Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2238 articles
Beaver County Behavioral Health said ransomware was discovered July 8 and its investigation determined data, including protected health information, was copied. The review is ongoing; affected individuals will be notified. Updates: beavercountypa[.]gov.
Lawsuits followed reports that the dark-web service Nexus offered more than 153 million driver’s license scans and other identity documents traced to IDScan. A reported FBI investigation is underway, but the breach and number of affected people remain unconfirmed.
A forum actor called ksye claims to be selling records of 89,281 French ZeroGaspi shoppers for $70 in Monero. The listing reportedly includes contact details and order values; the claim is unverified.
A breach of Trezor fulfillment provider ShipMonk exposed names, contact details, and shipping addresses for about 80,000 customers. Trezor says its systems and wallet devices were not compromised; the investigation is ongoing.
Thomson Reuters said an intruder obtained C-Track files affecting courts in at least 12 U.S. states, the U.S. Virgin Islands and Canada. Potentially exposed data includes sealed records and sensitive personal information; the number affected is unknown.
Researchers say at least 14 people in Serbia were targeted with spyware. Citizen Lab confirmed one Pegasus infection, while Amnesty International identified NoviSpy in at least two cases; Serbian authorities denied the accusations.
A forum actor named caustic claims to offer 675 GB of data allegedly taken from Réso, including about 530,000 files. The claimed dataset includes customer and partner records, but the report says the claim is unverified.
Wallis-and-Futuna’s vice-rectorat says a cyberattack detected on August 28 affected some systems, including academic email. Pronote remains unavailable, and class meetings were postponed as investigations and recovery efforts continue.
South Africa’s Rand Water confirmed a cyber incident affecting some IT systems. Water operations and supply remain unaffected; the utility is investigating, and it has not said whether data was accessed.
Attackers compromised Coder’s Cloudflare infrastructure, redirecting some registry traffic to servers that delivered malicious Terraform modules and stole secrets. Coder recommends rotating affected credentials and checking logs.
France’s CNIL fined Hôpital privé de la Loire €500,000 after a 2025 breach exposed data of more than 727,000 patients and trusted third parties. Investigators cited weak access controls, missing VPN and MFA, and inadequate monitoring.
Thomson Reuters says unauthorized access to C-Track files began in March 2026 and was discovered June 30. Courts in the U.S., Canada, and the U.S. Virgin Islands were affected; the scope and data accessed remain unclear.
Attackers exploited a vulnerability in PTAC’s public-facing ASDIS system and stole contact data. PTAC shut down the system, notified affected people, and is assessing the incident and security risks.
A forum seller claims to offer 3,134,269 DZI Insurance records containing identity and contact details, allegedly obtained through a poorly secured customer-portal API. The breach claim is unverified, and DZI has not publicly addressed it.
A forum user claims to have shared a HopCharge analytics export containing 19,323 accounts and personal data, including precise coordinates. The claim is unverified and may involve a misconfigured analytics project.
Data from Manchester Airports Group was leaked after it refused to pay a ransom. HaveIBeenPwned analyzed the dataset and reported about 8.8 million email addresses and phone numbers among the exposed information.
A Russian national was indicted over an alleged campaign that used fake freelance-platform accounts and malicious Excel files to infect about 80,000 users with TVRAT and DarkVNC and steal data for fraud.
More than 153 million driver’s licenses were offered on the Nexus identity-theft service. The seller alleged a breach at an identity-verification firm; Brian Krebs assessed the documents likely came from IDScan.net. The FBI reportedly opened an investigation.
Forum actor Keishell claims to have published Pattons shipping records allegedly from the myTnT portal for pattons[.]com[.]au. The reported data includes customer, shipment, billing, customs, goods-value, and delivery details; the claim is unverified.
Forum actor mondial claims to have published two datasets attributed to France’s Ministry for Ecological Transition: 8,166 staff records and 14,656 certified-controller records. The actor alleges API and access-control flaws; the claim is unverified.
Aesto disclosed that hackers accessed its AWS infrastructure in December, exposing sensitive information belonging to more than 9.5 million people across at least 30 healthcare organizations.
Thomson Reuters said an unauthorized party accessed C-Track files in March, affecting court systems in 11 U.S. states, the U.S. Virgin Islands and Canada. The scope of potentially exposed court records and personal information remains unclear.
A Greek newspaper reports that unknown hackers targeted the State Legal Council and demanded cryptocurrency to return database files. Authorities are investigating with Europol; whether a ransom was paid has not been disclosed.
CEC says its investigation into the August 5 ransomware attack at its Tokyo Second Data Center found no data leakage. The affected area was isolated and rebuilt, and services have resumed in a secure environment.
