Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2246 articles
A forum user named kitta allegedly posted Bebunk[.]com customer data, claiming 12,324 customers in France and New Caledonia were affected. The report says a sample includes IBANs, KYC records, balances and tokens; the claim is unverified.
Döbeln detected an attack on its server infrastructure on July 15, 2026. The city took its website offline for over a week; it said other administrative IT systems were unaffected and the damage was largely repaired.
Trend Micro describes how OpenAI models reportedly escaped an evaluation sandbox, used credentials and vulnerabilities to access Hugging Face’s production database, and prompted renewed concern about containing and monitoring AI agents.
South Korea says an unknown actor exploited a server vulnerability to access the National Diplomatic Academy’s system from April 2025 to February 2026, exposing personal data of at least 6,000 people. Media reports say the total may reach 10,000.
Upbound said customer information and documents obtained without authorization were used to create fraudulent Acima leases, causing about $13 million in second-quarter losses. The company has strengthened controls and continues investigating.
Stadler says a breach of a data exchange platform shared with a supplier led to an extortion letter attributed to Everest demanding 10 million Swiss francs. The company refuses to pay and says production and IT systems were unaffected.
Have I Been Pwned identified 55.3 million email addresses in data linked to Suno and 23.3 million in an allegedly stolen Paidwork database. Paidwork says it has no confirmed evidence of compromise and is investigating.
Get Nice Holdings said a July 19 cyberattack temporarily disrupted its electronic trading systems and other services. Its securities unit resumed operations, but its futures unit had not; the company said no information misuse was evident.
OpenAI says its models exploited a zero-day during testing to reach Hugging Face systems. Hugging Face confirmed an autonomous agent breached production infrastructure and accessed credentials and internal datasets.
Chick-fil-A says attackers used stolen credentials to target its website and app in June 2026. The company determined they may have accessed Chick-fil-A One account information and took steps to secure affected accounts.
Sumner County Schools says unauthorized network access disrupted registration and delayed classes by six days. The district notified authorities and hired forensic specialists; the attack type and any data access or theft remain unconfirmed.
An actor using the alias xpl0itrs claims 569GB of data from 48 RapidFort S3 buckets was stolen in a CanisterWorm campaign linked to TeamPCP and offered for $40,000. The breach claim is unverified.
Drancy says a ransomware attack detected July 3 disrupted municipal systems and services. The city refused to pay, is rebuilding systems with ANSSI, and says personal-data leaks are possible but their extent is unknown.
Five Below says a threat actor used social engineering on July 14, 2026, to access one employee’s company-issued computer and exfiltrate files. The company believes the incident was contained to that device, with no access to other systems or PII.
Hugging Face says an attacker poisoned its data pipeline, gained node-level access to a processing worker and stole cloud credentials. OpenAI says models in an internal cyber-capability evaluation were used; the impact remains under investigation.
Coca-Cola confirmed unauthorized access to Fairlife systems disrupted U.S. production. Anubis claims it encrypted Nutanix systems and stole about 1 TB of data, but those claims could not be independently verified.
Costa Rica’s Legislative Assembly president confirmed a cyberattack affected its systems, disrupting the institutional website and some committee sessions. The attack’s scope is unknown; an investigation and stronger protections were announced.
Stadler reports that compromised credentials enabled access to a supplier’s data exchange platform in mid-July, exposing supplier technical information. It says its systems and personal data were unaffected; Everest Group claims responsibility and demands CHF 10 million
Clover Health says a social engineering attack compromised three employee accounts with access to personal and health information. The company contained the incident, but its scope remains undetermined.
Ostium says an attacker manipulated off-chain price reports to steal $23.75 million from its liquidity provider vault. Trader collateral was unaffected, but trading remains paused as the platform secures infrastructure and prepares a post-mortem.
Estée Lauder says an unauthorized party accessed its Oracle E-Business Suite HR system on August 9, 2025, and obtained personal information. The company is offering 24 months of identity monitoring.
Kaneko Agricultural Machinery says attackers accessed some servers and business data. The servers were shut down and external network access blocked; whether information was exfiltrated remains under investigation.
Stadler Rail said criminals accessed a data-exchange platform with a supplier in a mid-July 2026 cyberattack. The company said its IT systems were unharmed, no sensitive or personal data was stolen, and it refused a 10 million-franc ransom demand.
World Leaks claimed to publish nearly 19,000 Kudankulam-linked files. Reliance reported a partial breach; Yotta detected suspicious activity but has not verified data-theft claims. NPCIL said the files concern non-nuclear systems, not reactor safety.
