Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2255 articles
The University of Valencia says attackers accessed an obsolete research server and exposed limited personal material, but disputes NOVA’s claim of 300 GB of sensitive data, including student and staff records.
Radiology Associates of Richmond says files containing protected health information were acquired without authorization. It is notifying 266,183 people; a Texas AG listing indicates government ID, financial, and health information may have been stolen.
Threat actor zSenior claims Ramen Kuroda suffered a customer-database intrusion in May 2026 involving about 7 million records. The article provides no independent confirmation.
A threat actor using the alias giorggios claims to be selling 2.8 million records allegedly linked to Swiss parking platform Parkingpay. The article provides no evidence confirming the dataset’s authenticity or origin.
An actor using the alias “somewhere” claims to have leaked a database allegedly belonging to Romania’s EduSal education platform. The dump reportedly contains about 331,000 records and may include teacher and administrator data.
A public-records search found no documents showing UMMC notified patients or regulators after a February ransomware attack. UMMC says forensic analysis is ongoing; Medusa claims it took patient data, which UMMC has not confirmed.
Threat actor alias sta6 claims to be selling an alleged full source-code and database leak tied to Brazilian ERP provider Sisplan Sistemas. The claim is unverified, and the article provides no corroborating evidence of compromise.
zSenior allegedly advertised a WisERP customer database containing 1,531,363 records for auction. The claimed data may include contact and location details; the listing does not verify the data’s authenticity or how it was obtained.
An underground-forum actor claims to have breached VIPER, allegedly used by Chilean fire departments, and exposed firefighter records, internal documents and administrative data. The claim is unverified.
AplaGroup claims an allegedly Optic 2000 database leak includes 7,898 PDF files and a JSON file, with invoices, franchise information, and customer records. The claim is unverified.
ChimeraZ allegedly claimed a leak involving Avea Vacances, reportedly comprising 46,000 records and 128 MB of data. The information may include personal and invoice details; the claim is unverified and independently unconfirmed.
Scottsboro police say they isolated suspicious activity targeting department servers before records or sensitive information were accessed. Officials found no evidence of data theft or compromise; the cause and full technical scope remain unclear.
An unverified underground-forum post by actor zSenior claims to leak 2,516,271 Hillpointe records, reportedly containing customer, employee, and candidate information such as names, emails, phone numbers, and mailing addresses.
Contagem’s government says a cyberattack did not affect institutional email and found no evidence of data loss or leakage; sources cited by the report allege senior officials’ accounts were compromised. Containment and investigation are underway.
Grafana says an unrevoked GitHub workflow token let attackers access its repositories after the TanStack supply-chain attack. They stole code and internal business information, but Grafana reports no impact to customer production systems or Grafana Cloud.
A forum leak allegedly exposed 23,685 fintech records and 326 KYC archives linked to ATOA. Reported data types include identity, contact, transaction, wallet and banking details; the claim is unconfirmed.
NDR reports that a ransomware attack on an unnamed IT provider may have stolen thousands of school and kindergarten photos, along with customer data. Authorities are investigating; whether any images were published is unknown.
Belgrade Public Schools says malware disrupted some network systems in April. Restoration continues, and the district is reviewing possible data exposure; it has found no evidence of unauthorized access to Infinite Campus.
A cyberattack on an external billing provider reportedly exposed data of tens of thousands of patients at five Baden-Württemberg university hospitals. The clinics say their own IT was unaffected and halted data transfers.
Northern Mariana Islands officials said a cyberattack affected some government email accounts, leaving users without access. The Office of Information Technology is applying security measures and corrective actions; the attack method and extent remain undisclosed.
The report says an attacker accessed sensitive patient documents through a Lumexa Imaging service provider between March 31 and April 9, 2026. Records may include medical, insurance and financial details; Lumexa began sending notices and offering identity-protection服务.
GitHub linked access to internal repositories to a malicious Nx Console extension distributed after a TanStack supply-chain compromise. TeamPCP separately claimed access to nearly 4,000 private repositories; GitHub said it found no evidence of customer data theft beyond
GitHub confirmed an employee device compromised through a poisoned Nx Console VS Code extension led to a breach of internal repositories. TeamPCP reportedly exfiltrated about 3,800 repositories; GitHub rotated secrets and is monitoring for further activity.
An alleged forum listing attributed to actor Sorb advertises more than 437,000 Perumda Tirta Musi Palembang customer records and 257,000 phone numbers, including names, addresses, tariff codes and account references. The claims are unverified.
