Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2235 articles
Boustead Singapore said an overseas business unit contained a cybersecurity incident, restored critical data and systems from backups, and notified authorities including Singapore’s PDPC. It reported no material impact and plans an independent audit.
A ransomware attack targeting Data Hub Pvt. Ltd., which hosts trading-system servers for 72 brokerage firms, led authorities to suspend Nepal stock-market trading while the affected infrastructure was isolated and investigated.
Attackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles at two Colorado water utilities. Disruptions were brief and did not affect water service or public safety; links to an Iran-backed campaign are unconfirmed.
Kaspersky investigated a 2026 attack in which a compromised VPN account was used to deploy malicious Group Policy Objects across a manufacturing firm's domain. The attack disrupted Windows systems without encrypting their files, while data was exfiltrated.
Namibia Airports Company says unauthorized access detected on March 6 affected network infrastructure and administrative accounts. Services were restored, disruption was limited, and the investigation has found no evidence of data exfiltration so far.
A cyberattack on Kolkata Municipal Corporation’s central server and website disrupted online services from September 14. Officials said operations have returned to normal; a preliminary investigation and IT experts identified ransomware.
Helpfeel disclosed that an attacker exploited Gyazo's image upload server on September 11, accessing about 23.62 million user records and 490 million image metadata records. The vulnerable path was fixed the next day.
GUTcert says attackers accessed parts of its IT systems and stole about 640 GB of data, including customer audit and technical information. Forensic work continues; the article raises concerns that some data may relate to critical infrastructure.
BleepingComputer confirmed ShinyHunters defaced Clop’s leak site and uploaded a message. The group claims it stole server data and onion keys, but those claims and allegations about the feud remain unverified.
Ellis County says a ransomware incident affected some computer systems. It took containment measures and brought in cybersecurity specialists. No access to personal or sensitive information has been identified so far; the investigation continues.
An actor using the name FFLDarkPacket claims to sell a Family First Life-linked database containing agent credentials and sensitive client data. The alleged dataset’s authenticity and the claims remain unverified.
A forum actor claims to sell a scraped dataset tied to Swiss telecom provider Salt Mobile, reportedly containing more than 1.09 million customer records. The claim is unverified; reported fields include contact and identity details.
GoreSpiders claims to have leaked an iChargePoint database covering 154,944 accounts, potentially exposing contact, location, device, and transaction-related data. The claim is unverified.
A forum actor using the name ChimeraZ is offering alleged partial datasets linked to FFTIR, SIA and Armurerie Lavaux, claiming they cover 120,158 people. The listing is unverified and allegedly includes contact, address and purchase data.
Gyazo says attackers exploited a server vulnerability, stealing about 23.62 million user records and exposing 490 million image metadata records. The company took the service offline and advised users to change passwords.
An intrusion into an email server used by Pays de L’Aigle community services may have exposed personal data. Authorities were notified, precautionary measures were taken, and users were advised to change passwords.
UCSal says it contained unauthorized access in a Wallstreet Ransomware attack that disrupted Software Engineering labs and threatened student and faculty SQL databases. Network instability led to postponed academic activities.
Viae7e3o c1guia Branca says an incident on its ticket-sales websites may have exposed data of 7,883 customers. It notified customers and Brazil's ANPD; its app, Zap Passagens and issued tickets were unaffected.
Hacktron says it used Claude to build an exploit and chain it with an OpenAI sign-in flaw, gaining limited access to private-repository metadata and commits. OpenAI and Discourse fixed the issues; OpenAI revoked affected tokens and sessions.
Helpfeel says an attacker exploited Gyazo’s image upload server, accessing about 23.6 million user records and 490 million image metadata records. Payment card data was not compromised.
A ransomware attack on the Intermunicipal Community of the Leiria Region led to its email server being isolated. Porto de Mós was temporarily disconnected from email as a precaution; security systems and backups reportedly worked, and authorities were notified.
Nipigon District Memorial Hospital reported a ransomware incident that encrypted files containing personal and health information, disrupted systems and some patient services, and prompted an incident response with external experts and law enforcement.
A cybersecurity incident affected part of the Town of Sutton’s network and Sutton Public Schools. Officials are investigating, securing systems and containing the impact with help from independent experts; law enforcement has been notified.
Attackers exploited Brevo’s SAML SSO handling, then used a compromised Cloudflare API key to inject malicious scripts. Sansec said more than 100,000 websites were likely impacted; Brevo removed the code and revoked the key.
