Cyber attack
Cyber attack exposed approximately 607,000 records
Education Sector Data Breaches (9972 indexed)
Snowflake Inc.
Massive data breach involving customer data theft and extortion
Partnered Health (Australian Clinics)
Cyber-attack exposed medical records including Medicare numbers and pathology results
Liechtenstein Beneficiary Register
31K corporate beneficiary records exposed
View incident → Indexed 2 weeks, 5 days ago
Bankinter
EVO Banco data breach via API vulnerability exposed financial and identity data of 1.27 million individuals
Officer PII and justice partner emails exposed
Officer PII and justice partner emails exposed
View incident → Indexed 2 weeks, 5 days ago
Initially calling itself BlackFile, the group has expanded operations to the Redact,
Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands. The post Vishing Extortion Group UNC6671 Rebrands After Making Millions appeared first on SecurityWeek.
The club said Thursday that it had already restored its IT environment from clean
The club said Thursday that it had already restored its IT environment from clean backups, allowing operations to continue normally. It added that its ticketing platform and online store were not affected and remain full
PortSwigger
PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James Kettle, generated and proved new HTTP desynchronization techniques after exploring 30,000 candidate attack vectors
Exposed Credential Database
24B stolen credential records publicly exposed
View incident → Indexed 2 weeks, 5 days ago
On March 24, 2026, developers building AI applications with LiteLLM — a Python package
On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — unknowingly installed malicious code. A threat actor group known as TeamPCP had compromised the P
Conduent Business Solutions
62M records exposed to federal regulators
View incident → Indexed 2 weeks, 5 days ago
Exact Sciences
10,869,543 records exposed — Dates of birth, Email addresses, Genders, Names and 3 more
BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking
BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaigns
U.S. Civil Service
Thousands of civil servants passwords exposed since early 2024, including White House credentials
Progress LoadMaster
Progress LoadMaster Command Injection Vulnerability — Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by e
Coinbase
Breach involving outsourcer fired HR employees investigating data theft; suspect retained data for 10,000+ customers
Snowflake (165 breaches)
Canadian hacker pleaded guilty to hacking data storage platform; 165 breaches resulted, 100M+ people affected
Swiss Federal Government (BIT/FOITT)
Hackers exploited Microsoft SharePoint vulnerabilities to breach servers and compromise 200 accounts
Levi Strauss & Co.
Hackers used social engineering to steal corporate data from three employees
UK Police PNLD
Police and government contacts published on dark web
View incident → Indexed 2 weeks, 6 days ago
TELUS Digital
Nearly 1 petabyte stolen in extortion attack
View incident → Indexed 2 weeks, 6 days ago