Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2248 articles
Stadler Rail said criminals accessed a data-exchange platform with a supplier in a mid-July 2026 cyberattack. The company said its IT systems were unharmed, no sensitive or personal data was stolen, and it refused a 10 million-franc ransom demand.
World Leaks claimed to publish nearly 19,000 Kudankulam-linked files. Reliance reported a partial breach; Yotta detected suspicious activity but has not verified data-theft claims. NPCIL said the files concern non-nuclear systems, not reactor safety.
A 5.6GB dataset allegedly taken from Bogotá’s Mobility Secretariat was reportedly listed for $500 and attributed to PescobarLegado / NyxarGroup. It is said to include citations, agent rosters and medical records.
CCDR Algarve reported unauthorized external access over the weekend. The incident has temporarily disrupted communications and institutional email services, and response teams are working to restore them.
The Wagerenhof Foundation says a July 9 ransomware attack encrypted data and blocked access to systems. It is using alternative channels while investigating a suspected data leak; the extent and type of data involved remain unknown.
Hugging Face says a malicious dataset exploited two code-execution flaws, enabling credential theft and lateral movement across internal clusters. It rotated credentials and found no evidence of tampering with public models or datasets; customer impact remains under «»
EY says attackers accessed a third-party tax-support platform from March 28 to April 12 and downloaded client documents containing personal and financial information. The company is offering affected clients two years of monitoring and identity restoration services.
Healthcare software provider Craneware confirmed that data including employee, customer and partner records was accessed and exfiltrated. The incident is contained, and the company is investigating and has notified UK and US authorities.
Hugging Face says an autonomous AI agent used code execution flaws in a dataset pipeline to access internal datasets and service credentials. The company contained the intrusion, rotated secrets and says it found no evidence public models or datasets were tampered with.
Song Shang Electronics reported that some information systems were attacked. The company activated defense and recovery measures; affected systems are operating normally, and its preliminary assessment found no major business impact.
Five Foxes says it found a possible ransomware infection on some headquarters servers on July 8 and shut them down. The scope, including possible customer-data exposure, remains under investigation; stores and the separate online store remain open.
Brașov officials say a trojan attack targeted the Fiscal Directorate’s website server. They disconnected it temporarily, taking the portal offline while technicians investigate and work to restore service; no database compromise has been reported.
Uruguay’s BHU says a September cyberattack cost $12 million in remediation and system reconstruction. The attack disrupted services, and attackers claimed to have stolen data; documents including employee credentials were later published. The bank says it paid no ransom
A company reported an encryption attack on July 20, 2026. It says its internal systems and official website are operating normally, with no significant operational impact identified so far.
Hugging Face says a malicious dataset exploited two code-execution paths in its data-processing pipeline, exposing limited internal datasets and service credentials. The company closed the paths, rebuilt nodes and rotated secrets; partner-data review continues.
Wriezen’s mayor confirmed a malware attack on the municipal administration. Affected systems were taken offline, disrupting administrative work and delaying residents’ requests; the extent of damage and restoration timeline remain unknown.
Eurohold and Euroins say they stopped an attack aimed at disrupting operations and extorting the companies. Online services were temporarily affected, but they report that information integrity was preserved.
Fairlife temporarily halted U.S. production after detecting a ransomware intrusion, Coca-Cola said. The incident’s scope remains unknown; product safety and Canadian operations were unaffected, and an investigation is ongoing.
Cedar Crest College says a July 13 cybersecurity incident disrupted applications, network drives and OneDrive. Officials are investigating possible data access; a NightSpire ransomware claim remains unverified.
Alexandria Municipality says it detected a ransomware incident on June 8, 2026. It notified authorities and engaged specialists; the investigation is ongoing, and it has not determined whether personal data were affected.
Sensitive2025 allegedly offered data stolen from Brazilian online store Loja Negócios Digital, including about 20,000 customer records. The claim is unverified; reported data includes contact, order, billing, and account information.
Doommageddon claims it breached Hospital Di Camp in Brazil and released a first wave of patient ECG data. Further releases are alleged, but the breach claim is unverified and the hospital has not publicly responded.
Abbott confirmed unauthorized access to legacy Cancer Diagnostics systems and is investigating a separate LabCentral breach claim. It reports no operational impact and disputes that LabCentral holds sensitive data; the actors’ theft claims remain unverified.
Milford, New Hampshire, reported unauthorized activity affecting municipal systems, disrupting phone and internet service and some town services. Officials are investigating with forensic specialists; the extent and connection to a previously reported storage-system. .
