Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2222 articles
A French report says a Qilin ransomware attack put Eyguières’ municipal systems out of service and threatened municipal and resident data. Gendarmes are investigating and aim to restore secure server use.
Kawai America identified possible unauthorized access on May 6, disconnected its network, and has restored operations. The company says no information leak has been confirmed and no impact to its Japan systems is currently known; investigation continues.
Casalp says ransomware halted its systems on May 11; service has since been restored. Possible access to residents’ personal data remains unconfirmed, and the housing agency has notified residents and Italy’s data protection authority.
Wohnungsgenossenschaft Neukölln eG says unknown attackers encrypted parts of its systems and copied member and business-partner data on April 18, 2026. The cooperative notified Berlin police and the data-protection authority and is restoring systems.
Plaza Home Mortgage says an unauthorized party accessed an employee computer around February 17, 2026, and may have obtained customer information, including Social Security numbers and mortgage-related data.
The Center for East European and International Studies in Berlin said hackers accessed its file server. The attacker is unknown, and account data may have leaked. The center learned of the attack on June 10 and notified affected people and authorities.
A cyberattack halted textile finisher ZEGO’s production in Aschaffenburg for nearly six weeks. The company filed for insolvency and says it will fight to continue operating.
Alpine Linux rebuilt its GitLab server and reset passwords after attackers targeted CVE-2026-97229, causing worker crashes. It found no package tampering or confirmed code execution, but missing logs prevented ruling out compromise.
The FBI attributed the October 29 theft of about $6.36 billion from Binance to North Korean group TraderTraitor. Binance linked the breach to a compromised DevOps engineer’s laptop and says it has covered about 95% of the affected amount.
The University of Warsaw confirmed ransomware in part of its IT infrastructure following an incident in January 2026. Officials say findings so far do not indicate unauthorized access to personal data; technical analysis continues.
Shwapno filed a police report seven months after a reported ransomware attack on its parent company, ACI Logistics. The report says attackers demanded $1.5 million and later leaked over 410 GB of data.
Leipzig University kept its servers offline after a reported cyberattack, disrupting online platforms and services for more than 30,000 students. The university had not determined how attackers entered or whether data was taken; in-person classes continued.
Chainalysis said an external actor used “offensive agentic techniques” to access internal tools and non-sensitive customer data. The company said investigation content, credentials and session tokens were not accessed and is patching and hardening systems.
Northflank says multiple customers reported unauthorized use of AI API keys stored on its platform after a breach. It urged customers to rotate secrets; the access method and number of affected customers remain undisclosed.
Chainalysis says attackers accessed internal systems and customer names, email addresses, user IDs, and role labels. The company reports no evidence that investigation content or authentication credentials were accessed and is still investigating.
The article reports that attackers stole $6.3 billion from Binance’s hot wallet and that about $3 billion in assets was frozen. It attributes the suspected attack to Lazarus based on researchers’ assessments; a forensic report was pending.
Actor d00101 claims a 6.9 GB dump linked to Bangkok Post contains 822,140 member records, employee data and infrastructure material. The listing and its claims have not been independently verified.
GoreTerminal claims to have leaked a Defy Club dataset with about 23,149 accounts, including phone numbers and email addresses. The listing and sample are described, but the dataset and breach claim remain unverified.
Binance reports a cryptocurrency theft estimated at about $6.3 billion. Its investigation points to a DevOps engineer’s compromised laptop as a possible entry point; the exchange says about $3 billion has been frozen and it will cover losses.
After a customer reported a suspected recovery-phrase-stealing implant in a CryptoBilis-sold Trezor Safe 5, Trezor advised buyers of CryptoBilis-supplied devices since March 2026 to move funds to a new wallet.
The Department of Peace claims it stole and published records on 41,000+ DHS workers, including contact details and internal group memberships. DHS says it is aware of a potential breach; Okta says it has no evidence its systems were compromised.
Ploiești’s Public Local Finance Service requested a budget adjustment after its director said it faced a cyberattack on Aug. 27, 2026, followed by similar activity for a week. Funds would support a stronger antivirus license and firewall.
Binance says an October 29 hot-wallet incident across at least ten blockchains had an estimated $6.3 billion impact. Initial findings suggest a compromised DevOps laptop may have enabled access to a withdrawal system; TRM Labs attributes the attack to TraderTraitor, un1
Polymarket halted international trading after users reported unauthorized withdrawals linked by researchers to malicious JavaScript served through DebugBear’s RUM script. Estimated losses range from $2.19 million to $2.71 million; the tally is unverified.
