Infini (Infini Earn)
February 24, 2025
•[ insider threat, financial theft, cryptocurrency ]
A former developer or compromised admin key was used to withdraw $49.5 million from Infinis smart-contract vault on February 24 2025. The attacker converted USDC to ETH and moved the funds off-chain. Infini, a Hong Kong-based stablecoin bank, offered a 20% bounty for fund return and filed legal action against a former developer in Hong Kong.
Niva Bupa Health Insurance Company Ltd
February 21, 2025
•[ data leak ]
Niva Bupa received a threat email from an unidentified actor claiming possession of customer data and referencing a leak site; the company reported the incident and obtained a Delhi High Court order to block the site while investigating. No data theft has been confirmed as of Oct 2025.
Sayanmoloko / Semyonishna Dairy Plant
December 1, 2024
•[ ransomware ]
The Sayanmoloko Semyonishna dairy plant in Khakassia, Russia, experienced a ransomware attack in December 2024 attributed to a LockBit variant. The attack encrypted labeling and tracking systems, hijacked printers to output anti-war leaflets, and disabled the company website while milk processing continued. Operations were restored within several days.
Fashion Box S.p.A.
January 29, 2025
•[ brute-force, data leak ]
Fashion Box S.p.A., owner of the Replay brand, disclosed a brute-force intrusion on January 29 2025 that allowed unauthorized access to internal servers and the exfiltration of corporate information and personal data of employees and external stakeholders. The company notified multiple European data-protection authorities. No encryption was confirmed. An undisclosed amount of personal and corporate data was taken.
Organizations in Myanmar
January 15, 2024
•[ espionage, backdoor, malware ]
Mustang Panda leveraged mavinject.exe and DLL side-loading to inject a ToneShell family backdoor into processes on targeted Myanmar organisation endpoints to enable espionage and persistent access.
Central New York Cardiology
February 27, 2025
•[ data leak, healthcare ]
Practice reported a data breach impacting extensive patient PHI/PII per public notice.
Christensen Group Insurance
October 10, 2022
•[ phishing, data leak ]
Company posted 24-02-2025 notice about 2022 email-account breach; data breach letters now being sent.
State information resources (Azerbaijan)
February 26, 2025
•[ ddos ]
Special Service reported massive DDoS on state resources; mitigation by filtering malicious traffic may temporarily block real IPs.
DISA Global Solutions
February 9, 2024
•[ data leak ]
Breach window Feb 9Apr 22, 2024; ~3.3M impacted; disclosures via state AG filings and reports in FebMar 2025.
Kewadin Casinos
February 10, 2025
•[ ransomware ]
Cyber incident forced shutdown of all five Kewadin casinos; phased reopening announced Feb 25Mar 3.
Northern Caribbean University
February 24, 2025
•[ data leak ]
Cyberattack crippled key systems; NCU warned students of possible data release.
Racine Unified School District
December 3, 2024
•[ data leak ]
Security breach of RUSD internal network; forensic probe said staff data may have been accessed; student data hosted externally unaffected.
India Post
February 17, 2025
•[ data leak, vulnerability, idor ]
IDOR flaw allowed retrieval of KYC documents by altering IDs in URLs; reports indicate thousands of records were exposed.
Cocospy & Spyic
February 14, 2025
•[ data leak, stalkerware, vulnerability ]
Vulnerability allowed unauthenticated access to servers exposing stalkerware customer lists and victims uploaded data.
Invest Hong Kong
February 22, 2025
•[ ransomware, data leak ]
Follow-up coverage of InvestHK ransomware; checking possible client/staff info exposure; later update: no evidence of leakage.
Patelco Credit Union
June 29, 2024
•[ ransomware, data leak, regulatory action ]
Ransomware encrypted Patelco systems on June 29, 2024, causing a near-total outage of digital banking through mid-July and exposing substantial member PII; DFPI later issued a consent order and $100,000 fine with mandated cybersecurity improvements.
~14 undisclosed Italian air transport and banking websites
February 17, 2025
•[ ddos, hacktivism ]
According to Italian press (Finance.si, Reuters), pro-Russian hacktivist group NoName057(16) conducted coordinated DDoS attacks against Italian institutions on February 17, 2025. While six named victims were identified (Malpensa, Linate, Transport Authority, Port of Taranto, Port of Trieste, Intesa Sanpaolo), reports indicate approximately 20 total websites were targeted. This record represents ~14 additional undisclosed Italian websites that experienced partial disruption.
Port of Trieste
February 17, 2025
•[ ddos, hacktivism, government ]
On February 17, 2025, hacktivist group NoName05716 launched a DDoS attack on the Port of Trieste in Italy, causing temporary disruptions. The attack was part of a broader campaign targeting Italian institutions in retaliation for political statements by President Sergio Mattarella.
OmniGPT Chatbot Platform
March 10, 2025
•[ data leak, data breach, hacking ]
A hacker known as Gloomer claimed to have breached the OmniGPT AI chatbot platform, stealing and leaking millions of user messages and account details. Data samples were posted on BreachForums and reported by multiple cybersecurity outlets, though OmniGPT has not confirmed the incident.
Multiple Ukrainian government and municipal organizations
September 25, 2024
•[ vulnerability, phishing, malware ]
A zero-day vulnerability in 7-Zip (CVE-2025-0411) was exploited beginning September 25, 2024, by undetermined Russian-speaking cybercriminal actors via phishing and homoglyph-lure archives. Trend Micro and SecurityWeek confirmed at least nine Ukrainian government and public-service entities (including the Ministry of Justice, Kyiv Public Transportation, and water-utility systems) were compromised. The campaign delivered SmokeLoader malware through malicious archives bypassing Windows Mark-of-the-Web protections.
