Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2246 articles
Braham said a cyberattack shut down its water-treatment controls, temporarily taking the system offline. South St. Paul, Plymouth and Maple Plain also reported attacks or suspected attacks on water-system technology; officials said service and water safety were not at a
AnMed confirmed a malware-related cybersecurity disruption affecting its network and phone and internet service across its locations. The hospital system is working with cybersecurity specialists and authorities to restore services and maintain patient care.
The Krefeld Pinguine say their website was infected with malware in a cyberattack overnight and was taken offline to prevent further harm. The club is investigating; it has not said whether data was stolen.
The Droit Humain Federation says an intruder used a member’s compromised account to access its intranet on July 23. Some members’ personal data may have been affected; an attacker’s claim of 1,500 records is uncorroborated.
Primo Caredent Group reported an extortion-focused cyberattack, with possible involvement of its Trebaseleghe center. The company warned patients not to pay or respond to suspicious messages.
Daejin University says it blocked suspicious access within about 30 minutes and later confirmed personal information was included in an exposed file. It is investigating the scope, notifying affected people and reviewing its security controls.
Researchers found exposed files and Hermes logs linked to an alleged Thai Finance Ministry intrusion. The ministry has not confirmed a breach; researchers found no evidence that searched documents were exfiltrated.
OnTrac says hackers accessed files on its corporate network between March 20 and 22, potentially exposing customer personal data. The company is investigating and offering affected customers 12 months of credit monitoring and identity protection.
The actor anisanas2 claims to have breached Distamed Morocco and stolen patient, client, billing, and internal records, including a company archive dating to 2013. The allegations are not independently confirmed in the article.
A report alleges the Michoacán State Government’s CADPE portal was breached and says a free 58GB download contains 37,037 documents, reportedly including supplier identity records organized by RFC.
A seller using the name LordVoldemort claims to offer 75 Podomoro University databases, reportedly totaling 2.31GB, and the university’s website source code for $7,000 in cryptocurrency. The claim is unverified.
A forum post reportedly shows BENY New Energy user data and screenshots of an authenticated database session, with possible visibility into EV charging, firmware management, and device monitoring platforms. The claim is unverified.
Chick-fil-A says credential-stuffing attacks on its website and app exposed data from 13,322 Chick-fil-A One customers. The company logged out affected users, removed payment methods, restored balances, and advised password changes.
Kootenai County says hackers accessed residents’ Social Security numbers, fingerprints, and private medical and financial information in a March breach. The county says it restored operations within hours, refused the ransom, and is offering one year of credit-monitor
Origin Energy confirmed unauthorized access to some customers’ data, which may include personal and partial payment details. An alleged hacker claims 2 million people’s information was stolen and threatens a leak unless the company pays a ransom.
A forum user named riche allegedly posted a B9/Bnine[.]com dataset of about 36,000 records, including partial SSNs, birth dates and addresses. The claim is unverified; B9 has not publicly responded.
An actor using the alias konata_izumi_shell claims to have leaked 41,406 records from Bolivia’s Ministry of Health and Sports SSSRO database. The alleged data includes personal, academic and location details; the claim is unverified.
A forum user known as 888 allegedly posted a PokemonGym[.]nl database said to contain about 19,600 accounts, usernames, emails, IP data, Argon2id hashes and private messages. The claim remains unverified; access is reportedly paywalled.
Origin Energy confirmed unauthorized access to customer data, including personal information and partial financial details. It is investigating the impact; a threat actor called “John Doe” separately claims data from 2 million customers and threatens to leak it.
Koyasan University said ransomware affected its administrative Active Directory server and part of an administrative staff file server. No data leak has been confirmed; student and teaching systems remain unaffected.
Zoner says an unauthorized user accessed its administrator servers, changed passwords for affected hosting accounts, and added unauthorized email accounts. About 1,800 customers are affected; the company reports no evidence of widespread data copying or loss so far.
Chick-fil-A says credential-stuffing attacks on its One loyalty accounts on June 17–19 may have exposed customer data. The number affected is unclear; the company reset passwords, removed saved payment methods, and restored drained balances.
Northwest Iowa Community College said unauthorized activity occurred during a November 2025 disruption and information may have been accessed or downloaded. It later notified 16,004 Iowa residents whose names and Social Security numbers may have been involved.
A post attributed to actor kitta allegedly offered 5,147,231 RevolutionParts customer records for free, reportedly including personal information and device identifiers. The alleged exposure is unconfirmed.
