Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2235 articles
Venus1337 claims to be selling data from AFTT and FRBTT, including subscriber and user records and 87 administrators’ credentials. The breach and alleged file-upload RCE remain unverified.
Tangerhütte’s digital town hall has been unreachable for more than two weeks after an external attack, according to the report. The article says data was not sold on the dark web in this case.
Hollard says it found no evidence its systems were compromised. MIP Holdings confirmed a June cyber incident affecting personal information linked to customers of about 45 South African insurers; the investigation is ongoing.
A malicious PDF disguised as a caterer’s invoice reportedly infected a computer at Espelette’s municipal office, disrupted its use, and led to the municipality’s compromised email account automatically sending the fraudulent message to others.
The International Meteor Organization says a cyberattack took much of its website offline. It expects weeks of partial downtime while moving to new infrastructure; its fireball reporting system is available again.
TOM Group said an attack detected around September 8 encrypted data on Taiwan servers serving its Business Weekly unit; the incident extended to Hong Kong servers on September 9. The investigation is ongoing.
A cyberattack on Tecnoabi exposed identifying, contact and banking details of people who received agricultural aid in specified years. Police and Spain’s data protection agency are investigating; officials say aid payments continue normally.
CenterPoint confirmed an unauthorized third party obtained some customers’ personal information. A threat actor claimed to have stolen 7.49 million records; the company says utility services were unaffected and its investigation continues.
An attacker compromised the Admin Menu Editor Pro website and pushed malicious versions 2.35 and 2.36, installing a web shell and hidden accounts. At least 230 customers across about 1,500 sites were affected; users are urged to check and restore from a safe backup.
Duel alleges hackers used compromised Italian government email accounts to send fraudulent information requests to Revolut over five months. Hudson Rock found about 300 compromised logins for the government domain and says existing infostealer logs may have supplied the
Revolut confirmed an unauthorized party obtained sensitive customer information through fraudulent requests sent from a legitimate government agency email domain. The data reportedly affected about 700 customers and samples later circulated online.
Researchers say AI agents likely targeted RubyGems with malicious packages and attempted to steal user API keys; they also report remote code execution on RubyDoc.info servers. OpenAI is investigating and says it has not verified the claims.
Libercourt confirmed personal data was exfiltrated in a ransomware attack, while saying municipal services were unaffected. The city is investigating the data’s nature and volume; a criminals’ claim of 817 GB stolen remains unconfirmed.
Ransomware encrypted Avelogic’s SmartHRMS databases and backups, disrupting payroll for MUIS-affiliated mosques and madrasahs. Avelogic reported no evidence of bulk data theft and was working to restore service.
Researchers say attackers hijacked HBO Max’s verified Reddit account to post 108 malicious ads in about 48 hours, directing users to ClickFix attacks and malware targeting Windows and macOS. Reddit paused the ads; how the account was accessed is unclear.
Socket says the Twitch Enhanced Viewer | JeetBot extension sends users’ OAuth tokens through JeetBot-operated proxies, where they are logged in cleartext. It had over 30,000 installs; users were advised to remove it and re-authenticate.
Japan’s Digital Agency says attackers exploited a VPN vulnerability to access a system, potentially exposing 246,000 record rows. The agency reported no confirmed misuse and warned affected people about phishing and impersonation.
A forum actor called BogotaLeaks claims to sell an unverified dataset allegedly containing 38 million Argentina SIPA pension records tied to 9.5 million citizens, including personal, banking, and pension details.
A cyberattack on the Municipality of Prato was detected and contained on September 8. Initial checks found no changes to databases, archives, or network records; the municipality reported the incident to postal police.
Port of Tanjung Pelepas confirmed a cybersecurity incident that affected operational systems and temporarily disrupted container terminal operations. A gradual restart began September 10; no actor or malware was identified.
Revolut says it sent customer identity documents, selfies, contact details, account statements, and transaction histories to an attacker impersonating a government agency. The company says a limited number of customers were affected and systems and funds were unaffected
Duopharma Biotech says attackers accessed its IT infrastructure. Preliminary findings suggest archived files, potentially containing personal data, may have been stolen; core and operational systems remain unaffected as the company investigates.
Revolut confirmed that an unauthorized party used a legitimate government agency email domain to request customer information, exposing personal and financial data for an undisclosed number of users.
Telus says attackers used compromised credentials to access some customer accounts between February 2025 and June 2026, exposing personal and billing information. The company reset credentials and added monitoring; the number of affected accounts is unknown.
