Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2309 articles
An anonymous seller is offering a dataset allegedly taken from Clickrent[.]es, claiming about 2.5 million records and over 100GB of KYC files, customer data and internal documents. The breach and contents remain unverified.
The European Commission says early findings suggest data was taken from websites hosted on Europa.eu cloud infrastructure. It contained the intrusion, kept the sites online and says internal administrative systems were unaffected.
The European Commission says a cyberattack affected cloud infrastructure hosting its public web presence. It is investigating data taken from the sites; ShinyHunters separately claimed theft of more than 350GB. The Commission says internal systems were unaffected.
Cota Co., Ltd. reported an IT system outage on March 27, 2026, attributed to a cyberattack. The company is investigating possible data theft with external experts and working to restore systems.
The article says Handala claimed to compromise FBI Director Kash Patel’s personal Gmail and published photos, resumes and other files dated mainly 2010–2019. It reports that the FBI is investigating and the State Department offered a $10 million reward.
Bellflower Unified reported anomalous network activity and phone and internet disruptions in August 2025. The district restored services and said it had no indication sensitive data was accessed; a later Rhysida claim remains unconfirmed.
The FBI confirmed Kash Patel’s personal email account was compromised and said the published information was historical and contained no government data. Handala claimed responsibility and published photos, documents, and correspondence.
Stats SA confirmed a breach affecting its online job-seeker HR system. XP95 is believed to be behind the attack and claims it stole 453,362 files; the group demands $100,000 to prevent their release.
The company reported that ransomware attacked its IT system on March 29, 2026. It said it began defensive and recovery actions immediately and reported no significant impact at the time.
Colebrook officials said a hacked town email led New Hampshire to suspend some system connections, disrupting municipal services. Vital records and election access were restored, while DMV and dispatch connections remained pending; data access has not been confirmed.
The Justice Department confirmed Kash Patel’s personal email was breached and said documents appeared authentic. Handala published alleged photos and emails; the FBI said the material was historical, contained no government information, and steps were taken to mitigate
A ransomware attack disrupted the Jackson County Sheriff’s Office network, forcing dispatchers to work from Seymour Police Department and officers to use Word reports. Officials are rebuilding systems; data recovery and any theft remain unclear.
The European Commission is investigating reported access to at least one AWS account. A threat actor claims to have stolen over 350 GB of data; AWS says its services operated as designed.
The FBI confirmed that a personal email account belonging to Director Kash Patel was hacked and said the compromised information was old. Pro-Iranian group Handala claimed credit and said it was offering emails and other documents for download.
A report alleges that Centauro customer data was extracted and advertised for sale, potentially affecting 4.3 million records with contact details, driver’s license numbers, tax IDs and other personal information.
A threat actor claims to have obtained more than 30,000 Banco Nubank Colombia customer records from a debt collection database managed by third-party collectors and is offering the data for $200. The claim is unverified.
The European Commission is investigating reported unauthorized access to an Amazon cloud account used for its infrastructure. A threat actor claims to have stolen over 350 GB and shared screenshots; the theft and any link to Ivanti vulnerabilities remain unconfirmed.
Goodwill of Greater Grand Rapids says a recent cyberattack disrupted part of its network. Its 18 stores are operating cash-only while the organization rebuilds its point-of-sale system and investigates with law enforcement.
The Dutch police say their SOC quickly blocked access after a phishing attack. The impact remains under investigation; officials say citizen and investigative data were not exposed, while affected systems and any employee-data exposure remain unclear.
ShinyHunters claims it leaked BreachForums v5’s database and historic backups, reportedly containing private messages, email addresses, IP addresses and posts. The group also alleges it has exploits for all MyBB 1.8 versions.
DarkWebInformer reports that actor 0BITS posted a partial dataset allegedly taken from Rouzbeh Educational Complex, claiming 202,383 records from a June 2023 breach. Reported fields include IDs, photos, contact details, usernames and passwords.
Die Linke says indicators point to a Qilin ransomware attack on its infrastructure. The party took systems offline as a precaution and filed a criminal complaint; it has not determined whether internal data was compromised, and says its membership file was unaffected.
Omax Autos said a ransomware attack was detected on March 26 and disclosed to exchanges on March 27. The company says core systems and manufacturing remain unaffected while it investigates the incident's scope and possible data loss.
AFC Ajax said a hacker accessed email addresses belonging to a few hundred people and personal details for fewer than 20 people with stadium bans. RTL verified flaws that also enabled ticket transfers and changes to records; Ajax says it patched them.
