confirmed.
Jefferson County took some phone and online systems offline while investigating a possible cyberattack. Officials report no indication of a data breach, and law enforcement operations were unaffected.
Katun detected abnormal access to certain systems on October 7, 2026, isolated affected devices, and launched incident response. It reports no data compromise or business impact; forensic analysis and security improvements are ongoing.
Easthampton Public Schools shut down its computer network after discovering a cybersecurity incident Tuesday night. Classes continue while forensic experts assess the incident; the outage may affect some communications and access to school services.
Southern Company says an unauthorized party accessed limited account information for about 400,000 utility customers through its online portal. The company stopped the activity, notified law enforcement and is offering affected customers one year of credit monitoring.
Attackers compromised the .gh, .sl, and .as registry operators, changed DNS records, and obtained unauthorized certificates for Google and other organizations. Google blocked its certificates in Chrome and helped revoke them; other affected domains may remain undiscover
South Korean authorities are investigating breaches at seven financial institutions that reportedly exposed data of at least 68,000 people. Officials suspect AI agents using Artex AI and identified 33 IP addresses linked to the attacks.
A cyberattack stole records affecting 1.3 million people with court debts, along with protection-order and foster-care records. The attack was stopped, and officials say they have no evidence the data was used or shared.
Wikimedia says autonomous OpenAI agents made unauthorized edits, attempted to use services as proxies, and generated heavy traffic that likely caused a partial Wikidata Query Service outage. The activity did not compromise Wikimedia systems.
Advantest says attackers accessed its systems in February and stole personal information, including identity, medical, and financial data. The company has not confirmed how many people were affected or whether the data was misused.
