Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2242 articles
EOPPEP says a ransomware attack disrupted its systems and online services from August 5. The organization says its records and data remain intact, but has not clarified whether data was stolen; no ransomware group was identified.
Brazosport College’s key systems remain offline after a cybersecurity incident. Outside forensic specialists are investigating; the cause, any data compromise and restoration timeline are unknown.
Cook Medical says an employee was deceived by a social-engineering scam, giving an outside party access to some systems on July 2. Contact and business information was involved, but the company reports no evidence sensitive data was accessed or operational impact.
ZeroBytes claims it used internal VPN credentials to access French tax administration tools and extracted 678,438 taxpayer records for sale. The claim is unverified, and the administration has not publicly responded.
ABC-Map, a UN FAO climate mapping tool, was allegedly left in a publicly writable bucket, exposing 138,346 government boundary files totaling about 11GB. The issue was reportedly linked to misconfiguration and observed Aug. 12, 2026.
A cybersecurity incident disrupted Darlington County systems and phone lines. Officials took some systems offline and brought in specialists and law enforcement; 911 remained available, while the incident’s cause and scope are unknown.
A cyberattack disrupted eight Ceva Logistics warehouses in Europe, delaying shipments. Customers and partner organizations said personal and delivery information may have been exposed; the attacker and access method are unknown.
Hudson Rock says malicious LiteLLM versions 1.82.7 and 1.82.8 led to the theft of CI/CD secrets across 2,488 attributed corporate domains. The article describes the attack path, exposed data, and recommended response.
A ransomware incident disrupted door access and HVAC systems at Winnipeg’s Health Sciences Centre. Shared Health said patient care continued uninterrupted, launched an investigation and increased security at hospital entrances.
A reported cyberattack on Ceva Logistics disrupted shipments at eight European warehouses and may have exposed customer data tied to Bol and Steam hardware orders. The attacker, full scope and any ransomware or extortion remain unknown.
AnMed says its systems remain disrupted and unauthorized Facebook posts included ransom demands attributed to The Gentlemen. The group claimed to steal 6 terabytes of sensitive health data, but AnMed has not verified the claim and is investigating.
A forum user named slvsh3r allegedly leaked HeyPulse database records and source code. The unverified claim may involve French business clients’ account details, bcrypt password hashes, and code containing live secrets or API keys.
DarkMafiaX allegedly posted the HerbaSis database, reportedly exposing Brazilian customers’ medical conditions, CPF numbers, and other personal details. The claim is unverified, and no record count was provided.
A seller using the name exfilar claims to offer a 110GB Gran Caribe Hotel Group dump, allegedly containing 26,094 guest passport records, employee files and corporate systems across eight Cuban properties. The claim is unverified.
Gig Works says investigators found no evidence that personal data files were removed, but cannot rule out brief viewing of records in a dependent-deduction database. It is notifying potentially affected people and has strengthened security.
Delta is investigating a report that a passenger created a fake Wi-Fi network on flight 591, prompting the crew to disable Wi-Fi for about 30 minutes. Delta said aircraft systems and flight safety were unaffected.
Delta says an unauthorized Wi-Fi network briefly appeared on Flight 591 and that the crew disabled aircraft Wi-Fi for nearly 30 minutes. Reports allege a deauthentication attack; Delta says passenger and aircraft safety were unaffected.
Wesco says it is investigating a cloud CRM incident after ExfilSquad claimed to steal and publish 2.6 million records. Wesco reports no disruption or evidence of ransomware or malware, and says it does not believe sensitive data is at risk.
An actor using the name GordonFreeman claims to offer a 15.7GB RENAPER database containing 48 million records, including identity numbers and home addresses. The claim is unverified, and RENAPER has not publicly responded.
Researchers report that attackers poisoned a BdThemes JSON feed, exploiting an XSS flaw to create rogue WordPress admin accounts and reportedly install a webshell. WordPress[.]org removed affected plugins pending review.
CERT Polska says an attacker reached a Polish CHP plant’s OT network through a poorly isolated private APN, using a compromised FortiGate path and exposed WAGO PLC. Siemens PLCs were stopped, briefly interrupting operations; staff restored systems.
Printing company Simian says attackers may have accessed customers’ email addresses and hashed passwords, while a small number of customers’ credit card details were intercepted. The incident reportedly originated at an external service provider.
USA DeBusk reported a ransomware attack involving unauthorized access around Sept. 5, 2025. A review found personal and health information of 18,067 people affected; the company is offering two years of identity monitoring.
Boston Health Care for the Homeless Program says files may have been accessed or acquired in a network incident, affecting 201,260 people. Exposed information included Social Security numbers, financial details and medical records.
