Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2250 articles
A listing observed June 17, 2026, allegedly offered 116GB and 125,000 files from Russian defense research institute VNIIR-M, including R&D and contract records, with a 10GB sample and two listed prices.
An unconfirmed report alleges that about 93,900 TakTikimmo records were leaked. Sampled data is mainly property listings, with about 3,663 phone numbers and agent contacts; the dataset’s scope and authenticity remain unconfirmed.
The St. George Fire Protection District is suing General Informatics over a December 2023 breach. The lawsuit alleges compromised remote-access credentials and security weaknesses; the district says it had to rebuild its network.
Attackers stole Klue customers’ OAuth tokens and used them to access connected systems. Huntress confirmed Salesforce business and sales data was exposed; it found no impact to products, infrastructure, passwords, or payment data.
Researchers reported a FortiBleed dataset with credentials for 73,932 Fortinet firewall URLs. Some credentials were verified, but the source of the data and broader claims of compromise remain unconfirmed.
Norwegian union NTL reports a June 16 ransomware attack targeting its core IT systems. Social security and bank account details may have been exposed; the union is working to restore affected systems.
Bloomberg Law reported that Lewis Brisbois restricted remote work after blocking outside network access. Emails described calls from people posing as IT staff; whether attackers accessed systems or exposed data remains unclear.
Kodak says an unauthorized third party temporarily accessed a limited amount of company data. ShinyHunters claims it stole over 2.2 million records and threatens to leak customer and internal data; Kodak is investigating with experts and law enforcement.
Ciudad Real City Council reported a cybersecurity incident affecting its Low Emission Zone platform. The city suspended the platform, changed user passwords as a precaution and restricted some features while investigating.
REXT Holdings says attackers accessed subsidiary D&M’s file-sharing server via a VPN and infected it with ransomware. About 633 FAX-order records may have been exposed; payment data was not confirmed affected. Operations resumed on June 1.
A reported global campaign targets internet-facing Fortinet devices using reused credentials and brute force. Researchers say tens of thousands of devices may be affected; links to recently patched vulnerabilities remain unconfirmed.
More than 105,000 records from French insurance assistance firm Inter Mutuelles Habitat were allegedly leaked. Reported data includes policyholder contact details and insurance claims; the leak’s scope and authenticity remain unconfirmed.
ChimeraZ and misere allegedly posted a partial Autosur database with about 63,349 inspection records. The unverified claim describes personal and vehicle details, including contact information, license plates and VINs.
Novo Nordisk says an unauthorized party accessed internal IT systems around June 11–12, 2026, and pseudonymized clinical-trial data was stolen. Attackers claim they also took Dragonfly AI models and research assets and are demanding ransom.
iRhythm says social engineering led to unauthorized activity involving third-party-hosted business applications and confirms some data was stolen. The data type and number of affected people remain unknown; clinical systems and operations were unaffected.
A multi-day network and internet outage has affected Spartanburg County since June 10, 2026. SLED is assisting amid a suspected cyber incident that disrupted some public services and internal communications.
Kee Wah Bakery reported a ransomware attack on June 12, 2026, that disrupted its internal network. It said payment and credit card information were unaffected; whether data was exfiltrated remains unconfirmed.
Novo Nordisk said hackers accessed internal IT systems and exfiltrated pseudonymized clinical-trial data. FulcrumSec claims it used a GitHub token to steal 1.3 TB, demanded $25 million, and threatens to leak it.
Handala claimed it stole 5 GB of data from Cal Water. Dataminr reported personal information in the leak and apparent access to a billing database and internal application. Cal Water is investigating and reports no known operational disruptions.
iRhythm Holdings says data in third-party-hosted business applications was accessed through social engineering. It identified suspicious activity June 8 and received a ransom demand June 9; the company says patient safety and key systems were unaffected.
iRhythm says attackers used social engineering to access third-party-hosted business apps and exfiltrate patient and personal data. The company received an extortion demand and says clinical and medical-device systems were unaffected.
Uncanny Owl confirmed an intrusion that exposed customer records and sent backdoored Pro plugin version 7.3.0.5 to some WordPress sites. The company removed access, released clean version 7.3.0.6, and urged affected users to remediate.
Kaluga Astral said a cyberattack disrupted services for about a week, affecting business operations. The company reported no evidence of customer data leakage and said services are being restored after security reviews; Russian agencies are investigating.
Threat actor 0xSec claims to have leaked about 26,900 Local’Emploi records in four CSV files, potentially including job seekers’ personal details, résumé references, job offers and company contacts. The claim is unverified; the platform has not commented.
