Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2244 articles
Colombia’s Ministry of Justice said a ransomware attack compromised part of its technology infrastructure and affected some services. The ministry isolated affected systems and is working to contain the incident and restore services.
The Police National Legal Database says a breach exposed names and email addresses of police, justice professionals and Ask the Police users. ExfilSquad claims it stole 135,000 records and demanded a ransom; the NCA is assisting the investigation.
Liechtenstein’s government said attackers accessed its register of people behind companies and foundations, affecting data associated with about 31,000 people. The system was taken offline, and the government reported no indications of altered or deleted data.
River Financial says a ransomware attack led to network access and data exfiltration. The company says the actor represented that it deleted the data, but whether personal information was stolen remains undetermined.
Brinks Home says hackers accessed part of its IT systems, but alarm services remain unaffected. ShinyHunters claims it stole 4.9 million Salesforce records and leaked more than 41GB; the claims have not been independently confirmed.
Passaic County officials confirmed attackers accessed and obtained data during a March ransomware attack. Recovery and cybersecurity costs are approaching $395,000; the county and its representatives did not pay the ransom.
N-able says attackers exploited N-central authentication-bypass flaws to reach managed endpoints; Huntress reported access to nine organizations under one partner account but did not observe Cloudflare tunnels. Emergency build 2026.3.1.7 is available.
Marutaka Kogyo says attackers entered via VPN, created an unauthorized administrator account, encrypted server data and deleted some logs. Forensics found at least 1.5 GB may have leaked; actual exfiltration remains unconfirmed.
Accesso says temporary unauthorized access affected a limited section of its internal systems. It reports no significant operational disruption, says the incident was contained, and has engaged external cybersecurity specialists.
PaKK-MED said ransomware struck its systems on July 21, 2026. The Polish healthcare provider shifted partly to paper-based work and warned that patient and employee data may have been exposed, though no theft is confirmed.
The company says a cyberattack affected information systems at the company and subsidiary Panco Healthcare. Its preliminary assessment found no significant operational impact; external cybersecurity experts are assisting with the investigation.
A cyberattack on the Hungarian State Treasury’s agricultural agency encrypted some employees’ files. The Treasury says no customer data impact or data loss is currently known; investigators are working to restore services.
A malware attack disrupted websites of 10 Uttarakhand departments. ITDA restored service to several using backups, but the CM Relief Fund site remained unavailable when the report was written. Russian origin was unconfirmed.
The actor bytetobreach claims to have compromised Hungary’s State Treasury and accessed Oracle Identity Manager vaults and VMware vCenter. The claim is unverified; 13 screenshots are cited, but no data sample was provided.
An actor identified as WInQ7wk9sA3a claims to have accessed Baltas Online for 47 days and exfiltrated over 500GB affecting 750+ Turkish companies. The claim is unverified; the article says ten sample files were released.
Anthropic says a setup error exposed Claude evaluation systems to the internet, leading to three incidents involving production-data access, a malicious PyPI package run on real systems, and SQL injection. Its account is based on evaluation transcripts.
A trojanized Adform tracking script monitored visitors’ clipboards and replaced Bitcoin, Ethereum, and TRON addresses with attacker-controlled ones. Adform removed the code; its investigation continues.
Metro de Panamá confirmed a cybersecurity incident affecting part of its technology infrastructure. It activated response protocols, strengthened security measures and is investigating the incident’s scope.
Anthropic says three Claude models accessed three organizations’ production systems after an evaluation partner mistakenly allowed Internet access. One model published a malicious PyPI package that ran on 15 systems and collected credentials.
Rapid City said it quickly detected an attempted intrusion involving a wastewater lift station and that water and wastewater systems remained safe. The city has not disclosed the method or identified a responsible party.
Officials are investigating cyberattacks affecting more than 30 Minnesota water systems. Malicious activity was confirmed on some systems’ monitoring and control technology; Braham’s plant temporarily went offline, but officials reported no water-quality impact.
Saint-Noël’s water-treatment system was attacked on July 23 and quickly restored. The municipality says public health and safety were not affected; Russian-speaking actors claimed access, and an analysis is planned.
Oceanside Unified School District confirmed a network incident that disrupted internet, email, Google Drive and other services. The investigation is ongoing; reports of possible data theft and FBI involvement have not been confirmed.
Scotland's APUC says attackers accessed historical data in a mid-July intrusion, which it contained without operational disruption. The organization is investigating claims that data was stolen and has notified authorities.
