Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2251 articles
Soral claims to have breached H1 (h1[.]co) and leaked 2,064,071 medical professional records. The reported fields include names, specialties, licenses, workplaces, and photos; the claim is unverified.
A cybersecurity incident disrupted Mackay Sugar’s operations, suspending its Farleigh and Racecourse mills and halting regional harvesting. The company is restoring systems; the attack type and any data compromise remain undisclosed.
Resecurity reports that Anubis ransomware disrupted the Adriatic Port Authority, with files allegedly encrypted, data exfiltrated and a $10 million ransom demanded. The article provides no independent corroboration.
An alleged Capifrance database leak may expose data on about 785,000 people, including personal, contact, and property-transaction details. Its authenticity is unconfirmed; the data could enable identity theft or targeted fraud.
Libya’s central bank reports a cyber incident affecting a limited number of systems. It has isolated affected systems and is investigating with international cybersecurity firms; banking cards and LYPAY remain operational, with no evidence so far of account impacts.
A reported cyberattack disrupted Reynella East College’s entire IT system and affected normal operations. Student personal information may have been exposed; the supplied content provides no technical details.
Great Marlow School closed to most students on June 10 after a suspected cyberattack disrupted part of its IT systems. The school restricted network access and is assessing the incident with government cybersecurity teams.
New York City Public Schools is investigating malware found and removed from Manhattan campus lab computers and a separate Canvas attack that disrupted exams and grades at seven schools. It is unclear whether sensitive data was accessed.
The Central Bank of Libya says it contained an attack affecting some technical systems and services. Forensic investigations continue; the bank reports no confirmed customer account or data compromise, and key services remain operational.
A cybersecurity incident halted production at two Mackay Sugar mills in Queensland, disrupting cane crushing and rail transport. The company is working to restore systems; no outage timeline has been given.
A news report says a hospital in Ernakulam suffered a server-level breach, with more than 800GB allegedly exfiltrated. A 30MB sample reportedly contained medical and administrative records, though the hospital believed no data was stolen.
Threat Actor 2019 claims to have leaked Zeemart’s database, reportedly containing more than 510,000 records. The claim is unverified; Zeemart has not publicly responded.
An actor using the alias 2019 claims to be selling an Ochre Health database with 25,000+ patients and 700,000+ records, allegedly including medical, identity, Medicare, DVA, appointment, and payment information. The claim is unverified.
ChimeraZ claims it breached French real-estate network Proprietes-Privees and leaked a database with 3.28 million records linked to about 2.53 million people. The claim remains unverified.
Kyushu University Hospital says a research lab terminal was accessed without authorization and likely infected with ransomware. Names and surgery videos of 43 patients may have leaked; clinical systems were unaffected, and no misuse has been reported.
Sage Water Resources says it detected malicious PLC logic changes at its Utah facility on March 15, 2026, and stopped them before damage occurred. The company reports restoring operations and hardening the system.
ServiceNow says attackers exploited an unauthenticated API flaw to query customer instance tables. A June 5, 2026 update restricted the endpoint to authenticated users; accessed data has not been disclosed.
Le Vieux Campeur says it was targeted by a cyberattack on June 2, 2026. The company reports containment and service-restoration measures, says it notified authorities and the CNIL, and says investigations indicate customer data was likely not compromised.
Microsoft temporarily removed 73 GitHub repositories after a suspected Miasma/Shai-Hulud supply-chain compromise, disrupting CI and Azure Functions workflows. The repositories were restored; Microsoft said it was investigating and notified potentially affected customers
DINUM says an attacker accessed France’s Tchap messaging platform through a compromised account, which was blocked. The attacker claims data theft, while officials investigate what conversations and data were accessed.
AVBOB Funeral Services confirmed a cyberattack that disrupted its digital platforms and online services. The company is restoring operations, and an investigation is assessing whether personal data was compromised.
SoFi confirmed unauthorized access to a vendor-managed database belonging to its Hong Kong subsidiary, discovered April 30, 2026. The investigation is ongoing, and the company has not determined what customer data may have been exposed.
A report alleges that a leak involving BRPDV exposed more than 542,000 invoices containing tax IDs, names, addresses, contact details, and masked bank references.
KLINZO007 allegedly offered Tayara’s user database for sale on Telegram on June 5, 2026. The unconfirmed listing claimed more than 2 million records totaling about 4 GB.
