Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2249 articles
A cyberattack has reportedly kept Spain’s national air-quality viewer offline since February, preventing a unified view of ozone readings during heat waves. Measurements continue, but the ministry has given no restoration date.
Polymarket says it will reimburse users after malicious JavaScript injected through a third-party vendor led users to approve fraudulent transactions. Blockchain firms estimate losses at about $3 million; Polymarket says its backend was unaffected.
About two dozen Klue customers confirmed Salesforce-instance compromises after attackers used legacy credentials to obtain OAuth tokens and exfiltrate data. Salesforce and Gong disabled integrations; reports of data deletion and a second extortion actor remain ununfirm.
An unknown attacker reportedly used 66 fake token contracts and unrevoked spending approvals to steal at least $7.5 million from JaredfromSubway.eth, then converted the assets to ETH and sent them through Tornado Cash.
A reported cyberattack disrupted Ufagormolzavod’s logistics and accounting systems, moving some operations to manual processing. The milk production line reportedly remained operational; a link to open RDP access is unconfirmed.
Ukrposhta confirmed a cyberattack on its IT systems during the night of June 24–25, causing instability and failures in its mobile app and digital services. The company said specialists are restoring functionality.
A threat actor using the alias Saturne allegedly posted 54,723 Leroy Merlin Spain customer records dated June 2026, including contact details, DNI numbers and addresses. The leak’s authenticity and scope are unverified.
Ukraine’s Ukrposhta says an overnight attack on its IT systems disrupted its mobile app. The IT Army of Russia claims it accessed a server weeks earlier and exfiltrated user and internal data; the claim is unverified, and Ukrposhta has not confirmed data compromise.
A cyberattack reportedly disrupted Ufagormolzavod’s logistics and accounting in Bashkortostan, forcing manual shipment and paperwork processing while production continued. The company did not identify a culprit or say whether data was compromised.
A reported ransomware attack disrupted systems at four private hospitals, affecting appointments, electronic records and administrative services. Staff switched to manual processes as technicians worked to restore systems; a ransom demand was reported but not confirmed.
Milton says it detected activity consistent with a ransomware attack on Dec. 26, 2025. An investigation found no indication city information was accessed or taken; the city says it secured its network and added security upgrades.
Faith Group reported a system malfunction possibly linked to ransomware after unauthorized external access. It is investigating the cause and potential information impact, restoring operations, and warning of impersonation phishing.
Latvijas Valsts meži disabled external services, including LVM GEO and the Mednis hunting app, and restricted some internal systems after a cyber incident. Authorities and police are investigating; the attacker and circumstances remain unknown.
A taxpayer database allegedly scraped from Mexico’s Coahuila state government portal was reportedly leaked after web vulnerabilities were exploited. The claimed data includes names, RFC details, addresses and phone numbers.
A listing allegedly offers 347,178 Ecuadorian facial and biometric records, reportedly including national IDs, names, birth details, facial images, and fingerprint codes. The listing may include minors’ records; the alleged sale is unconfirmed.
Texas officials confirmed 3,087,721 affected records after Texas Parks & Wildlife was targeted through a license vendor. A database dump was allegedly offered for sale; exposed data reportedly included licenses, passports and contact details, while SSNs, birth dates and
Cal Water says Mandiant found no attacker activity in its internal IT or OT environments. The investigation found access to limited third-party accounts, including one customer account accessed with stolen credentials; analysts had reported possible compromise of other
A cyberattack at Plitvice Lakes National Park disrupted ticketing, commerce, and electronic payments. Some facilities closed or accepted cash only while security protocols were activated and specialists worked to restore systems.
Route Mobile said its Colombian subsidiary Masivian S.A.S. was hit by a cyberattack. Affected systems were isolated, an investigation is underway, and the parent company and other group entities were not impacted.
A cyberattack reportedly left Gießen City Theatre’s data and backups inaccessible and disrupted its communications. Performances continue; a crisis team is managing recovery, which is expected to take several months.
The Nowa Ruda Municipal Office reported a ransomware attack on June 23, 2026, that encrypted data on servers and employee computers. Servers were isolated, and possible exposure of sensitive personal data was reported to authorities.
River Financial reported unauthorized network access around June 16 and ransomware across parts of its server environment. Some operations are affected; the company is investigating potential personal-information exposure and working to restore systems.
Mandiant says an attacker exploited Cisco SD-WAN vulnerabilities to compromise an unnamed communications provider, create a root-level account and potentially gain broad network visibility. Cisco patched the zero-day and urged customers to upgrade.
ANTAQ confirmed a cyber incident that left corporate systems, including SEI, unavailable or intermittent from May 13 to June 23, prompting a suspension of procedural deadlines. The agency did not disclose whether data was compromised.
