Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2310 articles
Handala Hack Team claims it breached Hebrew University of Jerusalem, wiped 48 TB of infrastructure data and exfiltrated 23 TB of records; the article provides no independent confirmation.
Handala Hack claims it stole emails from Sima Shine and Laura Gilinski, released INSS financial and personnel data, and wiped 12 petabytes across 200,000 Stryker systems. The article provides no independent confirmation.
Poland’s National Centre for Nuclear Research says hackers targeted its IT infrastructure, but the attempt was thwarted without compromising systems or disrupting operations. Officials say Iran is an early lead, but evidence may have been planted.
Costa Rica attributed a breach of ICE administrative email systems to UNC2814, reporting that about 9 GB of internal email data was extracted. ICE said services were unaffected and sensitive customer data was not compromised; China denied involvement and requested proof
Loblaw said a criminal third party accessed customer names, email addresses, and phone numbers. The company said passwords, health information, credit card data, and PC Financial were not affected; the number of impacted customers is unknown.
AppsFlyer confirmed a domain registrar incident temporarily exposed some customer websites using its Web SDK to unauthorized JavaScript that could replace cryptocurrency wallet addresses. The scope remains under investigation.
DeKalb County officials said ransomware hit the Sheriff’s Department and Jail’s main server, disrupting booking software. Booking data was recovered with the vendor; the FBI and TBI are assisting with the investigation.
CryptoDead allegedly published a 100 GB archive claimed to contain personal and academic records for more than 30 million Colombians from ICFES. The article reports the leak is unverified.
HexDex claims to be selling data from French mental health platform Therapeutes, allegedly including 71,502 patient records and 199,697 appointments. The seller reportedly provided samples; the data's authenticity is unverified.
Poland’s NCBJ says it detected and blocked an attack on its IT infrastructure before systems were compromised. The MARIA reactor was unaffected; an investigation is underway, while possible Iranian involvement remains unconfirmed.
Starbucks says attackers used credentials obtained through phishing sites mimicking Partner Central to access employee accounts. Nearly 900 employees may have had personal and financial information accessed; affected employees are offered identity protection.
An unnamed actor claims a database of 813,866 Medoucine users is for sale on a cybercrime forum, including hundreds of thousands of email addresses and phone numbers. The alleged breach is not confirmed in the supplied content.
Telus Digital confirmed a security incident after ShinyHunters claimed it accessed systems using credentials from a prior third-party theft and exfiltrated nearly 1 petabyte of data. The group is demanding $65 million.
Starbucks says attackers used credentials obtained through websites impersonating Partner Central to access 889 employee accounts. Exposed information included Social Security and bank details; the company notified law enforcement and is offering identity protection.
A database dump allegedly containing records for more than 450,000 Oticket users was posted to a cybercrime forum. A leaked sample reportedly includes contact details, CPF numbers, birth dates, locations, and account metadata.
Loblaw says a criminal third party accessed customer names, phone numbers, and email addresses through a contained part of its network. The company reports no evidence that financial, health, or password data was accessed.
The company said a cyberattack detected on March 13 caused downtime in certain information systems. It is restoring affected systems in phases and currently assesses no material financial, business or operational impact.
Huntress says an attacker accessed a small U.S. manufacturer through its VPN, stole credentials, and tried to disable security tools. Its SOC isolated the network; the company was brought back online after response steps including enabling 2FA.
Threat actor Dreamer8000 claims to have breached Austrian trailer manufacturer HB Brantner and exfiltrated customer data, emails, NDAs, vehicle documentation, and confidential technical files. The claim was posted on a forum and linked to a leak blog.
ByteToBreach claims it obtained Sweden’s e-government platform source code from compromised CGI Sverige infrastructure. The listing reportedly includes staff data and credentials; the actor is also said to be selling citizen PII and electronic signing documents.
Telus Digital confirmed unauthorized access to a limited number of systems and is investigating. ShinyHunters claims it stole nearly 1 PB using credentials from the Salesloft Drift breach; the scale and affected customers remain unconfirmed.
Stryker told the SEC that recovery from a global cyber incident disrupting its Microsoft environment remains undated. About 5,500 employees were locked out; Handala claimed responsibility, while Intune abuse remains suspected.
An unidentified actor allegedly exploited a Local File Inclusion flaw in Solr to access Viking Line databases. The reported data includes traveler details, payment records, vehicle registrations, and internal account information; the claims are unconfirmed.
An unidentified actor claims it breached Indian fintech company Cgpey International on February 3, 2026, exfiltrating about 26 GB of internal databases containing roughly 3.85 million records, primarily merchant payment-processing logs. The claim is unconfirmed.
