Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2249 articles
Dutch police say they have strong indications that local hackers were involved in Odido’s breach. Odido reported access to its customer contact system and data exposure affecting 6.2 million customers; ShinyHunters claimed responsibility.
The City of Winkler isolated affected systems after a cybersecurity incident, taking some municipal services offline. Phone and payment systems are unavailable; external experts are assisting, and police have been notified. Personal information impact is unknown.
Latvia’s state-owned forestry company LVM is still restoring systems weeks after a ransomware attack disrupted services. CERT.LV says attackers stole and leaked data; about two-thirds of contract customers still lack access to affected systems.
An attacker identified as Monkeydance reportedly claimed a data dump from Thepha District Public Health Office in Thailand, including accounts, hashes, and documents, and offered live server access. The claims are unverified.
OpenMandriva says former contributor Davide Beatrici deleted GitHub repositories and pushed an empty Cooker package that could have obsoleted GNOME and COSMIC packages. Beatrici confirmed the actions but denied intending harm; the project is restoring assets and auditng
Prosecutors say a teenager is suspected of exploiting a software flaw in Saarland University's learning platform to access data on about 40,000 students, then demanding a four-figure cryptocurrency payment to prevent publication. The investigation continues.
Attackers used a compromised Injective Labs contributor account to publish malicious @injectivelabs/sdk-ts v1.20.21 and related npm packages, which exfiltrated wallet private keys and seed phrases when key-generation or import functions were used.
KDDI says attackers exploited a software vulnerability in its email system, affecting 12.23 million email users and exposing 7.61 million passwords, some stored in plaintext. The company patched the flaw and urged password resets.
AssuranceAmerica disclosed that attackers accessed its systems in March 2026 and copied files containing personal and insurance information belonging to 6,998,886 people. The company disabled compromised credentials, isolated affected systems and notified law enforcers.
A cyberattack on internet provider Phibee Telecom indirectly disrupted the Pays du Mont-Blanc community’s website, email and phone services. Phibee reported malicious deletion of telecom configurations and backups and said no ransomware was used.
Malicious Injective SDK version 1.20.21 and 17 related packages exfiltrated wallet keys and mnemonic phrases during use. The release was deprecated but remained downloadable; developers were advised to upgrade and rotate exposed credentials.
KDDI confirmed unauthorized access to email infrastructure used by five Japanese ISPs, compromising 12.2 million email addresses and 7.6 million passwords. The company says it removed the attackers and is arranging password resets.
Kerala Police is investigating a suspected cyberattack after an internal file-management application went offline for four days. Police said no data breach has been detected; the public website remains operational.
Drug and Alcohol Treatment Services agreed to a $549,000 settlement over a 2024 ransomware attack affecting 22,215 patients. Eligible class members may claim reimbursement, a pro rata payment, and 12 months of medical data monitoring.
A compromised user account enabled unauthorized access to Greenbaum Rowe Smith and Davis’s systems. The firm determined that health information affecting 12,801 people was acquired; it said there is no evidence the data was published or misused.
Mount Royal University says a June 17 breach disrupted services and an unauthorized actor took data from some H drive folders before originals were wiped. CMD Organization claims the attack and demands 30 BTC; J drive data was deleted, with no evidence it was copied.
Threat actor derm0nix claims to have breached Culiacán’s municipal health portal and leaked 4,045 patient records, reportedly including sensitive medical data and minors’ records. The claim is unverified.
84City allegedly posted an SQL dump tied to French IT school ESGI, claiming it contains 26,451 student enrollment records. The dump may include personal details and Active Directory logins; the claim is unverified.
AssuranceAmerica says hackers stole personal and insurance information, including driver’s license numbers, affecting 6.99 million people. The company said hackers targeted an employee and it disabled compromised credentials; the access method is unclear.
Accenture confirmed an attack after a hacker claimed to have stolen 35 GB of data, including source code and credentials. The company said it remediated the source and reported no operational impact; the access method and data impact remain unclear.
KDDI says attackers exploited a zero-day in third-party software to access an email platform used by five Japanese ISPs, exposing 12,233,087 email addresses and 7,616,173 passwords. Password resets, EDR deployment and a forensic review followed.
KDDI says attackers exploited a third-party software vulnerability in an email platform serving five Japanese ISPs, exposing 12.2 million customer email addresses and 7.6 million passwords. It patched the flaw and said separate consumer services were unaffected.
Police said they detected remote access to Ercan Airport’s main server and malware allegedly installed to erase data later. A suspect was arrested, and the investigation continues.
Sakata Seed says it detected unauthorized access to its Brazilian subsidiary’s servers on June 27, 2026. Some information may have been accessed or taken; the investigation is ongoing, with no business suspension confirmed.
