Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2259 articles
Goodstone Group confirmed it is responding to a cyber incident and found evidence that criminals removed data. CMD Organization claimed the theft, posted documents on its leak site and offered data for 9 BTC; the investigation is ongoing.
Sansei Technologies says a third-party cyberattack on subsidiary FORREC was detected on April 3. Its final investigation found no evidence of personal or customer data leakage; the impact was minor, and business has resumed.
Foxconn confirmed a cyberattack disrupted some North American factories, which are resuming production. Nitrogen claims it stole 8 TB of data, but Foxconn has not confirmed data impact; researchers questioned the group’s theft claims.
A seller identified as INT3X claims to offer data from mutreasury, used by more than 28 Egyptian universities, including admin credentials, ERP API tokens and student payment records. The seller also advertises a claimed zero-day.
An unnamed threat actor claims to have breached Xacria XNO, alleging exposure of 446 service orders, subscriber data, telecom provisioning and circuit records, and reused webhook security tokens. The claims are unverified in the article.
West Pharmaceutical Services disclosed that an unauthorized party exfiltrated data and encrypted some systems after an intrusion detected May 4, 2026. Shipping and manufacturing systems were partly restored; the investigation continues.
A cyberattack disrupted Murray County, Georgia’s government network, closing tax, assessor, probate and juvenile court offices until restoration. Officials said 911, public safety and primary voting continued; ransomware or data access has not been confirmed.
DarkWebInformer reports that threat actor ChimeraZ allegedly leaked a 1 MB JSON file containing 5,400 Akitatek customer records, including names, addresses and phone numbers. The supplied content does not independently verify the claim.
A threat actor claims to have stolen more than 480,000 Vietnam Ministry of Health medical staff records, including personal and workplace details. The actor reportedly threatened to sell the data, and a first batch was released publicly.
A listing attributed to [Citizen] Moelester reportedly offered a SIVVI database containing about 300,000 UAE customer records, including profile, behavior, loyalty, and marketing data. The breach and dataset authenticity are unverified.
Foxconn confirmed a cyberattack affected some North American factories, which are resuming normal production. The Nitrogen ransomware group claims it stole 8TB of data, including customer documents and schematics; that theft remains unverified.
Foxconn confirmed a cyberattack affected some North American factories, which are resuming normal production. Nitrogen claims it stole 8 TB and over 11 million documents, but the theft allegation is not independently confirmed.
OpenLoop Health reported that an unauthorized third party accessed its systems Jan. 7–8 and removed personal and medical information affecting 716,000 people. A threat actor reportedly claimed 1.6 million records; the company says no misuse is known.
Nitrogen claimed it stole 8 terabytes of Foxconn data, including customer schematics and project details. Foxconn confirmed cyberattacks affected some North American factories, which were resuming normal production.
Hokuyo said ransomware disrupted its systems on March 26, 2026, and announced the incident on May 11. Systems were restored and business operations were unaffected, while an external investigation into possible personal-data leakage continues.
Foxconn confirmed a cyberattack disrupted several North American factories. The company says affected facilities are resuming production; the Nitrogen group claimed it stole 8 terabytes of data.
An unnamed threat actor claims to have breached Kuwait’s Public Authority for Civil Information, exposing 5.23 million ID photos and other records, deleting Ministry of Health maps, and offering the data for sale.
A threat actor claims an unauthenticated API exposed FutureShop Egypt customer profiles, order histories, delivery locations, and admin-panel data. The reported dump includes 3,893 customer records and 5,181 order records; the claim is unverified.
Employees say a cyberattack affected the Artesian and the Exchange websites. Their hosting platform provider, Squareflo, said a major incident on May 1, 2026, caused numerous client sites to go down.
Prosecutors said Muneeb Akhter used an overlooked account to delete about 96 US government databases after he and his brother were fired. Muneeb pleaded guilty to major allegations, while Sohaib was convicted of conspiracy and other charges.
Boyne City says a cybersecurity incident affected limited parts of its network and digital systems. Emergency and critical infrastructure were not affected; officials are assessing system and data impacts, and the investigation is ongoing.
Škoda says attackers exploited an unspecified vulnerability in its online shop, accessing customer contact, order and password-hash data. Full card details were not stored there; the flaw was fixed and the incident referred for forensic analysis.
Instructure says ShinyHunters returned data stolen from its Canvas LMS and provided shred logs after an extortion agreement. The breach exposed usernames, emails, course and enrollment details, and messages; attackers exploited Free-for-Teacher and Canvas XSS flaws.
BWH Hotels says attackers accessed a web application containing guest names, contact details and reservation data from Oct. 14, 2025, until discovery on Apr. 22. Payment data was not stored there; the number of affected guests is unknown.
