Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2240 articles
A DDoS attack disrupted Norway’s shared government digital infrastructure, leaving some services, including ID-porten and eSignering, partly unavailable. Digdir reports no indication of a security breach or personal-data compromise; the attacker is unidentified.
A RedLine infection on a Syrian National Army military police computer stole credentials, a live Telegram session and unencrypted detainee records, exposing identities, photos, family details and interrogation statements that have circulated since 2023.
A forum user named Lagui1337 allegedly offered 1,899,454 YouFid customer records for €1,000 in cryptocurrency. The listing claims personal and loyalty data are included; the sale and data remain unverified.
Forum user NikolaT claims to have published 22.25 GB of Groupe Bernard data in what they call the thirteenth leak from BlgCloud. The post describes CRM records and account data; the claim is unverified.
Sotheby’s International says an incident involving unauthorized access to a third-party marketing platform may have exposed contact details. The company disputes an accesser's claim of 1.6 million contacts and says it is investigating.
Nutex Health disclosed that an unauthorized third party accessed and exfiltrated information from company servers. The healthcare operator is investigating; the affected data and any patient or employee impact are not yet known.
Paylogix says hackers stole files from its network between November 13 and 18, affecting people’s financial, health and other sensitive information. The company reported 64,383 affected people in South Carolina, plus people in New Hampshire and Vermont.
ReliaQuest says a ShinyHunters-linked social-engineering attack tricked one employee into approving an SSO login, giving attackers brief view-only access to its identity dashboard; it says no business apps or data were accessed.
Turner Construction confirmed an attack between July 2 and 15 and notified more than 13,000 potentially affected people. The ransomware group Payout Kings claimed it obtained 27.2 TB of data, including military files; Turner’s investigation is ongoing.
ReliaQuest says an employee entered credentials and approved an MFA push on a fake SSO page, giving an attacker temporary view-only dashboard access. The company says application access was blocked and no customer data was accessed; ShinyHunters claimed the attack.
An unverified forum listing by user misere allegedly offers Bureau Vallée customer records, claiming 13.73 million records (4.82 million unique) obtained via a third-party exporter; the post alleges injection flaws and persistent access.
A forum user, DumpSecNew, allegedly offered query results from France’s Portail Calypsso, reportedly involving police files including TAJ, FPR, SIV and SNPC. The claim is unverified; the sample was not described as a full database dump.
A forum user identified as xpl0itrs claims to offer 6.1 TB of data allegedly taken from Gruppo Spaggiari Parma. The company says the incident was limited to a forms component and denies impact to its register and school-management systems; the claim is unverified.
South Korean authorities said an exposed encryption key in the Modu-ui Changup platform’s API enabled access to personal information and startup-idea summaries for about 5,000 applicants. The sponsored article also recommends separating keys from data.
IServ’s cloud module was reportedly hit by a cyberattack. Hattingen is checking whether local schools that use the module were affected; the city says there is currently no indication that personal data was exposed.
A caller impersonating a ReliaQuest security employee directed a teammate to a fake SSO page. The attacker briefly gained view-only access to one identity dashboard session; no applications or customer data were accessed.
Spaggiari says a June 30 intrusion exposed some attachments uploaded to its Bergantini forms service. The ClasseViva register was unaffected; a cybercrime group’s ransomware and 6.1 TB theft claims are disputed.
SickKids said investigators believe hackers likely stole personal information tied to employees, applicants and related organizations through a third-party application. No patient information or clinical systems were affected; impacted people were offered credit-monitor
U.S. Bancorp says LockBit’s data-theft claims relate to a potential fourth-party incident outside its environment. The bank reports no evidence its systems or data were compromised and says it has notified law enforcement; LockBit provided no samples.
Polish prosecutors are investigating unauthorized access to Zabka systems through an external supplier account. Reports say employee and partner data were exposed and some customer data may have leaked; officials said stores and transaction data were unaffected.
A forum user called ChimeraZ is allegedly selling a database linked to madeinbebe[.]com, reportedly containing invoice records for 960,106 people. Samples show names, billing and delivery addresses, and purchase details; the claim is unverified.
A report alleges Saudi car-parts marketplace speero[.]net was dumped and its data offered for sale. The claimed 11GB dataset spans 83 CSV tables; a free user-table sample reportedly includes password and reset-token fields.
A forum user known as Knox allegedly offered Iraqi electoral data covering 31 million citizens and 28 million phone numbers. The claim is unverified, and the commission has not commented.
Forum user misere allegedly offers 10.28 million records tied to beautysuccess[.]fr, including a 10,000-record sample. The seller attributes the data to a third party; the claim and contents are unverified.
