Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2240 articles
A forum user claims to be selling Bureau Vallée customer data allegedly taken through a supplier that exported daily store files. The post describes injection flaws and persistent access, but the claim is unverified.
The xpl0itrs group claims it stole 6.1 TB of data from Gruppo Spaggiari Parma, potentially affecting more than 3,000 Italian schools. The breach and claimed data types have not been independently verified.
Andover confirmed a cyberattack caused a four-day network outage, disrupting town services and delaying school teacher assignments. Most systems were restored by Aug. 17; the investigation continues, and data access or compromise is unknown.
Douglas County’s sheriff’s office says it is investigating suspicious activity in its computer system. Some services have had intermittent outages, but 911 and sheriff’s responses are unaffected; officials have not confirmed ransomware or data exposure.
Apollo says attackers accessed some cloud platforms July 6–10, compromising names, dates of birth, contact details, home addresses and Social Security numbers. Google attributed the broader campaign to BlackFile; Apollo found no evidence data was posted or misused.
Baylor Genetics says an unauthorized third party accessed parts of its network from June 11–17, 2026, potentially involving patient and employee data. It says operations and test-result integrity were unaffected and no misuse is confirmed.
SickKids says a third-party software flaw led to unauthorized access and exposure of personal information belonging to some employees and job applicants. Clinical systems and patient records were unaffected; the investigation continues.
CareCloud reported that a hacker accessed an AWS electronic health record environment in March and exfiltrated data affecting 3,756,469 people, including Social Security numbers, payment card details, medical records and insurance information.
Sakura Internet disclosed unauthorized access and malware in its customer management system. Up to 1,360,563 accounts may be affected; the company says no data exfiltration is confirmed and the incident was not ransomware.
A forum user named Satanic allegedly offered Wrappiness[.]co’s customer database, claiming it contains 3 million order records and 115 administrator accounts. The claim is unverified, and the retailer has not publicly addressed it.
A forum user identified as ChimeraZ allegedly leaked 43GB of Bergerat Rent data across 132,433 files, including emails, CRM records and invoices. The claim names BlgCloud as the shared platform source but remains unverified.
Apollo says attackers used social engineering to access its systems from July 6 to 10 and obtain personal data, including Social Security numbers. The company has not specified whose records were affected or whether a ransom was demanded.
A cyberattack targeted Adelmannsfelden’s municipal administration in early June. The mayor said no data was taken, and the municipality restored online service in early July after about a month without email.
A company reported a cybersecurity incident on August 21 affecting select systems in a limited part of its network. It isolated affected systems and began inspections and recovery; preliminary assessment found no significant operational or financial impact.
SafePal says an authorization flaw in an order-tracking plug-in exposed order and contact details for about 39,798 customers. The company says wallet credentials and funds were not affected, fixed the flaw, and warned of phishing risks.
Latvia’s CSDD reported a cyberattack involving data tied to 1.2 million people and 200,000 firms, including names, payment details, licence plates and addresses. Authorities warned of fraud risks and ordered an investigation.
Inission says a ransomware attack discovered on June 22 affected Inission Power Finland. Parts of affected databases later appeared online, including personal data; the company cannot rule out further disclosure.
Alation confirmed unauthorized activity in one of its systems and said it is investigating. An earlier incident caused degraded availability for some customers and was resolved within an hour; data theft and the number of affected customers are unknown.
CareCloud reported that unauthorized access to an AWS environment in March affected 3,756,469 people and disrupted its network for eight hours. The attacker claimed database data was exfiltrated; the sample notice specifies full names but not other data types.
Sakura Internet says attackers accessed its sales management system, potentially exposing information from up to 1,360,563 accounts. The investigation continues; no data exfiltration has been confirmed.
A forum user claimed to sell data from coincustody[.]io covering 212 orders from May 2025 to August 2026. The unverified records reportedly included buyers’ contact, address, identity and order details.
Researchers analyzed a Satanic forum release containing data tied to 669 Stripe vendors and 1,033 API keys; the actor claims to hold about 20,000 keys. The dump includes customer and transaction records. The access method remains unconfirmed.
A forum user identified as Satanic allegedly used 1,033 compromised merchant API keys to export 662 datasets totaling 33GB. The claim is unverified and does not indicate a breach of Stripe’s own systems.
CareCloud says attackers accessed an AWS environment in March. HHS confirmed the breach affected 3,756,469 individuals; exposed information included personal, health, and, for a limited subset, payment-card data.
