CISA
CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository
2026 Data Breaches Year-to-Date (668 indexed)
iCagenda iCagenda
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability — iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment
Balbooa Forms
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability — Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload w
A cybercrime crew left one of its own servers wide open on the internet for three weeks,
A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exposed the operation's inner workings: the hacking tools, the activity logs, and target lists naming more than 1.4 million
NHS tells staff they could face prison for “inappropriate” access to patients’ medical
NHS tells staff they could face prison for “inappropriate” access to patients’ medical records
NHS tells staff they could face prison for “inappropriate” access to patients’ medical
NHS tells staff they could face prison for “inappropriate” access to patients’ medical records
A threat actor has been targeting organizations spanning multiple sectors with
A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra passkey with an aim to carry out data extortion atta
In Other News
Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings back TAO. The post In Other News: DHS Database Hacked, Ad
Chisholm Persson Ball Law
Akira ransomware attack on US law firm
View incident → Indexed 2 days, 4 hours ago
Instructure Canvas
280M student and staff records stolen via ShinyHunters
View incident → Indexed 2 days, 4 hours ago
GitHub Developer Platform
4K code repositories stolen by TeamPCP group
View incident → Indexed 2 days, 4 hours ago
Oracle PeopleSoft Campaign
300+ instances breached across 100 orgs via zero-day
View incident → Indexed 2 days, 4 hours ago
Oracle PeopleSoft CVE-2026-35273
300+ instances hit, 100+ orgs, HR/payroll data stolen
View incident → Indexed 2 days, 4 hours ago
Oracle PeopleSoft Campaign
300 instances across 100 orgs breached
View incident → Indexed 2 days, 4 hours ago
Infostealer Credential Dump
24B stolen credentials exposed in public database
View incident → Indexed 2 days, 4 hours ago
Acworth City Government
INC_RANSOM ransomware hits city systems
View incident → Indexed 2 days, 4 hours ago
Novo Nordisk
Clinical trials and patient data stolen from internal IT systems
View incident → Indexed 2 days, 4 hours ago
Conduent
62.2M SSNs and medical records exposed in ransomware
View incident → Indexed 2 days, 4 hours ago
Accenture
35GB source code and Azure keys stolen and listed for sale
View incident → Indexed 2 days, 4 hours ago
Conduent Business Services
62.2M SSNs and medical records exfiltrated
View incident → Indexed 2 days, 4 hours ago
HSIN intelligence platform
HSIN intelligence platform breached late May 2026
View incident → Indexed 2 days, 4 hours ago
Chemco Calgary
Ransomware attack on Canadian energy manufacturer
View incident → Indexed 2 days, 4 hours ago
Nissan North America
SSNs and banking data stolen from US and Canadian employees
View incident → Indexed 2 days, 4 hours ago