Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2243 articles
A post alleges Cybernox published free mirrored copies of the Bloctel do-not-call register, claiming 3 million French phone numbers and registration identifiers were exposed. The report is unverified; four sample rows were shared.
An actor named citizengod allegedly posted Schools Division of Iloilo data, including staff, student and family records. The unverified claim includes about 1.06 million name rows, 780,000 attendance records and 4,739 biometric records.
Coryell County, Texas, is restoring systems after a disruption being investigated as a possible cyber incident. Emergency services remain operational, but officials have not disclosed the cause, affected systems or any data impact.
Unlimited Technology Systems reported unauthorized access to files in its data center from Oct. 5–10, 2025; an HHS portal lists 3,803,750 affected people. Potentially exposed records include identifiers and health information.
Sawyer Savings Bank closed its four branches after a network disruption it says is likely linked to a vendor vulnerability. Online and mobile banking, ATMs and debit cards remain available; the incident’s cause and data impact are under investigation.
Coweta says a ransomware attack affected city computers, files, and computer-based services. Emergency services and some third-party systems remain operational, and the city plans to restore data from an off-site backup after clearing its systems.
Levi Strauss says social engineering targeting three employees led to corporate data being accessed and exfiltrated. The company reports the access was contained, no consumer data was affected, and its investigation is ongoing.
North Carolina Ports says a cyberattack disrupted IT systems at three facilities, delaying operations. Recovery is underway; the authority has not identified an attacker or said whether data was stolen.
A seller identified as 2019 allegedly offered CARMA contact and client-configuration data said to cover more than 3,500 organizations. The claim is unverified; CARMA has not publicly commented.
A seller named weykofa allegedly offered data attributed to the French Basketball Federation, claiming records for 75,831 people, 6,873 clubs and 2,030 CVs. Sample data reportedly includes contact details and addresses; the claim is unverified.
North Carolina Ports said a cyberattack affecting Wilmington, Morehead City and Charlotte was contained. The ports shifted to manual processing, with delays expected as outside forensics teams help assess and restore systems; no group claimed responsibility.
A cyberattack discovered July 16 disrupted public and financial services and email access in Rhein-Nahe. The mayor said attackers demanded a ransom, no data loss was known, and payments had resumed.
Levi Strauss disclosed that a third party used social engineering targeting three employees to access its systems and extract some corporate information. The company says it contained the incident and that operations were not disrupted.
Switzerland’s federal IT office says attackers breached its SharePoint servers and compromised about 200 accounts. BIT blocked external access, patched suspected flaws, reset passwords and is reinstalling servers; it has found no evidence of data theft.
Jewelry retailer Frey Wille says a cyberattack in early August led to data being taken from its IT systems, including customer and business information. The extent is still under investigation.
An actor calling itself LaPampaLeaks claims it breached Uruguay’s CEIP GURI platform and offers more than 1 million children’s records for sale or paid queries. The claim and alleged data exposure remain unverified.
A cybersecurity incident disrupted the Kenaitze Indian Tribe’s phones, email and computer systems for over a week, limiting services. The tribe brought in outside experts; ransomware and data theft remain unconfirmed.
UASLP says a cybersecurity incident disrupted several university systems, taking its Virtual Cashier offline and preventing some students from paying enrollment fees. The university is working to restore service and will extend the payment deadline.
Washburn County officials said the county government was experiencing a cyberattack and had shut down all systems. Officials said 911 remained operational.
Biosynex said it suffered an intrusion in early August. The company reported no operational disruption and said affected personal data was limited to professional contact details and business documents.
A forum user known as 2019 allegedly posted a Waggle customer database covering 106,800+ pet camera customers. The report describes contact and billing data, but the claim is unverified and Waggle has not publicly addressed it.
A user posting as kitta allegedly released Ramp4u’s database, reportedly exposing 7,709 users, private messages and 340,333 IP log entries. The breach claim is unverified.
Actor exfilar alleges Qara’s backend was publicly readable and writable, enabling a persistent change to a Saint-Gobain app deployment and exposing sensitive data across tenants. The claims remain unverified.
An actor posting as exfilar claims a publicly readable BudBoard bucket exposed database exports, staff and client data, and a screenshot of a production POS API key. The claim is unverified.
