Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2253 articles
The NFSP says attackers exploited a critical cPanel vulnerability in a ransomware attack that disrupted its website. The federation reported no data loss; the Post Office paused email exchanges and says its networks and applications show no compromise.
Powys County Council confirmed that personal data linked to an unidentified school was accessed in an incident identified in April 2026. The incident was contained; the investigation continues, and the extent of the breach is unknown.
Weil confirmed an incident involving unauthorized upload of a limited number of client documents, but said its network was not accessed. The Insurer reported Luna Moth demanded a large ransom and Weil paid $18–20 million; the firm did not confirm payment.
Unimed says attackers stole a limited set of records related to billing disputes involving private patients and self-payers; it found no evidence the data were published and reports systems were secured and restored.
The City of Thorold is investigating an incident that affected parts of its municipal network. Officials are assessing the scope and whether personal or confidential information was compromised.
A threat actor identified as “spain” reportedly offered an alleged Iberdrola customer database on Telegram, claiming about 7 million records totaling 109.79 GB. The sale was observed June 1, 2026; the claim is unverified.
DumpsecV2 allegedly offered a Carvivo automotive lead database for EUR 5,000, claiming it contains data on about 14 million people in France. The unverified post lists emails, phone numbers and vehicle information.
l1ghtSoulHem (SoulHemTeam) claims to have leaked a database from IEEA Campeche containing staff and student records, including names, CURP, and salaries. The claim is unconfirmed in the supplied content.
Mountain Park, Oklahoma, said unauthorized access identified May 11 affected its Town Hall network and disrupted administrative email. Officials say no resident information was affected; whether emails or other data were viewed or copied remains unknown as OSBIinvestigξ
Singing River reports unauthorized access to patient-data files affecting 53,888 people; Anubis claims the attack and 293 GB exfiltration. The article also details phishing-related and network breaches at two other healthcare providers.
Symantec and Carbon Black report that an attacker accessed a senior executive’s Outlook mailbox at an unnamed global stock exchange from October 2025 to March 2026, collecting and exfiltrating data in an operation likely aimed at espionage.
The City of Thorold says it detected an incident affecting network systems, isolated affected systems and engaged external experts. The investigation is ongoing, and it has not determined whether information was affected.
Hermes_Olymp of Olympus_Group claimed to post a free dump of 10,000+ records from RPP Nayarit, Mexico’s public property registry. The claim was observed June 2, 2026; the article provides no independent confirmation.
Actor malconguerra2 claims to offer 58,153 SUNACOOP records for sale on Telegram. The unverified dataset allegedly contains cooperative members’ names, addresses and administrative location data; it has not been independently confirmed.
Instagram users reported account takeovers after attackers allegedly used AI-generated selfie videos to fool Meta’s AI support and change account emails, reportedly bypassing 2FA. Meta says the issue is resolved and it is securing affected accounts.
The actor hackformetome claims to sell persistent web-shell access and an exploit for a NASA web application, alleging remote code execution and the ability to pivot into NASA internal network ranges. The claims are unverified.
The Bombay High Court ordered Indian authorities to block platforms linked to data allegedly stolen from HDFC AMC by the unidentified Morpheus group. The article says the company reported the incident to SEBI and activated emergency measures.
Hackers reportedly exploited a logic flaw in Meta’s AI account recovery assistant to take over Instagram accounts. Meta has fixed the issue, but the number of affected accounts is unclear.
Attackers published malicious versions of 32 Red Hat npm packages, distributing a credential-stealing worm. Researchers suspect compromised CI/CD publishing access; Ox Security found 210 repositories containing stolen credentials. Clean versions are available.
Dashlane says attackers brute-forced 2FA to register devices on targeted accounts and downloaded encrypted vaults from fewer than 20 personal-plan users. The company says the accounts were locked, affected users notified, and there is no evidence its internal systems or
The actor sativa claims an unverified INEGI database dump from GOB[.]MX internal services includes about 122,000 business records and 30,000 birth records. Some DENUE data is normally public.
The actor malconguerra2 claims to offer a 30 GB dataset tied to Venezuela’s SENIAT, allegedly containing about 24 million records, including identity and tax data. The claim is unverified; SENIAT has not publicly responded.
A company reported a cyberattack affecting some information systems. It is scanning affected systems with external experts and plans to restore operations from backups; it reports no material operational impact or discovered data leakage.
Katun Corporation reported unauthorized network access on June 2, 2026. The company isolated systems, engaged cybersecurity specialists and said shipments temporarily paused but are gradually resuming as it assesses operational impact.
