Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2264 articles
An unnamed threat actor reportedly offered access to Bangladesh's Hydrological Information Management System (HIMS) and data for $100, claiming exposure of flood, water, dam, and irrigation information. The allegation is unverified.
A report says a January 2026 backup of Pakistani food delivery platform Foodpapa[.]pk was uploaded to a dark web forum, allegedly exposing 239,109 customer, driver, and administrator accounts and personal and authentication data.
Anthony officials report missing records, inaccessible systems, wiped devices and emails forwarded externally after an administrative transition. Authorities are reviewing the matter; no external hack, malware, ransomware or data theft has been confirmed.
Basic-Fit says an intrusion led to the download of personal and membership data for about 1 million members in six European countries. The company says it stopped the intrusion within minutes; passwords and identity documents were not accessed, and no misuse had beenพบ.
A compromised CPUID side API reportedly served trojanized hardware utilities. Kaspersky identified over 150 victims; malicious installers used DLL sideloading to deliver STX RAT, which can steal credentials and other information.
A reported ransomware incident at Dutch software vendor ChipSoft led 11 hospitals to disconnect its systems. Z-CERT is coordinating support; no critical care stoppages or indications of patient-data leakage were reported.
Rockstar says corporate information taken from a compromised Snowflake instance was “non-substantial” and operations were unaffected. The article attributes the breach to ShinyHunters; publication of the data could expose spending and future launch plans.
Unknown actors compromised CPUID’s site April 9–10, redirecting CPU-Z and HWMonitor downloads to trojanized installers that used CRYPTBASE.dll side-loading to deploy STX RAT. Kaspersky identified over 150 victims; CPUID said its signed original files were unaffected.
Straumann says a cyberattack affected a legacy system used for internal controls; related internal documents were exposed based on current findings. The company says operations and other systems were unaffected as response measures continue.
Rockstar confirmed limited access to non-material company information and said there was no impact on the company or players. ShinyHunters claimed access via Snowflake and threatened to leak data, but the data it may hold is unspecified.
Drift says a months-long social-engineering operation using fabricated trading-firm identities culminated in an April 1 theft of more than $280 million. Investigators linked it to UNC4736; malicious TestFlight and code-repository vectors remain possible.
A cybercrime-forum post reportedly claims Carwah was breached, exposing 26,078 customer profiles and 6,824 driver’s licenses with personal details, national ID numbers, and images. The breach remains alleged.
A report says SnowSoul ID-1265 posted a 412.24 MB archive allegedly containing Guangdong Caiding Market Group files after the company reportedly refused a $2,000 extortion demand. The archive’s authenticity is unverified.
CPUID says attackers compromised a side API for about six hours on April 9–10, altering download links for CPU-Z and HWMonitor to serve a trojanized HWiNFO installer. The company says its signed binaries were intact and the issue is fixed.
An unidentified actor is advertising nearly 100,000 records allegedly taken from Spanish training organization Grupo2000 for $150, including names, phone numbers, email addresses, ZIP codes and tax IDs.
CPUID says its website was compromised for about six hours on April 9–10, redirecting software update requests to a trojanized installer. The in-memory info-stealer targeted browser credentials, passwords and crypto wallets; CPUID says it fixed the vulnerability.
Ficha was allegedly compromised, with corporate GitHub repositories reportedly leaked. The claimed exposure includes proprietary SDKs, ADAS and DMS technology, and customer-specific code for Bosch, Clarion, JVC, and Toyota.
Nextend and Patchstack reported that attackers used a compromised update system to distribute Smart Slider 3 Pro v3.5.1.35, which enabled remote access, persistence and credential exfiltration. Nextend removed it and advised cleanup and an upgrade.
Waste processor Saver says a cyberattack occurred around 03:00 on April 9. Some systems and data are inaccessible; waste collection is continuing, while the company investigates with a security firm.
Dutch healthcare IT provider ChipSoft took its website and digital health services offline after a ransomware incident. Z-CERT is assessing the impact, while hospitals reported outages in patient-facing systems.
A database reportedly offered for sale on a dark web forum allegedly contains 30 million Inigo App rows, including over 1 million unique email addresses and other personal data. The claim is unverified.
An unverified report says Infodesk’s employee database was allegedly exposed in February 2026 and listed for sale, containing names and email addresses associated with clients including Moderna, Johnson & Johnson, Bayer and Merck.
An anonymous cybercrime-forum user reportedly posted data allegedly taken from NNPC HMO, affecting about 200,000 users, and demanded $300,000 by April 30, 2026. The data reportedly includes identity, contact and insurance details.
An anonymous dark web forum user claimed an archive contained GWF Group’s database, including client details, meter and radio information, and geolocation data. The claim is unverified.
