Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2223 articles
The University of Copenhagen confirmed hackers accessed a test environment containing personal data of 525,000 people. Another 20,000 staff and students may have had PIN codes exposed. The university says it contained the attack and is investigating.
LiteLLM said an unrevoked master key exposed in May was used to obtain GitHub and maintainer tokens, enabling a malicious PyPI 1.107.0 release that ran credential-stealing code. The package was available for about two hours.
LiteLLM says an unrevoked Agent Platform key enabled an attacker to obtain an organization-level GitHub token and publish malicious LiteLLM 1.107.0. Socket and Microsoft describe secret-stealing workflows and Python-startup malware; LiteLLM is revoking credentials.
Capcom disclosed unauthorized access affecting more than 11.7 million CAPCOM ID records, including email addresses, activity details and IP addresses. It reset passwords on 196 accounts and is investigating; phishing is a concern.
A breach involving P3 Global Intel exposed more than 1.5 million Canadian Crime Stoppers tips, including over 850,000 with personal information. Toronto Crime Stoppers paused submissions, saying it could not guarantee anonymity.
Capcom disclosed unauthorized access to CAPCOM ID that exposed 11,774,247 email addresses and account data. Personal details of 43 customers were also compromised; the company says services remain available and affected passwords were reset.
Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager and said certain patient records may have been accessed. The scope is unknown; the company notified federal law enforcement and is investigating with external experts.
LiteLLM says attackers poisoned version 1.107.0 on PyPI and Docker for about three hours, with over 49,000 estimated downloads. Malware stole credentials and secrets; users were advised to remove the version and rotate credentials.
Capcom confirmed unauthorized access to its CAPCOM ID system involving 11.77 million user records. The records included email addresses and account activity; passwords set by users have not been confirmed leaked, and payment details were not exposed.
Quest Diagnostics says an unauthorized party accessed patient data in its Quanum LSM system, discovered October 21. The company paused access and is investigating; the number of patients and specific data types remain unknown.
Quest Diagnostics says unauthorized access to its Quanum LSM system may have exposed patient records. The company stopped the system, paused access to other services as a precaution, and is investigating; data types remain unknown.
State Bank of India acknowledged that 3,897 customer records were leaked online; the number of affected people is unclear. A media outlet verified sample PII, while the breach's cause remains unknown.
Amanda Smith says someone used her personal information to open a Cash App account tied to a Facebook Marketplace scam. She was arrested and charged; the case is ongoing, and the source of her information is unknown.
Railway says an intruder may have accessed some customers’ encrypted environment variables and, in some cases, decrypted contents. The company rotated bucket credentials and invalidated API tokens; a researcher also reported cryptocurrency theft.
Shinryo Corporation says unauthorized access caused a system outage on October 17, affecting some services. As of October 21, it had not confirmed external leakage of personal or customer data and was still investigating.
Attackers compromised LiteLLM’s release pipeline and published version 1.107.0 with credential-stealing and remote-code execution capabilities. Wiz reported subsequent abuse of stolen AWS credentials; the initial access route remains unclear.
Microsoft linked China-aligned Storm-0940 to a ConnectWise Cloud Backup supply-chain compromise, saying ARTEX AI agents accelerated attacks against customer environments. Some activity reached privileged cloud access; ConnectWise is restoring services in phases.
A library in Orchies confirmed a cyberattack disrupted the shared Graines de Culture(s) portal serving 34 libraries. The site remained offline on October 22; users were told not to enter credentials, and no data theft was confirmed.
Zeabur says repeated breaches led it to shut shared-cluster and dedicated-server services by the end of December 2026. An attacker accessed millions of records and gained root access to 101 managed GCP servers.
Railway says an unauthorized party may have accessed encrypted customer environment variables, with some possibly decrypted. The company paused deployments, invalidated OAuth sessions and urged customers to rotate secrets; the impact remains unclear.
Cutlers Hill Surgery in Halesworth says an ongoing cyber incident is affecting its ability to order medicines through usual systems. It is exploring alternative wholesalers to reduce possible delays and supply difficulties.
Oneonta City School District reported a ransomware attack, closed schools Friday and Monday, and said it had taken steps to limit further unauthorized access. The full extent and operational impact were not yet known.
Microsoft says China-linked Storm-0940 used ARTEX and compromised ConnectWise Cloud Backup application credentials to target over 2,250 Microsoft 365 tenants; some attacks gained privileged access. ConnectWise suspended services and continued restoration.
Quest Diagnostics says an unauthorized party may have accessed patient records through its Quanum Lab Services Manager system. The company paused access while investigating; it says operations were not materially disrupted.
