Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2313 articles
The Middlesex-London Health Unit took some systems offline after discovering a cyber incident, disrupting phone lines and software. It reported the incident to Ontario authorities and said an investigation is underway; any access to client information is unclear.
The Warren County Sheriff’s Office says cybercriminals accessed its network and copied and removed data, affecting employees and family members. Exposed information may include Social Security and driver’s license numbers; the investigation continues.
A threat actor reportedly claims that more than six million Krece records were exposed, including personal, financial, device and internal API data. The article does not independently confirm the alleged breach.
Handala Hack Team claims it maintained long-term access to the Israel Institute for National Security Studies’ network and communications and accessed sensitive documents, correspondence, meeting recordings, and bulletins. The claims are unverified.
A cyberattack on Peak Software Systems disrupted its Sportsman recreation platform, affecting signups, rentals and some payments in several cities. A city notice said attackers encrypted company infrastructure; review of other customer data was ongoing.
A cybercrime forum post reportedly advertised data linked to Gecko Custom: 668,000 order rows and 572,000 customer rows, including contact, address, and transaction details. The alleged exposure is unconfirmed.
A cybercrime-forum seller is offering a database allegedly taken from HungerRush, purportedly containing records on more than 28 million customers and restaurant businesses. The breach and data claims are unverified.
Preliminary checks indicate a cyberattack on Battipaglia’s municipal systems erased about nine years of police administrative-penalty records. The municipality is rebuilding them from paper archives and says it will not pay the alleged Medusa attackers.
Dormant JavaScript code activated during a Wikimedia security review spread through editor scripts and vandalized Meta-Wiki. Editing was temporarily disabled; the Foundation said the code was active for 23 minutes and no personal information breach was evident.
Passaic County officials said a malware attack was affecting county IT systems and phone lines. They were working with state and federal officials to investigate and contain the issue; the targeted systems and cause were unclear.
Threat actor Eternal claims to have released over 790GB of data from Servicios de Agua y Drenaje de Monterrey, reportedly including names, addresses, water-use records and RFC tax IDs. The actor warned of further government data releases.
A Mexican three-person development team reportedly had its exposed Gemini API key abused, driving an $82,000 bill in 48 hours versus a typical $180 monthly cost. Google reportedly declined to cancel the charge; the article says Cloud lacks hard spending caps.
A seller claims an unpatched vulnerability in DIAN’s Cielingenieria-developed appointment platform enabled access to a 16GB SQLite database containing 18 million Colombian records, offered for $2,000. The claim is unverified.
LexisNexis confirmed attackers accessed some servers and compromised customer and business information, mostly from before 2020. The company says the matter is contained; hackers’ claims about the access method and data stolen remain unverified.
Ohio County Schools restored internet after a nearly weeklong disruption. The district said it shut off access as a precaution after detecting evidence of a potential cyberattack and reported no evidence of risk to student or employee data.
LexisNexis confirmed a threat actor accessed a limited number of servers holding mostly pre-2020 data. The company says the matter is contained; claims of 2 GB stolen and millions of records came from a cybercriminal forum.
NetRunnerPR claims it breached Japan’s Shiraume Hospital and plans to release a database on March 5, 2026. The allegedly exposed records include patient medical data, PII, infection statuses, emergency contacts, and banking and insurance details; the claims are unverif
DarkWebInformer reports that actor “korea” leaked OptimizerAI’s database in February 2026, allegedly exposing over 118,000 user records and 1.1 million AI-generated sounds. The article provides no independent confirmation.
AkzoNobel says it contained an incident at a U.S. site and impact is limited. Anubis claims it stole 170GB and nearly 170,000 files, posting samples that reportedly include agreements, passport scans, and technical documents.
A database sample reportedly posted on a hacker forum suggests a February 2026 breach at Aura[.]Build affected over 132,000 users, exposing personal, subscription, usage, and account-status data. The breach remains alleged.
HungerRush says an attacker used a third-party vendor’s compromised credentials to access its email marketing service and customer contact details, then send unauthorized extortion emails. The company says passwords and payment data were not exposed.
Alcorn School District in Mississippi temporarily disabled its network after detecting suspicious activity. The precaution could affect student testing; the district has not confirmed a cyberattack or said whether data was accessed.
Wadjet is advertising an alleged SkiWebShop customer-data sale, claiming 81,436 email addresses and 70,020 phone numbers, alongside personal and billing details. The claim and data authenticity are not independently confirmed.
A ransomware attack on the University of Hawaii Cancer Center’s Epidemiology Division in August 2025 exposed research files containing sensitive personal information. The university is notifying potentially affected people and says clinical operations were unaffected.
