Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2222 articles
DreamHost says attackers exploited a File Manager vulnerability from August to Oct. 23, 2026, accessing FTP/SFTP credentials and possibly some webmail sessions. It blocked access, fixed the flaw, invalidated passwords and ended active sessions.
mSeven urged current and former mSecure customers to change passwords and reset authentication after a reported theft of an encrypted mSecure Cloud database. The company says it has no evidence the attacker accessed vault contents.
NIKKE’s developer confirmed third-party tampering with PC launcher scripts. Analysis found a loader delivering a K2F backdoor with credential- and file-stealing capabilities; whether attackers deployed a wallet-stealing DLL or stole cryptocurrency is unknown.
A cyberattack on an unnamed refrigeration supplier altered cold-storage settings at three French Blood Establishment facilities. EFS secured or transferred plasma and reported no product losses or health impacts; exploitation of known Danfoss flaws remains unconfirmed.
Binance described how a fake job interview led to malware on an engineer’s work computer before the Oct. 29 theft. The exchange said it and partners froze or intercepted $2.85 billion; Elliptic reported about $3.24 billion remained in linked addresses.
A cybersecurity incident involving a refrigeration supplier raised temperature and defrost thresholds in some French blood bank cold rooms. A technician intervened, products were moved as a precaution, and EFS reported no impact to products or samples.
Hunt.io says staging-server logs show an unknown attacker copied 27 Philippine Overseas Employment Administration backup databases, nearly 69GB of worker and financial data. The data’s destination is unknown; Hunt.io has not seen it offered for sale.
Chainstack says an attacker used a third-party component to access development and production systems, including a database with customer information and password hashes. The company detected and cut off access, and advises customers to rotate credentials and API keys.
Binance says a trojanized Homebrew installer and a fake job interview led to engineer endpoint compromise and abuse of internal AI tooling, culminating in unauthorized wallet-signing transactions and a reported $6.43 billion asset theft.
OPSSHIELD says an attacker compromised cPGuard’s update system and sent a malicious script to versions 5.88.12–5.88.19, installing a backdoor and collecting sensitive files. The company estimates 32 files were taken and urges affected servers to update and rotate keys.
Frontline says its investigation found that attackers exploited a third-party software vulnerability on August 14 and stole staff and student data. State filings list 1,298,917 affected; the total may be higher.
Revolve said customers’ saved card numbers and expiration dates were stolen, along with names and contact information. A Texas filing lists 127,200 affected Texans; a separate total of 1,515,073 has not been confirmed by Revolve.
More than 100 European stores reported refrigeration disruptions resembling attacks in France earlier in October. Retailers blamed a cyberattack, but investigators have not linked the waves; internet-exposed controllers and food losses were reported.
Attackers remotely altered supermarket refrigeration controls in Belgium, Sweden, Estonia and elsewhere, causing some food losses. Outdated software and insecure connections were cited; no actor or link to the earlier French attacks was confirmed.
OpsShield says attackers used compromised credentials to distribute a backdoor and data-stealing script through cPGuard updates from versions 5.88.12–5.88.19. The company reported 2,946 affected servers and advises updating and rotating exposed credentials.
Binance says a fake job interview led an employee to install malware, enabling attackers attributed by the FBI to North Korean group TraderTraitor to access wallet infrastructure and steal about $6.34 billion in cryptocurrency.
WorkOS says an attacker accessed its internal sales app on October 30, 2026, exposing business contacts and customer records. The company says production services and app data were unaffected and the incident is contained.
Have I Been Pwned analyzed data from Harvard’s breach and found information linked to 850,500 accounts. ShinyHunters claimed responsibility and said it stole records; Harvard said the affected systems did not store Social Security numbers, passwords, or payment card or.
Bitdefender says a 3AM affiliate encrypted about 37 machines at a UK school estate after stealing credentials and moving across three Active Directory domains. Repeated commands suggested possible AI assistance, but this was not confirmed.
Stores in six European countries reported attacks that allegedly raised refrigeration temperatures and spoiled food. Danfoss StoreView controllers may be involved, but the link is unconfirmed; Censys also reports global exposure and patching figures.
An actor using ChimeraZ claims a 6 MB CSV tied to French retailer Ma Deco de Fête contains 45,156 lines and customer/payment data. The listing, dataset contents, counts, source and availability remain unverified.
Florida says hackers breached its student financial aid website, potentially exposing personal data of about 4.9 million people. The intrusion was discovered Oct. 19 and contained; the entry method and attackers remain unknown.
A researcher used a password embedded in Applebee’s Android app to access a customer database. TechCrunch verified he could retrieve dummy account data; Applebee’s fixed the flaw, but the number of affected records is unclear.
Revolve says attackers accessed some systems, including its shopping platform. Its investigation found customer names, addresses and saved payment-card details may have been accessed and exfiltrated; at least 179,259 people received notices.
