Partnered Clinics (Australia)
Cyber-attack exposed Medicare numbers, treatment details, pathology results of patients
Finance & Banking Data Breaches (11940 indexed)
Hackers exploited
Hackers exploited exposed Microsoft Power Pages portals stealing 27 million records from 13 organizations
Hugging Face
Breach involving rogue AI agent that exposed credentials across multiple services
1.26 million patients exposed in PEAR ransomware attack on medical billing system
1.26 million patients exposed in PEAR ransomware attack on medical billing system
Origin Energy
2 million customer records stolen in hack of Australian energy giant
Stack Sports
Sports platform breached; payment details and bank account numbers exposed
Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer
Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory
Thailand Ministry of Finance
Cyber-espionage campaign using autonomous AI agent for unauthorized access
Qantas
5.67M customer records exposed through vishing attack targeting tech support
Fairlife (Coca-Cola subsidiary)
Anubis ransomware group published 1 TB of stolen data after Coca-Cola refused ransom demand
Abbott Laboratories
Cyber incident affecting diagnostics company involving patient data exposure
Coca-Cola (fairlife)
Ransomware attack shut down dairy operations
Cure Dental
Data breach exposed personally identifiable information of current and former patients
Hugging Face
Breach affected internal datasets and credentials, users urged to rotate access tokens
Evanston Township High School
Cyberattack disrupted phone systems; students and parents advised to use email
Japanese Telco (unnamed)
Cyberattack exposed 12 million customer emails from email management systems
Accenture
Data breach with 35GB of internal data stolen including source code and credentials
Fairlife (Coca-Cola)
Anubis ransomware group published 1 TB of stolen data after Coca-Cola refused ransom demand
Threat actors don't need any special authentication to reach a target endpoint — they
Threat actors don't need any special authentication to reach a target endpoint — they just need to know where it is.
Nissan
Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign
An attacker has exploited a zero day in Oracle Peoplesoft to gain access to the IT
An attacker has exploited a zero day in Oracle Peoplesoft to gain access to the IT systems of the NAIC, the standard-setting association for the US federal insurance system
SimpleHelp SimpleHelp
SimpleHelp Authentication Bypass Vulnerability — SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login
Nation-state attackers breach water systems through weak passwords, exposed PLCs, and
Nation-state attackers breach water systems through weak passwords, exposed PLCs, and poor segmentation — not sophisticated malware.
Sysco
2,691,852 records exposed — Customer feedback, Email addresses, Employers, Job titles and 4 more
View incident → Indexed 2 months ago