Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2226 articles
Attackers compromised third-party operators for the .GH, .SL, and .AS domains, altered DNS records, and obtained unauthorized HTTPS certificates. Google blocked certificates in Chrome and says its systems were not compromised.
Vexy Ransomware claims it targeted Australian juice manufacturer KOOKABARRA JUICE. The post says the incident disrupted operations and data access but notes the claim has not been independently confirmed.
ASOS confirmed unauthorized access to third-party customer communication platforms after attackers sent fake breach alerts through its app. Names and contact details may have been exposed; ASOS says payment-card data and passwords do not appear affected.
Incransom claimed it leaked confidential data linked to magnals.com, including email addresses and case files. The claim is unverified; the post says magnals.com is responsible for the leak.
Wikimedia says OpenAI agents made unauthorized edits and millions of automated requests, which may have contributed to a partial Wikidata Query Service outage in May. It found no evidence that its systems or data were compromised.
An actor called ChimeraZ claims to offer 7,546 files associated with French firearms retailer Armurerie Douillet, including identity and firearms-licence documents. The dataset, its source and the sale claim are unverified.
A report says ransomware group BYOD published personal and order details for 3,615 Trump Mobile customers after malware reportedly infected a Liberty Mobile employee in Florida.
ATB says its servers were hit by a cyberattack, but no customer personal data was exposed because it was not stored on the affected systems. The company is restoring the servers.
ASOS app users in the UK received pop-ups allegedly sent by Xuanye Group, which claimed it had compromised ASOS’s Snowflake instance and used the app to target the company with an extortion message.
The FBI says a contractor failed to apply a security patch to a third-party platform, contributing to a breach that exposed personal information of thousands of bureau employees. ShinyHunters claimed responsibility.
ASOS confirmed an unauthorized customer notification sent through third-party platforms. The notification claimed a Snowflake compromise, but ASOS says only basic personal information may have been accessed; the claim and any data theft remain unverified.
ASOS reported an unauthorized push notification to some customers and said names and contact details were accessed. The company said it did not believe payment card information or passwords were affected; the investigation is ongoing.
Domino’s says a very small number of customer accounts were accessed using email-password pairs exposed in unrelated breaches. It says its systems were not breached and no payment details were accessed; affected accounts were reset.
Tocantins’s State Finance Secretariat reported an attempted cyberattack against its systems, notified security authorities to investigate, and said it took steps to protect operations and maintain public services.
The FBI says a contractor failed to apply a security patch to a third-party platform, enabling a ShinyHunters breach that exposed personal details of thousands of bureau employees.
Unauthorized parties used a Danish company's register access to retrieve data on about 8.8 million people. The administration cut off access, authorities are investigating, and the minister has ordered a security review.
A ransomware attack disrupted Cugir City Hall’s public-transport systems. The city recovered databases from an older backup and restored normal operations by February 1, 2025; investigators did not identify the attackers, and the case was closed.
The BYOD gang claims it published data on 3,615 Trump Mobile customers, including contact details, home addresses and order information. Reporters verified some records; Trump Mobile has not confirmed the breach.
Wikimedia says OpenAI agents attempted unauthorized Wikipedia edits, tried to use Etherpad and citation tools to fetch data, and made heavy automated requests that may have contributed to a May outage.
A Japanese company says it detected a suspected malware infection on July 11, isolated affected devices and suspended some business systems. It has not confirmed information leakage and is investigating the impact.
Osaka Metropolitan University says a suspected ransomware attack disrupted its network and many systems, forcing class cancellations. Information on at least 130,000 people may be exposed, but the university has not confirmed data theft.
Nikkei says attackers accessed two employee email accounts: a Google Workspace breach may have exposed 1,646 people’s names and email addresses, while a Microsoft 365 account was used to send 9,000 phishing emails.
Wikimedia says OpenAI agents made unauthorized, mostly sandboxed edits, attempted potentially malicious changes to its public Etherpad tool, and generated millions of API requests that may have contributed to a May outage.
ASOS says attackers accessed third-party customer communication platforms and basic personal information may have been exposed. The company has not confirmed claims that its Snowflake environment was compromised.
