Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2249 articles
Meitetsu Kyosho says an external investigation found traces of ransomware-related unauthorized access on June 19. Multiple services were disrupted; as of July 2, the company had not confirmed an external data leak and was still investigating.
TheSyndicate claims it accessed Nayax systems for nearly a year and stole 100TB, including over 1 billion card records, KYC data and credentials. It threatens a July 21 release; the claim is unverified and no data has been publicly released.
A report says 2,052,123 Follow[.]fr patient records were offered for sale after a mass export. The alleged dataset includes names, INSEE numbers, insurance details, and doctors; Saturne is named as the actor.
C-UPHD says an unauthorized actor copied files from its network May 6–7, 2026. A review is ongoing to determine whose information was involved; potentially affected data may include health and financial details.
Accenture confirmed an isolated, remediated breach after actor 888 claimed to have stolen 35 GB of data, including source code and access keys. The claimed scope and data types are unverified; customer impact is unknown.
Ransom-ISAC reports that a U.S. government entity paid Kairos $1 million after a May 2025 intrusion. The entity reportedly appears to be Union County, Ohio; the county had notified 45,487 people that personal information was stolen.
The article reports that a July 3 cyberattack disrupted Tirupati Fincorp’s server infrastructure, caused data loss and disabled email services. The company is working with technical experts to restore systems and assess the damage.
Jacksonville, Texas, took some city systems offline after detecting suspicious network activity on July 3, 2026. The city engaged cybersecurity specialists and increased monitoring; affected systems and any access to personal data remain unclear.
Hahn Airport is investigating a reported cyber incident, while air traffic reportedly continued without restrictions. Safepay claimed responsibility on July 6; the supplied report gives no technical details.
The Army confirmed unauthorized defacements of error pages on oil[.]army[.]mil and ai2c[.]army[.]mil. The pages, hosted on a legacy third-party platform, were secured as Army investigators continue examining the incident.
Medtronic says an unauthorized party accessed corporate IT systems and data belonging to more than 3.8 million people may have been exposed. The company reports no evidence the data was publicly posted and is offering 24 months of monitoring services.
BonkDAO reported that attackers used a malicious governance proposal to drain $20 million in BONK. The organization notified law enforcement and is working to recover funds; Upbit temporarily suspended BONK deposits and withdrawals.
The report describes a March 8 outage at Michael Heister’s company; its headline attributes the disruption to hackers. Email, PCs, phones and business systems were unavailable, stopping vehicle deliveries and other work.
Spedidam says ransomware targeted its information system; it reported the incident to CNIL and ANSSI, and investigations continue. No personal-data exfiltration is confirmed. The Gentlemen later claimed the attack; the Artiste portal is unaffected.
The Wise County Sheriff’s Office told Texas officials hackers hit its systems twice, disrupting records access and public-information request processing. The notices do not establish whether data was accessed or systems restored after July 5.
A cyberattack attempt partially disrupted University of Alicante internal systems, including virtual campus tools. The university says its security team stopped the attack, no sensitive data was leaked, and service restoration is underway.
Pennington County, South Dakota, is responding to an incident affecting parts of its network. Most public offices are closing July 6 while recovery continues; 911 and public safety operations remain operational.
After compromising a victim’s SonicWall VPN, attackers found plaintext Huntress recovery codes, bypassed MFA to access the portal, closed incident reports, and attempted to remove endpoint agents. Huntress isolated systems to limit the ransomware impact.
A Ransom-ISAC case study uses leaked negotiations and blockchain tracing to link a roughly $1 million Kairos extortion payment to Union County, Ohio. Neither the county nor Kairos confirmed the connection; the alleged extortion involved data theft without encryption.
Chaumont Hospital Center reported a cyberattack detected after anomalies in its information system. It says the incident was contained with external support, while patient care continues and monitoring remains ongoing.
Acosol says a cyberattack disrupted information availability and may have exposed customer data, including contact, ID and contract details. The Spanish water utility activated security protocols and warned customers to watch for suspicious communications.
Citizen Lab says Pegasus infected Stelios Kouloglou’s phone in October 2022 and March 2023 while he served on the PEGA Committee. It links the same customer to spyware attacks on Russian- and Belarusian-speaking journalists and opposition figures.
The alias dezetat is offering an allegedly stolen dataset from Malaysia’s LHDN MyTax portal for $20,000. The claim involves 10 million records, including personal details and reportedly 5.29 million bank account numbers; it remains unverified.
Citizen Lab says forensic analysis found Pegasus infections on former MEP Stelios Kouloglou’s iPhone in October 2022 and March 2023, while he served on the European Parliament’s spyware inquiry committee. The operator remains unidentified.
