Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2249 articles
The Wein- und Ferienregion Bernkastel-Kues GmbH reported an IT security incident discovered June 5, 2026. Systems were disconnected as a precaution; authorities and external experts are investigating, and possible data exposure remains unknown.
Four reported data exposures involving Magelang City government agencies between May and June 2026 allegedly affected more than 100,000 records, including personal, medical, employment and NIK data; posts were described as public-awareness disclosures.
NightBroker allegedly accessed Deliware through an exposed demo admin panel. A reported dataset includes 1,572 user records and authentication data, OTPs, password-reset keys, and Stripe API keys; its authenticity and scope are unverified.
A malware attack disrupted Chelan County systems for three weeks from May 24, affecting phones, email, computers and servers. Most services have returned, but the Clerk’s Office is clearing a 6,000-document backlog, with some filing and passport services still limited.
LastPass confirmed customer contact and support data was exposed after stolen Klue OAuth tokens were used to access its Salesforce records. LastPass says its vaults and infrastructure were unaffected and remediation is complete.
A report alleges that 30,728 records from France’s Hospital Federation were leaked, including names, direct phone numbers, email addresses and membership details; it names Saturne as the actor.
Step Security reports that attackers compromised simonecorsi/mawesome on June 24, 2026, force-pushed malicious commits and repointed version tags; workflows using affected tags then ran the code on GitHub Actions runners.
Researchers report that the FortiBleed campaign exposed valid credentials for about 73,932 FortiGate systems across 194 countries. Analysis indicates attackers cracked captured VPN hashes and used recovered credentials for follow-on network access.
Xsolis says a targeted phishing attack led to access to files containing personal and medical information of 1,396,519 people. The company contained the incident, notified law enforcement and is offering affected individuals identity monitoring.
Tata Electronics confirmed a cyberattack affecting some IT systems, while saying operations were unaffected. World Leaks claims to have leaked allegedly stolen files, including Apple-related manufacturing documents; the alleged exposure has not been confirmed.
Bajaj Auto reported a ransomware attack on June 23, 2026, affecting its systems and those of subsidiary Bajaj Auto Technology. The incident was reportedly contained, and the company notified CERT-In.
Thalha Jubair and Owen Flowers pleaded guilty to hacking Transport for London in 2024. The intrusion disrupted Oyster refunds, exposed customer data and caused £29 million in losses, according to the NCA.
Agrolab’s reported that a July 2025 cyberattack blocked its information systems and disrupted operations for nine days. The lab paid no ransom, restored operations from spared tape backups and reported €250,000 in costs.
LastPass confirmed attackers used OAuth tokens stolen from Klue to access customer data in its Salesforce environment. The company says its products and vaults were unaffected and has rotated tokens and notified law enforcement.
A cybersecurity incident disrupted Cedro Têxtil’s IT infrastructure and business systems, suspending operations since June 18. Experts are containing the incident and restoring activities; the attacker has not been identified.
Nidec reported detecting a ransomware incident on June 22, 2026, affecting some servers and disrupting information systems, including ERP. The company isolated the network and is restoring systems while assessing impact.
A threat actor using the alias TomTom allegedly posted a Stockaholics[.]net member database sample containing usernames, email addresses and account metadata. The report says no passwords were visible and the claim is unverified.
London Hydro says hackers broke into its systems and customer personal and account information may have been affected. The utility says financial and other sensitive information was not involved and is investigating.
Tata confirmed a cyberattack affecting some systems, while World Leaks claims it stole over 630GB of files, including Apple and Tesla documents. Tata says operations were unaffected and confirms receiving a ransom demand.
Xsolis disclosed that a phishing attack led to access to files containing personal and health information. HHS lists 1,396,519 affected individuals; Xsolis says it is unaware of any actual or attempted misuse.
An attacker reportedly tricked the JaredFromSubway Ethereum MEV bot into approving helper contracts, then used accumulated token permissions to drain WETH, USDC, and USDT worth $15 million. Recovery negotiations are ongoing.
A threat actor named ChimeraZ allegedly posted a Whise[.]eu database with 40.85 million lines, including email logs and contact records. The dataset’s authenticity and full scope remain unverified.
In February 2024, Romania disconnected more than 100 hospitals after ransomware spread through the Hippocrates medical system. Twenty-six hospitals were infected; most restored operations within five days, though some data was lost.
Brazil suspended its Civil Defense Alert system after unauthorized messages triggered false emergency warnings across several states. Authorities blocked external access and are investigating; officials said there is no evidence of structural damage to the core system.
