Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2239 articles
A reported ransomware attack left Salus clinic systems in Trieste unusable from Aug. 31, disrupting bookings, online medical reports and phone lines. A ransom was reportedly demanded; data extraction is unknown.
Cornerstone Behavioral Healthcare says a May 2026 ransomware attack may have exposed personal and health information belonging to about 14,830 people. The provider stopped attackers’ access within an hour and is continuing its investigation.
An attacker reportedly inflated TONIC’s price 100-fold to borrow $74 million on Tectonic. PeckShield says about $6 million in Ethereum was stolen; Cronos halted the chain, restored its state, and resumed block production.
Berlin is investigating Rhysida’s claim that it stole 5.79 TB of data. Investigators report exfiltration from a Senate department, but the extent is unknown; officials say election systems remain secure and refuse to pay.
Delta School District says unauthorized activity led it to take DeltaLearns.ca offline on Aug. 10. Personal information may have been exposed, but the district has no evidence it was accessed or misused.
McKesson confirmed data exfiltration affecting customers in two business units. ShinyHunters threatens to publish the data and reportedly claims 284 million records were stolen; McKesson says services remain operational and its investigation continues.
McKesson says attackers accessed third-party apps and exfiltrated data affecting some customers. ShinyHunters claims vishing and stolen Okta credentials enabled access, but its 284 million-record and extortion claims remain unverified.
A cyberattack detected August 25 disrupted Boston Scientific’s manufacturing, order processing, and shipping. The company reported no new malicious activity, but had no full restoration timeline; existing implanted cardiac devices were unaffected.
Orient Blackswan reported that a ransomware attack encrypted critical data and disrupted business operations. The company isolated affected systems, began restoring backups, and filed a police complaint; an investigation is underway.
JetBrains says attackers exploited an unpatched vulnerability in a TeamCity installation on its Cadence server, accessing user data, a 2024 backup, and employee AWS credentials. The company is investigating and advises users to revoke and replace credentials sent viaCad
ATF confirmed a standalone system was compromised after Qilin listed the agency on its leak site. ATF says its enterprise network, eForms system, and operations were unaffected; it disconnected the environment and is investigating with the DOJ.
T&K TOKA confirmed ransomware damage to some systems on August 28, 2026, and suspended some operations. It is restoring systems and investigating the cause and impact; the attacker, entry point and any data theft remain unknown.
The University of Barcelona is investigating a recently detected cyberattack. It reset credentials and added security measures; no data impact has been detected so far, though some services may be temporarily unavailable.
DataBreaches analyzed files attributed to an Orova attack on Cardiology Associates of Port Huron and found extensive patient and health information. The practice has not confirmed the breach, and the records’ authenticity is not fully verified.
McKesson says attackers accessed an unnamed third-party application and exfiltrated data tied to oncology and surgical customers, causing possible service degradation. The company says it has reasonable assurance the attackers are no longer inside its systems.
A cyberattack on an external provider’s appointment platform disrupted Wolfenbüttel County services. The county said residents’ personal data may have been accessed; online bookings were unavailable on August 31 and September 1.
FulcrumSec claims it stole 86 GB from Manchester Airports Group. BleepingComputer reviewed samples indicating detailed customer and travel data exposure, but could not verify the dataset’s full size or the group’s claimed access method.
Winona County paid $128,539.57 after detecting ransomware on Jan. 22. A separate attack was detected Apr. 7; officials are reviewing affected data to determine whether residents’ personal information was exposed.
The City of Norcross says a ransomware incident on Aug. 1, 2026, affected certain computer systems. Most services remain operational, but limited disruptions may continue during restoration and security improvements.
The company disclosed a cybersecurity incident affecting select systems in a limited part of its network. It says its current assessment found no leaked data or material operational impact and that investigation and recovery are ongoing.
Ambition DX confirmed a leak of some information assets after unauthorized access to a file server. The company has not confirmed Settra’s claim that it stole 437 GB from am-bition[.]jp or identified affected individuals and records.
Hasbro says an investigation found current and former employees’ personal information may have been accessed. Massachusetts filings cite 436 affected residents; the company is offering identity-protection services. A link to a March cyberattack remains unclear.
Berlin says it will not pay extortionists after forensic work found further data outflows from a Senate department. Separately, Manchester Airports Group confirmed customer data was obtained from booking and WiFi-related systems at three airports.
Uttarakhand’s online FIR service has reportedly been down for about 15 days after a cyberattack. Separately, the state health authority is investigating an alert that credentials were copied on August 21.
