Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2249 articles
Pachatours was allegedly breached via SQL injection. Attackers claimed to extract a roughly 2GB database with more than 2.2 million rows, reportedly including passport, payment, B2B credential, and PNR data.
Park Dental Research reported a ransomware incident on or about April 29 that exposed personal and financial information. INTERLOCK claimed responsibility and said it obtained 260 GB of data, according to ClaimDepot.
A June 28 cyberattack disrupted internal services and GSW Kamen’s customer portal and app. Electricity and water supplies continued, while state police and external experts investigate the attack and its impact.
Kubota says unauthorized access to network systems from March 16 to April 20, 2026, led to HR files being accessed. Those files may have contained personal information about employees and dependents.
The article reports that hackers stole and began leaking Tata Electronics files reportedly containing iPhone 18 Pro materials and records from Apple suppliers TSMC and Qualcomm. Tata restricted access to sensitive systems and hired a forensic auditor.
Aflac said an unauthorized third party accessed Aflac Japan systems from June 15–25, 2026. Impacted files contained policy, personal and bank-account information; U.S. systems were not accessed. The investigation continues.
Aflac Japan says attackers accessed systems from June 15 to June 25 and exfiltrated personal information from its policyholder portal. About 4.38 million customers and agents are likely affected; the investigation is ongoing.
Bannari Amman Sugars reported a cybersecurity incident at its Tamil Nadu distillery on June 27, 2026. The company said it was promptly managed, with no impact on routine operations, and disclosed it to stock exchanges.
DCHA reported a cyber incident that disrupted its website and email. Offices and phone service remained available; ransomware involvement and any ransom demand have not been publicly confirmed.
Nidec confirmed ransomware damage to part of a server at its Taiwanese subsidiary and shut down affected systems. Blackfield claims the attack and demands $2 million; possible data exposure remains under investigation.
Nissan says attackers targeting Oracle PeopleSoft may have stolen current and former employees’ data, including Social Security numbers and financial records. Its investigation is ongoing; ShinyHunters is believed to be behind the campaign.
Settra claimed it breached PChome and stole 102GB, but PChome says its review found no evidence of compromise and core systems remain operational. Separately, Bibian confirmed an internal data leak affecting some members and offered coupons.
Threat actor Saturne claims to have leaked 860MB of Avícola El Madroño data, including customer, accounting and user-account records. The article attributes access to exposed interfaces and weak credentials, but says the leak's authenticity and scope are unverified.
A forum post alleges that a free SQLite database containing 13 million DETRAN SP records was leaked. The reported data includes identity details and photos; the claim is unverified.
台郡科技 says it detected a cyberattack at its Kaohsiung plant on Dec. 11, 2025, and disconnected its network. The company reported that ERP and production continued, threat remnants were cleared within 72 hours, and operations recovered in 10 days.
Delaware County, Pennsylvania, said unauthorized activity disrupted its network beginning June 26. The county shut down network access and is restoring services; it has not said whether ransomware or data theft was involved.
NAIC confirmed unauthorized access to its PeopleSoft environment and says data taken was limited to public reports, outdated logs, and configuration files. ShinyHunters claims a much larger haul; NAIC says it found no evidence of exposed PII or financial data.
Nissan says attackers accessed current and former employee records through Oracle PeopleSoft. The company is still assessing the impact and has secured affected systems; Mandiant confirmed zero-day exploitation of CVE-2026-35273.
AYA Bank reported an attack targeting an outdated application portal, with some customer information allegedly exposed. The bank said its core banking, AYA Pay and card payment systems were unaffected.
An attacker allegedly leaked Flawireless’s e-commerce database in CSV files containing customer contact details, addresses, order history, invoices, and shipment records. The reported data could enable targeted phishing and invoice fraud.
KDDI says attackers exploited a vulnerability in third-party software to access an email system used by five other Japanese ISPs. Email addresses and passwords for up to 14.22 million current, former, and inactive customers may have been exposed.
Northern Technologies International says files may have been accessed during a Feb. 13–18, 2026 network breach. Chaos claimed 400 GB; NTIC confirmed affected individuals and data types including Social Security and driver's license numbers.
A report alleges that a student-portal database linked to Durango’s education department exposed records of 3,487 children and their parents across 19 primary schools.
A post claimed a 4.3 million-record breach of Colombia’s GOV[.]CO platform, but its sample showed German taxpayer data. The mismatch leaves the claim, target, scale, and data authenticity unverified.
