Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2265 articles
A seller claims to offer more than 80,000 Global Talent Exchange candidate and user records for $300, allegedly including contact details, employment histories, skills, locations and account information. The breach is unconfirmed.
Chevin took FleetWave environments in the UK and US offline as a precaution during a security investigation, causing a major outage. The company has not disclosed whether attackers accessed customer data; a customer said some EU and Australian services remained online.
Bitcoin Depot says an unauthorized party accessed corporate IT systems, stole settlement-account credentials and transferred about 50.903 BTC ($3.665 million) from company wallets. The company believes the incident was contained and customer platforms were unaffected.
Eurail says attackers accessed its customer database in December 2025 and transferred files containing personal information of 308,777 people, including passport details, IBANs, health information and contact details.
Bitcoin Depot disclosed that attackers used compromised credentials for digital-asset settlement accounts to transfer 50.903 BTC (about $3.665 million) from company-controlled wallets. It reports no evidence of customer-system impact; the investigation continues.
A reported cyberattack detected April 6 disrupted systems at Signature Healthcare and Brockton Hospital, prompting ambulance diversions and delays. Chemotherapy was briefly canceled and gradually resumed; the cause and full scope remain undisclosed.
Eurail's US breach notifications say 308,777 people were affected and names and passport numbers were stolen. The company confirmed a hacker offered data and posted a sample; the hacker's claim of stealing 1.3 TB remains attributed.
A code change in Apache HTTP Server exposed environment variables, including a GitHub token and personal data. The developer attributed the leak to human error; the token was revoked, and GitHub detection and auto-invalidation reduced the exposure window.
Bitcoin Depot says an attacker used credentials for digital-asset settlement accounts to transfer about 50.903 bitcoin, valued at roughly $3.6 million. The company says the intrusion was contained to its corporate environment; investigation continues.
Anderlues’ mayor says a cyberattack forced municipal services offline, also affecting the CPAS. Staff isolated IT systems and are restoring access from Tuesday’s backups; the attack’s entry point is known but was not disclosed.
Hackers accessed a third-party discovery-transfer tool used by the Los Angeles City Attorney’s Office for LAPD civil-litigation files; LAPD says its systems were not breached. The LA Times reported that 7.7 TB and 337,000+ files may have been accessed.
Eurail reported unauthorized network access on Dec. 26, 2025, exposing names and passport numbers of about 308,777 U.S. individuals. Earlier dark-web and Telegram reports described additional data, while the full scope remains under investigation.
A threat actor identified as s1ic3r reportedly leaked 175 MB of documents and intellectual property allegedly taken from Shanghai Fudan Microelectronics Group. The material reportedly includes IC schematics and VLSI designs; the breach is unverified.
NYK says a third party accessed its marine fuel procurement system on March 24, 2026. Employee and business-partner personal information may have been taken; the system was restored March 27, and no encryption or financial demands were found.
A Huntress engineer clicked a sponsored search result for Claude Code and ran malware that targeted his macOS keychain credentials. Huntress detected it, rotated credentials and found no sign attackers had used them.
Colombia’s Foreign Ministry suspended passport and online apostille services after disruptions to its SITAC platform. The ministry said it identified a cyber threat actor on part of its infrastructure; the cause, duration and impact on appointments remain unclear.
Eurail reported that hackers copied data affecting 308,777 people, including names and passport numbers. A hacker separately claimed 1.3 TB of files were taken; DiscoverEU said participants’ additional personal data was likely exposed.
Signature Healthcare says suspicious network activity affected some information systems. The hospital is investigating and using downtime procedures; ambulance traffic is diverted, and chemotherapy infusions are canceled for April 7.
The Handala Hack Team claims it targeted Vered Haimovich through a hotel-based hardware swap in Uzbekistan and stole emails, UAV data, Elbit Systems reports, and personal files. The claims are unverified.
A dark web forum posting claims data for more than 38,360 people tied to Benito Juárez municipal business registrations was exposed, including RFC tax IDs, contact details, addresses, and business-license information. The claim is unconfirmed.
A dark web forum user reportedly posted a download link to databases allegedly belonging to Centro de Estudios Clínicos Anáhuac Mayab, including patient, appointment and inventory records. The claim is unverified.
Signature Healthcare reported suspicious activity in part of its network, prompting downtime procedures and ambulance diversions. Some services were disrupted; the organization has not confirmed ransomware, and the attackers’ motives are unclear.
A cyberattack that began Monday and continued into Tuesday disrupted Winona County’s critical systems and services. Gov. Tim Walz authorized National Guard assistance as state, federal and external experts coordinate the response.
Z-CERT confirmed a ransomware attack on Dutch healthcare software vendor ChipSoft, whose website and some services went offline. Most hospitals retained patient portals, while 11 took ChipSoft systems offline; the attacker is unknown.
