Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2264 articles
A listing allegedly offers 3.76 GB of AMETEK Process Instruments files, including technical drawings, manuals, proprietary software, pricing, sales presentations, and training materials. The claim is not independently confirmed in the article.
Nigeria’s Corporate Affairs Commission confirmed unauthorized access to parts of its systems. It says containment measures are in place, while a review continues; the scope and any data exposure remain unknown.
Krybit claims it breached rival ransomware group 0APT and published a defacement page, chat logs, and files said to include server logs, credential and configuration files, cryptographic keys, command history, and PHP scripts. The breach is unverified.
A seller reportedly offered a 150GB Assurea data dump for €20,000, claiming it includes insurance records and internal communications. The alleged exposure has not been independently confirmed.
Kraken says a criminal group is trying to extort it with threats to release videos of internal support systems. The exchange reports two episodes of improper employee access affecting about 2,000 accounts, and says it revoked access and notified users.
Threat actor xNov claims to have leaked 231 SUPTECH SANTE student dossiers and offers 500+ more for sale. The reported records include national IDs, ID-card photos, diplomas, and contact details; the claims are not independently confirmed in the article.
EvilDump, ExtaseHunters, and Breach3d claim they breached France Titres (ANTS) and are offering 18 million citizen records for sale. The article says the data allegedly includes identity, contact, birth, address, and system details.
McGraw-Hill says a Salesforce misconfiguration led to unauthorized access to limited data on a hosted webpage. It says core systems and customer databases were untouched; ShinyHunters claims to hold 45 million records, contradicting the company's account.
A cyberattack encrypted data on Athénée Royal d’Izel’s local network, including its École en ligne platform. The affected computer was isolated, backups are being restored, and the report says no personal data was stolen and classes were unaffected.
Basic-Fit says unauthorized access led to the download of personal and bank account details belonging to about 1 million members across several European countries. The company says no passwords were accessed and it knows of no leak or misuse.
The article reports that Booking.com reset affected customers’ reservation PINs after a breach allegedly exposed profile and itinerary data. It also describes reported phone scams and phishing; the technical cause, scope and independent confirmation are not provided.
Lamashtu claims it breached 11 organizations across seven countries and obtained identity, medical, financial, engineering, legal, email and database data. The claims are not independently confirmed in the article.
A report alleges Ginlong (Solis) was compromised and data from its SolisCloud platform exposed, including plant locations, owner details, alarm logs, inverter information, and operational and efficiency metrics. The article provides no independent verification.
Basic-Fit confirmed unauthorized access to a centralized member-data system and download of personal information. Up to 1 million members may be affected; the company says access was stopped within minutes and the investigation is ongoing.
Guatemala’s health ministry says ransomware encrypted internal National Lab files, later restored, with no evidence sensitive data was accessed. Separately, the Army reported a Digecam website intrusion; claims of stolen data remain disputed.
Basic-Fit reported unauthorized access affecting about 1 million members in six European countries. The company says an investigation found personal and bank details were exfiltrated, but no passwords or ID documents were accessed.
DarkWebInformer reports that actor nxe is offering 70 GB of data allegedly stolen from SEKISUI Aerospace for $200,000. The described package includes Boeing 737 MAX and 787 tooling and engineering files; the article does not independently establish its authenticity.
DarkWebInformer reports that actor lulzintel leaked VegeHome’s PrestaShop database in April 2026, exposing data for over 100,000 customers, including emails, hashed passwords, reset tokens and business records.
Threat actor bytetobreach claims it exfiltrated VUMI Group data over six days, affecting about 300,000 policyholders and 25,000+ staff, partners and agents; alleged records include SSNs, passports and W-9s.
Booking.com confirmed unauthorized access to some reservation records, potentially exposing guest contact details and property communications. It reset reservation PINs and notified users; the number affected is unknown, and reported scams are not confirmed as related.
Rockstar confirmed limited company information was accessed after ShinyHunters claimed to leak more than 78.6 million records, allegedly accessed using tokens stolen in an Anodot incident. Rockstar said players and operations were unaffected.
ShinyHunters claims it accessed Rockstar Games data through Anodot authentication tokens and threatened to leak it unless paid. Rockstar confirmed limited access to non-material company information, said there was no organizational or player impact, and did not specify,
Booking.com says an unauthorized third party may have accessed some guests’ reservation information. The company says accounts were not breached, the issue is contained and reservation PINs were updated; the access method and number affected remain unclear.
OpenAI says its macOS app-signing workflow executed malicious Axios 1.14.1 and could access signing materials. The company believes its certificate was not compromised but is revoking and rotating it as a precaution.
