Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2246 articles
Bank of Baroda said a compromised employee email account enabled unauthorized access to certain data. The bank said it contained the incident and its core systems were unaffected; claims that customer data was leaked remain unverified.
Romania’s prison administration says ransomware hit its workstations and servers on July 29, 2026. Equipment was isolated, some services were suspended, and IT teams are investigating and working to restore operations.
The University of Aveiro says unauthorized access to its information systems exposed personal and institutional data. It is assessing the scope and has asked its academic community to change passwords.
MSGás confirmed a cyber incident in early July that may have exposed customer data, including CPF numbers and addresses. The company isolated affected systems, revoked access, fixed vulnerabilities and notified Brazil’s data protection authority.
CubePilot says an attacker hijacked its DNS on July 24, redirected traffic, and obtained TLS certificates, so credentials may have been captured. The company restored control, revoked certificates, and advised password resets and avoiding firmware downloaded July 24–25.
Minnesota officials say a cyberattack disrupted water and wastewater utilities in more than 30 communities. Braham’s plant went offline and Plymouth isolated affected equipment; water quality was unaffected, and the attacker remains unidentified.
A forum user known as ChimeraZ allegedly posted an Allo.Solar database containing 208,694 order lines and data on 101,349 French customers, including contact details and partial card information. The claim is unverified.
Origin Energy said an intrusion affected data belonging to 900,000 current and former customers. An individual claiming responsibility alleged data from 2 million customers was obtained and threatened a leak; Origin has not confirmed an alleged settlement.
AnMed reported a malware-related cybersecurity disruption that caused phone and internet outages and closed dozens of departments and clinics across South Carolina and Georgia. Urgent care remained open as the health system worked to restore systems.
OCS said an external cyberattack on servers supporting its OCS FAMILY LINK SERVICE may have exposed personal information and other data. The company shut down the service and related networks while investigating.
CubePilot says a security incident has affected some systems. The company took its ERP portal offline as a precaution and warned customers not to access services requiring authentication while it investigates.
MCBS says attackers accessed its network in September 2025, potentially exposing sensitive information belonging to 1,261,464 people. PEAR claimed to have stolen 3.3 terabytes, but the outlet could not validate the leaked data’s authenticity.
Anjou says an intrusion into its IT services disrupted public services, including telephone service. The borough has hired a firm to investigate and filed a complaint with Montreal police.
Hiwin S.r.l. says a cyberattack affected certain information systems. It activated response procedures, engaged external experts and plans to restore affected systems from backups after security checks. A preliminary assessment found no material operational impact.
UVVG Arad confirmed a cyberattack affected its IT infrastructure and digital services. The university notified Romanian authorities and is working to restore services; a report linking the attack to Qilin has not been officially confirmed.
Newton County Schools in Georgia took affected systems offline after discovering unauthorized network activity. Specialists are investigating and helping restore operations; the district has not confirmed data theft or identified affected services.
Coca-Cola confirmed unauthorized access and data theft at Fairlife during a ransomware attack that temporarily disrupted production. Anubis claimed responsibility and said it encrypted Nutanix systems; most U.S. production has resumed.
Three plaintiffs allege a fake Sparrow Wallet app on Apple’s App Store stole about $1.8 million in cryptocurrency after they entered their seed phrases. Apple says it removed impersonating apps and terminated associated developer accounts.
A cybersecurity incident affecting IT provider Orisha temporarily disrupted La Mutuelle Familiale services. Services are progressively returning; Orisha has not confirmed exfiltration of the insurer’s data.
Coca-Cola confirmed that a ransomware intrusion at subsidiary Fairlife involved data being taken. Production at four US facilities was suspended during the investigation and has largely resumed; Anubis’s claim of stealing 1 TB remains unconfirmed.
MCBS reported attackers accessed its systems in September 2025. A US HHS tracker lists 1,261,464 affected people; files containing personal and medical information may have been stolen. PEAR separately claimed responsibility.
EY disclosed that attackers accessed a third-party support platform and downloaded documents that may contain client tax information. ShinyHunters claims responsibility and alleges a supply-chain attack; EY has not confirmed the gang’s role.
LM Mobilidade says it identified a cyberattack and temporarily shut down systems as a precaution. The company reports no personal data compromise so far and is investigating with a specialist forensic consultancy.
ZTN Süd says a cyberattack discovered on July 20 disabled several servers with encryption software. The organization isolated affected systems and is investigating possible personal-data exposure; no evidence of data theft or misuse has been found so far.
