Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2309 articles
Former infrastructure engineer Daniel Rhyne pleaded guilty to an extortion plot involving unauthorized access, account deletions and password resets that affected 254 servers and 3,284 workstations at his employer.
The article reports that a compromised Trivy update exposed an AWS API key used to access European Commission-affiliated accounts. ShinyHunters published 91.7 GB of compressed data; at least 29 other Union entities may be affected.
T-Mobile says a vendor employee improperly accessed information tied to one customer account. The exposed data included personal and account details; the company said no credentials were compromised and reset the account PIN.
Drift Protocol reported losses of at least $280 million after an attacker seized Security Council administrative powers, added a malicious asset and removed withdrawal limits. Elliptic and TRM Labs linked the operation to DPRK tradecraft.
A report citing IntCyberDigest's X post alleges Mr. Raccoon accessed Adobe systems through an Indian BPO and exported 13 million support tickets, 15,000 employee records, HackerOne submissions and internal documents; Adobe confirmation is not provided.
Drift confirmed $280 million was withdrawn after attackers took over security council administrative powers and executed pre-signed transactions. Elliptic and other researchers linked the attack to DPRK actors; Drift is investigating.
Belgian coffee-services company Fountain disclosed a ransomware-type cybersecurity incident involving unauthorized access to part of its IT environment and data extraction. It is investigating the scope; operations were not significantly disrupted.
Drift Protocol says an attacker used durable nonce accounts and pre-signed transactions to seize Security Council control and drain funds. Drift estimates losses at $280 million; PeckShield estimates $285 million. Operations are largely frozen as recovery efforts begin.
Stryker says global manufacturing is operational three weeks after a March 11 attack. Handala claimed stealing about 50 TB before nearly 80,000 devices were wiped; investigators found a concealment file, while CISA and Microsoft issued hardening guidance.
A report alleges that a database dump tied to Universidad del Cauca contains 3,754 records, including personal, academic, and administrative data. It says the data was reportedly extracted from the Ministry of National Education’s SNIES/HECAA portal; the breach is un un
A threat actor claims to have accessed Xtium’s Veeam backups for about eight months and taken roughly 485.8TB of data, including client VM backups and Synology ShareSync files. The alleged breach and data theft are unconfirmed.
An unverified report says an unknown party leaked an archive of Nurture Life’s internal database, reportedly exposing customer and children’s names, emails, birth dates, dietary restrictions, and subscription and delivery details.
A dataset reportedly offered for sale on a cybercrime forum allegedly contains about 11GB of PaidWork user data, including personal, hashed-password and financial information, affecting approximately 22 million users.
WhatsApp says about 200 users, mostly in Italy, installed a fake iPhone app infected with spyware it attributes to SIO subsidiary ASIGINT. The company logged out affected users and urged them to install the official app.
SlowMist reported that a compromised Apifox CDN script ran automatically in the Electron desktop client, stealing credentials and system data and enabling remote code execution. The reported exposure window was March 4–22, 2026.
FulcrumSec's report says an unpatched internet-facing host vulnerable to CVE-2025-55182 exposed ECS credentials, 57 S3 buckets and Secrets Manager across three firms, including data on about 23,000 policyholders and proprietary ML assets.
DarkWebInformer reports that xNov leaked Smarteez’s production database for L’Oréal Morocco, allegedly exposing data on 296 pharmacies, 361,000+ sales records, OAuth client secrets, user-account hashes and competitive intelligence.
Everest claims it stole 910 GB from a file-transfer system at a vendor serving Nissan and Infiniti dealerships. Nissan says its investigation found no evidence its systems or customer information were compromised; Everest threatened to publish the data.
Drift Protocol confirmed an active attack and suspended deposits and withdrawals. Security firms estimated losses from about $130 million to over $285 million; the attacker was reportedly converting funds as responders worked to contain the incident.
Hasbro reported unauthorized network access detected March 28 and said some systems were taken offline, disrupting processes. It is investigating the impact, including whether files were compromised, while business continuity measures remain in place.
FulcrumSec claims it breached a shared AWS environment managed by Unique Computing, exposing personal data and corporate assets belonging to six named organizations. The article provides no independent confirmation.
A seller reportedly listed a 381 GB MongoDB dump allegedly belonging to Vantage Media AI for $15,000, claiming it contains data from a March 27, 2026 breach, including over 628 million email addresses and 51 million phone numbers.
Minot officials said ransomware hit a water treatment plant server on March 14, forcing about 16 hours of manual operations. They said water remained safe; responsibility and whether data was accessed have not been publicly established.
A database allegedly taken from Afghan agricultural platform AVC-Livestock, reportedly containing data on about 284,000 users including Tazkira numbers, is offered for sale for $300; the breach is unverified.
