American Addiction Centers
SSNs and health data stolen from Salesforce
View incident → Indexed 1 week, 5 days ago
Education Sector Data Breaches (9672 indexed)
Portable Intelligence Canada
BlackNevas breach confirmed Aug 14
View incident → Indexed 1 week, 5 days ago
Hitachi High-Tech
Industrial and tech data exfiltrated by CoinbaseCartel
View incident → Indexed 1 week, 5 days ago
Cambria Law Firm
INC_RANSOM exfiltrated confidential client data
View incident → Indexed 1 week, 5 days ago
Comcast
Cyberattack exposed personal information of Xfinity customers; settled for $117.5 million
Exposed Credential Database
24B stolen credentials in 8.3TB public exposure
View incident → Indexed 1 week, 5 days ago
Comcast Xfinity
Cyberattack exposed personal information of Xfinity customers; $117.5M settlement reached
Polish heat plant
Hackers breached heat-and-power facility supplying 50,000 residents via private APN access point
The root cause of the incident is believed to be a compromised AWS access key that was
The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts. The post Over 1,000 Charities Hit by Beacon CRM Data Breach appeared first
NHS
STILL, NHS? Martin Bagot reports: The NHS has admitted a data breach by sending patients’ personal information over pager devices. A BBC investigation found sensitive medical data of transplant patients was routinely sen
Akira ransomware affiliates were seen using a new technique to evade endpoint detection
Akira ransomware affiliates were seen using a new technique to evade endpoint detection and response (EDR), where they rebooted a compromised Windows system into Safe Mode with Networking enabled. According to Huntres
Patient health information compromised in 2025 breach affecting hospital system
Patient health information compromised in 2025 breach affecting hospital system
Snowflake Customer Cluster
165 orgs breached, billions of records stolen
View incident → Indexed 1 week, 5 days ago
Cambria Law Firm Canada
INC_RANSOM ransomware, firm data exfiltrated
View incident → Indexed 1 week, 5 days ago
Compunnel IT Services
INC_RANSOM ransomware hit US IT firm
View incident → Indexed 1 week, 5 days ago
Researchers
The exfiltrated data may be related to misconfiguration of Microsoft Power Page portals, according to a new report.
Over 95% of the affected companies were exposed before the malicious LiteLLM packages
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published. The post Trivy, Not LiteLLM Behind the 2,500 Org Compromise appeared first on SecurityWeek.
AmnesiaStealer contains novel functions, including the attackers gaining remote control
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
Records held in Salesforce and ServiceNow systems are under attack leaving user data
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those perpetrated by the extortion group ShinyHunters, Reco
The Rust-based macOS infostealer harvests users’ passwords, keychain information,
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared fir
Cybersecurity teams should be responsible for risk oversight, rather than for executing
Cybersecurity teams should be responsible for risk oversight, rather than for executing every corrective action. Assigning security teams the tasks of finding, prioritizing, assigning, implementing, tracking and validati
Origin Energy
Data breach affected approximately 900,000 current and former customers; personal information exposed
AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords,
AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords, cookies and data while giving attackers live control of the browser. Jamf Threat Labs researchers disclosed AmnesiaStealer, a new multi-st