Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2238 articles
IDScan says an unauthorized party may have accessed or copied customer data, including names and government ID numbers. The incident is linked to a database advertised with over 153 million license scans; the company is investigating with the FBI and offering identity-
Trezor says attackers breached its third-party email provider and sent customers fake STM32 vulnerability alerts. The company took down the phishing domain and is investigating; the article also details earlier breaches affecting Trezor customers.
AdaptHealth confirmed that a cyberattack exposed data belonging to 4,115,802 people. The intrusion began June 5 after social engineering compromised a third-party contractor account; the company found no evidence of data misuse.
A forum actor using the alias 2019 claims to offer records tied to Blossom Health for sale, including data on more than 29,600 mental health patients. The alleged dataset includes personal, clinical, and insurance details; the claim is unverified.
A forum actor using the name DaOnlySpark claimed to have an AdvaCare database dump with timesheet, task, expense, project, and staff-account data. The claim is unverified.
Hrastnik Municipality says attackers used a remote-access test account to enter its systems and encrypt most data, disrupting services. It estimates recovery costs at €70,000 and says its analysis found no evidence of data theft.
A cyber incident disrupted Mississippi IHL’s central financial aid office. The agency is investigating possible data exposure; the MAAPP application portal remained available, and no data theft or threat actor has been reported.
Attackers exploited Liquid Network’s transaction-validation flaw to create unbacked L-BTC and withdraw about $320 million in BTC. They returned 85%; Blockstream patched the bug, while roughly $47 million remained with the actors.
Veradigm says a third-party vendor compromise exposed patient personal data through a limited API. The Gentlemen ransomware group claims it stole 3.5 million records; Veradigm is investigating and notifying affected people.
A public GitLab CI artifact exposed a token with Owner access to 55 open-source projects, including GnuTLS. Maintainers revoked it and fixed the pipeline; a review found no unauthorized commits or altered webhooks.
A cyberattack has disrupted several municipal services in Le Tampon, Réunion. The municipality says its teams are working to restore services and will share updates when reliable information is available.
Iran-linked hackers reportedly took a UK power plant offline for four days and disrupted wastewater facilities in 12 US states. The article says exposed systems and default credentials enabled access, and urges operators to monitor threats and secure internet-facing OT.
A forum actor called Marx claims to offer portal access to 11,835,390 Transfast SMS delivery records, including phone numbers and transfer details. The claim is unverified; the report says portal access is shown, not a confirmed compromise.
Nearly 4,000 bitcoin were withdrawn from Liquid’s federation wallet. About 3,400 were returned, while roughly 598.5 remained unreturned. The network was still paused as operators prepared to restart nodes.
Audi dealer Kojin Motors says an incident affected some servers on Sept. 6. It is investigating possible exposure of customer and vehicle data, while the extent of any impact remains unknown.
Lancaster, Ohio, took municipal computers offline after ransomware alerts appeared on employee machines. City records later confirmed the incident; about 90% of data and programs had been recovered, while the rest remained under review.
Hilltop National Bank took internal systems offline after identifying a cybersecurity incident that disrupted banking services. Branches closed, and the bank had no restoration estimate; it has not said whether data was accessed or stolen.
A June 29 cyberattack forced Salida School District to take its network offline, damaged some locally stored files and disrupted administrative work. The district said cloud systems remained operational; its investigation is ongoing.
ShinyHunters claim they used a password-reset flaw to access Florida’s DAVID driver database and steal over 200,000 records. The group says it has lost access and the flaw is being patched; the breach claims have not been confirmed.
About 3,400 of the 4,000 Bitcoin stolen from Liquid Network’s federation wallet were returned by alleged “white-hat” hackers. The network remains paused while Blockstream and federation members make security fixes; about 598 Bitcoin remains outstanding.
Prosecutors say a group led by Malone Lam used phone calls posing as Google and Gemini staff to steal over 4,100 bitcoin from a Washington, D.C., investor in August 2024. Eighteen people were charged; several have pleaded guilty.
Dustin says unauthorized parties accessed internal systems, prompting it to take systems offline. Order processing has resumed, while its webshop and customer portals remain under restoration and investigators assess possible data impact.
Researchers found 220 million passenger and crew records in an exposed APIS database linked to travel through Vietnam. Chained misconfigurations enabled access; the issue was remediated, but whether data was copied or sold is unknown.
Mathspace says hackers exploited a Metabase vulnerability and downloaded data belonging to 1,079,819 people in Australia and New Zealand. The company took the instance offline, revoked access, and began notifying affected individuals.
