Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2315 articles
Threat actor Niphra claims to have breached Remington[.]bg and offers datasets with over 140,000 order rows and over 130,000 customer rows for $1,500. The breach and data authenticity are unconfirmed.
A seller using the handle HexDex is reportedly offering 352,502 records attributed to France’s FFAAA, including addresses, phone numbers, email addresses and information about minors. The listing offers a 1,000-record sample.
DumpSec claims to offer about 125,000 records allegedly taken from French staffing agency MyConnect, including identity and banking documents. The seller reportedly offers the dataset to one buyer for cryptocurrency.
UFP Technologies says a February 14 cyber incident compromised some IT systems and that company data appears to have been stolen or destroyed. The threat was reportedly removed; whether personal information was exfiltrated remains undetermined.
Hazeldenes says a cybersecurity incident disrupted production across its Victoria operations. The company is containing the incident and restoring production in phases; ABC reported chicken shortages at some local pubs and butchers.
Mayor Roberto Gualtieri said Rome’s library system was targeted by a cyberattack that the city’s Cyber Security Operations Center repelled; officials said municipal data and systems remained secure.
A cyberattack affected part of BDH Clinics’ IT infrastructure in Mecklenburg-Vorpommern, while medical care continues. Patients are urged to verify requests before sharing personal information as clinics and authorities work to reduce risks.
The Health Research Board in Ireland was reportedly targeted by a cyberattack. Employees were told not to open laptops, stay home and ignore work-phone notifications while IT staff work to contain the incident.
An unidentified actor reportedly posted a database attributed to DevChallenges[.]io on a hacking forum in February 2026, claiming it contains 20,218 user records with contact, account, invoice and feedback data.
A threat actor claims to have stolen 18GB of Myconnect data and is offering it to a single buyer. The reportedly affected files include identity, bank, health-insurance and employment documents; the claim is not independently confirmed.
Three healthcare providers reported patient-data incidents: Carolina Foot & Ankle confirmed network access and file exfiltration; New Age Dermatology reported ransomware disrupting a server; Marin Cancer Care later confirmed file exfiltration. Some data details remain未知
A cyberattack was reported at CHS Villach, where data was encrypted. The school’s response reportedly prevented data from being taken.
A threat actor using the handle malconguerra2 reportedly posted a 217 MB JSON dataset claiming to contain about 315,000 records from Venezuela’s FEVP, including national IDs, birth dates, ethnicity, family details and addresses.
Marquis sued SonicWall, alleging a 2025 cloud-backup breach exposed firewall configurations and scratch codes used in a ransomware attack that accessed customer PII. SonicWall later said backups from all customers were exfiltrated.
Cato CTRL reports that a BreachForums seller claims to offer root access to a UK automation-company CEO’s computer for $25,000, along with OpenClaw data and credentials. The listing is unverified.
A threat actor claims to have accessed Airbus SE’s DevOps environment for over two months and is offering files allegedly taken from a JFrog Artifactory instance, including build artifacts and development files tied to Airbus Helicopters projects.
A threat actor alleges it exfiltrated about 1GB from GARB’s Contract Extract System, including databases, source code, SSL certificates, contract and billing records, and internal documents, and threatens publication unless an unspecified demand is refused.
A threat actor claims to have exfiltrated about 2.85 million NCAG records. A purported sample reportedly includes personal, medical, contact, and location data; the breach is not independently confirmed.
UFP Technologies disclosed an intrusion detected February 14 that disrupted some IT systems and led to file exfiltration. The company is still determining what information was affected; it reported no material impact on operations.
An unidentified actor on a cybercrime forum claims ccMixter was breached in February 2026 and that 62,339 records containing IP addresses, email addresses, MD5 email hashes, and transactional data were exposed.
ShinyHunters published an archive it claims contains 12.4 million CarGurus records. Have I Been Pwned added the dataset and reported about 3.7 million records were new. CarGurus has not issued an official breach statement.
The article reports that ransomware disrupted several Cocoa, Florida, city IT systems and limited some services. Officials declared a state of emergency; emergency operations and dispatch remained functional during restoration efforts.
A reported cyberattack disrupted Hazeldenes’ chicken processing plant, causing shortages for pubs and supply gaps for butchers. The company is working with cybersecurity investigators to determine the cause.
Odido disclosed unauthorized access to its customer contact system and says 6.2 million customers were affected. ShinyHunters claims 21 million records and additional data; Odido disputes claims about passwords and other sensitive information.
