Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2260 articles
Fitjar Municipality is investigating a possible intrusion at its water treatment plant after production temporarily stopped on April 24. The cause and any effect on water quality remain unknown; national authorities have been notified.
Roth Group says its servers at German sites were encrypted on 8 May 2026; its core SAP system was unaffected. Key systems and communications are operational again, while investigations continue.
The company says its security unit found that unidentified hackers accessed its hosts and encrypted some server data. It engaged external experts and reports no material financial or operational impact.
Valdemoro reported a network incident that may involve a cyberattack, disrupting some municipal services. The town disconnected its servers as a precaution; access to personal data has not been confirmed.
A Taiwanese student was arrested after authorities said a forged TETRA “General Alarm” halted four high-speed rail trains for 48 minutes. The suspect’s lawyer says the transmission was accidental.
ShinyHunters claims it stole 280 million records from 8,809 education organizations through Canvas export features. Instructure is investigating; the claimed scale and affected institutions have not been independently verified.
Foxconn confirmed a cyberattack affected some North American factories, which are resuming production, but did not identify them or link the incident to Wisconsin. Nitrogen’s claim of stealing 8 TB remains unverified.
Vimeo confirmed unauthorized data access following an Anodot breach. Have I Been Pwned reported that 119,200 people’s email addresses and some names were exposed; ShinyHunters claimed the theft and posted a 106GB archive.
A malicious Antrea pull request triggered Jenkins tests and included payloads to probe the controller and collect credentials. Maintainers closed it as an exfiltration attempt; the attacker claimed root access, which the article does not independently confirm.
World Leaks claims it stole and published nearly 8.5 TB of Mediaworks data. The company confirmed an incident and launched an investigation, but the outlet could not independently verify the leaked files or a reported memo.
4SELLERS says a ransomware attack on April 30 impaired parts of its systems. The company reports services are restored, while an investigation into possible data impact continues; it says there is no current indication that sensitive data was compromised.
The Romand Radiology Network reports a new intrusion, with some exams needing to be rescheduled or moved. It is not yet known whether patient data was stolen.
The City of Quiberon said a cyberattack affected its IT system on Sunday, May 3. It warned that some municipal services may be disrupted or difficult to reach while teams work to maintain public services.
A Polish hospital says investigations found no evidence that patient or staff data were exfiltrated after a March 2023 ransomware incident encrypted archived records. Theft remains unconfirmed; the affected server was disabled.
The San Diego Community College District says a cyberattack that began Saturday took some internet, email, websites and registration platforms offline. The district says campuses remain open and it has detected no breach or ransom demand.
Infrastructure said hackers accessed names, email addresses, student IDs and messages at some institutions, disrupting customer tools during containment. ShinyHunters claimed it stole 3.6 TB from more than 9,000 schools; that claim was not confirmed.
Trellix disclosed unauthorized access to part of its source code repository and is investigating with outside forensic experts and law enforcement. The company says it has found no evidence that the code was altered or exploited.
Trellix says part of its source code repository was breached. It is investigating with forensic experts and has notified law enforcement; it says it has found no evidence that its release process was affected or source code exploited.
DigiCert said attackers used malware and its internal support portal to obtain EV Code Signing certificates. By April 17, it had revoked 60 certificates associated with the incident and canceled pending orders.
Hematology Oncology Consultants said a 2025 ransomware attack compromised files containing personal and medical information, including Social Security numbers. Rhysida claimed the attack; the practice notified affected people in April 2026.
McKay confirmed unauthorized access to one internal device in January. The New Zealand contractor says it contained the access, notified affected people and authorities, and is strengthening security; Mnt6 later listed the firm on its leak site.
ALS reported unauthorized third-party access to some IT systems and temporary disruption to parts of its operations. It says most operations have been restored while remediation and investigation continue; potential data impacts are not yet clear.
Trellix says unauthorized access affected part of its source code repository. It has engaged forensic experts and notified law enforcement, but reports no evidence that source code was released, distributed, or exploited.
France detained a 15-year-old suspected of using “breach3d” to sell data from the confirmed ANTS breach. The agency reported 11.7 million affected accounts; exposed fields included contact and birth-date information. The suspect has not been formally charged.
