Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2310 articles
Regulatory filings say a breach at Marquis Software exposed data belonging to 672,075 people. Investigators found files were copied; broader estimates put the number affected at 788,000 to 1.35 million. A possible ransom payment is unconfirmed.
Handala Hack Team claims it doxxed Vahid Online and leaked identity details and a database of 180,000 channel members’ mobile numbers. The article provides no independent confirmation of the alleged disclosure.
Bitrefill says hackers it linked to North Korea’s Lazarus Group accessed about 18,500 purchase records after a compromised employee laptop exposed a legacy credential; some crypto wallets were drained. Services were restored March 5.
Hanover County Public Schools restored internet service after a disruption that affected its network and systems. The investigation continues; the district has not confirmed whether student information was improperly accessed.
Belhaven University suspended access to parts of its internal network on March 6 after identifying a cybersecurity incident. Some services remain unavailable as recovery continues; online classes are set to resume March 19.
A reported cyberattack has kept Intoxalock’s servers offline since March 14, disrupting ignition-interlock recalibrations. The company says devices remain functional and is offering many customers a 10-day extension and support for towing costs.
Huntress says a fake macOS Protection Service prompt led an employee to run MacSync, which collected sensitive data and prepared it for exfiltration. Huntress isolated the Mac before the upload, according to the company.
Attackers used information exposed by unauthenticated Spring Boot Actuator endpoints and credentials stored in a spreadsheet to authenticate via ROPC without MFA, access SharePoint Online, and exfiltrate data.
The Justice Department charged Kwamaine Jerell Ford over alleged phishing and takeover of athletes’ Apple accounts, which prosecutors say enabled more than 2,000 transactions. He pleaded not guilty; the allegations also include coercion and unauthorized recordings.
A dataset reportedly linked to Russell Cellular is being offered for $1,200 on a hacker forum. The article alleges it contains over 6.3 million customer records and employee credentials, including plaintext passwords; the claims are unconfirmed.
An unauthorized party allegedly claims to sell a database of over 42,000 Giveth users, reportedly containing personal details, wallet addresses, donation metrics, passport scores and transaction records. The article provides no independent confirmation.
An unidentified individual reportedly offered a database claimed to contain 47 million Koiride[.]com records for $1,000. The unverified listing allegedly includes driver and passenger data, reservation details, Payoneer payout information and hashed passwords.
Rostova Organization and Vect claim they breached Usha International, alleging it refused a $10,000 extortion demand. The actors say data offered for sale includes employee identity, financial, employment and Active Directory details; the claims are unverified.
A threat actor reportedly listed 1.1 million records attributed to Colombian healthcare provider Coopsana for $350. The unverified dataset allegedly includes personal information and medical appointment histories, purportedly sourced from coopsana[.]com[.]co.
A federal indictment alleges Kwamaine Jerell Ford impersonated an adult-film star and Apple support to steal NBA and NFL players’ Apple credentials and payment information. He pleaded not guilty; the FBI is investigating.
Handala Hack claims it breached Ilan Steiner’s email systems and confidential files. The group alleges the data includes 50,000 emails and documents about covert research, clandestine projects, financial sponsors and media operations.
A threat actor reportedly posted a database allegedly stolen from HumanizerPro.AI, claiming it contains records for over 65,000 users, including email addresses, billing details, API keys, and subscription data. The breach is unconfirmed.
Darktrace reports that World Leaks attackers spent about three months inside a healthcare organization’s network, exfiltrated data to cloud storage, and encrypted files—contradicting the group’s reported shift to extortion without encryption.
Perm’s automated parking-payment system was restored after officials said a large-scale DDoS attack disrupted it, suspending payments March 10–13. Drivers will not be penalized; no group claimed responsibility.
Stryker says ordering, shipping, and support systems remain offline after a cyberattack reportedly wiped company devices through Microsoft Intune. The company says its connected medical products are safe; Handala claimed responsibility, but attribution is unconfirmed.
Companies House restored WebFiling after fixing a flaw introduced in October 2025. Logged-in users could reach other companies’ dashboards; some non-public data may have been visible. The agency says it has no reports of unauthorized access or changes, and its inquiry …
A cyberattack on Stryker’s internal Microsoft environment remotely wiped nearly 80,000 devices via Intune after an administrator account was compromised. Handala claimed the attack; investigators found no evidence of data exfiltration, and ordering systems remained down
Cl0p listed Broadcom, Bechtel, Estée Lauder and Abbott as alleged Oracle EBS campaign victims; none had publicly commented. SecurityWeek's metadata and file-tree review found some leaked files originated from Oracle EBS, but it did not download the data.
NoName057(16) claims it launched DDoS attacks against Israeli councils, cities and political parties, alleging 502 errors, ping timeouts and geographic access restrictions. The article provides no independent confirmation.
