Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2243 articles
Caravan.kz says it contained a cyberattack, restored secure operations, and reported unauthorized access and extortion to Kazakh authorities. The attackers, who claimed to be Black Field, threatened to publish copied or fabricated data.
A cyberattack on North Carolina Ports’ IT system disrupted operations at facilities in Wilmington, Morehead City and Charlotte. The attack was contained, and recovery is underway; officials reported no indication of sensitive data compromise.
Graubünden says its SharePoint servers were attacked, with no initial indication of compromised accounts or data loss. It planned an emergency update that would make the cantonal website unavailable for several hours.
DeVaughn James LLC sued Palomar after the firm says a ransomware attack shut down operations for five business days. The firm seeks more than $75,000 after Palomar allegedly refused its insurance claim.
Vincennes schools shut down their servers after a reported ransomware attack at technology provider AME. The district said its data was not compromised; phones and internet at its corporation building are unavailable as a precaution.
A seller using the name dreamss is allegedly offering 480,276 Branch Furniture customer records for $200. The claim is unverified; a reported sample contains contact details and partial birth dates.
Zenith Bank says hackers accessed some customer email addresses and phone numbers. The bank reports no evidence that accounts, credentials or funds were accessed; its investigation is ongoing, and customers are warned about phishing.
Sodick says attackers accessed one server in May 2026 by exploiting a network-equipment vulnerability. Its investigation found no evidence of data exfiltration or personal-information leakage; the company is tightening security and notifying potentially affected people.
Jochu and three significant subsidiaries detected unauthorized access by unidentified hackers on August 5, 2026, causing temporary system downtime. The company says the incident had no material operational impact based on its preliminary assessment.
A cyberattack at De Bijenkorf’s logistics partner is delaying orders, returns, and refunds. The retailer is investigating whether customer data was accessed; the partner says it blocked access and added security measures.
Gabon’s SEEG says sabotage in June crippled nearly 95% of its IT infrastructure, disrupting services including prepaid electricity sales. The company reports gradual restoration; perpetrators, intrusion details and any data impact remain unknown.
A reported ransomware attack affected the Municipality of Sithonia and its Municipal Port Fund. Authorities were notified and police are investigating; the data potentially accessed and the status of backups remain unclear.
Madera Community Hospital reported unauthorized network access in May 2025 and later said files were believed to have been acquired, affecting at least 150,810 people. The hospital said the attackers withdrew an extortion demand.
HostDZire says ransomware compromised most of its VMware infrastructure, encrypting virtual disks and permanently destroying data. The provider rebuilt nodes, restored VPS services in India and the Netherlands, and offered affected customers service-time compensation.
Columbus Water Works contained a July 27 cyberattack affecting automated monitoring systems. Operators switched to manual controls; officials said water service and quality were unaffected. Investigators have not identified the access method or responsible actor.
A review of July 2026 attacks on U.S. water systems describes exposed PLC and remote-access weaknesses, reported operational disruptions, uncertain attribution, a mix of confirmed and unverified Canadian cases, and recommended OT defenses.
A cyberattack compromised around 200 accounts on Swiss federal SharePoint servers. Internet access for people outside the administration was blocked; the agency reported no signs of data exfiltration so far.
Step Security reports that the ChainDrop worm poisoned 444 npm packages across 2,212 versions on Aug. 4, 2026, using preinstall scripts to download Bun and run a credential-stealing payload that republishes packages.
IrpiMedia reports that Qilin attacked Retelit, affecting three data centers and exposing internal files. Retelit confirmed the June 8 incident and says forensic analysis of possible data exfiltration is ongoing.
Downies says data was accessed and removed without authorization in a ransomware incident. The company is investigating with forensic experts and Australian agencies, while Settra continues to disclose data on its leak site.
The article reports that attackers downloaded data linked to about 31,000 entities from Liechtenstein’s beneficial ownership register. The system was taken offline, and forensic investigations are ongoing.
Techventures Bank notified Romania’s DNSC of a ransomware incident on August 2, 2026. DNSC is helping mitigate and investigate the attack; authorities have not disclosed its impact, affected systems, or whether customer data was compromised.
Beacon CRM says compromised credentials were used to access its systems and database backups were likely downloaded, though exfiltration is unconfirmed. Cultural organisations including English National Ballet and Chiswick House and Gardens Trust may be affected.
Águas de Portugal confirmed a complex cyberattack affecting several group companies since Friday, temporarily disrupting administrative processes and contact channels. The company says water and sanitation services were unaffected; recovery is underway and police are in
