Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2263 articles
The article reports ShadowByt3s claims of accessing cloud storage associated with Ellucian PowerCampus and exposing data from more than eight schools in Manipur and Meghalaya. The claims and extent of access are not independently verified in the supplied content.
DarkWebInformer reports that actor 888 is offering 411,000 Diner en Blanc records for Monero. The claimed data includes identities, contact details, invite codes, event logistics, and attendance and social flags; the sale is not independently confirmed in the article.
More than 18 months after the June 2024 Qilin attack on Synnovis, SLaM still lacks electronic pathology systems, with 161,560 reports delayed. Sensitive data on nearly one million patients was reportedly exposed; investigations continue.
Standard Bank confirmed unauthorized access to select data, and Daily Maverick reviewed a published dump containing customer details. Rootboy claims a much larger haul; the bank says core banking systems and CVVs were not affected.
Grinex suspended operations after a reported $13.7 million theft from wallets used by Russian users. Elliptic traced the funds through TRON and Ethereum; Grinex blamed Western intelligence, but no evidence supports that attribution.
A report alleges that the University of AlKafeel in Najaf was breached, affecting several thousand students and staff. Reportedly exposed data includes credentials, identifiers, contact details, academic information, birth dates and blood types.
Payload claims it breached five organizations and exfiltrated data ranging from 13 GB to 200 GB. The claims are unverified, and the group did not specify file types or sensitive data categories.
An unidentified actor claims to have exploited an unpatched vulnerability in Credix, exfiltrating 44,548 customer records and possessing ID-card photos. The breach and data claims are unverified.
A seller reportedly offered a 10bis user database said to contain 1.4 million records, including personal details and passwords. The article says a sample CSV was provided, but does not independently verify the alleged breach.
The article reports that attackers stole an estimated $13–15 million in USDT from Grinex wallets, prompting the exchange to halt trading and withdrawals. Elliptic tracked funds across Ethereum and Tron; foreign-intelligence claims remain unsupported.
Forensic investigators confirmed targeted access to personal data at a small number of Northern Ireland schools. The incident, identified April 10, 2026, is contained; investigation and C2k system recovery continue.
Matthew Lane pleaded guilty and was sentenced to four years in prison for his role in the PowerSchool breach. The article says stolen contractor credentials were used to extract data tied to about 60 million students and 10 million teachers, followed by extortion.
Cookeville Regional Medical Center says a network intrusion discovered July 14, 2025, led to files being stolen and more than 337,000 people being affected. Rhysida separately claimed to have leaked the data.
An unidentified seller is reportedly offering a 45.66 GB database allegedly taken from NSSAR, including records tied to over 37,000 members, genealogical files, historical scans, administrative documents and SAR Magazine archives.
A seller reportedly offered 240 GB of Pavarini McGovern project files for $48,500, allegedly affecting 25 Water Street and TSX Broadway. The breach and data contents are unverified; the seller is not named.
A dark-web listing reportedly offers Adumo technical data and source code for $7,000, claiming 15,546 files totaling 14 GB. The alleged data includes payment-terminal code, firmware, EMV materials, and documentation; the compromise is unconfirmed.
A database allegedly belonging to video host turbo[.]cr / saint2[.]su was reportedly listed for sale, with about 110,000 profiles and 1.04 GB of data said to include emails, password hashes, cookies, API keys and profile metadata.
McGraw Hill confirmed unauthorized access to data on a Salesforce-hosted webpage. Have I Been Pwned says ShinyHunters later published over 100GB tied to 13.5 million email addresses; exposed fields included names, addresses and phone numbers.
A report says more than 30,000 Fiverr PDF links hosted on Cloudinary were indexed by Google because the URLs did not expire or require authentication, exposing documents that reportedly included taxpayer information.
Spring Lake Park Schools canceled classes and programs after detecting unauthorized system access and taking systems offline. The district says outside cybersecurity specialists and law enforcement are investigating; email and support tools are affected.
A 16-year-old was arrested and later released as police investigate an attack that took Northern Ireland’s C2K school system offline. The Education Authority says personal data may have been compromised; restoration is underway.
Ransomware attacks disrupted municipal systems in Vilhelmina and Dorotea on April 9, 2026, prompting crisis measures and paper-based work. Dorotea said it paid no ransom; recovery timelines remain uncertain.
More than 30 EssentialPlugin plugins carried a backdoor added after an August 2025 acquisition. Activated code fetched malware that modified wp-config.php and served Googlebot-targeted spam and redirects. WordPress.org disabled the plugins, but existing infections may.
Clinton County, Iowa, says monitoring detected an attempted intrusion early, prompting a network shutdown and incident response. Officials report it was contained; critical systems were tested and restored, with no public attribution.
