Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2242 articles
A network security incident disrupted some Fort Smith computer systems and city services. 911 and emergency response remained operational. Restoration work is ongoing; the city has not identified affected systems, the cause, or those responsible.
Sakura Internet confirmed unauthorized access to 583 rental-server accounts and malware on some servers. Customer data may have been viewed or obtained; the company disabled credentials, blocked access and continues investigating.
Threema said large-scale DDoS attacks targeting its service and colocation partner Nine caused intermittent outages. It added specialized upstream DDoS protection; Threema On-Prem customers were unaffected.
A threat actor claims to have taken millions of employee-directory records from several companies’ Azure tenants using compromised credentials. Researchers say samples appear authentic, but the intrusion method is unconfirmed.
A forum user known as exfilar claims to sell a full extraction from FLY’s backend, allegedly exposed through missing Firebase rules that allowed unauthenticated Firestore and Cloud Storage access. The claim remains unverified.
Plymouth County Correctional Facility shut down its computer system and paused in-person visits after an intruder accessed its servers. Authorities are investigating; it is unclear whether any information was accessed.
France’s DGFiP says an attacker used stolen or misused credentials to access its systems and extract data in late June. Authorities are investigating the scope; ZeroBytes’ claim of more than 600,000 victims remains unverified.
Shell is investigating after Clop claimed it stole 89GB of company data. The alleged theft is linked to CVE-2026-12569 attacks on PTC Windchill and FlexPLM; CISA says the vulnerability is actively exploited.
Have I Been Pwned says leaked data linked to a RingCentral breach contained records for 1.6 million accounts. RingCentral cited social engineering, said its core platform was unaffected, and reported no new unauthorized activity after remediation.
RingCentral says a July social-engineering incident affected a limited number of customers. Have I Been Pwned listed data associated with about 1.6 million email addresses; RingCentral has not confirmed the attackers or affected-person count.
Beacon says attackers used a compromised AWS access key to download customer database backups, potentially exporting all database data. The breach may affect more than 1,000 charity customers; some supporter information may have been exposed.
Former Brightly Software contractor Cameron Curry was sentenced to two years in prison after being convicted of stealing company data and demanding $2.5 million in cryptocurrency. Brightly paid him $7,540 in Bitcoin.
The actor konata_izumi_shell claims to have breached Bolivia’s Agencia Estatal de Vivienda and exposed 36,046 staff records containing names, identity card numbers and job roles. The claim is unverified; no agency response is noted.
ICN says ransomware encrypted data and disrupted its IT environment, including email, systems, files and databases. The company shut down the environment and is investigating and restoring backups; possible data theft remains unconfirmed.
A seller using the name palmbeachpete allegedly offered the EnformionGO database for $50,000, claiming it contains 315.6 million profiles. Sample data reportedly includes contact details, address histories, aliases, birth dates, and geocoordinates; the claim is un un |
A forum user named 4me44 allegedly leaked 20,274 customer records from EVA’s Nantes Sud location and claimed admin access and a €1 million gift card campaign. The claims are unverified.
Actor sta6 allegedly offers data from Zro Global’s hiring platform, claiming 55,866 candidate records, interview audio and internal scores were exposed. The claim is unverified, and Zro Global has not publicly responded.
ZeroBytes alleges it extracted 252,149 rows from France’s DGFiP cadastral data server, exposing 2,041,778 property holders. The group also claims continued access using valid credentials and an MFA bypass; the claims are unverified.
A forum user known as ChimeraZ allegedly released 16GB of Chupin data across 70,974 files, reportedly including emails, CRM records and invoices. Platform identifiers suggest multiple tenants may be affected; the claim is unverified.
Trezor says unauthorized access at shipping partner ShipMonk exposed data for nearly 14,000 customers, including contact and shipping details. Trezor warned affected customers about potential targeted phishing.
Latvia’s CSDD says attackers partially accessed its IT system and obtained historical payment data containing some personal information. The attack was stopped, services remain available, and the incident is under investigation.
The UK ICO reprimanded ACRO over three intrusions from 2021–2023 exploiting an unpatched Kentico portal. Attackers staged data on nearly 11,000 people, but the ICO said ACRO could not confirm exfiltration; Medusa’s responsibility claim remains unverified.
PharmaEssentia says it and subsidiary Panion & BF Biotech suffered a cyberattack on August 3. It is investigating with outside experts and says there is no major business impact; an attacker claims data was exposed.
Nick Scali took some systems offline after a cyberattack, delaying orders and deliveries. The company said it had no evidence customer data was accessed; The Australian reported criminals obtained some customer details and demanded a ransom.
