Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2232 articles
Times Car says an intrusion exposed personal, driver’s license and account data for about 6.6 million current and former members. Credit card data was unaffected; the company is investigating and warning customers about fraud attempts.
FBI job applicant portals remain offline after ShinyHunters claimed access to FBI systems and sensitive data. The FBI is investigating; Mandiant separately reports renewed exploitation of an Oracle PeopleSoft vulnerability. Portals: apply[.]fbijobs[.]gov and fbijobs[.]
ShinyHunters claims it stole FBI employee and applicant data that may include contact, family, assignment and specialty details. The FBI is investigating; experts warn the alleged exposure could endanger personnel and sources.
Fosko says a LockBit 3.0 ransomware attack disrupted access to billing files and affected two workstations and a file server. Egs-Latam provided forensic response and infrastructure hardening, helping the Chilean manufacturer continue operating.
Microsoft observed Storm-3168 use compromised service principals to map Azure resources, retrieve storage keys, and delete storage accounts. Some protections limited damage; Microsoft did not confirm data theft or financial demands.
Alto Calore Servizi says a cyberattack on the night of August 10–11 disrupted its systems and customer-management operations. Functionality was restored about a week ago, and the company is checking for billing and communication errors.
SRG says unauthorized access exposed data of 340 current and former SRF Information unit employees. Names, roles and contact details were affected; there is no current evidence that passwords, financial data, sources or communications were compromised.
Two DHCF website reports may have exposed personal information for 399,086 Medicaid and DC Healthcare Alliance beneficiaries. The agency says it has no reason to believe anyone accessed or misused the data.
Bitget resumed Bitcoin withdrawals after unauthorized transfers from its hot and warm wallets. The exchange revised the amount transferred to $387.5 million, said it fixed the exploited vulnerability, and is restoring other withdrawals in stages.
ShinyHunters claims it stole FBI staff medical and personal records, including blood-test results and doctors’ notes. The FBI has acknowledged an incident affecting FBIJobs-related systems and is investigating; it has not confirmed what was accessed or who was affected.
A ransomware attack disrupted some Keio Electric Railway operational systems, but train services were unaffected. The company warned that email addresses for nearly 60,000 members may have been exposed.
Ransomware monitoring reported a Panzer claim targeting France-based movie theater company Ressources Si. The post says operational disruption is likely but notes the claim could not be confirmed.
Bright Smile Dental Care says ransomware found on its server affected patient records and software. Names and health and insurance information may have been involved; the practice reports no evidence of misuse or data theft.
Microsoft says JadePuffer compromised two Azure service principals, then deleted storage accounts and other resources. Exposed credentials may have been a factor, but Microsoft could not confirm their use and found no confirmed data exfiltration or ransom note.
SRG says attackers accessed and exfiltrated 2020 contact and organizational data belonging to about 340 current and former SRF employees. The incident is under control, and an investigation is ongoing.
SIMBA says a breach exposed personal details of 23,549 customers, including ID numbers and contact information. The company says financial data was not affected, it has fixed the issue, and the Personal Data Protection Commission is investigating.
South Africa’s Air Traffic and Navigation Services is investigating a ransomware attack that could have disrupted commercial aviation. The probe is examining possible data exfiltration to IP addresses in China and potential employee involvement.
A cyberattack identified on September 14 disrupted Dyfed-Powys Police non-emergency systems and temporarily took online and email contacts offline. Public data access has not been evidenced; possible access to staff information is under investigation.
IntelShadow claims 13,349 files totaling 9.31 GB were uploaded from a dataset linked to EUROCOP and Valdemoro Local Police. The alleged records include police reports, personal details, and official communications; authenticity is unconfirmed.
Cameron John Wagenius was sentenced to 70 months in prison for cyberattacks and extortion attempts targeting AT&T and other organizations, including theft of sensitive records from cloud platforms.
Clop moved its leak site after ShinyHunters compromised and defaced its server through a Grav CMS path traversal flaw. Grav confirmed CVE-2026-42608 and released a fix for the 1.7 branch; Clop disputes the group’s theft claims.
Bitget says hackers exploited a breach in its wallet services backend to steal $387.5 million in cryptocurrency. Withdrawals are suspended as the company investigates with Mandiant and SlowMist and plans to cover losses through its User Protection Fund.
Burnaby public schools reported an outage affecting internet access and phone lines after the district described the situation as a cyber incident. The disruption began Monday and affected services across the district.
Astrana reported that attackers impersonated staff and spoofed its corporate phone number to access company servers. Confidential information was exposed; some systems were restored from clean backups. The number of affected clients and data taken are unknown.
