Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2261 articles
DarkWebInformer reports that Spirigatito published an LCBO database containing 165,840 customer records with names, email addresses, phone numbers, account IDs and account types. No payment or address data was visible in the samples.
Checkmarx says data posted on the dark web appears to have come from a GitHub repository accessed during the March 23 supply-chain attack. The repository is separate from production; forensics continue, and the company says it stores no customer data.
A backdoored elementary-data 0.23.3 release and Docker image used a GitHub Actions script-injection flaw to distribute a secrets stealer. A clean 0.23.4 was released; users of affected versions were advised to rotate secrets and restore from safe backups.
Medtronic disclosed a breach affecting certain corporate IT systems. ShinyHunters claim they stole more than 9 million records and terabytes of internal data; Medtronic is investigating whether personal data was accessed.
ADT confirmed an intrusion exposed some personal information; Have I Been Pwned estimates 5.5 million people were affected. ShinyHunters claimed access via an employee’s Okta SSO account and theft from Salesforce.
Itron disclosed that it detected unauthorized access to some systems on April 13, remediated the activity, and observed no subsequent unauthorized activity. The company said operations continued and potential data compromise remains unclear.
Generation Life reported a cyber incident in a limited part of its network, detected via a third-party provider and contained. The company says there is no evidence of unauthorized transactions or core-system impact; potential data impacts are under review.
Medtronic reported that an unauthorized third party accessed data in some IT systems. The company says it contained the incident and is investigating; it has not identified impacts to products, patient safety, or operations.
Generation Life says unauthorized access through a third-party service provider affected a limited part of its network, was quickly detected and contained, with no evidence so far of core-system impact or unauthorized transactions. Investigation continues.
Murata says unauthorized access to its IT environment exposed data that may involve about 73,000 employee-related and 15,000 stakeholder records. Operations continue normally; the company says it has blocked suspicious access and strengthened controls.
MAAIF, Uganda’s Ministry of Agriculture, allegedly suffered a data breach involving a database with users’ personal information and system credentials, including passwords, API keys and bearer tokens.
The Krybit ransomware group claims it breached Turkish textile company Narteks Tekstil A.Ş. and listed it on its leak site. The group has not publicly detailed what data was allegedly compromised.
A dark web forum seller claims to have obtained FFWPU and Tongil Group data between January and March 2026 by exploiting an IDOR vulnerability, including personal information, plaintext passwords, database backups, and employee ID scans.
A threat actor reportedly claims to have extracted and offered for sale more than 12,000 client records associated with the Texas insurance agency, including contact, address, renewal-date, and commercial-client details.
BlackSexFinder, an adult entertainment and dating platform, was allegedly compromised in a recent data leak involving account and personal information.
A seller on a cybercrime forum claims to offer a new database belonging to Ellipal, saying at least one copy has been purchased. The alleged data includes records from 2026; the claims are unverified.
A cybercrime forum listing reportedly offers alleged super-administrator access to the Abu Dhabi Department of Finance’s network and systems for $800. The claim is unverified in the supplied article.
Yamaichi Electronics says ransomware affected some servers at its Philippine subsidiary, Pricon Microelectronics. The company confirmed the incident on Apr. 17 and announced it Apr. 22; recovery and investigation continue, with business impact under review.
South Korea’s PIPC fined matchmaking firm Duo 1.197 billion won plus 13.2 million won after an infostealer-led January 2025 breach exposed 427,464 members’ personal data, including passwords and resident registration numbers.
Itron says an unauthorized third party accessed some internal systems on April 13, 2026. The company reports blocking the activity, with no material disruption or customer impact observed so far; its investigation continues.
ADT confirmed a breach exposing a limited set of customer and prospective customer data. A group identifying itself as ShinyHunters claimed it stole 10 million records and threatened a leak; ADT said alarm systems and payment data were unaffected.
NASA’s OIG says a campaign from 2017 to 2021 used impersonation to obtain aerospace software and source code from U.S. agencies, universities, and firms. Song Wu was indicted in 2024; the OIG says victims shared sensitive information in some cases.
A client database allegedly linked to Padanama Publication was reportedly offered for $50 on a dark web forum. A sample reportedly includes NIC numbers, OTPs, contact details, addresses and internal system data.
Bitwarden confirmed its CLI NPM package version 2026.4.0 was compromised with malware designed to steal cloud, developer, SSH and AI-tooling secrets. It said there was no evidence end-user vault data or production systems were affected.
