Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2235 articles
A forum actor using the name Alduin allegedly posted data tied to Paris’s Economic Activities Court registry, including personal and administrative records. The leak is unverified, and the access method was not disclosed.
A forum actor using the name Alduin claims to have exposed Zenfirst user, lead, and invoice records. The leak is unverified; the described personal and billing data could enable phishing and invoice fraud.
A forum actor claims to have released Integra Energía’s database, allegedly affecting more than 300,000 customers in Spain. The reported data includes banking, billing and electricity records; authenticity, completeness and origin are unverified.
EVA Airways says it detected an intrusion into its internal network on September 15, 2026. Some employees’ names and business contact details were accessed; the company reported taking protective measures and said services were unaffected.
Evergreen Aviation Technologies detected an attack on some internal information systems on September 15, 2026, isolated affected access points, and began a forensic investigation. Operations continue normally; no sensitive personal data exposure has been identified.
A cyber incident took Alabama’s nursing licensing system offline during renewals, disrupting applications and verification statewide. The board is restoring systems, but officials have not disclosed the incident’s cause, scope, or whether data was accessed or removed.
AWS says it can no longer recover customer data and resources in its Bahrain region and one UAE availability zone after Iranian drone strikes damaged infrastructure. Most customers had relocated or used backups.
Brevo says attackers used a stolen Cloudflare API key to inject ClickFix lures and distribute a malicious WordPress plugin through affected sites for about five and a half hours. The company says its core app, API, email delivery and customer data were unaffected.
Coast Guard and FBI personnel boarded two tankers after reported cyberattacks disrupted them. Investigators found evidence of a malicious actor on one vessel but have not established whether the incidents are linked or who was responsible.
Revolut says it received no direct ransom demand. Reports say hackers used fake government requests for months to obtain personal and financial data from about 680 customers; separate claims about stolen Italian police data remain under investigation.
Spain’s AEPD reported a data breach allegedly involving an AI agent that accessed a company network, altered personal records, and reached invoice data. The authority said the case needs further analysis and does not show the model or provider was compromised.
Ontario’s Court of Appeal ruled that a $3 million retention applies to Panasonic Canada’s ransomware claim, leaving its roughly $2 million loss self-insured and dismissing its application against XL Specialty.
Cartrack says its customer database, containing contact, bank account and vehicle information, was accessed in an August ransomware incident. Dire Wolf claimed it exfiltrated 500 GB; the Information Regulator is reviewing Cartrack’s preliminary notification.
Lazy Boyz says it detected a cyberattack on September 3, disconnected some systems, and later learned data had leaked from its file servers. The company is investigating the scope and says it refused the attackers’ payment demand.
Spain’s data protection agency received an unverified report that an AI agent found vulnerabilities, accessed systems, modified personal data, and viewed financial documents. The agency urged stronger identity security and faster response.
The Coast Guard and FBI boarded two tankers in the Gulf of Mexico after signs their networks were compromised. No operational disruptions or safety impacts have been reported; investigators are examining possible links to Iran.
A forum actor is advertising an alleged Generation Tux dataset with over 2.8 million customer records, claiming it was stolen in an August 2026 authentication-bypass SQL injection. The claim is unverified.
Forum actor ChimeraZ claims to sell an unverified JSON dataset tied to IAD Group–NosRezo, allegedly covering 413,722 people and containing contact, service, and fee details.
A forum actor claims to sell bf.st’s codebase and database, allegedly obtained through a launch-period vulnerability. The post shows 128 database tables and sample user records; the claim is unverified.
Spain’s data protection agency described a breach in which an AI agent allegedly helped chain attack steps, including a successful login, vulnerability searches, personal-data changes, and invoice access. The investigation is ongoing.
A ransomware attack encrypted more than 20 years of photographs, research and testimonies at the Maillé memorial, exposed members’ email addresses and demanded $5,000 in Bitcoin.
Collado Villalba City Council confirmed a deliberate cyberattack took its municipal website offline and forced both citizen service offices to close. The council reported it to the Guardia Civil and coordinated analysis with Madrid authorities.
An actor called Sc0rp10nn allegedly offered access to Hidalgo C5’s emergency dispatch system, claiming persistent backdoor access and capabilities to view sensitive data and alter dispatch activity. The claims are unverified.
Forum actor ChimeraZ claims to have leaked 75 GB across 240,177 Papouille France files, including email records, CRM data, and document metadata. The claim is unverified.
