Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2306 articles
Signature Healthcare says suspicious network activity affected some information systems. The hospital is investigating and using downtime procedures; ambulance traffic is diverted, and chemotherapy infusions are canceled for April 7.
The Handala Hack Team claims it targeted Vered Haimovich through a hotel-based hardware swap in Uzbekistan and stole emails, UAV data, Elbit Systems reports, and personal files. The claims are unverified.
A dark web forum posting claims data for more than 38,360 people tied to Benito Juárez municipal business registrations was exposed, including RFC tax IDs, contact details, addresses, and business-license information. The claim is unconfirmed.
A dark web forum user reportedly posted a download link to databases allegedly belonging to Centro de Estudios Clínicos Anáhuac Mayab, including patient, appointment and inventory records. The claim is unverified.
Signature Healthcare reported suspicious activity in part of its network, prompting downtime procedures and ambulance diversions. Some services were disrupted; the organization has not confirmed ransomware, and the attackers’ motives are unclear.
A cyberattack that began Monday and continued into Tuesday disrupted Winona County’s critical systems and services. Gov. Tim Walz authorized National Guard assistance as state, federal and external experts coordinate the response.
Z-CERT confirmed a ransomware attack on Dutch healthcare software vendor ChipSoft, whose website and some services went offline. Most hospitals retained patient portals, while 11 took ChipSoft systems offline; the attacker is unknown.
A cyberattack that began April 6 disrupted Winona County systems and slowed some services. Minnesota authorized National Guard support; 911 and fire response remain operational as officials investigate and restore systems.
An unidentified seller reportedly offered data allegedly taken from Service Telecom for $2,200, including 2,835,372 user records, corporate email backups and about 16GB of source code. The claims are unconfirmed.
A listing attributed to Florence, linked to the Nightmare group, claims to offer root RCE and shell access to a Linux firewall protecting Botswana’s Government Health Portal for $300. The claim is not independently verified.
A cyber incident at Signature Healthcare and Brockton Hospital disrupted information systems, prompting ambulance diversions and canceled chemotherapy infusions. Emergency services and scheduled surgeries continued as the hospital investigated; no group claimed the act.
Eleven hospitals reportedly took portals offline as a precaution after an attack on ChipSoft. Ransomware was reported but not confirmed by the company, which says patient data may have been accessed or stolen.
Sumitomo Metal Mining says unauthorized third-party access led to two servers being encrypted at its Coral Bay Nickel subsidiary. Production remains unaffected as the company investigates and restores systems.
Minnesota authorized National Guard cyber protection support for Winona County after an attack reportedly impaired vital emergency and municipal services from Monday into Tuesday, April 7.
A SaaS integrator breach exposed tokens used in attacks on more than a dozen companies, mostly Snowflake customers. Snowflake locked potentially affected accounts; ShinyHunters claims data theft and extortion, while Anodot’s role remains alleged.
A report alleges that 2.7 million AlumnForce user records spanning 1987–2026 are being sold. The data reportedly covers 49 institutions and includes personal, education and employment details; the article provides no independent confirmation.
KyunCall was reportedly breached, with more than 250GB of user data allegedly exposed, including passwords, contact and profile details, location and device metadata, and account activity. The article provides no independent confirmation.
A report alleges a 2.1 GB database of MyLovely[.]AI user records, dated April 2026, was posted on a dark web forum. The claimed data includes generated content, prompts, profile details and subscription information.
The article reports that a lead Axios maintainer was tricked into installing a Remote Access Trojan after attackers impersonated a company founder using AI-generated likenesses, webpages, and profiles.
The company says hackers attacked its information systems on April 7, 2026. It reports activating defenses, investigating, and finding no leaked information or significant operational impact at the time of its disclosure.
A threat actor using the handle hackboy claims to sell 10,152,989 records allegedly taken from Kbank_Vietnam_Core in February 2026, including national IDs, contact details, salaries, employer information, and CIC credit scores.
An unnamed threat actor allegedly posted Deminima clinic patient records publicly after an extortion attempt. The records reportedly included contact details, JMBG numbers, dates of birth, and sensitive medical diagnoses; the claims are unverified.
A reported cyberattack disrupted the Patriot Regional Emergency Communications Center and took non-emergency and business lines offline. Officials say 911 remains operational as they work to restore systems using mutual aid and CodeRED alerts.
A $285 million exploit drained over half of Drift Protocol’s roughly $550 million in Solana assets on April 1. Investigators linked the six-month operation to DPRK-linked UNC4736; Drift froze protocol functions and coordinated recovery efforts.
