Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2249 articles
ShapedPlugin confirmed an incident involving its Pro-plugin releases. Malicious updates delivered a hidden backdoor capable of stealing credentials and collecting site data. Three plugins were affected; site owners were urged to reset passwords and 2FA secrets.
Ransomware hit a server at Garak Wholesale Market Corporation’s Gangseo Market, disrupting auctions and settlements. Essential services were restored, but transaction inquiries remained unstable through June 22 and experts called for investigation of farmer data risks.
Tung Ye Precision and Ri Fu Precision reported that unknown attackers accessed servers and encrypted data, disrupting some functions. The subsidiaries say operational impact is minor and outside experts are helping restore systems and improve security.
One Medical Seniors reported unauthorized access to a third-party file storage system between June 8 and 11, 2026, affecting patients in several U.S. cities. ShinyHunters claimed responsibility and alleged 8.8 TB was compromised; the main EHR system was not affected.
A report says a cyberattack disrupted Dokuz Eylül University Hospital’s digital infrastructure and patient registration system, alongside separate union-related service interruptions and management disputes.
Acworth says a June 8 cyberattack compromised some city government networks. The affected networks have been restored, municipal services remain operational, and a digital forensics investigation is ongoing.
Texas Parks and Wildlife says a third-party hunting and fishing license vendor suffered a cyber incident that may have exposed data of more than 3 million people. The agency says Social Security, birth-date and financial data were not obtained.
Daikyo Nishikawa says unauthorized access at its Indonesian subsidiary was detected on March 26, and on June 17 it confirmed some stored data had been sent externally. Production and customer deliveries were not disrupted; an investigation continues.
Brazil’s National Civil Defense took its alert platform offline after a false message was reportedly sent remotely by someone outside the national system. Authorities are investigating the suspected intrusion and working to restore service.
A sampled dataset allegedly linked to Ouestfrance-Immo contains about 16,800 records, mostly professional contact and marketing-profile information. No passwords or financial data were mentioned.
Klue confirmed attackers used a compromised legacy credential to steal OAuth tokens and access connected Salesforce environments. Multiple organizations reported data theft; Icarus claimed responsibility. Klue said its core platform data was not affected.
TPWD disclosed unauthorized access at its third-party license-system vendor affecting 3,087,721 hunting and fishing customers. Driver’s license and contact details may have been obtained; SSNs, birth dates and financial data were not impacted.
CISA urged Fortinet customers to secure devices after a leak exposed credentials associated with about 74,000 firewalls and VPN gateways. Some credentials were independently validated, but the data source and exposure method remain unknown.
Mount Royal University is responding to a cyberattack that disrupted its main website, MyMRU and campus internet. External cybersecurity experts are investigating; no personal data compromise has been confirmed.
Oranienburg disabled its administrative network after a cyberattack alert from CERT Brandenburg. No compromise has been confirmed, and residents are being asked to contact City Hall by phone while services are restricted.
CDA officials confirmed a cyberattack disrupted online billing for three days. Data was reportedly compromised and attackers allegedly threatened publication, while CDA spokesperson Shahid Kiani said backup records were safe and recovery was underway.
An advisory reports that attackers compromised Klue’s backend, stole customer integration OAuth tokens, and used them to extract CRM and other business data from connected SaaS services, including systems used by Huntress.
Nintendo confirmed that data from internal employee surveys was stolen from third-party service TinyPulse, but said its own systems and customer and financial data were unaffected. Shadowbyt3$ claimed a larger theft and demanded $2 million; the leaked data was not验证ed.
About 79,000 records allegedly linked to MaGestionLocative reportedly include tenant names, home addresses, rent amounts, and tenancy or insurance status. The scope and authenticity remain unconfirmed.
A small dataset allegedly linked to Timer Immobilier contains buyer and seller contact details, including home addresses. Its scope and authenticity are unconfirmed; the records could enable targeted phishing and real-estate fraud.
A report says 13.9 GB allegedly linked to Brazilian construction information company PiniWeb was listed for sale, including customer records, PST archives, infrastructure details and a code-signing certificate. The breach is unconfirmed.
ReliaQuest and Huntress report attackers compromised Klue’s Battlecards integration, stole OAuth tokens and Salesforce data, and extorted customers. Huntress says it was affected. Klue disabled integrations, and customers were urged to revoke tokens and review logs.
Prince George County reported a cyber incident that disrupted phone, internet, and online payment services. Most systems are restored; RansomHouse claimed encryption, but data theft and a ransom demand have not been confirmed.
Kodak confirmed an unauthorized third party accessed a limited amount of company data. ShinyHunters claimed it stole more than 2.2 million records and threatened to leak them unless Kodak paid a ransom; the investigation is ongoing.
