Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2238 articles
The Széchenyi Programiroda says a cyberattack likely exposed data, including private documents belonging to two employees. Rhysida claimed the theft and demanded 20 bitcoin; authorities are investigating.
Järve Biopuhastus, which supplies water to about 54,000 people in Ida-Viru County, says a cyberattack earlier this year paralyzed its servers but caused no serious consequences.
Researchers reported Pegasus and NoviSpy infections targeting Serbian activists and officials. SHARE Foundation identified 14 targets; Citizen Lab assessed one Pegasus infection as highly probable, and Amnesty confirmed NoviSpy on two devices.
A forum user posted 450 files (16.2 MB) attributed to the Israel Science and Technology Directory at science[.]co[.]il. Most appear public; a few visitor logs and legal documents may not be. The breach claim is unverified.
Several French government websites linked to the Ministry of Ecological Transition became inaccessible after a cyberattack claimed on a criminal forum. ANSSI is investigating suspected account compromise; some Creuse prefecture services were disrupted.
Dropbox said attackers used fraudulent Lenovo IDs, created through an email-verification flaw, to access accounts without passwords from Aug. 4–21. It expired Lenovo-authenticated sessions and now requires Dropbox passwords; Reuters reported about 5,000 accounts were.”
A hacker is reportedly selling 153 million identity-document scans allegedly stolen from IDScan. KrebsOnSecurity verified records in the cache, while IDScan says it secured potentially affected systems and is cooperating with law enforcement.
A BGP hijack diverted Softaculous traffic from Aug. 28–30, 2026, enabling malicious Virtualizor updates to reach a small, unknown number of servers. Softaculous restored routing and is adding package signing.
Unit 42 describes an enterprise intrusion in which a human attacker used AI agents to map systems, steal credentials and cloud keys, and abuse CI/CD workflows. The attack unfolded in under 10 hours; the article clarifies it was not ransomware.
Van Wezel Autoparts confirmed a cyberattack at its Tienen site last week. The company says it took steps to protect its systems and hired cybersecurity experts; the impact and any data theft are unknown. Police have opened an investigation.
Aesto Health says unauthorized access to part of its AWS infrastructure may have exposed patient information affecting 9,540,683 people. The intrusion occurred in December 2025 and affected patients linked to 29 healthcare providers.
Park Dental Partners says it detected unauthorized access to its network on August 28 and is investigating whether personal or protected health information was affected. It reports no significant operational disruption so far.
Hangte disclosed that its information systems were attacked and said it activated defenses and brought in external experts. The company reported no major operational impact so far; the entry method, affected systems, and any data exposure are unknown.
A reported cyberattack on Tlajomulco’s data centers disrupted more than 120 municipal services. Four months later, officials have not clarified whether property, beneficiary, and spending records were affected; a legislator is requesting an incident diagnosis and backup
Luminis Health retained legal counsel amid an ongoing cyber incident affecting the hospital system’s web platforms. The article provides no further incident details.
Uruguay’s Jutep says a cyberattack on April 13, 2026, left its declaration system down for two months. Ongoing failures have hindered filings and contributed to a backlog of more than 400 complaints.
Ocean Edge Resort reported unauthorized access to files in its network in July 2025. The files may have contained personal, financial, and medical information; the resort also cited a ransomware group’s claim to have obtained data.
A forum actor using the name NOTORIOUS claimed to release 3.23 GB of Baguio City government files. Reported samples include building-permit and property details and a professional ID card; the claim is unverified.
An actor using the name NOTORIOUS claims to sell 1.71 TB of files allegedly taken from the Summerville Police Department. Samples reportedly include police intelligence records and identity documents; the claim is unverified.
Forum actor Kazu allegedly offered a 2026 MyVete database dump containing 5,571,174 user records for $4,000. The listing is unverified and shows no sample, schema, or field list.
Novocure says a mid-August intrusion exposed records for more than 1,400 U.S. cancer patients and contact details for an undisclosed number of employees. Fewer than 50 patients had identifying information exposed; treatment devices and operations were unaffected.
Softaculous says BGP hijacking diverted update traffic from August 28–30, allowing a malicious Virtualizor package to reach a small number of installations. Routing is restored; the vendor recommends system checks and credential reviews.
Córdoba’s government confirmed a cyberattack disrupted several Departmental Revenue online services, including tax payments. The attack vector remains unknown, and the government has not said whether taxpayer data was exposed.
Greece’s Data Protection Authority fined EETAA and the Social Cohesion Ministry €350,000 after a March 2025 ransomware attack exposed data concerning about 2.5 million people, citing weak security and missing processing agreements.
