Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2249 articles
CERT.lv found that an attacker who also targeted Latvijas valsts meži accessed an Olpha server; the incidents are not technically linked. Logs were deleted, no encryption was observed, and Olpha contained the damage as analysis continues.
Medtronic says a breach of its corporate IT systems affected 3,834,294 people, whose personal and medical data was stolen. The company says there is no evidence the information was publicly exposed; product and manufacturing operations were unaffected.
Citizen Lab says it found Pegasus on Greek journalist and former MEP Stelios Kouloglou’s phone, with infections around October 2022 and March 2023. The operator remains unidentified; the findings renewed calls for device checks and action on PEGA recommendations.
Navient says a ransomware attack on a partner law firm's systems exposed customer data, including names, birth dates, addresses and Social Security numbers. The company reports no evidence of access to its own systems or service disruption.
Akron Public Schools says a June 23 cyber incident caused a network outage, leading to building closures and canceled summer school activities the next day. The district says the incident was contained and is investigating its scope.
A cyberattack discovered on June 30 disrupted Furtwangen’s municipal services and temporarily closed city offices. Officials said registry records and citizen report data were not accessed; the city is working with cybersecurity and police authorities.
GSP Crop Science reported a ransomware attack affecting non-core IT systems. The company says production, sales, finance and other critical operations remain unaffected; it is investigating and restoring affected systems with outside cybersecurity experts.
Hong Kong’s privacy watchdog opened an investigation after Shun Hing Group reported a breach. The company said data belonging to as many as 1.05 million people, mostly customers, had been maliciously encrypted.
Gogolook detected unauthorized access attempts targeting its test server environment and is investigating with external partners. Initial findings indicate no member personal data or internal confidential information was accessed.
Laster Tech says a cyberattack affected its information systems. The company engaged external experts, gradually restored affected systems and said its preliminary assessment expects no significant operational impact.
The article reports that The Gentleman ransomware group targeted Atlas Elektronik’s North American branch, with general administrative documents and file lists allegedly exposed. It says no sensitive military data was compromised.
León’s government reported that a cyberattack compromised information from its Citizen Services System. Authorities filed a criminal complaint and are investigating the incident’s scope.
Abans Financial Services reported a ransomware attack affecting overseas subsidiaries’ IT infrastructure after a CERT-In alert on June 30, 2026. The company said its systems and operations were not materially affected and that monitoring and remediation continue.
An actor known as lucy allegedly offered data from Netim[.]com for $5,000 in cryptocurrency. The claimed material includes customer records, source code, credentials, and configuration files; the report is unverified.
Medtronic confirmed unauthorized access to corporate IT systems and is notifying customers about potentially exposed personal and health-related data. ShinyHunters claimed 9 million records; Medtronic says the data was not posted online.
Kubota says unauthorized actors accessed parts of its network from March 16 to April 20, reaching files that may contain personal information about employees and dependents. It is notifying affected individuals and offering Kroll identity protection.
A report says actor EvaN47 advertised about 300 GB of alleged Libyan Civil Aviation Authority data from 2015–2026, including pilot and engineer licences and medical certificates, and claimed the ability to retrieve and modify records.
Indra said a subsidiary was targeted in a ransomware incident limited to a non-critical environment. The company reported that services remained operational and that its CSIRT activated response measures while investigating.
DHS confirmed a cyber incident affecting HSIN and a SharePoint collaboration system, isolated affected systems, and launched an investigation. Classified networks show no indication of impact; the intrusion’s origin and any data theft remain unclear.
A cyberattack affecting La Sauvegarde in Agen since May 24 disrupted employees’ email and internal services. A staff member says missing placement orders are delaying child placements.
A cyberattack affected transaction data and related systems in Flexi Parking, used by 64 local authorities in Malaysia. Authorities suspended parking summons issuance while restoration work is underway.
Beausoleil says an April 2026 cyberattack affected its internal network. The city reports blocking an access attempt and finding no data extraction; some services were disrupted, and it says it fixed a Wi-Fi weakness and added dual authentication.
Nacogdoches County officials said a May phishing incident affected limited systems and former sheriff’s office employees, leaving online pay-stub access unavailable. The incident was contained; data access remains unknown and emergency services continued.
ChimeraZ allegedly posted data linked to Le Pontet, France. Although the actor described it as a juvenile-prison database, the sample appears to contain municipal police and city-services records, potentially including residents’ contact, vehicle, and vacation-watch 정보.
