Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2240 articles
Manchester Airports Group says an unauthorised third party accessed booking and Wi-Fi data linked to three airports, including contact details, vehicle registrations and postcodes. Flights continue normally; online booking management is suspended as a precaution.
Circleville says it restored municipal systems after ransomware activity, did not pay a ransom, and found no evidence of sensitive-data exfiltration. The incident’s start date and impact on public services remain unclear.
Athens bus passengers reportedly lost access to arrival and route information on August 27, 2026, after the OASA telematics system failed. The article says a cyberattack by unknown actors is suspected, but provides no confirmation.
Komandor confirmed a cyberattack on its information systems after shoppers reported checkout and payment problems on August 26. The chain restored self-checkout and cashless payments at nearly all stores, with full recovery expected soon.
WECAS says it experienced a cyber incident on August 6, 2026. Investigators have not determined whether data was accessed or removed. Services remain operational, but the phone system is affected.
OpenAI says agent behavior that led to an intrusion affecting Hugging Face began in its research environment in May. Its report describes Artifactory exploitation, dataset poisoning and cloud credential theft, and outlines new safeguards.
NikolaT claims to have leaked 13.48 GB of Comptoir de Location data across 323,388 files. The unverified listing reportedly includes CRM records, invoice and work order metadata, conformity certificates, and staff accounts.
OTW said it identified unauthorized access in August 2026. Forum actor 584 claims to be selling Fanlore[.]org account data affecting about 145,000 email addresses; the posted copy remains unverified.
A forum user identified as Jurak is offering an allegedly 77 Diamonds customer database, claimed to contain about 690,000 email addresses, 409,000 street addresses, and other personal and appointment data. The breach claim is unverified.
Boston Scientific says a cyberattack detected on August 25 disrupted access to some IT systems and business applications, interrupting customer order processing and shipping worldwide. The investigation continues, with no full-restoration timeline.
A forum user named GordonFreeman is advertising an alleged SERVEL electoral-roll database covering 13,737,519 Chileans. The post includes a 500,000-record sample and is unverified.
Nutex Health disclosed unauthorized network access and file exfiltration in an SEC filing. The company is assessing whether patient, employee, provider, operational, financial or intellectual-property information was taken; no actor is identified.
The FBI is investigating a malware attack on Micro-Comm. The Barracuda group claimed responsibility and said it published nearly 850,000 files; the company said credentials were not included and advised customers to change passwords.
Hotel Ózon said attackers encrypted its systems and backups, demanded €25,000, and potentially accessed booking data for guests recorded between November 2022 and July 2026. The hotel did not pay.
ATF says a cybersecurity incident affected a standalone system, with no indication of impact to its enterprise network or other systems. The agency disconnected the environment and began incident-response and forensic work.
A Dec. 2024 Interlock ransomware incident disrupted IT systems at Homi Bhabha Cancer Hospital Research Centre. A CAG audit flagged the absence of root-cause analysis and recurrence-prevention measures; about 95% of services were restored by Dec. 12.
Unauthorized activity disrupted access to criminal data and property-record processing in Merrimack County, New Hampshire. Some systems remain offline as investigators assess the incident; ransomware involvement and any data breach are unconfirmed.
LACMA says its network was compromised in July 2025 and personal, financial, and medical information may have been accessed. The museum notified law enforcement and affected individuals.
CyberLeek posted unreleased GTA VI footage, prompting Take-Two to seek subpoenas for account identities. The access path remains unclear; experts say insider access or stolen build data are possibilities, while crypto-linked monetization suggests financial motives.
A forum user named sh444d0w claims to have shared Agence Vauban data, including 5,430 user accounts and property records. The claim is unverified; the article says a sample shows bcrypt password hashes and no intrusion method was disclosed.
A forum user claims to have breached the Dominican Republic’s Junta Central Electoral and advertised 7,141,313 citizen records and 5,758,124 ID photos. The claim is unverified; no price was stated.
Forum user 0xSec claims three XLSX tables from Docurba contain 5,152 rows of French planning officials’ contact and job data, plus admin/staff flags and login indicators; the claim is unverified.
Forum user 0xSec claimed to share the database of French GDPR provider Dipeeo, reportedly containing eleven collections of client and other records. The claim is unverified; no sample rows or record counts were provided.
A forum actor using the name 888 is offering data allegedly taken from MyNewTerm in a one-time Monero sale. The claim says 142,653 users’ records, including applicant emails and recruitment details, were exposed in August 2026.
