Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2312 articles
TheGarudaEye claims its DDoS attack on Egypt’s Ministry of Finance portal began March 10, 2026, causing 502 errors and outages. The article reports no data breach; the attack and impacts are not independently confirmed.
NoName057(16) claims DDoS attacks against Cyprus government, transport and utility services. The article reports outages affecting online services, but provides no independent confirmation.
PoliceEspDoxedBF claims to have uploaded Agencia Tributaria employee data, including staff of all ranks and ages. Redacted samples reportedly show structured personal data; the total number of records is unknown, and the claim is unverified.
Threat actor GordonFreeman claims Yummy Rides suffered a data leak exposing about 30,000 driver profile photos named with full names. Screenshots reportedly show hundreds of thumbnails; the claim is unconfirmed.
Ericsson says a service provider experienced unauthorized access to files containing personal data between April 17 and 22, 2025. The breach affected 4,377 Texas residents; Ericsson is offering identity protection.
Lehigh Carbon Community College closed its campuses March 4, shifted classes online and was still restoring systems days later. Officials called it an IT disruption; planned password resets raised suspicion of a cyber incident, but no hack or breach was confirmed.
Community College of Beaver County said it was facing an encryption-based attack and locked down campus technology. Staff were told not to turn on devices; affected systems, possible data access and outage duration remain unknown.
ELECQ says a ransomware attack on its cloud systems encrypted and copied databases containing customer contact details. It has not disclosed how many people were affected or identified the attackers.
An unidentified party reportedly published a database allegedly containing records for 5,000 Rapikom companies and affiliates, including contact details, tax IDs, precise addresses, passwords and business information. The breach is unconfirmed.
A database allegedly belonging to Paraguayan institute CAEFF appeared on a hacking forum, reportedly containing more than 143,000 records with personal details and hashed passwords. The claim is unconfirmed.
A report says an individual actor posted archives allegedly containing over 1.2 GB of Yantai International Cooperation files on a hacker forum, including employee records, contracts and internal documents. The breach claim is unverified in the article.
Handala claims it breached Israeli governmental and military weather stations and Jerusalem security camera networks, alleging server wipes, administrative access to camera feeds, and access to archived footage and network configurations.
Internal reports show ransomware accessed Ontario Medical Supply systems on March 17, 2025, and triggered its payload April 13. An estimated 200,000 patients’ data was affected; OMS said limited, incomplete data was exfiltrated, with no evidence of misuse.
A spokesman for Szczecin’s Independent Public Regional Hospital said criminals encrypted some data, blocking access to it. The hospital switched to paper-based operations, delaying procedures, but said patients’ lives and health were not at risk.
The Centre des monuments nationaux says its online ticketing provider suffered a ransomware attack on March 2. Some customer data may have been exposed, but no exfiltration or fraudulent use has been established; payment data was unaffected.
VFVCT (operator D2VY) claims it posted 557,892 Vivo Brazil customer records for free. The listing reportedly includes emails, phone numbers and plaintext or cracked passwords; the breach and data authenticity are unconfirmed.
TriZetto says unauthorized access to an insurance eligibility portal exposed data linked to 3,433,965 people. The company says it has no reports of misuse, excluded financial data, and is offering identity protection.
Colombia’s DIAN says unauthorized access affected personal data in its appointment system and was linked to an extortion attempt. The agency temporarily disabled the system and says tax data and user credentials remain protected.
DieNet claims it used volumetric DDoS attacks against Qatar’s Ministry of Interior, Government Communications Office and International Media Office, reportedly causing website and portal outages. The article says monitoring found no evidence of data exfiltration.
NoName057(16) claims it targeted the Rosh HaAyin and Umm al-Fahm municipal portals and the Shas website in DDoS attacks under OpIsrael. Group-provided host checks reportedly showed connection failures and timeouts.
The Cardinal group claims it breached IDF systems and disabled air defenses in central Israel, including Iron Dome and RADA Defense components. The article provides no independent confirmation.
Caribbean Medical Center says monitoring systems detected and stopped an intrusion. Its hospital network is operating normally while specialists assess the incident’s scope; the event date was not disclosed.
Unknown actors claim they extracted YggTorrent’s infrastructure and data, including 54,776 user credit-card records. The materials remain unverified; YggTorrent has not commented, and ARCOM is reportedly monitoring the situation.
Passaic County said a malware attack disrupted phone lines and IT systems used by county offices serving nearly 600,000 residents. Officials are working with federal and state partners to investigate and contain it.
