Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2227 articles
A ransomware attack on Osaka Metropolitan University’s virtualization infrastructure took nearly 500 servers offline and encrypted many backups. Systems across five campuses are affected; personal data may be involved, and classes are suspended through October 9.
A cyberattack on Bernardus Schools in Oudenaarde stole personal data belonging to about 4,200 students and staff, including national registry numbers and teachers’ home addresses. The school blocked accounts, began password resets and filed a police complaint.
Indiana Area School District reported a cybersecurity incident on Sunday evening. The district says it has found no indication that student, staff, or financial data was compromised and is continuing its assessment.
An actor claims to have leaked 29,018 Nueva EPS records from Colombia’s Vaupés region, including personal and health data, and says about 11 million more records exist. The claim and data have not been independently verified.
An actor using the handle UWAYS claims to have published a database linked to Saudi Arabia’s General Intelligence Presidency. The dataset’s authenticity, source and availability have not been independently verified.
Separate breaches at Clover Health and AngMar Management Services exposed personal and health information. Clover reported 138,677 affected people; AngMar reported 126,196.
Bristol City Council noticed suspicious activity on its schools-management platform on 21 September and shut it down on 25 September. The attack affected 87 schools; the council said it had found no evidence of data theft.
Unknown actors misused a private company’s lawful access to Denmark’s CPR register, exposing names, addresses and CPR numbers for about 8.8 million people. Authorities cut off the company’s access and police are investigating.
Abbott says a vishing attack led to unauthorized access to a limited number of Cancer Diagnostics systems. Some files contain personal or health information, which Abbott is reviewing; it reports no impact on operations or patient services.
Pimesa says an attack on its Bicielx platform exposed some users’ personal data but did not interrupt service. The suspected attacker reportedly admitted involvement and was referred to judicial authorities.
South Korean authorities are investigating breaches affecting Shinhan, Kookmin and Hana banks. Reports cite customer data leaks, but authorities have not confirmed a link to AI tools or identified the attackers.
Denmark's Central Population Register says attackers misused a private company's access and brute-forced CPR numbers to access personal data on about 8.8 million people. The company's access has been blocked, and police are investigating.
Attackers used compromised credentials to access DTU’s DTUBasen identity system and download data potentially belonging to up to 200,000 current and former users. DTU is notifying affected people and warning of phishing and identity-fraud risks.
A ransomware attack temporarily shut down Vicksburg’s computer systems, disrupting utility payments but not emergency services. The city is investigating possible access to personal or confidential information with help from federal, state, and private cybersecurity.
An actor using the handle Syrv4x claims to offer 882,918 CNAM records containing names, birth details and identifiers. The dataset and its source have not been independently verified.
Attackers exploited a third-party application vulnerability to access Frontline Education systems and steal employee data, including Social Security numbers. The company says it fixed the issue and is offering identity protection to affected people.
DIVD says an autonomous AI agent exploited two Zammad zero-days to gain root access and exfiltrate data. The nonprofit confirmed volunteer email addresses were stolen; its investigation is ongoing.
An actor claims to be selling more than 400 GB of data linked to Morocco’s investment ministry, including records on over 50,000 investors. The dataset, its source and the actor’s claims have not been independently verified.
A threat actor using the handle Syrv4x advertised a free 7 MB dataset allegedly containing 10,343 FMG Sales & Marketing records. The dataset, its source, contents and availability have not been independently verified.
The aerospace supplier said it detected signs of malicious activity in its IT environment on August 12. It is investigating with Switzerland’s Federal Office for Cybersecurity and Mandiant; the attacker’s identity remains unknown.
An actor using the handle “888” claims to offer Explorest data for a one-time XMR payment, including account and device details for 263,900 users. The dataset, its source and the claimed scope remain unverified.
A seller using the handle Syrv4x claims to offer 1.96 million FitnessBoutique customer records for $750. The dataset’s authenticity, source, size and availability have not been independently verified.
A seller using the handle RedStone claims to offer an RBFA dataset containing 346,685 unique names and other personal and organizational data. The listing and its claims have not been independently verified.
EcomWall reported that the SafePay group stole and published data linked to Holiday Inn Vilnius, including information on 500+ customers and over 100 employees. The hotel says authorities are investigating.
