The Intel Desk
Every active breach, ransomware deployment, and supply-chain incident we've covered. Searchable, filterable, with sources.
| Title | Type | Date |
|---|---|---|
| Turkish Cypriot Administration: Health Ministry Breach and Dark Web Leak | ▣ Breach | 2026-06-27 |
| Instructure Canvas: Suspected ShinyHunters Education Sector Breach | ▣ Breach | 2026-06-27 |
| Colorado Health Network and Kentucky Mountain Health Alliance: Cephalus Ransomware and Healthcare Data Breaches | ▣ Breach | 2026-06-27 |
| Nefos Cannabis ID Verification: Exposed Database Leaks One Million Passports | ▣ Breach | 2026-06-27 |
| River Financial Corporation: Ransomware Intrusion Disrupts Banking Operations | █ Ransomware | 2026-06-27 |
| American Tower: ShinyHunters Pay-or-Leak Extortion | ▣ Breach | 2026-06-27 |
| 100+ Organizations: ShinyHunters PeopleSoft Zero-Day Mass Breach | ▣ Breach | 2026-06-27 |
| Adapt: ShinyHunters Ransomware Extortion | █ Ransomware | 2026-06-26 |
| Universities and Enterprises: ShinyHunters PeopleSoft Zero-Day Campaign | ▣ Breach | 2026-06-26 |
| Reynella East College: Interlock Ransomware Data Dump | ▣ Breach | 2026-06-26 |
| Alamo Heights ISD: Ransomware Data Breach | ▣ Breach | 2026-06-26 |
| NAIC: PeopleSoft Zero-Day Breach | ▣ Breach | 2026-06-26 |
| Dialog Network: Exposed Records of NATO and US Officials | ▣ Breach | 2026-06-26 |
| Healthcare AI Provider: Misconfiguration Exposes 1.4M Humana and Mayo Clinic Patients | ▣ Breach | 2026-06-26 |
| Padget Technologies: Akira Ransomware Data Extortion | █ Ransomware | 2026-06-26 |
| Prince George County, Va.: Cyberattack Exposes Resident and Employee Data | ▣ Breach | 2026-06-26 |
| Latvijas valsts meži: Commercially Motivated Hacker Breaches State Forests IT Systems | ▣ Breach | 2026-06-26 |
| Jaguar Land Rover: Russia-Linked Ransomware Attack | ▣ Breach | 2026-06-26 |
| Klue: Icarus Salesforce Supply-Chain Breach | ▣ Breach | 2026-06-26 |
| CVE-2026-54636: Critical Container Escape in Dokku's Cron Plugin | ⚡ Active KEV | 2026-06-26 |
| Barts Health NHS: Clop Ransomware via Oracle Zero-Day | █ Ransomware | 2026-06-25 |
| ISOPLUS: Qilin Ransomware Data Extortion | █ Ransomware | 2026-06-25 |
| Leo International: Akira Ransomware Data Theft Claim | █ Ransomware | 2026-06-25 |
| Grafana Labs: Mini Shai-Hulud npm Supply Chain Attack | ▣ Breach | 2026-06-25 |
| Texas Parks and Wildlife Department: Third-Party Vendor Breach Exposes 3 Million License Holders | ▣ Breach | 2026-06-25 |
| Cisco Unified CM SSRF Flaw (CVE-2026-20230) Added to CISA KEV | ⚡ Active KEV | 2026-06-25 |
| CVE-2026-12569: Unauthenticated RCE in PTC Windchill and FlexPLM | ⚡ Active KEV | 2026-06-25 |
| Xolis: Targeted Phishing Compromises Healthcare AI Vendor | ▣ Breach | 2026-06-25 |
| CVE-2026-12417: Unauthenticated Account Takeover in WordPress SignUp & SignIn Plugin | ⚡ Active KEV | 2026-06-24 |
| Bajaj Auto: Ransomware Attack Disrupts Systems | █ Ransomware | 2026-06-24 |
| CVE-2026-12416: Unauthenticated Account Takeover in WordPress Invoice Generator Plugin | ⚡ Active KEV | 2026-06-24 |
| Madison Square Garden: Vishing Breach Exposes Knicks and Talent Records | ▣ Breach | 2026-06-24 |
| Tchap: Account Hijack Breach of French Government Messaging | ▣ Breach | 2026-06-24 |
| Fortinet Firewalls: FortiBleed Mass Credential Theft Campaign | ▣ Breach | 2026-06-24 |
| Romanian Hospitals: Backmydata Ransomware (Phobos Family) | █ Ransomware | 2026-06-24 |
| CVE-2026-56237: Critical Authentication Bypass in Capgo API Key Generation | ⚡ Active KEV | 2026-06-24 |
| Transport for London: Teenage Hackers Breach and 10M Passenger Data Theft | ▣ Breach | 2026-06-24 |
| CVE-2026-11807: Missing Authorization in Event-Driven Ansible Leaks Plaintext Credentials | ⚡ Active KEV | 2026-06-23 |
| NationsBuilders Insurance Services: Aurora Ransomware Data Theft | █ Ransomware | 2026-06-23 |
| KDDI: Third-Party Software Exploit Exposes 14.22 Million Email Records | ▣ Breach | 2026-06-23 |
| CVE-2026-34909: Critical Path Traversal in Ubiquiti UniFi OS | ⚡ Active KEV | 2026-06-23 |
| CVE-2026-34908: Critical Access Control Flaw in Ubiquiti UniFi OS | ⚡ Active KEV | 2026-06-23 |
| LastPass: OAuth Token Theft via Klue Supply Chain Attack | ▣ Breach | 2026-06-23 |
| Xsolis: Phishing Driven Healthcare Data Breach | ▣ Breach | 2026-06-23 |
| Spectrum: ShinyHunters Vishing Breach | ▣ Breach | 2026-06-23 |
| US Law Firms: Luna Moth Social-Engineering Extortion | █ Ransomware | 2026-06-23 |
| CVE-2026-34910: Critical Command Injection in Ubiquiti UniFi OS | ⚡ Active KEV | 2026-06-23 |
| CVE-2025-67038: Critical Root-Level Command Injection in Lantronix EDS5000 Device Servers | ⚡ Active KEV | 2026-06-23 |
| Belgian State Security (VSSE): Ivanti EPMM Exploitation Exposes Employee Data | ▣ Breach | 2026-06-22 |
| Go2Joy: RansomEXX Ransomware Breach | █ Ransomware | 2026-06-22 |
| Capital Development Authority Islamabad: Billing Systems Ransomware Attack | █ Ransomware | 2026-06-22 |
| CVE-2026-10561: Critical Unauthenticated RCE in IBM Langflow OSS | ⚡ Active KEV | 2026-06-22 |
| CVE-2026-56348: n8n Credential Exfiltration via Allowed HTTP Request Domains Bypass | ⚡ Active KEV | 2026-06-22 |
| TVING: Data Breach Exposes 19.53 Million Users | ▣ Breach | 2026-06-22 |
| Canada Life: ShinyHunters Salesforce Extortion | ▣ Breach | 2026-06-22 |
| CVE-2026-7664: Critical Authorization Bypass in IBM Langflow OSS MCP Endpoint | ⚡ Active KEV | 2026-06-22 |
| Kodak: ShinyHunters Extortion Breach | ▣ Breach | 2026-06-22 |
| Tata Electronics: World Leaks Ransomware Breach Exposing Apple, Tesla Trade Secrets | ▣ Breach | 2026-06-22 |
| Carnival Cruise Line: Social Engineering Breach Exposes 6 Million | ▣ Breach | 2026-06-22 |
| JCPenney: ShinyHunters PeopleSoft Zero-Day Breach | ▣ Breach | 2026-06-21 |
| Brazil Civil Defense: Emergency Alert System Hijack | ▣ Breach | 2026-06-21 |
| U.S. Classified Networks: Anthropic Mythos Autonomous AI Breach | ▣ Breach | 2026-06-21 |
| ALS Global: Aurora Ransomware Breach | █ Ransomware | 2026-06-21 |
| Desert Micro: Nova Ransomware Data Extortion | █ Ransomware | 2026-06-21 |
| Q Link Wireless: Qilin Ransomware Attack | █ Ransomware | 2026-06-21 |
| Global Schools Group: FulcrumSec Ransomware Attack | █ Ransomware | 2026-06-21 |
| Klue Customers: Icarus OAuth Token Abuse | ▣ Breach | 2026-06-20 |
| African National Congress: Black X Extortion Breach | ▣ Breach | 2026-06-20 |
| Inter-Con Security: ShinyHunters Extortion Leak | ▣ Breach | 2026-06-20 |
| Signature Healthcare: Anubis Ransomware | █ Ransomware | 2026-06-20 |
| Huntress: ShinyHunters Salesforce Data Theft via Klue App | ▣ Breach | 2026-06-20 |
| One Medical: ShinyHunters Data-Theft Extortion | █ Ransomware | 2026-06-19 |
| Moody Bible Institute: ShinyHunters Data Theft and Extortion | ▣ Breach | 2026-06-19 |
| Texas Parks & Wildlife: Vendor Breach Exposes 3 Million Licenses and Passports | ▣ Breach | 2026-06-19 |
| Texas Parks & Wildlife Department: Third-Party Vendor Breach Exposes 3 Million IDs | ▣ Breach | 2026-06-19 |
| Texas Parks & Wildlife Department: Third-Party Vendor Breach Exposes 3 Million Residents | ▣ Breach | 2026-06-19 |
| Horizon Family Medical Group: Incransom Ransomware Breach | █ Ransomware | 2026-06-19 |
| Texas State Agency: Third-Party Vendor Compromise | ▣ Breach | 2026-06-19 |
| Texas Parks & Wildlife: Third-Party Vendor Breach Exposes 3 Million | ▣ Breach | 2026-06-18 |
| Fortinet: Russian-Speaking Criminals Mass-Compromise FortiGate Gateways | ▣ Breach | 2026-06-17 |
| Madison Square Garden Sports: ShinyHunters Data Extortion | ▣ Breach | 2026-06-17 |
| Adriatic Port Authority: Anubis Ransomware Cripples Maritime Operations | █ Ransomware | 2026-06-17 |
| Ohio, Georgia, and Arizona Hospital Networks: Coordinated Ransomware Breach | ▣ Breach | 2026-06-16 |
| iRhythm Holdings: Social Engineering Breach and Extortion | ▣ Breach | 2026-06-16 |
| Instructure Canvas: ShinyHunters Freemium Tier Breach | ▣ Breach | 2026-06-16 |
| Sysco: ShinyHunters Salesforce Extortion | ▣ Breach | 2026-06-16 |
| World Food Programme: Unauthorized Breach of Gaza Aid Registration Platform | ▣ Breach | 2026-06-16 |
| CVE-2026-48907: Unauthenticated RCE in Widget Factory's JCE Editor for Joomla | ⚡ Active KEV | 2026-06-16 |
| HDFC AMC: Morpheus Ransomware Breach and 680 GB Data Theft | ▣ Breach | 2026-06-16 |
| Three U.S. Regional Banks: SilverThread Ransomware Extortion | █ Ransomware | 2026-06-16 |
| Glendale Community College: ShinyHunters Exfiltrates 62GB From PeopleSoft Campus Solutions | ▣ Breach | 2026-06-16 |
| Nintendo: SHADOWBYT3$ Third-Party SaaS Breach | ▣ Breach | 2026-06-16 |
| CVE-2026-20262: Cisco Catalyst SD-WAN Manager Path Traversal Flaw Added to CISA KEV | ⚡ Active KEV | 2026-06-15 |
| Meta Platforms: Confirmed Data Breach Exposes Up to 100,000 Records | ▣ Breach | 2026-06-15 |
| LiteSpeed cPanel Plugin Symlink Flaw (CVE-2026-54420) Added to CISA KEV | ⚡ Active KEV | 2026-06-15 |
| Mackay Sugar: The Gentlemen Ransomware (Storm-2697) | █ Ransomware | 2026-06-15 |
| Humanity Protocol: North Korean Phishing Crypto Heist | ▣ Breach | 2026-06-15 |
| Kaluga Astral: Week-Long Service Disruption from Cyberattack | ▣ Breach | 2026-06-15 |
| Council of Europe: ShinyHunters PeopleSoft Data Theft | ▣ Breach | 2026-06-15 |
| Eastman Kodak: ShinyHunters Pay or Leak Extortion | ▣ Breach | 2026-06-15 |
| Infinite Campus: ShinyHunters Extortion Data Leak | ▣ Breach | 2026-06-15 |
| Berkadia: ShinyHunters Salesforce Extortion Breach | ▣ Breach | 2026-06-15 |
| 700Credit: API Abuse via Compromised Integration Partner | ▣ Breach | 2026-06-15 |
| North American Research Institutions: UNC6508 REDCap Espionage | ▣ Breach | 2026-06-15 |
| Norfolk and Norwich University Hospital: Qilin Ransomware Patient Data Theft | ▣ Breach | 2026-06-12 |
| Vietnam National Immunization System: Self-Taught Teen Breach | ▣ Breach | 2026-06-12 |
| IEI iRM-IEI Remote Management Hardcoded Credentials (CVE-2026-11849) | ⚡ Active KEV | 2026-06-12 |
| California Water Service: Handala Hack and Leak Breach | ▣ Breach | 2026-06-12 |
| Ralph Lauren Corporation: ShinyHunters Data Extortion | ▣ Breach | 2026-06-12 |
| Novo Nordisk: Clinical Trials Data Breach | ▣ Breach | 2026-06-12 |
| CVE-2026-49973: Unauthenticated Account Takeover in Hermes WebUI Setup | ⚡ Active KEV | 2026-06-11 |
| Singing River Health System: Anubis Ransomware Breach | █ Ransomware | 2026-06-11 |
| Universities: ShinyHunters Oracle PeopleSoft Mass Compromise | ▣ Breach | 2026-06-11 |
| Oracle PeopleSoft Customers: ShinyHunters Data Theft Extortion | ▣ Breach | 2026-06-11 |
| Isuzu Motors: Qilin Ransomware Cross-Sector Batch | █ Ransomware | 2026-06-11 |
| CVE-2026-11839: Critical Web Shell Upload Flaw in Başarsoft Rotaban | ⚡ Active KEV | 2026-06-11 |
| ServiceNow: Zero-Auth API Breach Exposes Enterprise Instance Data | ▣ Breach | 2026-06-11 |
| Synnovis: Qilin Ransomware NHS Data Breach | ▣ Breach | 2026-06-11 |
| Ivanti Sentry CVE-2026-10520: Unauthenticated Root RCE Added to CISA KEV | ⚡ Active KEV | 2026-06-11 |
| Lithuanian Health Ministry: Apache Superset Exploited in Government Breach | ▣ Breach | 2026-06-11 |
| France Titres (ANTS): IDOR Breach Exposes Millions of French Citizens | ▣ Breach | 2026-06-11 |
| VRChat: External Cloud Breach Exposes 2.4 Million Users | ▣ Breach | 2026-06-11 |
| Coupang: Insider-Built Backdoor Exposes 37.5 Million | ▣ Breach | 2026-06-11 |
| Nexstar: ShinyHunters Salesforce Data Theft | ▣ Breach | 2026-06-11 |
| CVE-2026-7852: Critical Unrestricted File Upload Flaw in Limatek LimRAD NAC | ⚡ Active KEV | 2026-06-11 |
| University of Nottingham: ShinyHunters Ransomware Breach | █ Ransomware | 2026-06-10 |
| CVE-2026-53475: Hardcoded Insecure TLS in assisted-migration-agent Exposes vCenter Admin Credentials | ⚡ Active KEV | 2026-06-10 |
| Discord: Disputed Insider Breach Filing Claims 10 Million Users Exposed | ▣ Breach | 2026-06-10 |
| CVE-2026-53474: Critical SQL Injection in migration-planner via Malicious RVTools Upload | ⚡ Active KEV | 2026-06-10 |
| OkCupid: Forum Hackers Selling 35 Million Scraped User Records | ▣ Breach | 2026-06-10 |
| CVE-2026-53476: Critical Path Traversal in Red Hat assisted-migration-agent | ⚡ Active KEV | 2026-06-10 |
| Delaware North: Microsoft Account Compromise and File Exfiltration | ▣ Breach | 2026-06-10 |
| CVE-2026-53470: Critical Access Control Flaw in migration-planner Exposes Other Users' OVA Images | ⚡ Active KEV | 2026-06-10 |
| Singing River Health System: Anubis Ransomware Breach | █ Ransomware | 2026-06-10 |
| Réseau Radiologique Romand: Akira Ransomware | █ Ransomware | 2026-06-10 |
| H1: Soral Leaks 2M+ Medical Professional Records | ▣ Breach | 2026-06-10 |
| Nottingham University: ShinyHunters PeopleSoft Data Theft | ▣ Breach | 2026-06-10 |
| Station Casinos: Single Compromised Account Leads to PII Breach and Class Action | ▣ Breach | 2026-06-10 |
| CVE-2026-53469: Missing Authorization in migration-planner Allows Total Data Destruction | ⚡ Active KEV | 2026-06-10 |
| Doctreat Core for WordPress: Unauthenticated Admin Registration (CVE-2025-6254) | ⚡ Active KEV | 2026-06-10 |
| FESCO Adecco: TheGentlemen Ransomware Breach | █ Ransomware | 2026-06-10 |
| Critical Unauthenticated File Write Flaw in Splunk Enterprise and Cloud Platform (CVE-2026-20253) | ⚡ Active KEV | 2026-06-10 |
| Hokkaido Medical Center and Hokkaido Cancer Center: Improper Disk Disposal Data Leak | ▣ Breach | 2026-06-09 |
| CVE-2026-11645: High-Severity Chromium V8 Flaw Lands on CISA's KEV List | ⚡ Active KEV | 2026-06-09 |
| Proprietes-Privees: ChimeraZ API Breach Exposes 2.5M People | ▣ Breach | 2026-06-09 |
| Critical Code Execution Flaw in Azure Stack Edge — CVE-2026-47643 (CVSS 9.8) | ⚡ Active KEV | 2026-06-09 |
| CVE-2026-34691: Critical Stored XSS in Adobe Experience Manager Forms JEE | ⚡ Active KEV | 2026-06-09 |
| CVE-2026-47928: Critical ColdFusion Code Execution Flaw | ⚡ Active KEV | 2026-06-09 |
| Lansing Community College: Compromised Credentials Breach Hits 174,000 | ▣ Breach | 2026-06-09 |
| CVE-2026-7486: Critical SQL Injection in Netcad E-İmar | ⚡ Active KEV | 2026-06-09 |
| Critical RCE in Windows DHCP Client — CVE-2026-44815 | ⚡ Active KEV | 2026-06-09 |
| SoFi Hong Kong: Third-Party Vendor Breach | ▣ Breach | 2026-06-09 |
| CVE-2026-45657: Critical Windows Kernel Use-After-Free Enables Remote Code Execution | ⚡ Active KEV | 2026-06-09 |
| Arista EOS Tunnel Decapsulation Flaw (CVE-2026-7473) Hits CISA KEV Under Active Exploitation | ⚡ Active KEV | 2026-06-09 |
| Foxconn: Nitrogen Ransomware Breach via Malvertising and ESXi Exploit | █ Ransomware | 2026-06-09 |
| CVE-2026-45602: Critical Windows DHCP Server Tampering Flaw | ⚡ Active KEV | 2026-06-09 |
| CVE-2017-20251: Unauthenticated PHP Code Injection in WordPress Insert PHP Plugin | ⚡ Active KEV | 2026-06-09 |
| CVE-2026-47281: Critical Privilege Escalation Flaw in Visual Studio Code | ⚡ Active KEV | 2026-06-09 |
| CVE-2026-42904: Critical Windows TCP/IP Heap Overflow Enables Privilege Escalation | ⚡ Active KEV | 2026-06-09 |
| CVE-2026-48303: Critical Authorization Flaw in Adobe Campaign Classic Enables Remote Code Execution | ⚡ Active KEV | 2026-06-09 |
| CVE-2026-26142: Critical Deserialization RCE in Nuance PowerScribe | ⚡ Active KEV | 2026-06-09 |
| Singing River Health System: Anubis Ransomware Data Theft | █ Ransomware | 2026-06-09 |
| Texas Capital Bank: 91,000 Customers Exposed in Data Breach | ▣ Breach | 2026-06-09 |
| Cisco Catalyst SD-WAN Manager Root Command Injection (CVE-2026-20245) | ⚡ Active KEV | 2026-06-09 |
| CVE-2026-8025: Critical SQL Injection in MOSK CBS Platform | ⚡ Active KEV | 2026-06-09 |
| World Food Programme: Unauthorized Access of Gaza Self-Registration App | ▣ Breach | 2026-06-09 |
| Kyushu Electric Power: Missing SSD Exposes 10.9 Million Records | ▣ Breach | 2026-06-09 |
| CVE-2026-47291: Critical HTTP.sys Integer Overflow Enables Unauthenticated Remote Code Execution | ⚡ Active KEV | 2026-06-09 |
| Aflac: Scattered Spider Help-Desk Breach | ▣ Breach | 2026-06-09 |
| Check Point Security Gateway VPN Auth Bypass: CVE-2026-50751 Added to CISA KEV | ⚡ Active KEV | 2026-06-08 |
| Syrian Government: Erresira Claims 20GB Diplomatic Document Breach | ▣ Breach | 2026-06-08 |
| Change Healthcare: 190M Record Ransomware Breach | █ Ransomware | 2026-06-08 |
| AT&T: ShinyHunters Ransom Payment for Stolen Call Records | █ Ransomware | 2026-06-08 |
| Nigerian Transport Carrier: Unidentified Syndicate Double-Extortion Ransomware | █ Ransomware | 2026-06-08 |
| CVE-2023-54352: Unauthenticated RCE in WordPress Seotheme | ⚡ Active KEV | 2026-06-08 |
| Evanston Township High School District 202: Ransomware Attack Disrupts Summer Operations | █ Ransomware | 2026-06-08 |
| BerriAI LiteLLM Command Injection (CVE-2026-42271) Lands in CISA KEV | ⚡ Active KEV | 2026-06-08 |
| Qantas: Scattered Lapsus$ Hunters Dark Web Leak | ▣ Breach | 2026-06-08 |
| TeamViewer: Russian APT29 Corporate Network Breach | ▣ Breach | 2026-06-08 |
| CVE-2024-58349: Unauthenticated RCE in WordPress Travelscape Theme | ⚡ Active KEV | 2026-06-08 |
| CVE-2026-27671: Critical Unauthenticated RCE in SAP NetWeaver ABAP Kernel | ⚡ Active KEV | 2026-06-08 |
| Medtronic: ShinyHunters Data Breach | ▣ Breach | 2026-06-08 |
| Tchap: Dark Web Actor Claims Massive Government Messaging Breach | ▣ Breach | 2026-06-08 |
| CVE-2026-11499: Critical Remote Stack Overflow in Tenda HG7, HG9, and HG10 XPON Routers | ⚡ Active KEV | 2026-06-08 |
| CVE-2024-58348: Unauthenticated RCE in WordPress Background Image Cropper Plugin | ⚡ Active KEV | 2026-06-08 |
| Creditas: Dark Web Actor Claims Massive Fintech Breach | ▣ Breach | 2026-06-08 |
| US Trade Association: Genesis Ransomware Claim | █ Ransomware | 2026-06-08 |
| OpenBullet2 Auth Bypass: One Empty Header Hands Over Admin (CVE-2026-25555) | ⚡ Active KEV | 2026-06-08 |
| Lürssen: Ransomware Attack Halts Superyacht Production | █ Ransomware | 2026-06-08 |
| Toyota Financial Services: Medusa Ransomware Attack | ▣ Breach | 2026-06-08 |
| CVE-2026-39910: Critical Privilege Escalation in STACKIT IaaS API | ⚡ Active KEV | 2026-06-08 |
| Mid and South Essex NHS Trust: Qilin Ransomware Data Theft | ▣ Breach | 2026-06-08 |
| CVE-2026-41448: AdGuard Home Authentication Bypass via Path Traversal in Admin-Token Cookie | ⚡ Active KEV | 2026-06-08 |
| CVE-2026-40128: Critical Path Traversal in SAP NetWeaver Application Server Java | ⚡ Active KEV | 2026-06-08 |
| Hansoll Textile: Payload Ransomware Campaign Expands | █ Ransomware | 2026-06-08 |
| CVE-2026-44748: Critical Signature Verification Flaw in SAP NetWeaver AS ABAP | ⚡ Active KEV | 2026-06-08 |
| FBI: Salt Typhoon Breaches Digital Collection Systems Network | ▣ Breach | 2026-06-07 |
| CISA: Chemical Security Assessment Tool Breach | ▣ Breach | 2026-06-07 |
| Oxford University: CareerConnect Vendor Breach via Group GTI | ▣ Breach | 2026-06-07 |
| BELFOR Asia: INC Ransom Breach | █ Ransomware | 2026-06-07 |
| DentaQuest: ShinyHunters Leak Exposes 2.6 Million | ▣ Breach | 2026-06-07 |
| Kriete Truck Centers: Securotrop Ransomware Listing | █ Ransomware | 2026-06-07 |
| Baker Distributing: ShinyHunters Salesforce and SharePoint Leak | ▣ Breach | 2026-06-07 |
| NSCC Tianjin: Alleged 10PB Classified Data Breach | ▣ Breach | 2026-06-07 |
| Access Dental: WorldLeaks Ransomware Breach | █ Ransomware | 2026-06-07 |
| City of Vallejo: Constant Contact Email Platform Hijacked | ▣ Breach | 2026-06-07 |
| Tradeify: macaroni Leaks 240K Customer Records via Exposed API Key | ▣ Breach | 2026-06-07 |
| ICBC Financial Services: Ransomware Attack Disrupts Treasury Market | █ Ransomware | 2026-06-07 |
| FBI Director Kash Patel: Handala Hack Team Gmail Breach | ▣ Breach | 2026-06-07 |
| US Telecom Provider: Akira Ransomware Breach Claim | █ Ransomware | 2026-06-07 |
| Meridianbet: INF GRUPA Customer Database Breach | ▣ Breach | 2026-06-07 |
| IBM: APT10 Breach Coverup Allegations | ▣ Breach | 2026-06-07 |
| RCI Hospitality: IDOR Vulnerability Exposes 40,000 Contractors | ▣ Breach | 2026-06-07 |
| Conduent Business Services: Healthcare Data Breach Impacts 62.2M | ▣ Breach | 2026-06-06 |
| Aspire Hospital: Nova Ransomware Claim | █ Ransomware | 2026-06-06 |
| Erie Family Health: 570K Patient Breach After 48 Day Network Intrusion | ▣ Breach | 2026-06-06 |
| RUAG: Akira Ransomware Payment Confirmed | █ Ransomware | 2026-06-06 |
| UN World Food Program: Gaza Enrollment System Breach Exposes 600,000 Households | ▣ Breach | 2026-06-06 |
| Clarinda Regional Health Center: LockBit5 Ransomware Breach | ▣ Breach | 2026-06-06 |
| Ireland HSE: Third-Party Vendor Ransomware Outage | █ Ransomware | 2026-06-06 |
| Illuminate Education: FTC Finalizes Order Over Student Data Breach | ▣ Breach | 2026-06-06 |
| Strategic Education: Unknown Actor Exfiltrates SSNs in 87-Day Stealth Breach | ▣ Breach | 2026-06-05 |
| Mountain Park, Oklahoma: Municipal Ransomware Attack | █ Ransomware | 2026-06-05 |
| Avcon Jet: Qilin Ransomware Attack | █ Ransomware | 2026-06-05 |
| IBM and AT&T: Concealed Foreign Breaches of Federal Cloud Infrastructure | ▣ Breach | 2026-06-05 |
| CVE-2026-28318: SolarWinds Serv-U Unauthenticated Crash via Deflate-Encoded POST | ⚡ Active KEV | 2026-06-05 |
| Oaks Park and Kennon Worldwide: Akira Ransomware Extortion | █ Ransomware | 2026-06-05 |
| CVE-2025-71317: Hard-Coded Backdoor in Riello NetMan 204 Grants Unauthenticated Admin Access | ⚡ Active KEV | 2026-06-05 |
| Pyramid: Nitrogen Ransomware Attack | █ Ransomware | 2026-06-05 |
| Columbia University: Politically Motivated Breach Exposes 868,969 Records | ▣ Breach | 2026-06-05 |
| Grindr: Alleged Sale of 15 Million User Records | ▣ Breach | 2026-06-05 |
| Sicol: SpaceBears Ransomware Attack | █ Ransomware | 2026-06-05 |
| Instructure Canvas: ShinyHunters Ransomware Breach | █ Ransomware | 2026-06-05 |
| CVE-2026-10580: Unauthenticated Admin Takeover in Hippoo Mobile App for WooCommerce | ⚡ Active KEV | 2026-06-05 |
| Osmose France: Alleged Dark Web Data Breach Claim | ▣ Breach | 2026-06-05 |
| SA2000: Stormous Ransomware Breach | █ Ransomware | 2026-06-05 |
| Factors Western: Akira Ransomware Attack | █ Ransomware | 2026-06-05 |
| CVE-2026-6274: Critical Authentication Bypass in DTS Redline WR3200 Routers | ⚡ Active KEV | 2026-06-05 |
| National Standard Parts Associates: Akira Ransomware Data Leak | █ Ransomware | 2026-06-05 |
| CVE-2025-71318: NetMan 204 Missing Authentication Exposes UPS Control to Remote Attackers | ⚡ Active KEV | 2026-06-05 |
| IKEA: Lapsus$ Alleged 180GB Data Leak Investigation | ▣ Breach | 2026-06-05 |
| Ultrahuman: Infostealer Malware Breach via Stolen Employee Credentials | ▣ Breach | 2026-06-05 |
| 23andMe: California AG Sues Over 2023 Credential-Stuffing Breach | ▣ Breach | 2026-06-04 |
| European Commission: TeamPCP and ShinyHunters Cloud Breach | ▣ Breach | 2026-06-04 |
| CAEM Mexico: Sativa Gang Leaks 21GB SIAF Database | ▣ Breach | 2026-06-04 |
| CVE-2026-4104: Critical SQL Injection and Authorization Bypass in Akmer TeknoPass | ⚡ Active KEV | 2026-06-04 |
| MarketJoy: Qilin Ransomware Extortion | █ Ransomware | 2026-06-04 |
| Anonymous Video Chat App: 22 Million Record Exposure | ▣ Breach | 2026-06-04 |
| ViaQuest: Ransomware Attack Exposes Patient and Employee Data | █ Ransomware | 2026-06-04 |
| CVE-2019-25727: Arbitrary File Download in WordPress Ad Manager WD Plugin | ⚡ Active KEV | 2026-06-04 |
| Spanish National Police and INCIBE: Granada-Based Doxing Operation | ▣ Breach | 2026-06-04 |
| CVE-2019-25741: MobaXterm 12.1 SEH Buffer Overflow via Malicious Session File | ⚡ Active KEV | 2026-06-04 |
| Case Law Correctional Services: Black X Ransomware Breach | █ Ransomware | 2026-06-04 |
| UN World Food Programme: Self-Registration Platform Breach | ▣ Breach | 2026-06-04 |
| Carnival Cruise: ShinyHunters Social Engineering Breach | ▣ Breach | 2026-06-04 |
| iFood: 1.2 Million Brazilian Users Exposed in Confirmed Breach | ▣ Breach | 2026-06-04 |
| Pemprov DKI Jakarta: Citizen CRM and NIK Identities Leaked | ▣ Breach | 2026-06-04 |
| Morocco Civil Records: Jabaroot Watiqa.ma Data Leak | ▣ Breach | 2026-06-04 |
| CVE-2026-10840: OpenShift Pipelines Operator Grants Authenticated Users Write Access to Kueue and cert-manager Resources | ⚡ Active KEV | 2026-06-04 |
| CVE-2019-25738: WordPress Hybrid Composer Unauthenticated Settings Change | ⚡ Active KEV | 2026-06-04 |
| NYC Health + Hospitals: Third-Party Vendor Breach Exposes 1.8M Patients | ▣ Breach | 2026-06-04 |
| Iberdrola: Alleged 110 GB Customer Database Sale | ▣ Breach | 2026-06-04 |
| ISSSTE Mexico: Pension Database Liquidated on Dark Web | ▣ Breach | 2026-06-04 |
| Arlington ISD: Ransomware Attack Delays Summer School | █ Ransomware | 2026-06-04 |
| IQL-Nog: SafePay Ransomware Attack | █ Ransomware | 2026-06-04 |
| CVE-2019-25729: PDF Signer 3.0 Server-Side Template Injection Leads to Unauthenticated RCE | ⚡ Active KEV | 2026-06-04 |
| GitHub: Supply Chain Compromise via Poisoned VS Code Extension | ▣ Breach | 2026-06-04 |
| IEEA Campeche: l1ghtSoulHem Claims Staff and Student Database Leak | ▣ Breach | 2026-06-04 |
| ACE Hospital: KillSec Ransomware Attack | █ Ransomware | 2026-06-04 |
| National Testing Agency: Superadmin Bypass and JEE Advanced Data Exposure | ▣ Breach | 2026-06-03 |
| Dutch Hotels: Mass Booking Data Breach Fuels Payment Scams | ▣ Breach | 2026-06-03 |
| CVE-2026-45247: Mirasvit Cache Warmer PHP Object Injection Hits CISA KEV | ⚡ Active KEV | 2026-06-03 |
| Armenia Ministry of Internal Affairs: WOLVES OF TURAN Ransomware Claim | █ Ransomware | 2026-06-03 |
| Spectrum: ShinyHunters Voice Phishing Breach | ▣ Breach | 2026-06-03 |
| IIT Roorkee: Misconfigured Cloud Storage Exposes 1.79 Lakh JEE Advanced Candidates | ▣ Breach | 2026-06-03 |
| IMA Diligence Services: Genesis Ransomware Breach Exposes 525,306 | ▣ Breach | 2026-06-03 |
| Weil Gotshal & Manges: $20M Ransomware Extortion Payout | █ Ransomware | 2026-06-03 |
| Safaricom: Insider Data Theft Exposes 11.5 Million Subscribers | ▣ Breach | 2026-06-03 |
| Wiley Rein: Law Firm Data Breach and Class Action Lawsuit | ▣ Breach | 2026-06-03 |
| Middle East Organizations: Iran-Linked Wiper Campaign | ▣ Breach | 2026-06-03 |
| CVE-2026-35075: Hard-Coded Firmware Password Grants Unauthenticated Full Device Access | ⚡ Active KEV | 2026-06-03 |
| TVING: Unknown Hackers Breach Member Database | ▣ Breach | 2026-06-03 |
| Tulane University: Clop Ransomware Oracle Zero-Day Breach | ▣ Breach | 2026-06-03 |
| Red Hat NPM: Supply Chain Worm Attack | ▣ Breach | 2026-06-02 |
| Squamish.net and Synex International: BrainCipher Ransomware Coordinated Strike | █ Ransomware | 2026-06-02 |
| Limburg-Weilburg County Administration: Abyss Ransomware Attack | █ Ransomware | 2026-06-02 |
| Instagram: Meta AI Prompt Injection Account Hijack | ▣ Breach | 2026-06-02 |
| CVE-2026-47117: OpenMed Privacy-Filter Loads Attacker-Controlled Models as Code | ⚡ Active KEV | 2026-06-02 |
| CVE-2026-5076: ARMember Premium WordPress Plugin Stores Plaintext Password Reset Keys | ⚡ Active KEV | 2026-06-02 |
| Lithuanian Centre of Registers: Suspected Hostile State Credential Abuse | ▣ Breach | 2026-06-02 |
| Luton and Dunstable Hospital: Supply Chain Ransomware Exposes 33K Patients | ▣ Breach | 2026-06-02 |
| Middle East Organizations: Iran-Linked MOIS Wiper Campaign | ▣ Breach | 2026-06-02 |
| St. Joseph County: Handala Hack Claims 2TB Data Breach | ▣ Breach | 2026-06-02 |
| Squamish.net and Synex International: BrainCipher Ransomware Cross-Continental Attack | █ Ransomware | 2026-06-02 |
| CVE-2022-0492: Linux Kernel cgroups v1 release_agent Privilege Escalation | ⚡ Active KEV | 2026-06-02 |
| CVE-2025-48595: Android Framework Integer Overflow Enables Local Privilege Escalation | ⚡ Active KEV | 2026-06-02 |
| Eriell: Nova Ransomware Listing | █ Ransomware | 2026-06-02 |
| CVE-2026-8206: Kirki WordPress Plugin Account Takeover via Password Reset Flaw | ⚡ Active KEV | 2026-06-02 |
| Dashlane: 2FA Brute-Force Attack Steals Customer Password Vaults | ▣ Breach | 2026-06-02 |
| Buffalo Convention Center: Akira Ransomware Attack | █ Ransomware | 2026-06-02 |
| HungerRush: SendGrid API Extortion and Supply Chain Poisoning | ▣ Breach | 2026-06-01 |
| CVE-2026-9319: Critical Deserialization Flaw in IBM WebSphere Application Server | ⚡ Active KEV | 2026-06-01 |
| CVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerability Added to CISA KEV | ⚡ Active KEV | 2026-06-01 |
| VVO Finance: Everest Ransomware Attack | █ Ransomware | 2026-06-01 |
| Mexico Ministry of Welfare: BOLA/IDOR Exploit Chain Leaks 1GB of Citizen Data | ▣ Breach | 2026-06-01 |
| CBSE: Teen Researcher Exposes OSM Portal Vulnerabilities | ▣ Breach | 2026-06-01 |
| Carton Craft Supply: Qilin Ransomware Attack | █ Ransomware | 2026-06-01 |
| CVE-2026-8644: Critical Identity Spoofing Flaw in IBM WebSphere Application Server | ⚡ Active KEV | 2026-06-01 |
| Instructure Canvas: Shiny Hunters Extortion Settlement | █ Ransomware | 2026-06-01 |
| Pakistan Higher Education Commission: 1.5 Million Citizen Records Leaked on Cybercrime Forum | ▣ Breach | 2026-06-01 |
| Vodafone: Lapsus$ Ransomware Claim and Source Code Leak | █ Ransomware | 2026-06-01 |
| CVE-2018-25427: Stack Buffer Overflow in Arm Whois 3.11 Enables Arbitrary Code Execution | ⚡ Active KEV | 2026-06-01 |
| Mercor: LiteLLM Supply-Chain Compromise | ▣ Breach | 2026-06-01 |
| CVE-2026-9311: Critical Remote Code Execution in IBM WebSphere Application Server | ⚡ Active KEV | 2026-06-01 |
| LACMTA: Iranian MOIS-Linked Group Attribution | ▣ Breach | 2026-05-31 |
| Fortinet: Dark Web Threat Actor Claims Data Breach | ▣ Breach | 2026-05-31 |
| CVE-2026-10187: Totolink N300RH Stack-Based Buffer Overflow in setWiFiBasicConfig | ⚡ Active KEV | 2026-05-31 |
| Asopagos S.A.: Everest Ransomware Claims Colombian Financial Entity | █ Ransomware | 2026-05-31 |
| Drift Protocol and KelpDAO: Lazarus Group Crypto Heist | ▣ Breach | 2026-05-31 |
| Vercel: ShinyHunters Breach Threatens DeFi Frontends | ▣ Breach | 2026-05-31 |
| Carnival Corporation: Social Engineering Breach Exposes 6M Travelers | ▣ Breach | 2026-05-31 |
| Industrial Acceptance Corporation: INC Ransomware Breach Exposes 79,216 SSNs | ▣ Breach | 2026-05-31 |
| iGreen Energy: Mass Data Liquidation via Predictable S3 URLs | ▣ Breach | 2026-05-31 |
| City of Hamilton: Ransomware Attack Cripples Municipal Services | █ Ransomware | 2026-05-31 |
| HDFC AMC: Morpheus Ransomware Breach | █ Ransomware | 2026-05-31 |
| UK Immigration System: Third-Party Vulnerability Exposes Visa Applicant Data | ▣ Breach | 2026-05-31 |
| Belimed AG: Incransom Ransomware Breach | █ Ransomware | 2026-05-30 |
| AKM Corporation: Everest Ransomware Attack | █ Ransomware | 2026-05-30 |
| CVE-2018-25412: Delta SQL 1.8.2 Unauthenticated Arbitrary File Upload Leading to RCE | ⚡ Active KEV | 2026-05-30 |
| Home Depot Canada: Alleged DarkWeb Breach Claim | ▣ Breach | 2026-05-30 |
| Distrigaz Vest: INC Ransom Ransomware Attack | █ Ransomware | 2026-05-30 |
| ADT Inc.: ShinyHunters Vishing Attack | ▣ Breach | 2026-05-30 |
| LabExpress: incransom Ransomware Breach Exposes 200GB | █ Ransomware | 2026-05-30 |
| Carnival Corporation: ShinyHunters Vishing Breach | ▣ Breach | 2026-05-30 |
| TransferZ: Everest Ransomware Attack | █ Ransomware | 2026-05-30 |
| Kemper Corporation: ShinyHunters Salesforce Extortion Breach | ▣ Breach | 2026-05-29 |
| CVE-2026-10071: Unauthenticated Arbitrary File Upload in Interinfo DreamMaker | ⚡ Active KEV | 2026-05-29 |
| Sandstone, MN: Qilin Ransomware Breach | █ Ransomware | 2026-05-29 |
| CVE-2026-8732: Unauthenticated Admin Takeover in WP Maps Pro WordPress Plugin | ⚡ Active KEV | 2026-05-29 |
| Open Door Health Center: INC Ransomware Claim | █ Ransomware | 2026-05-29 |
| BCD Travel: ShinyHunters Alleged Salesforce and SharePoint Breach | ▣ Breach | 2026-05-29 |
| CVE-2026-0257: Palo Alto Networks PAN-OS GlobalProtect Authentication Bypass | ⚡ Active KEV | 2026-05-29 |
| WG Neukölln eG: DragonForce Ransomware Attack | █ Ransomware | 2026-05-29 |
| Connecticut Husky Medicaid Portal: Credential Theft and Payment Diversion Attempt | ▣ Breach | 2026-05-29 |
| QLS Group: DragonForce Ransomware Breach | █ Ransomware | 2026-05-29 |
| Mexican Government: Chronus Group Breach | ▣ Breach | 2026-05-29 |
| EPB Insurance: DragonForce Ransomware Claim | █ Ransomware | 2026-05-29 |
| Lithuanian Centre of Registers: Hostile State Actors Breach National Data Systems | ▣ Breach | 2026-05-29 |
| CVE-2026-3655: Authentication Bypass in WordPress OTP Login With Phone Number Plugin | ⚡ Active KEV | 2026-05-29 |
| CVE-2026-4290: Unauthenticated Arbitrary User Deletion in WP Travel Pro | ⚡ Active KEV | 2026-05-29 |
| Alpha Group Holdings: Qilin Ransomware Leak Site Listing | █ Ransomware | 2026-05-28 |
| South Korean Electronics Giant: Seedworm APT Espionage Breach | ▣ Breach | 2026-05-28 |
| CVE-2026-34311: Critical Unauthenticated Takeover in Oracle Hospitality OPERA 5 | ⚡ Active KEV | 2026-05-28 |
| CVE-2026-46817: Critical Unauthenticated Takeover in Oracle E-Business Suite Payments | ⚡ Active KEV | 2026-05-28 |
| JC Ripberger Construction: DragonForce Ransomware Leak | █ Ransomware | 2026-05-28 |
| Ajax FC: Unpatched Web Vulnerability Exposes 300,000 Fan Records | ▣ Breach | 2026-05-28 |
| CVE-2026-46839: Critical Takeover Flaw in Oracle REST Data Services | ⚡ Active KEV | 2026-05-28 |
| Mt. Spokane Pediatrics: LockBit 5.0 Ransomware Attack | █ Ransomware | 2026-05-28 |
| LACMTA: Iranian State-Sponsored Breach | ▣ Breach | 2026-05-28 |
| Otthon Centrum: Qilin Ransomware Attack | █ Ransomware | 2026-05-28 |
| West Pharmaceutical Services: Ransomware Attack Disrupts Global Operations | █ Ransomware | 2026-05-28 |
| CVE-2026-46819: Critical Unauthenticated Flaw in Oracle Internet Procurement Connector | ⚡ Active KEV | 2026-05-28 |
| Florida Physician Specialists: Network Intrusion Exposes 276K Patient Records | ▣ Breach | 2026-05-28 |
| Ameriprise Financial: ShinyHunters 200GB Salesforce and SharePoint Leak | ▣ Breach | 2026-05-28 |
| US Law Firms: Silent Ransom Group Physical Intrusion Campaign | █ Ransomware | 2026-05-28 |
| CVE-2026-46822: Critical Oracle iAssets Flaw Enables E-Business Suite Takeover | ⚡ Active KEV | 2026-05-28 |
| CVE-2026-24444: Hardcoded Password Backdoor in SDMC NE6037 Cable Modem Routers | ⚡ Active KEV | 2026-05-28 |
| Sunrise Company: Akira Ransomware Exfiltration | █ Ransomware | 2026-05-28 |
| Dataprev: INSS Beneficiary Data Leak | ▣ Breach | 2026-05-28 |
| CVE-2026-4408: Samba "check password script" Command Injection Enables Unauthenticated RCE | ⚡ Active KEV | 2026-05-28 |
| CVE-2026-46840: Critical Unauthenticated Takeover in Oracle REST Data Services | ⚡ Active KEV | 2026-05-28 |
| CVE-2026-46775: Critical Takeover Flaw in Oracle REST Data Services | ⚡ Active KEV | 2026-05-28 |
| CVE-2026-8809: Unauthenticated Admin Takeover in ACF Extended for WordPress | CVE · Critical | 2026-05-28 |
| CVE-2026-46824: Critical Oracle E-Business Suite Universal Work Queue Takeover | ⚡ Active KEV | 2026-05-28 |
| Charter Communications: ShinyHunters Vishing SaaS Extortion | ▣ Breach | 2026-05-28 |
| CVE-2026-46833: Critical Oracle Database Net Service Takeover Flaw | ⚡ Active KEV | 2026-05-28 |
| Uruguay Antel Identity Service: La Pampa Leaks Data Exfiltration | ▣ Breach | 2026-05-28 |
| ManageMyHealth: Preventable Breach Exposes 99,416 NZ Patient Records | ▣ Breach | 2026-05-27 |
| Salesforce Customers: ShinyHunters Extortion Wave | ▣ Breach | 2026-05-27 |
| CVE-2025-12686: Critical Buffer Overflow in Synology BeeStation Enables Unauthenticated RCE | ⚡ Active KEV | 2026-05-27 |
| CVE-2026-8175: Critical Buffer Overflow in IBM Aspera High-Speed Transfer | ⚡ Active KEV | 2026-05-27 |
| SPH Value: DragonForce Ransomware Attack | █ Ransomware | 2026-05-27 |
| Enns & Company: DragonForce Ransomware Attack | █ Ransomware | 2026-05-27 |
| CVE-2026-45321: TanStack npm Supply Chain Compromise via OIDC Token Theft | ⚡ Active KEV | 2026-05-27 |
| Cushman & Wakefield: ShinyHunters and Qilin Dual Ransomware Attack | █ Ransomware | 2026-05-27 |
| MyPillow: Play Ransomware Leak Site Listing | █ Ransomware | 2026-05-27 |
| CVE-2026-8398: Trojanized DAEMON Tools Lite Installers Distributed via Official Vendor Channel | ⚡ Active KEV | 2026-05-27 |
| CVE-2026-48027: Malicious Nx Console Extension Pushed to VS Code Marketplace and OpenVSX | ⚡ Active KEV | 2026-05-27 |
| IDS Group: Rhysida Ransomware Attack | █ Ransomware | 2026-05-27 |
| LACMTA: Iranian State-Linked Hackers Breach Los Angeles Transit | ▣ Breach | 2026-05-27 |
| Covenant Health: Qilin Ransomware Breach | █ Ransomware | 2026-05-27 |
| CVE-2026-8760: Login with OTP WordPress Plugin Auth Bypass via Brute-Forceable OTP | ⚡ Active KEV | 2026-05-27 |
| Xchange Technology Rentals: DragonForce Ransomware Attack | █ Ransomware | 2026-05-27 |
| CVE-2026-7524: Critical RCE in IBM Langflow OSS via Symlink Archive Extraction Flaw | ⚡ Active KEV | 2026-05-27 |
| Marks & Spencer: Scattered Spider/DragonForce Ransomware | █ Ransomware | 2026-05-26 |
| BASE SpA: SpaceBears Ransomware Attack | █ Ransomware | 2026-05-26 |
| NL Fisher: Play Ransomware Strikes Dutch Food Producer | █ Ransomware | 2026-05-26 |
| CVE-2026-48172: LiteSpeed cPanel Plugin Privilege Escalation Exploited in the Wild | ⚡ Active KEV | 2026-05-26 |
| University of Valencia: Nova Ransomware Claim | █ Ransomware | 2026-05-26 |
| ExpoCredit: Qilin Ransomware Claim | █ Ransomware | 2026-05-26 |
| Station Casinos: External Threat Actor Data Breach | ▣ Breach | 2026-05-26 |
| CVE-2026-8633: Critical RCE in IBM WebSphere Web Server Plug-ins | ⚡ Active KEV | 2026-05-26 |
| Global Retool Group: Qilin Ransomware Claim | █ Ransomware | 2026-05-26 |
| CVE-2026-48689: FastNetMon Community Edition Off-by-One Heap Overflow | ⚡ Active KEV | 2026-05-26 |
| JAKN and GGroupCPAs: DragonForce Ransomware Double Listing | █ Ransomware | 2026-05-26 |
| Heartland Growers and HELIX INTERNATIONAL: DragonForce Ransomware | ▣ Breach | 2026-05-26 |
| Sanatorio Delta: thegentlemen Ransomware Claim | █ Ransomware | 2026-05-26 |
| OnlyFans: 340M User Records Allegedly for Sale on Leak Forum | ▣ Breach | 2026-05-26 |
| Brazil SECONT: Nova Ransomware Claims Attack on Government Transparency Body | █ Ransomware | 2026-05-26 |
| Romania EduSal: 331K Education Records Allegedly Leaked by Threat Actor 'somewhere' | ▣ Breach | 2026-05-26 |
| WisERP: Dark Web Auction of Core ERP Database | ▣ Breach | 2026-05-26 |
| Russia FSB: Core Intelligence Repository Leaked Across Dark Web | ▣ Breach | 2026-05-26 |
| Saver NV: DragonForce Ransomware Extortion | █ Ransomware | 2026-05-26 |
| EGADGETS Pakistan: Dark Web Actor Claims 80M Record Telecom Leak | ▣ Breach | 2026-05-26 |
| CVE-2026-48904: Joomla! Privilege Escalation via com_users Webservice Endpoint | ⚡ Active KEV | 2026-05-26 |
| CVE-2026-48898: Joomla Privilege Escalation via com_users Batch Task | ⚡ Active KEV | 2026-05-26 |
| BusinessRecord.com: DragonForce Ransomware Attack | █ Ransomware | 2026-05-26 |
| CVE-2026-7374: KubeVirt virt-handler Symlink Flaw Enables Full Cluster Takeover | ⚡ Active KEV | 2026-05-26 |
| First VPN: Operation Saffron Takedown | █ Ransomware | 2026-05-26 |
| Lithuania Centre of Registers: Suspected Foreign Intelligence Breach | ▣ Breach | 2026-05-26 |
| CVE-2026-48899: Joomla Privilege Escalation via com_users | ⚡ Active KEV | 2026-05-26 |
| Le Perreux-sur-Marne: Ransomware Attack Disrupts Municipal Services | █ Ransomware | 2026-05-26 |
| Radiology Associates of Richmond: 266,000 Patients Exposed in July 2025 Intrusion | ▣ Breach | 2026-05-26 |
| Carnival Cruise Line: ShinyHunters Data Breach and Notification Failure | ▣ Breach | 2026-05-26 |
| Portugal SNS: Over 100,000 Patient Records Stolen via Compromised Doctor Credentials | ▣ Breach | 2026-05-26 |
| Open Source Developers: TrapDoor Supply Chain Attack | ▣ Breach | 2026-05-26 |
| Nigeria: 80 Million Citizen Records Leaked on Dark Web | ▣ Breach | 2026-05-26 |
| CERVI: Alleged Breach of South African Digital Health Platform | ▣ Breach | 2026-05-26 |
| CVE-2026-8855: IBM HTTP Server RCE and DoS via TLS Mutual Authentication | ⚡ Active KEV | 2026-05-26 |
| Openmind Networks: TheGentlemen Ransomware Breach | █ Ransomware | 2026-05-26 |
| The Adviser: Brain Cipher Ransomware Breach | █ Ransomware | 2026-05-26 |
| PT Bank Negara Indonesia (BNI): TripleX Data Breach | ▣ Breach | 2026-05-26 |
| CVE-2026-8856: IBM HTTP Server Denial-of-Service via Writable Configuration | ⚡ Active KEV | 2026-05-26 |
| La Familia Adult Day Center: NightSpire Ransomware Breach | █ Ransomware | 2026-05-26 |
| Philippine Government Agencies: Multi-Agency Repository and Salary Ledger Leak | ▣ Breach | 2026-05-26 |
| Turkey TKGM: APT73/Bashe Ransomware Attack | █ Ransomware | 2026-05-24 |
| Cablematic: Gunra Ransomware Claim | █ Ransomware | 2026-05-24 |
| Hillpointe: Dark Web Actor Claims 2.5M Record Breach | ▣ Breach | 2026-05-23 |
| Vernon & Ginsburg: Qilin Ransomware Data Extortion | █ Ransomware | 2026-05-23 |
| A-Sonic Logistics: Payload Ransomware Attack | █ Ransomware | 2026-05-23 |
| Vietnamese Ministerial Agencies: Serious Data Theft Attack Confirmed by VNCERT | ▣ Breach | 2026-05-23 |
| Connecticut Medicaid (HUSKY): Credential Compromise Exposes 22,500 Enrollees | ▣ Breach | 2026-05-23 |
| University of Mississippi Medical Center: Ransomware Attack and Potential HIPAA Violation | █ Ransomware | 2026-05-23 |
| Semgrep: Qilin Ransomware Attack | █ Ransomware | 2026-05-23 |
| Robinsons Singapore: Alleged Ransomware Attack | █ Ransomware | 2026-05-23 |
| Starbucks: shadowbyt3$ Ransomware Breach | █ Ransomware | 2026-05-23 |
| Bit2Win: Alleged Source Code Sale on Dark Web | ▣ Breach | 2026-05-23 |
| Passion for a Purpose: Handala Hack and Leak Operation | ▣ Breach | 2026-05-23 |
| Charter Communications: ShinyHunters Ransomware Attack | █ Ransomware | 2026-05-23 |
| Education LMS Platform: Ransomware Crew Steals 275M Records | ▣ Breach | 2026-05-23 |
| Lithuania State Registry: 600,000 Records Exfiltrated in Cross-Border Cyber Intrusion | ▣ Breach | 2026-05-23 |
| Buffalo Niagara Convention Center: Akira Ransomware Attack | █ Ransomware | 2026-05-23 |
| Minsa: APT73/Bashe Ransomware Attack | █ Ransomware | 2026-05-23 |
| Internal Medicine and Pediatrics of Cullman: Payload Ransomware Leak Site Listing | █ Ransomware | 2026-05-23 |
| Atol Group: Alleged Dark Web Sale of 5.9M Customer Records | ▣ Breach | 2026-05-23 |
| GITIS: Akira Ransomware 30GB Data Extortion | █ Ransomware | 2026-05-23 |
| Karlin Foods: Akira Ransomware Attack | █ Ransomware | 2026-05-23 |
| DentaQuest: ShinyHunters Ransomware Claim | █ Ransomware | 2026-05-23 |
| Unimed: Billing Provider Breach Cascades Across German University Hospitals | ▣ Breach | 2026-05-23 |
| Medical Provider: BlackCat Insider Affiliates Sentenced | ▣ Breach | 2026-05-22 |
| Cardinal Services: Rhysida and INC Ransomware Double Breach | █ Ransomware | 2026-05-22 |
| Port of Seattle: Rhysida Ransomware Data Theft | █ Ransomware | 2026-05-22 |
| Trump Mobile: Customer Data Exposure via Third Party Platform | ▣ Breach | 2026-05-22 |
| Vega Corp: DragonForce Ransomware Attack | █ Ransomware | 2026-05-22 |
| CVE-2026-9082: Drupal Core SQL Injection Enables Privilege Escalation and RCE | ⚡ Active KEV | 2026-05-22 |
| German University Hospitals: Third-Party Billing Provider Breach | ▣ Breach | 2026-05-22 |
| Vial Agro: Qilin Ransomware Attack | █ Ransomware | 2026-05-22 |
| T-Mobile and Sprint: 58 Million Consumer Lines Auctioned on Dark Web | ▣ Breach | 2026-05-22 |
| NYC Hospital Network: 1.8M Patient Records and Biometric Fingerprints Exfiltrated | ▣ Breach | 2026-05-22 |
| AdvancedHEALTH: DragonForce Ransomware Breach | █ Ransomware | 2026-05-22 |
| Almerys: 44 Million Healthcare Records Listed on Hacker Forum | ▣ Breach | 2026-05-22 |
| Exchange Group: Pear Ransomware Attack | █ Ransomware | 2026-05-22 |
| Liberty Mutual: Everest Ransomware Breach Exposes 15,000+ Policyholders | █ Ransomware | 2026-05-22 |
| Stuttgart: Rhysida Ransomware Data Theft Claim | █ Ransomware | 2026-05-22 |
| Porter W Yett: Qilin Ransomware Attack | █ Ransomware | 2026-05-22 |
| Beacon Mutual: Ransomware Attack Exposes 132,000 Rhode Islanders | █ Ransomware | 2026-05-22 |
| CVE-2026-6279: Unauthenticated RCE in Avada Builder for WordPress | ⚡ Active KEV | 2026-05-21 |
| Kabushiki Gaisha Hodozuka Setsubi: Payload Ransomware Attack | █ Ransomware | 2026-05-21 |
| Perm National Research Polytechnic University: Dark Web Data Leak Exposes 360K+ Records | ▣ Breach | 2026-05-21 |
| CVE-2026-34926: Trend Micro Apex One On-Premise Directory Traversal Added to CISA KEV | ⚡ Active KEV | 2026-05-21 |
| CVE-2026-6960: Unauthenticated Arbitrary File Upload in BookingPress Pro for WordPress | ⚡ Active KEV | 2026-05-21 |
| Erie Family Health Centers: 570,000 Patient Records Exposed in 48-Day Network Intrusion | ▣ Breach | 2026-05-21 |
| AFC Ajax: Data Breach via Exposed APIs and Shared Keys | ▣ Breach | 2026-05-21 |
| Uruguay DNIC: Alleged Dark Web Leak of 5.8M Citizen Records | ▣ Breach | 2026-05-21 |
| CVE-2026-5118: Divi Form Builder WordPress Plugin Privilege Escalation to Admin | ⚡ Active KEV | 2026-05-21 |
| Global Cardholders: B1ack's Stash Carding Marketplace Dump | ▣ Breach | 2026-05-21 |
| CVE-2025-34291: Langflow CORS Misconfiguration Enables Account Takeover and RCE | ⚡ Active KEV | 2026-05-21 |
| Microsoft: Fox Tempest Malware-Signing-as-a-Service Disruption | ▣ Breach | 2026-05-21 |
| Monir Precision Monitoring: Qilin Ransomware Attack | █ Ransomware | 2026-05-20 |
| CVE-2008-4250: Microsoft Windows Server Service RPC Buffer Overflow Resurfaces on CISA KEV | ⚡ Active KEV | 2026-05-20 |
| CVE-2026-7637: Unauthenticated PHP Object Injection in WordPress Boost Plugin | ⚡ Active KEV | 2026-05-20 |
| Unit 221B: ShinyHunters Retaliation Campaign | ▣ Breach | 2026-05-20 |
| CVE-2009-1537: Microsoft DirectX QuickTime Parser Flaw Added to CISA KEV | ⚡ Active KEV | 2026-05-20 |
| CVE-2010-0249: Internet Explorer Use-After-Free Resurfaces on CISA KEV | ⚡ Active KEV | 2026-05-20 |
| Stewarts Care: Third-Party Recruiter Breach Exposes Staff Data | ▣ Breach | 2026-05-20 |
| CVE-2026-9139: Hard-Coded Credentials in Taiko AG1000-01A SMS Alert Gateway | ⚡ Active KEV | 2026-05-20 |
| CVE-2026-9141: Authentication Bypass in Taiko AG1000-01A SMS Alert Gateway | ⚡ Active KEV | 2026-05-20 |
| Nacogdoches Memorial Hospital: 2.5M Patient Records Exfiltrated in Network Intrusion | ▣ Breach | 2026-05-20 |
| CVE-2009-3459: Adobe Acrobat and Reader Heap-Based Buffer Overflow Resurfaces on CISA KEV | ⚡ Active KEV | 2026-05-20 |
| Extant Aerospace: Ransomware Attack Exposes Employee SSNs at DoD Supplier | █ Ransomware | 2026-05-20 |
| VUMI: Dark Web Extortion Claim Over 300,000 Records | ▣ Breach | 2026-05-20 |
| CVE-2026-45498: Microsoft Defender Denial of Service Vulnerability | ⚡ Active KEV | 2026-05-20 |
| CVE-2026-7284: Easy Elements for Elementor Plugin Allows Unauthenticated Admin Takeover | ⚡ Active KEV | 2026-05-20 |
| CVE-2026-6555: Unauthenticated RCE in ProSolution WP Client Plugin via Arbitrary File Upload | ⚡ Active KEV | 2026-05-20 |
| Uruguay DNIC: Alleged 5.8M Citizen Database Leak | ▣ Breach | 2026-05-20 |
| CVE-2010-0806: Internet Explorer Use-After-Free Resurfaces on CISA KEV | ⚡ Active KEV | 2026-05-20 |
| GitHub: TeamPCP Internal Repo Breach | ▣ Breach | 2026-05-20 |
| SA Web Hosts and Telecoms: 'Black Matter' DDoS Extortion Campaign | ▣ Breach | 2026-05-20 |
| CVE-2026-41091: Microsoft Defender Link Following Flaw Lets Local Attackers Escalate to SYSTEM | ⚡ Active KEV | 2026-05-20 |
| CVE-2026-20223: Cisco Secure Workload REST API Auth Bypass Grants Site Admin Access | ⚡ Active KEV | 2026-05-20 |
| CVE-2026-4885: Unauthenticated Arbitrary File Upload in Piotnet Addons for Elementor Pro | ⚡ Active KEV | 2026-05-19 |
| Arwini Niedersachsen: Kairos Ransomware Data Exfiltration | ▣ Breach | 2026-05-19 |
| Vacu-Lug: Akira Ransomware 40GB Data Heist | █ Ransomware | 2026-05-19 |
| Safaricom: Kenyan High Court Ruling on Telecom Data Breach | ▣ Breach | 2026-05-19 |
| CVE-2026-4883: Unauthenticated Arbitrary File Upload in Piotnet Forms WordPress Plugin | ⚡ Active KEV | 2026-05-19 |
| Metaval: INC Ransom Claims 80GB Data Theft | █ Ransomware | 2026-05-19 |
| Aura: ShinyHunters Vishing Breach | ▣ Breach | 2026-05-19 |
| US Healthcare Sector: Multiple Breaches Expose Millions via HHS Tracker | ▣ Breach | 2026-05-19 |
| CVE-2026-43633: Unauthenticated Root RCE in HestiaCP Web Terminal | ⚡ Active KEV | 2026-05-19 |
| Gîtes de France: Customer Data Theft Exposes 389,000 Records | ▣ Breach | 2026-05-19 |
| Tabiq: 1M+ Passports Exposed via Public S3 Bucket | ▣ Breach | 2026-05-19 |
| Enterprise Cloud Tenant: Storm-2949 Identity-Driven Breach | ▣ Breach | 2026-05-19 |
| Pitney Bowes: ShinyHunters Salesforce Breach | ▣ Breach | 2026-05-18 |
| Canvas (Instructure): Global LMS Breach Impacting 9,000 Institutions | ▣ Breach | 2026-05-18 |
| CVE-2026-42822: Critical Authentication Bypass in Azure Local Disconnected Operations | ⚡ Active KEV | 2026-05-18 |
| US Fuel Infrastructure: Suspected Iranian ATG Intrusions | ▣ Breach | 2026-05-18 |
| Clinica Avellaneda: Qilin Ransomware Attack | █ Ransomware | 2026-05-18 |
| CVE-2026-45230: Unauthenticated Path Traversal in DumbAssets Enables Arbitrary File Deletion | ⚡ Active KEV | 2026-05-18 |
| URG OEM: Nova Ransomware Attack | █ Ransomware | 2026-05-18 |
| 7-Eleven: ShinyHunters Salesforce Breach | ▣ Breach | 2026-05-18 |
| Instructure: ShinyHunters Canvas Extortion | █ Ransomware | 2026-05-18 |
| CISA: Contractor Leaks AWS GovCloud Keys on Public GitHub | ▣ Breach | 2026-05-18 |
| NYC Health + Hospitals: 1.8M Patient Records Stolen in Breach | ▣ Breach | 2026-05-18 |
| WTI Transport: Chaos Ransomware 72-Hour Ultimatum | █ Ransomware | 2026-05-18 |
| Samuel Shay: Handala Claims Breach of Israeli Normalization Architect | ▣ Breach | 2026-05-18 |
| TransUnion: Consumer Data Breach Exposes 4.4 Million Records | ▣ Breach | 2026-05-18 |
| Oracle: 2026 Multi-System Cloud and Health Data Breach | ▣ Breach | 2026-05-18 |
| Belambra: Tourism Sector Data Breach Wave | ▣ Breach | 2026-05-18 |
| CVE-2026-8836: Critical Stack Buffer Overflow in lwIP SNMPv3 USM Handler | ⚡ Active KEV | 2026-05-18 |
| Irish Revenue Commissioners: 137 Staff Exposed in Pitney Bowes Ransomware Breach | ▣ Breach | 2026-05-18 |
| Tokee: 1.2M User Profiles Exposed via Unsecured MongoDB | ▣ Breach | 2026-05-18 |
| Samuel Shay: Handala Claims Breach of Israeli Normalization Architect | ▣ Breach | 2026-05-18 |
| CVE-2024-3400: Critical Command Injection in Palo Alto Networks PAN-OS GlobalProtect | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-20133: Cisco Catalyst SD-WAN Manager Leaks Sensitive Information to Remote Attackers | ⚡ Active KEV | 2026-05-17 |
| CVE-2025-48700: Zimbra Classic UI XSS Exploited in the Wild | ⚡ Active KEV | 2026-05-17 |
| CVE-2024-1708: ConnectWise ScreenConnect Path Traversal Enables Remote Code Execution | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-35616: Critical Unauthenticated RCE in Fortinet FortiClient EMS | ⚡ Active KEV | 2026-05-17 |
| American Lending Center: 123,000 Individuals Exposed in Network Intrusion | ▣ Breach | 2026-05-17 |
| Grafana Labs: Source Code Theft and Ransom Refusal | █ Ransomware | 2026-05-17 |
| CVE-2026-0300: Critical PAN-OS Captive Portal RCE Under Active Exploitation | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-21385: Qualcomm Chipset Memory Corruption Flaw Added to CISA KEV | ⚡ Active KEV | 2026-05-17 |
| CVE-2024-57726: SimpleHelp Privilege Escalation Flaw Hits CISA KEV with Known Ransomware Use | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-6973: Authenticated RCE in Ivanti Endpoint Manager Mobile | ⚡ Active KEV | 2026-05-17 |
| African National Congress: Black Axe Data Breach | ▣ Breach | 2026-05-17 |
| CVE-2023-21529: Microsoft Exchange Server Deserialization Flaw Exploited in Medusa Ransomware Campaigns | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-24512: ingress-nginx Path Injection Enables Cluster-Wide Secret Disclosure and RCE | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-20122: Cisco Catalyst SD-WAN Manager Privileged API Abuse Lets Read-Only Users Escalate to vManage | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-41940: cPanel & WHM Authentication Bypass Under Active Ransomware Exploitation | ⚡ Active KEV | 2026-05-17 |
| CVE-2020-9715: Adobe Acrobat Use-After-Free Enables Code Execution | ⚡ Active KEV | 2026-05-17 |
| CVE-2024-27199: JetBrains TeamCity Path Traversal Enables Limited Admin Actions | ⚡ Active KEV | 2026-05-17 |
| CVE-2009-0238: Microsoft Excel Invalid Object Access Enables Remote Code Execution | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-34621: Adobe Acrobat and Reader Prototype Pollution Enables Arbitrary Code Execution | ⚡ Active KEV | 2026-05-17 |
| Moroccan Government Platforms: Fexus Claims Massive govma Breach | ▣ Breach | 2026-05-17 |
| CVE-2012-1854: Microsoft VBA Insecure Library Loading Resurfaces on CISA KEV | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-3502: TrueConf Client Update Mechanism Lacks Integrity Verification | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-20128: Cisco Catalyst SD-WAN Manager Stores DCA Credentials in Recoverable Format | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-39987: Pre-Auth RCE in Marimo Python Notebook | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-21643: Critical SQL Injection in Fortinet FortiClient EMS | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-5281: Use-After-Free in Chrome's Dawn Graphics Layer Hits CISA KEV | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-42208: Unauthenticated SQL Injection in BerriAI LiteLLM Proxy | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-20182: Cisco Catalyst SD-WAN Authentication Bypass Hands Attackers Admin Control | ⚡ Active KEV | 2026-05-17 |
| CVE-2025-29635: D-Link DIR-823X Command Injection Added to CISA KEV | ⚡ Active KEV | 2026-05-17 |
| Senegal Public Treasury: Cyberattack and Data Extortion Threat | ▣ Breach | 2026-05-17 |
| CVE-2026-31431: Linux Kernel algif_aead Flaw Enables Local Privilege Escalation | ⚡ Active KEV | 2026-05-17 |
| CVE-2024-57728: SimpleHelp Zip Slip Path Traversal Enables Remote Code Execution | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-32202: Windows Shell Spoofing Flaw Added to CISA KEV | ⚡ Active KEV | 2026-05-17 |
| CVE-2023-27351: PaperCut NG/MF Authentication Bypass Added to CISA KEV | ⚡ Active KEV | 2026-05-17 |
| CVE-2024-7399: Samsung MagicINFO 9 Server Path Traversal Enables Arbitrary File Write as SYSTEM | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-34197: Apache ActiveMQ Jolokia Code Injection Lands on CISA KEV | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-1340: Critical Code Injection in Ivanti Endpoint Manager Mobile | ⚡ Active KEV | 2026-05-17 |
| United Quality Cooperative: INC Ransom Ransomware Attack | █ Ransomware | 2026-05-17 |
| CVE-2026-33825: Microsoft Defender Local Privilege Escalation Added to CISA KEV | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-32201: SharePoint Server Spoofing Flaw Added to CISA KEV | ⚡ Active KEV | 2026-05-17 |
| CVE-2023-36424: Windows CLFS Driver Elevation of Privilege Flaw Added to CISA KEV | ⚡ Active KEV | 2026-05-17 |
| CVE-2025-32975: Quest KACE SMA Authentication Bypass Enables Full Admin Takeover | ⚡ Active KEV | 2026-05-17 |
| CVE-2025-60710: Windows Host Process Link-Following Flaw Exploited in the Wild | ⚡ Active KEV | 2026-05-17 |
| CVE-2025-2749: Authenticated Path Traversal to RCE in Kentico Xperience | ⚡ Active KEV | 2026-05-17 |
| CVE-2026-42897: Microsoft Exchange Server XSS Flaw Added to CISA KEV | ⚡ Active KEV | 2026-05-17 |
| Samuel Shay: Handala Hackers Claim Breach of Abraham Accords Architect | ▣ Breach | 2026-05-17 |
| CVE-2026-22719: Unauthenticated Command Injection in VMware Aria Operations | ⚡ Active KEV | 2026-05-17 |
| Bono Juana Azurduy (Bolivia): Public Sector Data Leak by konata_izumi_shell | ▣ Breach | 2026-05-16 |
| Florida Reliability Coordinating Council: Unauthorized File Copying Exposes SSNs | ▣ Breach | 2026-05-16 |
| France Titres: Massive State ID Database Breach | ▣ Breach | 2026-05-16 |
| Aintree Hospital: Insider Snooping on Southport Attack Victims | ▣ Breach | 2026-05-16 |
| Qantas: Third-Party Contact Centre Platform Breach | ▣ Breach | 2026-05-16 |
| NHS Aintree Hospital: Insider Snooping on Southport Attack Victims | ▣ Breach | 2026-05-16 |
| US Tiger Securities: Ransomware Breach Exposes SSNs and Medical Data | ▣ Breach | 2026-05-16 |
| US Gas Stations: Suspected Iranian Intrusion Into Fuel Tank Readers | ▣ Breach | 2026-05-16 |
| Spirit Medical Transport: Qilin Ransomware Attack | █ Ransomware | 2026-05-16 |
| Opexus: Insider Revenge Attack by Akhter Twins | ▣ Breach | 2026-05-16 |
| Pierre et Vacances-Center Parcs: Platform Vulnerability Exploited | ▣ Breach | 2026-05-16 |
| Comcast: $117M Settlement Over Confirmed Customer Data Breach | ▣ Breach | 2026-05-16 |
| York City, PA: July 2025 Ransomware Attack | █ Ransomware | 2026-05-15 |
| British Airways: Infrastructure Destruction Squad Claims Breach | ▣ Breach | 2026-05-15 |
| OpenLoop Health: Telehealth Breach Exposes 716,000 Patients | ▣ Breach | 2026-05-15 |
| OpenAI: Mini Shai-Hulud npm Supply Chain Worm | ▣ Breach | 2026-05-15 |
| Mistral AI: TeamPCP Supply Chain Breach | ▣ Breach | 2026-05-15 |
| Abrigo: ShinyHunters Pay or Leak Extortion | ▣ Breach | 2026-05-15 |
| Excelas: Cl0p Ransomware Breach Exposes Medical Records | ▣ Breach | 2026-05-15 |
| Bluize: Qilin Ransomware Claim | █ Ransomware | 2026-05-15 |
| Rockstar Games: ShinyHunters Snowflake Token Abuse | ▣ Breach | 2026-05-14 |
| Ahmed Al-Kadi Private Hospital: Ransomware Breach Encrypts Portions of IT Environment | █ Ransomware | 2026-05-13 |
| Earth Systems: INC Ransom Claims 600GB Breach | █ Ransomware | 2026-05-13 |
| PACI Kuwait: Alleged State Level Infrastructure Breach | ▣ Breach | 2026-05-13 |
| Thales Group: Alleged Data Leak Tied to LuxTrust Identity Infrastructure | ▣ Breach | 2026-05-13 |
| Chevin Fleet Solutions: FleetWave SaaS Breach Exposes Customer Data | ▣ Breach | 2026-05-13 |
| Lockheed Martin: APT Iran Data Exfiltration | ▣ Breach | 2026-05-13 |
| West Pharmaceutical Services: Ransomware Attack Disrupts Global Manufacturing | █ Ransomware | 2026-05-13 |
| Checkmarx: TeamPCP Jenkins Plugin Supply Chain Attack | ▣ Breach | 2026-05-12 |
| Foxconn: Nitrogen Ransomware 8TB Data Theft | █ Ransomware | 2026-05-12 |
| Enterprise Cloud Environments: FulcrumSec Extortion Campaign | ▣ Breach | 2026-05-12 |
| Hong Kong Canvas Users: ShinyHunters Data Breach | ▣ Breach | 2026-05-12 |
| Canvas LMS: ShinyHunters Global Breach | ▣ Breach | 2026-05-11 |
| Unoaerre: Ransomware Attack Halts Italian Jewelry Manufacturing | █ Ransomware | 2026-05-11 |
| Egypt Ministry of Civil Aviation: Alleged Dark Web Breach | ▣ Breach | 2026-05-11 |
| Indian Customs Department: Insider Data Theft to China-Based Firms | ▣ Breach | 2026-05-11 |
| Aerospace and Drone Operators: HeartlessSoul Espionage Campaign | ▣ Breach | 2026-05-11 |
| Medtronic: ShinyHunters Steals 9 Million Records | ▣ Breach | 2026-05-11 |
| VP Brands International: LockBit 5.0 Ransomware Breach | █ Ransomware | 2026-05-11 |
| SFR: Alleged Dark Web Data Breach Claim | ▣ Breach | 2026-05-11 |
| AMS Group: Stormous Ransomware 33GB Data Dump | █ Ransomware | 2026-05-11 |
| Vodafone: Lapsus$ Source Code Leak | ▣ Breach | 2026-05-11 |
| Maryland University: Exfil-Ware Ransomware Breach | ▣ Breach | 2026-05-11 |
| TDS Telecommunications: TheGentlemen Ransomware Attack | █ Ransomware | 2026-05-11 |
| Coupang Taiwan: 33.7 Million Account Data Breach | ▣ Breach | 2026-05-10 |
| Minidoka Memorial Hospital: Blackwater Ransomware Attack | █ Ransomware | 2026-05-10 |
| Serveis Mèdics Penedès: SafePay Ransomware 48-Hour Extortion | █ Ransomware | 2026-05-10 |
| Canada Goose: ShinyHunters Historical Data Leak | ▣ Breach | 2026-05-09 |
| Zara: ShinyHunters Third-Party Breach | ▣ Breach | 2026-05-09 |
| US Healthcare and Middle East Org: Lazarus Group Medusa Ransomware | █ Ransomware | 2026-05-09 |
| US Federal Agencies: Insider Threat Database Destruction | ▣ Breach | 2026-05-09 |
| CarGurus: ShinyHunters Voice Phishing Breach | ▣ Breach | 2026-05-09 |
| US Federal Agencies: Insider Threat Database Destruction | ▣ Breach | 2026-05-09 |
| Mexican Water Utility: Claude AI Abused in OT Compromise Attempt | ▣ Breach | 2026-05-09 |
| US Federal Agencies: Insider Database Destruction by Terminated Contractors | ▣ Breach | 2026-05-09 |
| Nostrum Corporation: The Gentlemen Ransomware Attack | █ Ransomware | 2026-05-08 |
| Government Agencies: UAT-8302 China-Linked Espionage Campaign | ▣ Breach | 2026-05-08 |
| Canadian Government: $8.7M Settlement Over 2020 CRA Account Breach | ▣ Breach | 2026-05-08 |
| University of Pennsylvania: ShinyHunters Canvas Ransom Attack | █ Ransomware | 2026-05-08 |
| ANTS (France Titres): Teen Hacker Breaches National ID Agency | ▣ Breach | 2026-05-08 |
| Flemish Universities and VUB: ShinyHunters Canvas Breach | ▣ Breach | 2026-05-08 |
| Change Healthcare: BlackCat Ransomware Attack | █ Ransomware | 2026-05-08 |
| Liberty Mutual: Everest Ransomware Leak | █ Ransomware | 2026-05-07 |
| Finland's Valtori: Suspected State Espionage Breach | ▣ Breach | 2026-05-07 |
| Expeditor Systems: Incransom Ransomware Attack | █ Ransomware | 2026-05-07 |
| Vercel: ShinyHunters OAuth Token Supply Chain Attack | ▣ Breach | 2026-05-07 |
| TTT Corporation: Stormous Ransomware 5TB Data Theft | █ Ransomware | 2026-05-07 |
| Woflow: ShinyHunters Leak Exposes 447,600 Accounts | ▣ Breach | 2026-05-07 |
| Energy Action: SafePay Ransomware Breach | █ Ransomware | 2026-05-07 |
| Sandhills Medical Foundation: Ransomware Attack | █ Ransomware | 2026-05-07 |
| Oman Government Ministries: Iranian-Nexus Webshell Intrusion | ▣ Breach | 2026-05-06 |
| INSS: Handala Multi-Year Breach | ▣ Breach | 2026-05-06 |
| DigiCert: Screensaver Phish Yields EV Code Signing Certificates | ▣ Breach | 2026-05-06 |
| Sterling Bank: ByteToBreach Data Breach | ▣ Breach | 2026-05-06 |
| Russian Government: Karakurt Ransomware Gang Insider Access | █ Ransomware | 2026-05-06 |
| City of Suffolk, Virginia: Cloak Ransomware Data Breach | ▣ Breach | 2026-05-05 |
| Ardmore Police Department: Phishing-Triggered Ransomware Attack | █ Ransomware | 2026-05-05 |
| Rhode Island RIBridges: Brain Cipher Ransomware Settlement | ▣ Breach | 2026-05-05 |
| Mediaworks: World Leaks Ransomware Breach | █ Ransomware | 2026-05-05 |
| Frost Bank: Everest Ransomware Vendor Breach | █ Ransomware | 2026-05-05 |
| Canvas LMS: ShinyHunters Claims 3.65TB Breach Affecting 275M Users | ▣ Breach | 2026-05-04 |
| TriZetto Provider Solutions: Web Portal Breach Exposes 3.4M Patients | ▣ Breach | 2026-05-04 |
| Conduent Business Services: Ransomware Breach of 25M Americans | ▣ Breach | 2026-05-04 |
| Lotte Card: 2.97M Customer Data Breach | ▣ Breach | 2026-05-04 |
| Prime Properties: M3rx Ransomware Darknet Leak | ▣ Breach | 2026-05-04 |
| NVIDIA GeForce NOW: ShinyHunters Claims Millions of User Records Stolen | ▣ Breach | 2026-05-04 |
| Capita: Civil Service Pension Data Exposure | ▣ Breach | 2026-05-04 |
| Capital One: $425M Settlement Approved for 2019 Cloud Breach | ▣ Breach | 2026-05-04 |
| Cushman & Wakefield: ShinyHunters Ransomware Attack | █ Ransomware | 2026-05-04 |
| Alberta Residents: Centurion Project Data Exposure | ▣ Breach | 2026-05-04 |
| Sistemi Informativi: Salt Typhoon Espionage Breach | ▣ Breach | 2026-05-04 |
| MoneyForward: GitHub Credential Compromise | ▣ Breach | 2026-05-04 |
| US Navy: Handala Claims Personnel Data Breach | ▣ Breach | 2026-05-03 |
| European Commission: ShinyHunters Cloud Data Breach | ▣ Breach | 2026-05-03 |
| ANTS (France Titres): Teen Hacker Breaches National ID Agency | ▣ Breach | 2026-05-03 |
| Nepal Public Procurement System: Insider Bid-Rigging Hack Ring | ▣ Breach | 2026-05-03 |
| Trellix: Source Code Repository Breach | ▣ Breach | 2026-05-03 |
| Wyoming County Government: ThreeAM Ransomware Attack | █ Ransomware | 2026-05-03 |
| Orange: Babuk Ransomware Breach Claim | █ Ransomware | 2026-05-03 |
| cPanel Servers: Sorry Ransomware Mass Exploitation | CVE · Critical | 2026-05-03 |
| Instructure: Canvas LMS Maker Discloses Cyber Incident | ▣ Breach | 2026-05-03 |
| Pakistan Government and Military: Alleged 39GB Dark Web Leak | ▣ Breach | 2026-05-02 |
| McGraw-Hill: ShinyHunters Salesforce Breach | ▣ Breach | 2026-05-02 |
| Follett Software LLC: ShinyHunters Ransomware Leak Listing | █ Ransomware | 2026-05-02 |
| MST (Sanko Makina/ASKO Holding): Blacknevas 7-Month Cyber Siege | ▣ Breach | 2026-05-02 |
| Aman: ShinyHunters Pay or Leak Extortion | ▣ Breach | 2026-05-02 |
| Checkmarx KICS: Supply Chain Compromise via Trojanized Docker and IDE Extensions | ▣ Breach | 2026-05-02 |
| France Titres (ANTS): Teen Hacker Breaches State ID Agency | ▣ Breach | 2026-05-02 |
| Moldova CNAM: Mysterious Healthcare Database Breach | ▣ Breach | 2026-05-02 |
| Canonical: 313 Team DDoS and Extortion | ▣ Breach | 2026-05-02 |
| ZenBusiness: ShinyHunters Extortion Breach | ▣ Breach | 2026-05-02 |
| Adams County, PA: Ransomware Attack Disrupts County Services | █ Ransomware | 2026-05-02 |
| ChipSoft: Embargo Ransomware Breach | ▣ Breach | 2026-05-02 |
| KINAS Solicitors: BlackNevas Ransomware Breach | █ Ransomware | 2026-05-02 |
| PowerSchool: Teen Hacker Credential Theft Breach | ▣ Breach | 2026-05-02 |
| Medicare: Doctor Data Breach | ▣ Breach | 2026-05-02 |
| Canada Life: ShinyHunters Breach via Compromised Employee Account | ▣ Breach | 2026-05-02 |
| Integer Holdings: coinbasecartel Ransomware Breach | █ Ransomware | 2026-05-01 |
| Gregory Jewellers: Kairos Ransomware Breach | █ Ransomware | 2026-05-01 |
| Sandhills Medical Foundation: Inc Ransom Ransomware Breach | █ Ransomware | 2026-05-01 |
| Canadian Tire: 38.3 Million Customer Accounts Exposed in E-commerce Database Breach | ▣ Breach | 2026-05-01 |
| Prime Properties: M3rx Ransomware Breach | █ Ransomware | 2026-05-01 |
| SMSA Express: 1.2M Customer Shipment Records Listed for Sale by lulzintel | ▣ Breach | 2026-05-01 |
| Polymarket: xorcat Data Breach | ▣ Breach | 2026-04-30 |
| SAP: Mini Shai-Hulud npm Supply Chain Attack | ▣ Breach | 2026-04-30 |
| Cuban Embassy DC: Chinese State-Linked Espionage Breach | ▣ Breach | 2026-04-30 |
| Winona County, Minnesota: Ransomware Data Leak After Refusal to Pay | █ Ransomware | 2026-04-30 |
| Scattered Spider: Federal Charges Filed Against Teen Member Arrested in Finland | ▣ Breach | 2026-04-30 |
| Lower Hutt City Council: Phishing Compromise Exposes Resident Data | ▣ Breach | 2026-04-30 |
| Foreign Governments and Activists: I-Soon Contractor Leak | ▣ Breach | 2026-04-30 |
| Illinois and Texas Healthcare Providers: Insomnia Ransomware Breach | █ Ransomware | 2026-04-30 |
| UPSRTC: Third-Party Ransomware Attack Cripples Electronic Ticketing System | █ Ransomware | 2026-04-30 |
| City of Ardmore, Oklahoma: Ransomware Attack Exposes Resident Data | █ Ransomware | 2026-04-29 |
| STELIA Aerospace: Rhysida Ransomware Hits North American Systems | █ Ransomware | 2026-04-29 |
| Sumac Inc.: Incransom Ransomware Attack | █ Ransomware | 2026-04-29 |
| Vimeo: ShinyHunters Exfiltration via Anodot Supply Chain Breach | ▣ Breach | 2026-04-29 |
| US DOJ: Silk Typhoon MSS Contractor Extradited | ▣ Breach | 2026-04-28 |
| Synmosa Biopharma: DragonForce Ransomware Breach | █ Ransomware | 2026-04-28 |
| U.S. Justice System: Chinese State Hacker Xu Zewei Extradited | ▣ Breach | 2026-04-28 |
| Wm. Sopko & Sons Co.: DragonForce Ransomware Attack | █ Ransomware | 2026-04-28 |
| Pitney Bowes: ShinyHunters Extortion Leak | ▣ Breach | 2026-04-28 |
| Selex Gruppo Commerciale: INC Ransom Ransomware Breach | █ Ransomware | 2026-04-28 |
| Silk Typhoon: Alleged MSS Contract Hacker Extradited to US | ▣ Breach | 2026-04-28 |
| Fidelity: $1.25M Massachusetts Fine Over Customer Data Breach | ▣ Breach | 2026-04-28 |
| Pine Bluff School District: Business Email Compromise Wire Fraud | ▣ Breach | 2026-04-28 |
| Gelatissimo: DragonForce Ransomware Data Theft | █ Ransomware | 2026-04-28 |
| Lee & Lee Country Club: Suspected North Korean State-Sponsored Breach | ▣ Breach | 2026-04-27 |
| 100+ Global Enterprises: Coinbase Cartel Infostealer Extortion Spree | █ Ransomware | 2026-04-27 |
| U.S. Universities: Hafnium MSS Operative Extradited | ▣ Breach | 2026-04-27 |
| Generation Life: Third-Party Vendor Compromise | ▣ Breach | 2026-04-27 |
| Heinrichs Logistic: LockBit 5 Ransomware Listing | █ Ransomware | 2026-04-27 |
| Itron: Internal Network Breach Disclosed in SEC 8-K Filing | ▣ Breach | 2026-04-27 |
| Vodafone UK: LAPSUS$ Claims Internal Network Breach | ▣ Breach | 2026-04-27 |
| Marcus & Millichap: ShinyHunters Salesforce Extortion | ▣ Breach | 2026-04-27 |
| BELFOR Asia: INC Ransom Ransomware Listing | █ Ransomware | 2026-04-27 |
| Merlo.de: LockBit5 Ransomware Listing | █ Ransomware | 2026-04-26 |
| Medtronic: IT Systems Cybersecurity Breach Disclosed | ▣ Breach | 2026-04-26 |
| TruGreen: Incransom Ransomware Double Extortion | █ Ransomware | 2026-04-26 |
| Southern Illinois Dermatology: Hacking Incident Exposes 160,312 Patients | ▣ Breach | 2026-04-26 |
| Transport Workers Union Local 100: Confirmed Data Breach Affecting Up to 100,000 Records | ▣ Breach | 2026-04-26 |
| Buckley Powder and Leistritz Turbine Technology: Qilin Ransomware Double Extortion | █ Ransomware | 2026-04-26 |
| BePrime: Admin Account Compromise via Missing MFA | ▣ Breach | 2026-04-26 |
| Retail and Hospitality: BlackFile Extortion Campaign | ▣ Breach | 2026-04-26 |
| NPK Fertilizer Sdn Bhd: Lamashtu Ransomware Attack | █ Ransomware | 2026-04-25 |
| Sagent Pharmaceuticals: Worldleaks Network Intrusion Exposes SSNs | ▣ Breach | 2026-04-25 |
| LACOE: Tax Portal Breach and Employee Identity Theft | ▣ Breach | 2026-04-25 |
| Five U.S. Victim Organizations: Insider Leak to BlackCat/ALPHV Ransomware | █ Ransomware | 2026-04-25 |
| ADT: ShinyHunters Vishing Breach | ▣ Breach | 2026-04-25 |
| AT&T Careers: Everest Ransomware Leak | █ Ransomware | 2026-04-25 |
| Progressive Propane: Qilin Ransomware Claims US Energy Sector Attack | █ Ransomware | 2026-04-25 |
| Ransomware Victims: Insider Betrayal by BlackCat Negotiator | ▣ Breach | 2026-04-25 |
| Studio Più: LockBit 5.0 Ransomware Attack | █ Ransomware | 2026-04-25 |
| Bitwarden CLI: Shai-Hulud Supply Chain Worm | ▣ Breach | 2026-04-25 |
| Harrison County, WV: Courthouse and Sheriff's Tax Office Cyber Incident | ▣ Breach | 2026-04-25 |
| Rich Products: Third-Party Phishing Breach via First Advantage | ▣ Breach | 2026-04-24 |
| Teamsters Local 773: Incransom Ransomware Attack | █ Ransomware | 2026-04-24 |
| Aptim: Coinbase Cartel Ransomware Attack | █ Ransomware | 2026-04-24 |
| Ameriprise Financial: Unauthorized Third-Party Data Access | ▣ Breach | 2026-04-24 |
| OrthopedicsNY: INC Ransom Attack Triggers $1.95M Penalty | █ Ransomware | 2026-04-24 |
| Udemy: ShinyHunters Claims 1.4M Record Breach | ▣ Breach | 2026-04-24 |
| Universal Pure: Six Week Network Intrusion Exposes SSNs and Medical Data | ▣ Breach | 2026-04-24 |
| French Institutions: HexDex Data Leak Campaign | ▣ Breach | 2026-04-24 |
| Manulife Wealth: Qilin Ransomware Claim | █ Ransomware | 2026-04-24 |
| French Government Agency: 19 Million Records Allegedly Stolen in Data Breach | ▣ Breach | 2026-04-24 |
| FOSPIBAY: SQL Injection Breach Exposes Peruvian Citizen Records | ▣ Breach | 2026-04-24 |
| Sri Lanka Finance Ministry: $3.7M Stolen in Payment Diversion Attack | ▣ Breach | 2026-04-24 |
| Carnival: ShinyHunters Breach Exposes 7.5M Loyalty Accounts | ▣ Breach | 2026-04-24 |
| ANTS France: 19 Million Records Allegedly Stolen in Confirmed Breach | ▣ Breach | 2026-04-24 |
| Epe Municipality: Resident Data Theft from Council Server | ▣ Breach | 2026-04-24 |
| Genealogy SA: SafePay Ransomware Data Theft | █ Ransomware | 2026-04-23 |
| Rusk County, Wisconsin: Qilin Ransomware Claim | █ Ransomware | 2026-04-23 |
| French Ministries: Hexdex Data Leaks | ▣ Breach | 2026-04-23 |
| Ransomware Victims: Insider Betrayal by BlackCat Negotiator | ▣ Breach | 2026-04-23 |
| Samuel I. White, PC: Anubis Ransomware Attack | █ Ransomware | 2026-04-23 |
| Favelle Favco: SafePay Ransomware Data Leak | ▣ Breach | 2026-04-23 |
| DigitalMint: ALPHV/BlackCat Insider Collusion | ▣ Breach | 2026-04-23 |
| Rituals: Customer Membership Database Breach | ▣ Breach | 2026-04-23 |
| UK Biobank: Researcher Insider Leak to Alibaba Marketplace | ▣ Breach | 2026-04-23 |
| Hospital Caribbean Medical Center: The Gentlemen Ransomware Attack | █ Ransomware | 2026-04-23 |
| Rheem Manufacturing: INC Ransom Ransomware Leak | █ Ransomware | 2026-04-22 |
| Valtori: Suspected State Espionage Breach | ▣ Breach | 2026-04-22 |
| Sprendlingen-Gensingen: Ransomware Attack Paralyzes Municipal Administration | █ Ransomware | 2026-04-22 |
| STERIMED: Qilin Ransomware Leak Site Listing | █ Ransomware | 2026-04-22 |
| Uniview Technologies: The Gentlemen Ransomware Listing | █ Ransomware | 2026-04-22 |
| Anthropic: Mythos AI Model Breached via Third-Party Vendor | ▣ Breach | 2026-04-22 |
| Nordenta: Kairos Ransomware Cartel Targets Danish Dental Supplier | █ Ransomware | 2026-04-22 |
| Bol: 400K Belgian Customer Records Allegedly Leaked | ▣ Breach | 2026-04-22 |
| US Federal Networks: Credential Abuse by Instagram Braggart | ▣ Breach | 2026-04-22 |
| Yamachi Electronics Philippines: INC Ransom Attack | █ Ransomware | 2026-04-22 |
| NSW Government: Insider Threat Data Breach | ▣ Breach | 2026-04-22 |
| Piazza San Marco: Infrastructure Destruction Squad Breaches Venice Flood Defenses | ▣ Breach | 2026-04-22 |
| Adaptavist Group: The Gentlemen Ransomware Breach | █ Ransomware | 2026-04-21 |
| ViaQuest: Anubis Ransomware Breach | █ Ransomware | 2026-04-21 |
| Engie: coinbasecartel Ransomware Attack | █ Ransomware | 2026-04-21 |
| Minidoka Memorial Hospital: Blackwater Ransomware Attack | █ Ransomware | 2026-04-21 |
| Champion Homes: DragonForce Ransomware Leak Site Listing | █ Ransomware | 2026-04-21 |
| NSW Treasury: Insider Threat Data Exfiltration | ▣ Breach | 2026-04-21 |
| NutraBio: Everest Ransomware Claim | █ Ransomware | 2026-04-21 |
| Nexus Grid: Cobalt Veil IoT Supply Chain Breach | ▣ Breach | 2026-04-21 |
| Qantas: 6 Million Customer Accounts Exposed in Third-Party Call Centre Breach | ▣ Breach | 2026-04-20 |
| Strata Republic: Kairos Ransomware Breach | █ Ransomware | 2026-04-20 |
| Metro Pakistan: Alleged Breach by Threat Actor xklahadore | ▣ Breach | 2026-04-20 |
| Complete Aircraft Group: Everest Ransomware Claim | █ Ransomware | 2026-04-20 |
| Champhunt: Cricket Fan Platform Breached, 224K User Records for Sale | ▣ Breach | 2026-04-20 |
| Canada Life Assurance: ShinyHunters Ransomware Breach | █ Ransomware | 2026-04-20 |
| Citizens Bank: Everest Ransomware Listing | █ Ransomware | 2026-04-20 |
| Aman Resorts: ShinyHunters Ransomware Attack | █ Ransomware | 2026-04-20 |
| Cylance: 34M Record Database Offered for Sale on Dark Web | ▣ Breach | 2026-04-20 |
| Seiko USA: Website Defacement and Shopify Data Extortion | ▣ Breach | 2026-04-20 |
| IDMerit: Unsecured MongoDB Exposes 1 Billion Identity Records | ▣ Breach | 2026-04-20 |
| Polmed: ShinyHunters Ransomware Breach | ▣ Breach | 2026-04-20 |
| ANTS (ants.gouv.fr): IDOR Flaw Exposes 19M French Identity Records | ▣ Breach | 2026-04-20 |
| 7-Eleven: ShinyHunters Claims Salesforce Breach | █ Ransomware | 2026-04-20 |
| LAUSD & Edgenuity: 4M Student Records Listed for Sale via Snowflake Breach | ▣ Breach | 2026-04-20 |
| Securitevolfeu: CoinbaseCartel Ransomware Listing | █ Ransomware | 2026-04-19 |
| DarkForums: PwnForums Database Leak Exposes 44K Cybercriminal IPs | ▣ Breach | 2026-04-19 |
| Millennium Dental Technologies: Termite Ransomware Attack | █ Ransomware | 2026-04-19 |
| Kelp DAO: $293M LayerZero Cross-Chain Bridge Exploit | ▣ Breach | 2026-04-19 |
| Altpro: Coinbasecartel Ransomware Attack | █ Ransomware | 2026-04-19 |
| HS Technology Group: Qilin Ransomware Attack | █ Ransomware | 2026-04-19 |
| Carnival Corporation: ShinyHunters Extortion Breach | ▣ Breach | 2026-04-19 |
| Vercel: ShinyHunters Internal Systems Breach | ▣ Breach | 2026-04-19 |
| Pharmathek: Akira Ransomware Listing | █ Ransomware | 2026-04-19 |
| Nanometrics: Qilin Ransomware Claim | █ Ransomware | 2026-04-19 |
| SOGO Auction: RansomExx Ransomware Breach | █ Ransomware | 2026-04-19 |
| PowerSchool: Teen Hacker Sentenced for Historic Student Data Breach | ▣ Breach | 2026-04-19 |
| ASTM Group: CoinbaseCartel Ransomware Claim | █ Ransomware | 2026-04-19 |
| Hims & Hers Health: Social Engineering Breach Exposes Support Tickets | ▣ Breach | 2026-04-19 |
| Conrad Capital Management: Unknown Third Party Intrusion Exposes SSNs and Financial Data | ▣ Breach | 2026-04-18 |
| Trivy Ecosystem: Vect Ransomware Supply Chain Extortion | ▣ Breach | 2026-04-18 |
| HBX Group: Qilin Ransomware Leak Site Listing | █ Ransomware | 2026-04-18 |
| TruView BSI: Background Check Firm Confirms 2024 Breach Exposing SSNs | ▣ Breach | 2026-04-18 |
| Europa.eu: IAM Misconfiguration Breach by ShinyHunters | ▣ Breach | 2026-04-18 |
| Phoenix Art Museum: Unauthorized Network Intrusion Exposes SSNs | ▣ Breach | 2026-04-18 |
| Eurail: Data Breach Exposes 300,000+ Travelers | ▣ Breach | 2026-04-18 |
| medicalnetworks CJ GmbH: DragonForce Ransomware Breach | █ Ransomware | 2026-04-18 |
| Amtrak: ShinyHunters Salesforce Breach | ▣ Breach | 2026-04-18 |
| Kemper Corporation: ShinyHunters Salesforce Leak | ▣ Breach | 2026-04-18 |
| LA County Office of Education: W-2 Vendor Breach Enables Tax Refund Fraud | ▣ Breach | 2026-04-18 |
| National Supercomputing Center Tianjin: FlamingChina Data Theft | ▣ Breach | 2026-04-18 |
| Mossad and Shin Bet: Handala Claims Intelligence Breach | ▣ Breach | 2026-04-17 |
| Nigeria CAC: Corporate Registry Breach Triggers NITDA Probe | ▣ Breach | 2026-04-17 |
| PicBackMan: Cloud Backup Database Leak Exposes User Credentials | ▣ Breach | 2026-04-17 |
| Take-Two Interactive: ShinyHunters Snowflake Breach | ▣ Breach | 2026-04-17 |
| Stockton Cardiology: GENESIS Ransomware Breach | █ Ransomware | 2026-04-17 |
| French Ministry of National Education: Student Data Exfiltration | ▣ Breach | 2026-04-17 |
| Comcast Xfinity: Citrix Bleed Exploitation Reaches $117.5M Settlement | ▣ Breach | 2026-04-17 |
| Basic-Fit: 1 Million Members Exposed in European Data Breach | ▣ Breach | 2026-04-17 |
| Axios Supply Chain: North Korean UNC1069 Crypto Heist | ▣ Breach | 2026-04-17 |
| Longevity Health Plan: Confirmed Healthcare Data Breach | ▣ Breach | 2026-04-17 |
| Hellenic National Defense General Staff: Russia-Linked Email Breach | ▣ Breach | 2026-04-17 |
| Gruppo ICM SPA: Qilin Ransomware Attack | █ Ransomware | 2026-04-17 |
| Humana: Vendor Software Vulnerability Exposes Customer Data Across Six States | ▣ Breach | 2026-04-17 |
| Grinex: Suspected Western Intelligence Crypto Heist | ▣ Breach | 2026-04-17 |
| Ukrainian Hospitals and Governments: UAC-0247 Data Theft Campaign | ▣ Breach | 2026-04-17 |
| Canada Goose: Coinbasecartel Ransomware Claim | █ Ransomware | 2026-04-17 |
| Standard Bank: 1.2TB Data Leak Exposes Credit Card Details | ▣ Breach | 2026-04-17 |
| OFPPT Morocco: 400K Student Records Leaked via MyWay Platform | ▣ Breach | 2026-04-16 |
| Ukrainian Prosecutors: Fancy Bear Email Compromise Campaign | ▣ Breach | 2026-04-16 |
| Khyber Pakhtunkhwa Government: Admin Database Leak Exposes MD5 Credentials | ▣ Breach | 2026-04-16 |
| Banco BBVA: Customer Database Leaked by Threat Actor MAGO SPEAK | ▣ Breach | 2026-04-16 |
| Chipsoft: Ransomware Attack Exposes Dutch Hospital Patient Data | ▣ Breach | 2026-04-16 |
| McGraw-Hill: ShinyHunters Compromise Salesforce Platform, 45 Million Records Exposed | ▣ Breach | 2026-04-16 |
| Chekin and Gastrodat: Massive Booking Data Theft Exposes 5 Million Hotel Guests | ▣ Breach | 2026-04-16 |
| Romanian Air Force: Russian-Linked Hackers Compromise 67 Email Accounts | ▣ Breach | 2026-04-16 |
| Signature Healthcare: Anubis Ransomware Attack Disrupts Hospital Operations | ▣ Breach | 2026-04-16 |
| Autovista: Ransomware Disrupts Automotive Data Services | █ Ransomware | 2026-04-16 |
| Dencom New Zealand: Krybit Ransomware Breach | █ Ransomware | 2026-04-16 |
| RCI Hospitality: Cyberattack Exposes Corporate and Customer Records | ▣ Breach | 2026-04-16 |
| Booking.com: Millions of Customer Reservations Exposed in Storm-1865 Supply Chain Breach | ▣ Breach | 2026-04-16 |
| Hallmark: ShinyHunters Dump 6.2M Customer Records After Failed Extortion | ▣ Breach | 2026-04-16 |
| Cookeville Regional Medical Center: Rhysida Ransomware Attack Exposes 337K Patient Records | █ Ransomware | 2026-04-16 |
| Mexican Government Agencies: AI-Powered Solo Breach Campaign | ▣ Breach | 2026-04-15 |
| Rockstar Games: ShinyHunters Breach Exposes 78.6 Million Records via Snowflake | ▣ Breach | 2026-04-15 |
| Israeli Unit 8200: Handala Hacker Group Claims Breach Exposing 80 Senior Officers | ▣ Breach | 2026-04-15 |
| PowerSchool: Gen Z Hacker Confirms $2.8M Extortion After Credential Breach | ▣ Breach | 2026-04-15 |
| National Supercomputing Center Tianjin: Six-Month Silent Breach by FlamingChina | ▣ Breach | 2026-04-15 |
| Eldorado Trading Group: DragonForce Ransomware Attack | █ Ransomware | 2026-04-15 |
| SATS Sports Club — The Gentlemen Ransomware Claims Nordic Fitness Giant, 733K Members at Risk | █ Ransomware | 2026-04-10 |
| Mercor AI — LiteLLM Supply Chain Attack Breach | ▣ Breach | 2026-04-05 |
| Drift Cryptocurrency Exchange — North Korea Social Engineering Attack | ▣ Breach | 2026-04-05 |
| FBI Surveillance System — China-Linked Breach Pen Register Data Exposure | ▣ Breach | 2026-04-05 |
| Hong Kong Hospital Authority — Patient Data Breach | ▣ Breach | 2026-04-05 |
| Advanced Vehicle Assemblies — Nightspire Ransomware Attack | █ Ransomware | 2026-04-05 |
| Shwapno Bangladesh Supermarket — Ransomware Attack Customer Data Breach | █ Ransomware | 2026-04-05 |
| United Finance Egypt — Ransomware Attack Financial Services Breach | █ Ransomware | 2026-04-05 |
| Uffizi Gallery Florence — Medusalocker Ransomware Attack Cultural Heritage Institution | █ Ransomware | 2026-04-05 |
| Hims & Hers Telehealth Platform — Customer Support System Breach | ▣ Breach | 2026-04-05 |
| Groupe SERAP — Akira Ransomware Attack Agricultural Equipment Manufacturer | █ Ransomware | 2026-04-05 |
| Hasbro — Major Cyber Incident and Operational Disruption | ▣ Breach | 2026-04-05 |
| Minot Water Treatment Plant — Critical Infrastructure Ransomware Attack | █ Ransomware | 2026-04-05 |
| Nacogdoches Memorial Hospital — Patient Data Breach | ▣ Breach | 2026-04-05 |
| Charles River Insurance — Akira Ransomware Attack Insurance Sector | █ Ransomware | 2026-04-05 |
| Nissan Automotive — Everest Ransomware Third-Party Vendor Attack | █ Ransomware | 2026-04-04 |
| SUTEX Ltda Colombian Textile — DragonForce Ransomware Attack | ▣ Breach | 2026-04-04 |
| PSK Wind Technologies - Handala Iran-Linked Defense Contractor Breach | ▣ Breach | 2026-04-04 |
| FSSAI India Food Authority — Official Document Breach | ▣ Breach | 2026-04-04 |
| Asmar Schor & McKenna Construction Law Firm — DragonForce Ransomware Attack | ▣ Breach | 2026-04-04 |
| Adobe — Mr. Raccoon BPO Supply Chain Attack | ▣ Breach | 2026-04-04 |
| Bunch Ltd. Canadian Constructor — DragonForce Ransomware Attack | ▣ Breach | 2026-04-04 |
| Anthropic Claude Code Source Code Leaked via npm Misconfiguration | ▣ Breach | 2026-04-04 |
| Manage My Health New Zealand — Kazu Ransomware Healthcare Attack | █ Ransomware | 2026-04-04 |
| Cisco & Salesforce — CRM Data Breach | ▣ Breach | 2026-04-03 |
| Corewell Health — 19,000 Patients' Medical and Personal Data Compromised in Michigan Hospital Network Breach | ▣ Breach | 2026-04-01 |
| UMMC Hit by Medusa Ransomware — $800K Demanded, 1TB of Patient and Employee Data Exfiltrated | █ Ransomware | 2026-04-01 |
| CareCloud — Confirmed Breach of Electronic Health Records System Exposes Patient Data Across Provider Network | ▣ Breach | 2026-04-01 |
| Feníe Energía — Unattributed Data Exfiltration, 1.7M Records | ▣ Breach | 2026-03-31 |
| Tamir Pardo (Former Mossad Chief) — Handala Email Breach | ▣ Breach | 2026-03-31 |
| axios npm Supply Chain Attack — Hijacked Maintainer Drops Multi-Platform RAT | ▣ Breach | 2026-03-31 |
| Stats SA — XP95 Cyber-Extortion | █ Ransomware | 2026-03-30 |
| Kyocera Document Solutions Europe & Polsat — ALP-001 Ransomware, 150GB Exfiltrated | █ Ransomware | 2026-03-30 |
| Castilla-La Mancha Education System — Organized Cybercrime Ring | ▣ Breach | 2026-03-29 |
| Namibia Airports Company — INC Ransomware Group Dumps 500GB of Critical Infrastructure Data | █ Ransomware | 2026-03-29 |
| CommonSpirit Health — Patient Data Exposed via Third-Tier Subcontractor Ransomware Attack | █ Ransomware | 2026-03-29 |
| Rocky Mountain Care — Qilin Ransomware Hits Utah Senior Care Network | █ Ransomware | 2026-03-29 |
| Schlam Stone & Dolan LLP — Anubis Ransomware Targets U.S. Law Firm Representing Government and Fortune 500 Clients | █ Ransomware | 2026-03-29 |
| Lacor.es and Polsat — ALP-001 Ransomware European Expansion | █ Ransomware | 2026-03-29 |
| ARENCO Group & ITWAL — Dual Ransomware Claims Target Dubai Conglomerate and Canada's National Food Distribution Network | █ Ransomware | 2026-03-29 |
| Terix — ALP-001 Ransomware Hits U.S. Data Center Provider with $26.5M Demand | █ Ransomware | 2026-03-29 |
| Woodfords Family Services — Ransomware Attack on Disability Services Provider Yields Two-Year Notification Failure | █ Ransomware | 2026-03-29 |
| TPIS Industrial Services — Play Ransomware Hits U.S. Manufacturer | █ Ransomware | 2026-03-28 |
| Doctor Alliance — Credential Theft Exposes Patient Health Records Across Multiple Texas Home Healthcare Providers | ▣ Breach | 2026-03-28 |
| Nova Scotia Power — Cyberattack Exposed 900,000 Utility Customers, Privacy Commissioner Forces Security Reform | ▣ Breach | 2026-03-28 |
| Kash Patel — Iranian State-Linked Handala Breaches FBI Director's Personal Gmail, Publishes Authenticated Documents | ▣ Breach | 2026-03-28 |
| Esprinet — ALP-001 Ransomware Claims 1.2TB Breach of €4B European IT Distributor | █ Ransomware | 2026-03-28 |
| Goodwill Industries — Interlock Ransomware Hits Nonprofit Chain, 80GB Stolen, Stores Forced Cash-Only | █ Ransomware | 2026-03-28 |
| European Commission — AWS Account Breach Exposes 350GB of EU Executive Data, Attacker Plans Public Leak | ▣ Breach | 2026-03-28 |
| Hong Kong Correctional Services Department — IT System Breach Exposes 6,800 Employee Records | ▣ Breach | 2026-03-28 |
| Germany's Left Party — Qilin Ransomware Attack on Political Party Infrastructure | █ Ransomware | 2026-03-28 |
| City of Meriden, Connecticut — Incransom Ransomware Group Claims Municipal Government Attack | █ Ransomware | 2026-03-28 |
| Viva Ticket — Ransomware Hits Ticketing Platform Serving the Louvre and 3,500 Cultural Venues | █ Ransomware | 2026-03-28 |
| IntraCare — Healthcare Cyberattack Takes Systems Offline, 28 Surgeries Deferred | ▣ Breach | 2026-03-28 |
| AFC Ajax — API Flaws Exposed 300,000 Accounts and Enabled Hijack of 42,000 Season Tickets | ▣ Breach | 2026-03-28 |
| Centauro.net — 4.3 Million Customer Records Exposed in Data Breach | ▣ Breach | 2026-03-28 |
| LiteLLM — Malicious PyPI Packages Steal 300GB and 500K Credentials via AI Proxy Supply Chain | ▣ Breach | 2026-03-27 |
| Hightower Holding — Credential Compromise Exposes 131,000 Wealth Management Clients | ▣ Breach | 2026-03-27 |
| Monmouth University — PEAR Ransomware Group Claims 16TB Exfiltration | █ Ransomware | 2026-03-27 |
| Crunchyroll (Sony): Third-Party Vendor Malware, 100GB Exfiltration, $5M Extortion | ▣ Breach | 2026-03-26 |
| Port of Vigo (Spain): Ransomware Attack Disrupts Europe's Largest Fishing Port | █ Ransomware | 2026-03-26 |
| QualDerm Partners: Healthcare Data Breach, Millions of Patients Potentially Exposed | ▣ Breach | 2026-03-26 |
| Cnous France: Data Breach Exposes 774,000 University Records | ▣ Breach | 2026-03-26 |
| Navia Benefit Solutions: Silent 24-Day Breach Exposes 2.7 Million Across Client Organizations | ▣ Breach | 2026-03-26 |
| AstraZeneca: Lapsus$ Claims 3GB Breach of Internal Code, Credentials, and Employee Data | ▣ Breach | 2026-03-26 |
| Foster City, California: Ransomware Attack Forces State of Emergency Declaration | █ Ransomware | 2026-03-26 |
| Nike: Double-Extortion Ransomware Targeting IP | █ Ransomware | 2026-03-25 |
| Checkmarx: TeamPCP CI/CD Supply Chain Compromise via Stolen GitHub Credentials | ▣ Breach | 2026-03-25 |
| Mazda: Vulnerability Exploitation in Warehouse Management System | ▣ Breach | 2026-03-25 |
| Dutch Ministry of Finance: Unauthorized Access to Policy Department Systems | ▣ Breach | 2026-03-25 |
| Kaplan: Server Intrusion Exposes SSNs and Driver's Licenses of 230,000+ Students and Professionals | ▣ Breach | 2026-03-24 |
| BMW & 35+ Automakers: IDOR Exploit Fuels Ongoing Multi-Brand Data Exfiltration | ▣ Breach | 2026-03-24 |
| South Africa Land Bank: RaaS Ransomware Attack via Internet-Facing Server Exploit | █ Ransomware | 2026-03-24 |
| CIRO: Phishing Attack Exposes 750,000 Canadian Investors | ▣ Breach | 2026-03-24 |
| Chile's Ley del Lobby Platform: Government Lobbying Records Breach Exposes 8 Years of Political Intelligence | ▣ Breach | 2026-03-24 |
| Lockheed Martin: Pro-Iran APT Claims 375TB Breach, Demands $400M Ransom | ▣ Breach | 2026-03-24 |
| Telekom Serbia: Data Breach Exposes 700,000 Customers via Secondary Application Attack | ▣ Breach | 2026-03-24 |
| Bell Ambulance: Medusa Ransomware Exposes 238,000 Patients' Healthcare and Identity Data | █ Ransomware | 2026-03-24 |
| Conduent: Covert Intrusion Exposes 25 Million Americans' Government Benefits Data | ▣ Breach | 2026-03-24 |
| Southwire: Qilin Ransomware Group Claims Attack on Major US Electrical Infrastructure Supplier | █ Ransomware | 2026-03-23 |
| Hikvision: ALP-001 Claims 199TB Breach of World's Largest Surveillance Manufacturer ⚠️ Unverified | █ Ransomware | 2026-03-23 |
| SoundCloud: ShinyHunters Extortion Gang Breaches 29.8 Million User Accounts | ▣ Breach | 2026-03-23 |
| Trivy Vulnerability Scanner Backdoored in Supply Chain Attack: 100M+ Download Tool Turned Credential Stealer | ▣ Breach | 2026-03-22 |
| University of Mississippi Medical Center: Ransomware Forces Statewide Clinic Shutdown, EHR Systems Offline | █ Ransomware | 2026-03-22 |
| Marquis: Ransomware Attack Exposes 672K Banking Customers | █ Ransomware | 2026-03-19 |
| CGI Sverige / Sweden BankID: ByteToBreach Source Code and Credential Leak | ▣ Breach | 2026-03-19 |
| Royal Bahrain Hospital: Payload Ransomware, 110GB Patient Data Exfiltration Claimed | █ Ransomware | 2026-03-19 |
| AkzoNobel: Anubis RaaS, 170GB Exfiltration from US Facility | █ Ransomware | 2026-03-19 |
| Navigate360 / P3 Global Intel: 8 Million Confidential Police Tips Compromised via Social Engineering | ▣ Breach | 2026-03-19 |
| Aura: ShinyHunters Voice Phishing Attack, 900,000 Records Leaked | ▣ Breach | 2026-03-19 |
| UK Companies House: WebFiling Browser Exploit Exposes 5 Million Business Records | ▣ Breach | 2026-03-18 |
| Salesforce Experience Cloud: ShinyHunters Mass Extortion Campaign | ▣ Breach | 2026-03-18 |
| Ruhnau Clarke & Biogel: Qilin Ransomware Double Extortion | █ Ransomware | 2026-03-18 |
| France FICOBA: Credential Theft Exposes 1.2M National Bank Records | ▣ Breach | 2026-03-18 |
| Odido: ShinyHunters Data Extortion Campaign | ▣ Breach | 2026-03-17 |
| France: Criminal Data Broker Mega-Aggregation Exposes 45M Citizens | ▣ Breach | 2026-03-17 |
| UK Biobank: Researcher Negligence Exposes Genetic and Medical Records of 500,000 Volunteers | ▣ Breach | 2026-03-16 |
| U.S. Critical Infrastructure: Seedworm (MuddyWater) Espionage Campaign with Novel Deno Backdoor | ▣ Breach | 2026-03-16 |
| CarGurus: ShinyHunters Breach Exposes 12.4 Million User Records | ▣ Breach | 2026-03-16 |
| Starbucks Employee Data Breach: 889 Accounts Compromised via Partner Central Phishing | ▣ Breach | 2026-03-15 |
| IDMerit: Unauthenticated MongoDB Exposes 1 Billion KYC Records | ▣ Breach | 2026-03-15 |
| FBI New York Field Office: Human Error Exposes Epstein Investigation Server to Foreign Hacker | ▣ Breach | 2026-03-15 |
| Cognizant TriZetto: 11-Month Undetected Intrusion Exposes 3.4M Patient Records | ▣ Breach | 2026-03-15 |
| Loblaw Companies: Third-Party Threat Actor Breaches Canada's Largest Retailer | ▣ Breach | 2026-03-15 |
| DigitalMint Negotiator Charged: Ran Ransomware Attacks While Negotiating for Victims | █ Ransomware | 2026-03-14 |
| Social Security Administration: DOGE Insider Data Exfiltration | ▣ Breach | 2026-03-13 |
| Stryker: Iran-Linked Handala Wiper Attack | ▣ Breach | 2026-03-13 |
| CVE-2026-3909 | ⚡ Active KEV | 2026-03-13 |
| Telus Digital: ShinyHunters Data Extortion | ▣ Breach | 2026-03-13 |
| CVE-2026-3910 | ⚡ Active KEV | 2026-03-13 |
| Sweden E-Government / CGI Sverige: National Codebase Leak | ▣ Breach | 2026-03-13 |
| CVE-2024-21762 FortiOS Out-of-Bound Write Vulnerability | ⚡ Active KEV | 2026-03-10 |
| Threat Brief: CVE-2025-26399 SolarWinds Web Help Desk RCE | ⚡ Active KEV | 2026-03-09 |
| CVE-2017-7921: Hikvision Improper Authentication Vulnerability | ⚡ Active KEV | 2026-03-07 |
Showing 1002 of 1002