Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2251 articles
A hacker claims to be selling a scrape of up to 35 million OkCupid user records, allegedly including sensitive personal and dating information. The dataset’s authenticity and reported scale are unconfirmed.
ChimeraZ claims an unverified dataset of about 4 million French property listings from 13 portals includes roughly 1.1 million phone numbers and seller details. The actor suggests an upstream third party may be the source.
Oxford says its CareerConnect provider, Group GTI, reported unauthorized access on May 28 to users’ names, email addresses and some encrypted passwords. Local passwords were invalidated; Oxford says there is no evidence university systems or financial data were affected
Lansing Community College says hackers used compromised credentials to access systems in February 2025, affecting 174,307 people’s personal information. The college says it has no evidence data was removed or misused.
Meta reported that a flaw in Instagram’s High Touch Support recovery system let unauthorized parties reset passwords and compromise 20,225 accounts. Meta disabled the tool, invalidated reset links, and plans stronger validation.
Evanston Township High School says a June 7 ransomware attack disrupted district systems and services, prompting closures and activity cancellations. The FBI is assisting as the district restores systems and assesses possible information access.
NÛJINHA says a cyberattack deleted publications in Persian, Arabic and English and briefly disrupted broadcasting. The agency attributes the attack to a group calling itself Hindala and the Resistance Axis (Hendhela); services have been restored.
Meta says attackers abused its AI-assisted High Touch Support recovery tool to hijack more than 20,000 Instagram accounts. The company disabled the tool, secured affected accounts and plans to fix email verification before relaunching it.
Chandrapur Cancer Care Foundation staff reportedly found a ransomware note after a server issue on June 1. Attackers allegedly encrypted patient and administrative data and demanded 1.23456 Bitcoin (about ₹75 lakh); an investigation is expected.
Hackers attributed to DNH (DeathNoteHackersPH) allegedly posted about 10 GB of Viva Communications internal documents, including permits, memos and emails. The report says the claim was observed on June 5, 2026; it is not independently confirmed.
A hacker claims to have leaked more than 240,000 Tradeify customer profiles from a CRM database, including contact and purchase details. The data and a claim that an API key remained active are unverified.
Belimed’s Infection Control IT systems were accessed without authorization, and company data was copied. Belimed said customer business operations were unaffected and no encryption occurred.
An April cyberattack disrupted Karl Auto Group’s phones and computers. The article says customer and employee data may have been exposed; RansomHouse claimed Karl Chevrolet’s systems were encrypted.
Kiria claims to have shared Root-Me’s challenge archive for free. The alleged dump reportedly contains 15,200 files across 660 folders and was observed June 5, 2026. The article provides no independent confirmation.
IMA Diligence Services reported unauthorized access to a legacy server between Dec. 8–16 and data theft affecting 525,306 people. Genesis claimed responsibility and alleged 700 GB was taken; the company offers 12 months of credit monitoring.
Powys County Council says an incident identified in April 2026 led to unauthorized access to personal data linked to one school. The incident was contained, schools remain operational, and the investigation continues.
ShinyHunters published 234 GB of data it claims was stolen from DentaQuest. HaveIBeenPwned says the leak affects roughly 2.6 million accounts. DentaQuest confirmed unauthorized network access; the scope and data compromised remain under investigation.
RCI Hospitality says an IDOR vulnerability in an IIS web server allowed unauthorized access to personal information. The company told Maine authorities that more than 40,000 people are affected; the attacker is unknown.
Krum Public Library confirmed a May 14 ransomware attack that disrupted services and led to unauthorized access to some files. NightSpire later claimed 50 GB of library data was for sale; officials have not verified the claim.
A cyberattack disrupted Neuwoges and several subsidiaries. Central IT systems were taken offline on June 2; external specialists are assessing damage and preparing restoration. Phone service is limited, while the event center was unaffected.
The WFP said attackers breached its Gaza self-registration application on May 14 and stole beneficiary information from roughly 600,000 Palestinian households. The agency suspended the platform, is investigating, and warned beneficiaries about phishing.
DentaQuest confirmed unauthorized access to part of its network and limited customer-service disruption. Have I Been Pwned identified records for 2.6 million accounts in a dataset ShinyHunters claimed to have stolen and leaked.
Hola confirmed a supply-chain compromise of its Windows browser that delivered an undeclared Monero miner. The company said about 0.1% of users were affected and reported rebuilding its distribution pipeline; no user-data access or theft was evidenced.
A reported cyberattack encrypted Bowman Parks & Recreation's internal files and USB backup data. An expert later decrypted the files; no data exfiltration is confirmed, and the attack date and public impact remain unknown.
