Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2250 articles
The Council of Europe says it is investigating ShinyHunters’ claim that it stole more than 429,000 HR and payroll documents, including payslips, personnel files and CVs, containing staff personal and financial data. The claim remains unconfirmed.
After Kittson County reported a cyber incident involving its emergency services network, Minnesota IT Services blocked the county’s access to state motor vehicle systems as a precaution. DMV services remain limited; officials say emergency services are operational.
A stolen Awesome Motive CDN API key let attackers briefly serve malware to affected WordPress sites. The code could steal administrator tokens, create rogue accounts and install backdoors; the company says its production systems and account data were not breached.
Have I Been Pwned said analysis of leaked data identified 137,100 accounts. ShinyHunters claimed responsibility for a March Salesforce attack; Infinite Campus said it had no evidence customer databases were compromised and that most exposed data was directory info.
A ransomware incident disrupted operations at Mackay Sugar, affecting two mills. The company reported systems restoration and planned a staged restart; The Gentlemen listed the company, but no data leak was reported and OT impact remains unclear.
Allegany County reported trip-confirmation disruption tied to a third-party scheduling vendor. Ababil of Minab claimed IT Curves was hacked, but neither the vendor nor the county confirmed its identity or the alleged compromise and data theft.
Novo Nordisk disclosed unauthorized access to a limited number of internal IT systems. Limited clinical-trial participant information was affected, and healthcare-provider details may have been compromised; the company says patient records lacked direct identifiers.
France’s DINUM said Tchap was compromised via account hijacking on June 7, affecting 73,467 of more than 825,000 users. Actor “misere” claimed 13.5GB of files and messages were stolen, but that claim could not be verified.
Ezekiel Dean Potter was sentenced to 21 months in prison after pleading guilty to computer fraud. Prosecutors said he used retained credentials to attack his former school district, deleting accounts and disrupting services; he must pay $59,668.81 in restitution.
Kredietbank Limburg reported a digital intrusion and described its consequences as limited, with minor damage reported. The nature of the intrusion and the full extent of its impact were not disclosed.
Murray County says a ransomware attack has been resolved and most systems are operational. Officials say they paid $200,000 after consulting experts, intending to prevent county data from being published.
South Korea’s privacy regulator fined Coupang a record $409 million after finding a breach exposed data belonging to 33.2 million members and at least 4.3 million non-members. The probe also found separate privacy violations.
ChimeraZ, reportedly assisted by Cybernox, claims to have leaked Lancy FC’s member database, involving about 6,600 records. The alleged data includes personal and contact details; the claim is unverified, and the club has not publicly responded.
Novo Nordisk said attackers accessed internal IT systems and copied clinical-trial data and healthcare professionals’ personal details. Patient data was pseudonymized; affected systems were taken offline, while core operations continued.
Handala claims it stole 5 GB from California Water Service; Dataminr says leaked data points to customer billing and RTKBase systems in Chico. Cal Water says it is investigating; operational disruption is unconfirmed.
DINUM said an attacker used a compromised account to access Tchap public-chat data potentially affecting 73,467 users. Private conversations remained encrypted; broader claims of stolen messages and files are unconfirmed.
Kyushu Electric Power says a missing backup drive may have exposed personal data tied to up to 10.9 million customer accounts. The company is investigating; no bank-account or credit-card data was on the drive.
MagaluPay confirmed a cyber incident that disrupted operations for days and temporarily halted Pix payments; the company said customer data was not compromised, while users reported difficulty accessing funds and support.
Toulouse FC says a security incident affected a service provider’s backup infrastructure. The club activated its response, notified authorities, and reports no sensitive data affected or fraudulent use detected so far; it warns of possible phishing and identity theft.
The University of Nottingham reportedly suffered a ShinyHunters-attributed cyberattack involving student records with personal, educational and financial data. The university took Campus Solutions offline, notified authorities and advised students to change passwords.
Threat actor ChimeraZ claimed to leak Jestimo’s customer and valuation database. The alleged leak reportedly contains 168,706 records affecting about 389,365 people and was observed on June 11, 2026.
A forum user named Orcinusorca allegedly claimed production Admin API access and leaked payment keys for Amazon’s Wickr Enterprise. The report says the claim was accompanied by response headers and a JSON snippet; the alleged compromise is unconfirmed.
A malware incident disrupted Great Marlow School’s ICT network and communications. The school shut down parts of its system, partially closed, postponed some exams, and is working with cybersecurity professionals to restore operations.
The University of Nottingham confirmed data in its student records system was accessed. ShinyHunters claimed responsibility and alleged it stole over 40GB; Have I Been Pwned said analysis of leaked data indicated 454,600 current and former students were affected.
