MTN Group
April 24, 2025
•[ data leak ]
On April 24 2025, Johannesburg-based telecommunications giant MTN Group disclosed a cybersecurity incident in which an unauthorized third party accessed personal information of some customers in unspecified African markets. The company confirmed that its core network, billing, and financial systems were not affected. Regulators and law enforcement were notified. The breachs timing and number of affected customers have not been disclosed.
Rest Super
April 1, 2025
•[ credential stuffing, account takeover ]
Rest Super confirmed credential-stuffing attempts compromising some member accounts as part of coordinated April 2025 campaign; no losses disclosed.
AustralianSuper
April 1, 2025
•[ account takeover, credential stuffing, theft ]
Hackers used stolen credentials to access about 600 AustralianSuper accounts in a coordinated campaign targeting Australias superannuation funds; small monetary thefts reported.
Undisclosed South Korean company 2
November 1, 2024
•[ malware ]
Compromise used injected malicious JavaScript on South Korean business sites to deliver malware to corporate visitors.
Europcar Mobility Group
March 30, 2025
•[ data leak ]
Europcar Mobility Group confirmed that an unauthorized actor accessed its GitLab server, exposing internal repositories, configuration files, and database backups containing up to 200 000 customer records. The leaked material included mobile-app source code, environment (.env) files, and SQL backups totaling about 37 GB. No evidence of encryption or operational disruption was reported. Europcar disabled the compromised instance and began an internal investigation.
Port of Seattle
August 24, 2024
•[ ransomware, data leak ]
The Port of Seattle confirmed a ransomware-linked data breach attributed to the Rhysida group on August 24, 2024. Attackers exfiltrated approximately 90,000 records containing personal and employee data from legacy systems. No encryption or operational disruption occurred.
Rostelecom Belgorod Region
March 31, 2025
•[ ddos ]
Belgorod governor reported Ddos on Rostelecom disrupting an official livestream.
Hellenic Open University
October 25, 2024
•[ ransomware, data leak ]
Greek open university confirmed ransomware with prolonged disruption and data leak.
British Broadcasting Corporation Pension Scheme
January 1, 2025
•[ data leak ]
Bbc reported breach exposing pension members personal details on May twenty-nine.
United States Government Senior Officials
March 27, 2025
•[ data leak, government, leaked credentials ]
Reports said private contact details and some passwords of top officials were leaked online.
University Of Notre Dame Australia
January 30, 2025
•[ data leak ]
University confirmed cyber incident with disruption; later confirmed Tax File Numbers were affected.
Obi Seafoods
August 16, 2024
•[ data leak ]
OBI Seafoods reported August 2024 incident; letters mailed March 12, 2025.
Storage Durango Blue Diamond
August 31, 2024
•[ data breach, cybersecurity incident ]
Company reported data breach under investigation following cybersecurity incident disclosure.
James Pascoe Group
March 19, 2025
•[ data leak ]
Owner of Farmers and Whitcoulls notified regulator of a data breach.
Grede Holdings LLC
September 12, 2024
•[ data leak ]
Grede Holdings mailed breach notices after unauthorized access exposed consumer information.
Lake Washington Vascular
February 14, 2025
•[ network intrusion ]
Provider reported network intrusion; notice filed with Hhs on February twenty-five.
AAylex One
March 13, 2025
•[ ransomware ]
Romanian poultry producer Cocorico operator reported ransomware severely affecting operations.
New Era Enterprises
March 10, 2025
•[ data leak ]
Company notified individuals after unauthorized access enabled exposure of sensitive consumer information.
Hillcrest Convalescent Center
October 15, 2024
•[ email compromise, data leak ]
Hillcrest reported email account breach affecting over one hundred thousand individuals.
Central Texas Pediatric Orthopedics
March 10, 2025
•[ data leak, healthcare ]
Austin pediatric orthopedics notified breach impacting ninety thousand patient records.