Recent news

Police seized KillSec ransomware servers and 110TB of stolen data, arresting three suspects and naming a 16-year-old as the main operator.

The DTU data breach may have exposed CPR numbers, addresses and next-of-kin details for up to 200,000 people dating back to 2003.

The FBI issued a direct warning to ShinyHunters members after a Dutch arrest, urging them to come forward as investigators close in.

MetaMask confirmed a security incident affecting its infrastructure. Validators are leaving Lido as a precaution, and wallets face no immediate threat.

Times Car confirmed a data breach exposing 6.6 million accounts, including driving licence images. What members and businesses should do now.

Dutch police arrested a 24-year-old Amsterdam man in the ShinyHunters investigation. He was still on probation from a 2023 extortion case.

A Bitget hack moved $387.5M out of hot wallets after attackers spoofed transaction data. Withdrawals are returning in stages.

OpenAI waited 84 days to report a Medicare breach after its AI agent bypassed blocks on an Australian government portal.

ShinyHunters says a new PeopleSoft zero-day let it steal FBI staff and applicant records. The FBI is investigating the data breach claims.

Sweden's privacy regulator fined Miljödata SEK 1.8 million after a 2025 breach exposed data on 2.2 million people. Here's what went wrong.

Attackers stole a Ribon app key and reached shopper data at BigCommerce stores. Here is what was exposed and what to do next.

ShinyHunters defaced the Clop leak site and claims to hold its Tor onion keys and server logs. Now it threatens to extort the ransomware gang.

Brevo served malicious scripts from its own domains on September 14, reaching more than 100,000 customer websites

Spain's data protection agency received its first breach report involving an AI agent that altered personal data and accessed invoices.

CenterPoint Energy confirmed a data breach after a hacker leaked records allegedly pulled from an unprotected public API. Here is what we know.

Japan's Digital Agency says attackers exploited a known VPN flaw, possibly exposing 246,000 records on officials and partners.

Revolut confirmed a data breach after a threat actor used a real government email domain to request sensitive customer records.

AdaptHealth confirms a data breach affecting 4.1 million patients after attackers hijacked a third-party contractor session.

Anthropic disclosed a fourth AI agent security incident after Claude models breached real third-party systems during misconfigured tests

ShinyHunters claims a Florida DMV data breach exposing 200,000 driver records. The state agency has not confirmed the intrusion.

Mathspace confirms a data breach affecting 1,079,819 students, parents and school staff after attackers exploited a critical Metabase flaw.

Four class actions target IDScan after a dark web service advertised 153 million driver's license scans. The FBI is investigating.

France's regulator fined a Saint-Étienne hospital €500,000 after an attacker took records on more than 727,000 people.

Attackers accessed about 5,000 Dropbox accounts by abusing a Lenovo email verification flaw. Here is how the login bypass worked.

A breach at healthcare data vendor Aesto Health exposed medical records, SSNs and insurance data for 9.5 million patients across 30 providers.

Rhysida claims 5.79TB stolen from Berlin in a ransomware attack and demands 30 bitcoin. The city has refused to pay the ransom.

Hasbro is notifying employees after a data breach exposed Social Security numbers, payment card details and driver's license data.

Manchester Airports Group confirmed a breach exposing emails, phone numbers, vehicle registrations and postcodes for 8.7 million people.

LACMA has disclosed a July 2025 breach that exposed Social Security numbers, government IDs, health insurance and medical records.

A sustained DDoS attack has left Norway's shared government login services degraded since Monday, disrupting tax, health and business portals.

SickKids has disclosed a data breach exposing employee and job applicant records after a flaw in third-party software. Patient data was safe.

A rogue ransomware affiliate is contacting victims before attacks go public, posing as a recovery firm and charging up to $60,000.

A judge let a negligence claim proceed against Rivers Casino Philadelphia over a 2024 ransomware attack, dismissing most other claims.

ShinyHunters leaked 1.6 million records after the RingCentral data breach, exposing names, phone numbers, and home addresses.

Shell is investigating a potential data breach after Clop claimed it stole 89GB of files via a PTC Windchill vulnerability.

A single script tag on a shared host exposed webmail accounts across 15 government tenants in one Middle Eastern country.

France's tax authority says an attacker stole income and property records on 678,000 individuals and businesses in a late-June breach.

SafePal has confirmed unauthorized access to order records for 39,798 customers, and a threat actor now claims to be selling the stolen data.

Over 800 DDoS attacks above 1 Tbps hit in Q2, a 519% jump, as DNS floods and amplification reshaped attack trends.

Valve is notifying Steam hardware customers in Europe after attackers stole personal data from shipping partner CEVA Logistics.

US and South Korean agencies warn that Gunra ransomware affiliates are exploiting Fortinet and VPN flaws to breach government networks.

Attackers exploited an unpatched TrueConf server vulnerability to swap client installers for backdoored builds. Patches are out.

Attackers exploited SharePoint flaws to compromise 200 accounts at Switzerland's federal IT office, including technical service accounts.

A US court sentenced the Ransom Cartel ransomware creator to 16 years after attacks on 18 companies caused $6.7M in losses.

Connor Moucka pleaded guilty to the Snowflake data theft attacks that hit 165 companies and exposed records on over 100 million people.

A UK police data breach exposed names and work emails of over 100,000 officers after an ExfilSquad extortion attack.

Brinks Home confirmed a breach after ShinyHunters claimed 4.9 million stolen Salesforce records and threatened to publish them.

Amgen says attackers stole patient health data and proprietary research from third-party cloud systems. No threat actor named yet.

New NCSC incident response guidance splits recovery from a disruptive cyber attack into three practical stages, starting with the first hours.

Attackers are poisoning DNS on hotel Wi-Fi gateways to redirect guests to fake Microsoft 365 logins. No phishing link required.

An attacker seized CubePilot's DNS records and obtained TLS certificates for every subdomain, capturing credentials behind a valid padlock.

OnTrac has notified customers of a data breach after attackers accessed files on its corporate network. Only names are confirmed exposed.

Stadler Rail refused a $12.3M ransom after Everest breached a data exchange platform it shares with a supplier. Production stayed unaffected.

Anubis ransomware claims the Fairlife cyberattack, alleging 1TB stolen and threatening a data leak if Coca-Cola doesn't negotiate.

Estée Lauder confirms a data breach via Oracle E-Business Suite exposing SSNs, passports, and health records tied to the Clop campaign.

Chick-fil-A is notifying customers of a data breach after attackers used stolen credentials to break into Chick-fil-A One accounts.

23andMe agreed to pay $18 million after a genetic data breach settlement with 43 state attorneys general over its 2023 security failures.

Coca-Cola confirms a ransomware attack halted Fairlife dairy production in the US, with data theft and attribution still unconfirmed.

Zoom warns of a critical account takeover vulnerability in its Windows client. See what is affected and how to patch it now.

Dutch police arrested the leader of an investment fraud ring accused of stealing over €100 million a month from victims worldwide.

A cyberattack has knocked out dispatch and booking systems at Nihon Kotsu, Japan's largest taxi operator.

Lidl notified online shop customers in Germany, Belgium, and the Netherlands after a data breach at a service provider exposed personal details.

The Centers Laboratory data breach exposed SSNs and health records for 542,377 people, nearly a year after hackers first broke in.

AssuranceAmerica confirms a data breach exposing driver's license numbers and policy data for nearly 7 million people.

Mount Royal University confirmed a data breach after hackers stole and wiped files, with the CMD Organization group demanding a ransom.

Accenture confirms a data breach after a hacker offered stolen source code and Azure credentials for sale. Here's what happened and why it matters.

A job interview phishing scam impersonates recruiters at 30+ brands to steal Google credentials via fake login pop-ups.

A fake Interpol ransomware campaign is tricking small businesses with bogus criminal investigation emails that deliver encrypting malware.

New research links the FortiBleed credential theft campaign directly to INC and Lynx ransomware negotiation platforms.

Medtronic is notifying customers of a data breach tied to ShinyHunters, part of a growing pattern of extortion attacks this year.

Aflac disclosed a new data breach after attackers accessed its Japan subsidiary, exposing policy, personal, and bank account information.

Nissan confirms a data breach tied to an Oracle PeopleSoft zero-day, exposing employee SSNs, banking details, and tax records.

Attackers are building fake ChatGPT workspaces that impersonate real companies and inviting employees to join in a bid to harvest sensitive data from AI prompts.

Europol and Microsoft disrupted Amadey and StealC in the latest Operation Endgame phase, seizing 326 servers and recovering 27 million stolen credentials.

Google is separating Search and Play history from personalization settings, and enabling media saving by default for AI training.

Xsolis suffered a data breach after a phishing attack exposed names, SSNs, and medical records for nearly 1.4 million people.

Agentic AI threats are reshaping the attack surface. Here's why autonomous AI systems create risks that existing defences weren't built to handle.

A Texas government data breach at a third-party vendor exposed driver's licenses and passport numbers for over 3 million people.

Law enforcement dismantled SocGholish malware infrastructure across 14,971 WordPress sites and 106 servers in a major Operation Endgame strike.

Apple patched a Beats Studio Buds vulnerability that let nearby attackers listen in on conversations through the earbuds' microphone.

Kodak confirmed a data breach after ShinyHunters claimed theft of 2.2 million records, setting a leak deadline of June 18, 2026.

ShinyHunters claims a Council of Europe data breach exposed payroll, CVs, and personal records for over 10,000 current and former staff.

A Novo Nordisk data breach exposed clinical trial data and contact details for healthcare professionals after an IT systems intrusion.

Hackers breached Tchap, France's encrypted government messaging app, exposing 650,000 messages and data from over 73,000 accounts.

ShinyHunters hit the University of Nottingham's student records system, exposing data on 454,600 people including passports and payment details.

Security researchers tricked an OpenClaw AI email agent into leaking AWS credentials and CRM records using basic phishing tactics.

Oxford University confirms a data breach exposing names, emails, and passwords via its CareerConnect platform. Second breach in five weeks.

ShinyHunters leaked 234 GB of DentaQuest data after ransom talks failed, exposing names, government IDs, and health insurance records for 2.6 million people.

A cyberattack on the WFP exposed names, ID numbers, phone numbers, and location data belonging to 600,000 Gaza households.

Attackers silently monitored a stock exchange executive's Outlook mailbox for five months, exfiltrating emails through Dropbox and OneDrive.

Attackers abused Meta's AI support bot to hijack Instagram accounts without passwords or phishing — here's how the exploit worked.

Spanish police arrested a man in Granada for doxing employees of INCIBE, the Civil Guard, and other sensitive state institutions.

Dutch police and the NCSC shut down a botnet controlling 17 million devices. Here's how it worked and what it means for security.

Iranian APT MuddyWater ran a DLL side-loading espionage campaign across 9 countries in Q1 2026, targeting manufacturing, finance, and aviation.

Carnival Corporation confirmed a data breach hitting nearly 6 million people after ShinyHunters used social engineering to access employee systems.

Charter Communications confirmed a data breach after ShinyHunters threatened to leak 42 million stolen customer records.

Italian police shut down the CINEMAGOAL piracy app, which stole live DRM keys from real streaming accounts and fined 1,000 subscribers up to €5,000.

Dutch investigators seized 800 Stark Industries servers and arrested two men linked to Russian cyberattacks and DDoS campaigns.

A 32-year-old was arrested in Vienna after sending millions of phishing texts via an SMS blaster attack during Eurovision 2026.

GitHub confirmed a data breach after a poisoned VS Code extension gave attackers access to 3,800 internal repositories. Customer data is not believed to be affected.