Cardi’s Furniture And Mattress
March 10, 2025
•[ data leak ]
Retailer mailed breach letters following cybersecurity incident affecting customer information.
Juniper Networks Routers
March 12, 2025
•[ backdoor ]
Chinese group UNC3886 deployed custom backdoors on outdated Juniper MX routers.
Beppe Caccia
March 11, 2025
•[ spyware, targeted attack ]
Italian report described alleged surveillance using commercial spyware against a public figure.
Pam Golding Properties
March 20, 2025
•[ data leak ]
South African real-estate firm investigated data leak after reports of compromise.
Southeast Series Of Lockton Companies LLC
November 20, 2024
•[ data leak ]
Insurance brokerage reported unauthorized access to files on an employee computer
University Of Valladolid
January 1, 2025
•[ cyberattack, service disruption ]
Spanish university continued recovery efforts after January cyberattack impacting services.
Penn-Harris-Madison School Corporation
March 3, 2025
•[ ransomware ]
Indiana school district reported ransomware network breach and service interruptions.
Abracadabra Finance
March 25, 2025
•[ cryptocurrency theft, exploit, DeFi ]
Hackers exploited Abracadabra cauldrons leading to multimillion-dollar cryptocurrency theft.
Moscow Metro
March 31, 2025
•[ hacktivism, disruption of service ]
Moscow subway website and app disrupted; site displayed Ukraine railway message before removal.
Ntt Communications Corporation
February 5, 2025
•[ data leak ]
Data exfiltration impacted thousands of corporate customers at ntt communications.
Les Automotive
March 17, 2025
•[ supply chain attack, malware ]
Supply-chain compromise at vendor led dealership sites to serve malicious clickfix.
Pennsylvania State Education Association
July 6, 2024
•[ ransomware, data leak ]
Teachers union reports july 2024 breach with rhysida claim and mass notifications.
Ascom
March 16, 2025
•[ ransomware, data leak ]
Hellcat claims theft from ascom; company confirms ticketing system incident.
WideOpenWest (Wow!)
March 26, 2025
•[ ransomware, data leak ]
Arkana security claims ransomware attack on wow with data theft.
New York University
March 22, 2025
•[ data leak ]
Data reportedly leaked on nyu website exposing millions of applicants.
Pulmonary Physicians Of South Florida
February 19, 2025
•[ ransomware, data leak ]
Ransomware Group Listed Provider And Posted Screenshots Suggesting Patient Records Exposure.
Tj-Actions
March 14, 2025
•[ data leak, supply chain attack, credential exposure ]
A popular GitHub Action called tj-actions/changed-files was compromised: an attacker modified its code and version tags so that when used in CI/CD workflows it executed a script that dumped runner memory and exposed secrets (AWS keys, GitHub PATs, npm tokens, private RSA keys) in publicly accessible logs. The incident, tracked as CVE-2025-30066 (and linked to CVE-2025-30154 for a related Action), affected thousands of repositories across many organizations. Users are advised to stop using the impacted versions, rotate all credentials, and review any workflows that ran between March 1415, 2025.
Polish Space Agency (Polsa)
March 2, 2025
•[ cyberattack, network intrusion, service disruption ]
The Polish Space Agency (POLSA) went offline after detecting a cyberattack that forced it to disconnect its internal network from the internet to contain the incident. National cybersecurity teams, including CSIRT NASK and CSIRT MON, were engaged to assist in investigating and restoring operations. While POLSA did not disclose specific details, internal sources suggested that email systems were compromised. As a member of the European Space Agency, POLSA temporarily suspended several digital services while ensuring containment, system recovery, and investigation into potential espionage or disruption motives behind the attack.
Bell & Graham
January 16, 2025
•[ ransomware, data leak ]
On 2025-01-16, Bell & Graham confirmed that the SafePay ransomware group stole approximately 15 GB of client data from its on-premises servers. The firm stated that files were taken but not encrypted, and live cloud systems were unaffected.
Oral Roberts University
December 15, 2024
•[ data leak ]
Between December 15 and December 17, 2024, an unauthorized actor accessed ORU systems and took certain files. Investigation determined some files contained names and Social Security numbers. Notifications were mailed by February 19, 2025.
