Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2228 articles
EcomWall reported that the SafePay group stole and published data linked to Holiday Inn Vilnius, including information on 500+ customers and over 100 employees. The hotel says authorities are investigating.
Microsoft confirmed attackers took over its X account, changed its profile image and promoted a Clippy-themed crypto token. The company removed the posts, secured the account and is investigating how access was gained.
Unknown attackers hijacked Microsoft’s official X account to promote a Clippy-themed crypto token in an apparent pump-and-dump scheme. Microsoft removed the posts, secured the account, and is investigating.
Vicksburg, Mississippi, disconnected its computer systems after a ransomware attack disrupted municipal operations. Emergency and public services remain available, but in-person utility payments may be delayed while specialists investigate.
A ransomware attack struck Nagano Nippo on Dec. 19, 2023, just as printing was due to begin. The newspaper isolated its network, but production servers and most layout PCs became unusable, with data nearly destroyed.
MetaMask disclosed an ongoing incident affecting some internal infrastructure and says wallets face no immediate threat. As a precaution, it is exiting affected Ethereum validators; Lido warns of missed rewards and possible penalties.
Ransomhouse claimed a ransomware attack on Lima’s Hospital Hermilio Valdizán, with services reportedly disrupted. The post says the claim is unconfirmed and cites the group’s onion site: hxxp://zohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qhx6gjmxbuo2yid[.]onion/r/cd414b5bf
Vicksburg is investigating a ransomware attack that temporarily shut down city computer systems. Emergency and utility services remain operational, and officials have not determined whether personal or confidential information was accessed.
A ransomware attack halted Svedala Municipality’s systems and prompted a crisis response. Authorities are working with police to assess the damage amid reports of attempted data theft.
A cyberattack took Terrebonne Parish Government systems offline on September 30. Louisiana’s State Office of Homeland Security is investigating; whether personal information was compromised remains unknown.
The Pentagon says a breach of Defense Manpower Data Center records exposed personal information belonging to 2.76 million living people and 294,000 deceased individuals. The attackers reportedly accessed the system from October 2025 to July 2026.
The Pentagon says attackers exploited a vulnerability in DMDC file-sharing systems and accessed data on more than 3 million people, including Social Security numbers and military records. DMDC is offering 12 months of credit monitoring.
MetaMask is responding to an undisclosed security incident affecting part of its infrastructure and has begun exiting affected Ethereum validators. It said there is no immediate threat to wallets; Lido warned of possible foregone rewards and downtime penalties.
Bitget says attackers exploited a zero-day in third-party security products to access its wallet environment and steal $387.5 million across 11 blockchains. The exchange disabled affected functionality; some assets were frozen.
DIVD says attackers chained two Zammad zero-days to hijack sessions, execute code, gain root access, and exfiltrate data. Segmentation and response actions limited further movement; users are urged to upgrade to version 7 or take instances offline.
Attackers exploited CVE-2026-82329 to gain admin access to OpenInfra Europe’s Artifactory. Artifacts downloaded from artifactory[.]nordix[.]org between August 28 and September 15, 2026, should be treated as potentially compromised.
Attackers used a phishing link to access Arizona court system backups and copy sensitive records, including more than 150,000 foster care reports. The court says the incident is under investigation and has no evidence the files have been shared.
A possible data incident has disrupted internet access and municipal services across several City of Radford departments. The city has engaged cybersecurity experts and notified state and federal law enforcement; the investigation is ongoing.
Bitget says attackers exploited zero-day flaws in third-party security appliances, moved laterally into its wallet infrastructure, and stole $387.5 million. Investigators found web shells and malicious packages; the exchange launched a recovery bounty program.
Glow Labs says coding agents uploaded more than 13,000 internal screenshots to public GitHub repositories across 300+ organizations. The exposure was accidental, and the reported scale has not been independently verified.
Mandiant says attackers exploited a Citrix NetScaler zero-day for at least three weeks, likely compromising dozens of organizations. Citrix disclosed and patched two actively exploited flaws; researchers expect further exploitation.
A September cybersecurity incident disrupted internet, email and student technology at Vermont’s Slate Valley school district. The district declined a ransom or extortion demand and is investigating possible data impact; the attacker and any compromise remain unknown.
AngMar reported unauthorized access to its systems in July 2026, affecting 35,916 Texans. Ransomware group Interlock later claimed it stole 710 GB, a claim absent from AngMar’s notice; the full scope remains unknown.
Weld Re-8 said unusual IT activity disrupted network drives, printing and external internet access on Sept. 13. It isolated affected systems and launched an investigation with law enforcement; unauthorized access and restoration status remain unconfirmed.
