Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2249 articles
Milford, New Hampshire, reported unauthorized activity affecting municipal systems, disrupting phone and internet service and some town services. Officials are investigating with forensic specialists; the extent and connection to a previously reported storage-system. .
EY says an unauthorized party accessed a third-party IT support ticket system from March 28 to April 12 and downloaded documents that may have included client tax information. The number of affected clients and exact data types are unknown.
iProfessor claims to have breached Slovak fitness brand NEBBIA and leaked 32,340 order-related documents, with nearly 285,662 more records threatened. The claim is unverified, and NEBBIA has not publicly responded.
Nichirei says a July 13 cyberattack disrupted warehouse and shipping operations after it disconnected systems. The company plans a gradual restoration and is investigating whether personal information was leaked.
ChimeraZ claims to have leaked data on 124,807 people from the French Firefighters Federation’s membership platform. The records reportedly include contact and login details; the claim is unverified.
Coca-Cola reported unauthorized access to fairlife systems, including production-related systems, in connection with a ransomware event. U.S. production is temporarily suspended; the investigation continues, and product quality and safety are unaffected.
Aida Engineering detected unusual activity at Asian sites on July 6 and is investigating possible unauthorized access. No data leakage is confirmed; the incident delayed its Q1 fiscal 2026 results.
The Wagerenhof Foundation says attackers encrypted data and disrupted systems on July 9. It rejected a ransom demand, suspects a data leak, and is investigating its scope; recovery timing is unknown.
Ecopetrol confirmed unauthorized access and data extraction affecting about 3,300 user accounts across roughly 15 group companies. It said a ransomware attempt was blocked; the actor demanded payment, but no public disclosure of the stolen data has been confirmed.
Arcus says it detected a cyberattack, shut down and isolated its servers, and notified authorities. It is restoring affected systems, but has not disclosed which systems were affected or whether data was taken.
NonSoloContro reportedly went offline after a July 10 cyberattack that disrupted site access and archive recovery. Its owner launched a €1,800 GoFundMe campaign to fund data recovery and stronger security.
Mülheim says attackers exploited a vulnerability in its remote-access software. The city disabled and rebuilt the system, closed the vulnerability and changed local passwords; it says logs show no data theft or access to other systems. The Allris outage was unrelated.
Coca-Cola reported unauthorized access to Fairlife systems, including production systems, in a ransomware attack that temporarily halted U.S. production. Product safety is unaffected; data theft and the responsible group remain unknown.
Coca-Cola said a cyberattack disrupted Fairlife’s U.S. production and supply chain. Some operations were halted, affected infrastructure was isolated, and the company says its investigation is ongoing.
23andMe agreed to pay $18 million to settle claims from 43 attorneys general over its 2023 breach, in which attackers reportedly stole genetic data from 6.9 million customers. Investigators cited missing safeguards and failures to address suspicious logins and known vul
Romania’s MIPE said a cyber incident made its Private Beneficiaries Procurement application inaccessible. Authorities are investigating and working to restore it; officials said the PNRR platform was not affected and remains functional.
A post reportedly linked ANCPI, Romania’s land registry agency, to a ransomware incident and IT shutdown, and listed cadastre records and source code for sale. The activity was attributed to bytetobreach; the claims are unverified.
A cyberattack on contractor Enseco may have exposed Hamburger Energienetze customer names, addresses, meter and appointment details, and contact information. The utility says its own systems were unaffected.
Thegentlemen claims it breached Metro Mondego and stole confidential documents, threatening to publish them within days if demands are not met. The data involved and impact on passenger or ticketing systems remain unknown.
Greene County took its network offline after a July 9 cybersecurity incident disrupted payments and public services. 911 remained operational; officials said they found no evidence that information was accessed or removed.
TruStage took its network offline after identifying a cybersecurity incident and brought in outside specialists. The outage affected some insurance and payment-protection services offered through credit union partners; the incident’s scope and cause remain unknown.
ANCPI says a cyberattack has taken its systems, including the e-Terra cadastre application, offline. The agency says its data was not compromised; a group from Algeria reportedly claimed the attack, and an investigation is underway.
Reports allege Grok Build CLI uploaded users’ full repositories, including private code and secrets, to cloud storage. The company says sharing can be disabled and prior uploads may be deleted, but scope and deletion remain unclear.
A July 13 unauthorized-access incident disrupted Nichirei’s warehouse and food-shipping systems, causing confirmed delivery delays and shortages at multiple retailers, restaurants and food companies. Recovery timing remained unknown; data leakage was not confirmed.
