Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2309 articles
Reports allege attackers accessed Crunchyroll through a third-party vendor and exfiltrated nearly 100GB of user data. Crunchyroll says it is investigating; the breach’s scope and claims remain unconfirmed.
Stryker says investigators identified a non-spreading malicious file used to run commands and hide activity during the attack. The incident disrupted order processing, manufacturing and shipping; the company reports progress restoring systems.
A threat actor claims access to an OVHcloud parent account and associated servers, and is offering data reportedly covering 1.6 million OVH Fresh customers and 5.9 million hosted websites. The claim is unverified.
An unnamed actor claims to have compromised three publicly accessible ESXi hosts at Defion Security, escalated privileges, and taken company and partner data, including Splunk records and executive emails, now offered for sale. The claims are unverified.
Attackers claim they accessed OVHcloud’s parent account and took 1.6 million customer records and telemetry for 5.9 million domains. OVHcloud has not publicly confirmed the breach, and the leaked sample remains unverified.
NyxarGroup is advertising a dataset allegedly taken from Chile’s Ley del Lobby platform, claiming it contains lobbying records and personal information spanning 2018–2026. The listing is priced at $2,000; the breach is unconfirmed.
Threat actor HexDex claims to sell Airsoft-Entrepot databases covering 2013–2026, including customer, order, invoice, supplier, and B2B records. Reported samples list 383K customer profiles; the claims are unverified.
NyxarGroup allegedly published 110,000 records from Chile’s Servicio Civil training platform, including public servants’ full names and internal user IDs. The article says the dataset was offered as a free download; the breach is not independently verified.
HexDex claims to be selling a dataset with 453,299 Allopneus customer profiles and 739,316 records from 2014–2026. The seller shared proof links and a sample; the data's authenticity and contents are unverified.
xpl0itts claims an ongoing BMW-related breach has expanded through collaborations with DarkRomance and teamPCP, involving employee and customer data, VINs and technical information, plus data allegedly tied to 36 other automakers.
Mazda reported unauthorized access to a warehouse management system and potential exposure of 692 employee and partner records, but no customer data. It tightened security controls and launched an investigation; Clop later claimed Mazda-related domains.
Resolv says a compromised private key enabled an attacker to mint about $80 million in uncollateralized USR and exchange it for roughly 11,408 ETH ($24.5 million), depegging USR. The platform paused its app and enabled verified-user redemptions.
The Dutch Ministry of Finance detected unauthorized access to policy-department systems on March 19 and blocked access on March 23. The intrusion’s scope is unknown; public services were reportedly unaffected.
The company reported that an unidentified external party accessed data on its third-party cloud platform and confirmed some data leakage. It says core systems and customer privacy were not affected, and it strengthened access controls.
The Port of Vigo reported a ransomware attack that disrupted cargo-management servers and online services. Physical port operations continued, while some users switched to paper procedures; no restoration date was available as forensic analysis began.
Crunchyroll is investigating an attacker’s claim that credentials from a Telus International support agent’s Okta account enabled access to its apps and theft of 8 million support tickets containing about 6.8 million unique email addresses.
Kaplan reported that hackers accessed its servers from October 30 to November 18, 2025, and took files containing personal data. State disclosures add up to 230,941 affected people; no group has claimed responsibility.
Reports say TeamPCP accessed Aqua Security’s GitHub organization, tampered with repositories, and pushed Trivy Docker tags 0.69.5 and 0.69.6 containing infostealer indicators. Aqua rotated secrets, released safe versions, and engaged incident responders.
An unidentified seller claims to offer 10.9 million Rogers Communications and Fido customer records for $300,000. The allegedly exposed information includes account details, billing addresses, home phone numbers, and language preferences.
LAPSUS$ claims it accessed AstraZeneca systems and is offering an alleged 3GB data dump for sale. The group says it includes source code, cloud configurations, credentials and supply-chain data; the article provides no independent confirmation.
Trio-Tech said ransomware encrypted files on its Singapore subsidiary’s network on March 11. The company says attackers published some stolen data; the investigation continues, and the full scope remains unknown.
A threat actor is reportedly offering 250GB of data allegedly taken from Chile’s Ley Lobby portal for $2,000. The data reportedly includes hearing schedules and personal information; the breach is unconfirmed.
A threat actor alleges that Caieiras, Brazil’s municipal government, was breached and offers data for sale, claiming 363,519 records and 90 files were taken, including personal, medical, contact and geolocation data.
OpenSourceMalware reports that TeamPCP defaced 44 repositories in Aqua Security’s internal GitHub organization, allegedly using a stolen service-account token. The repositories were renamed and made public; the token may also access another Aqua organization.
