Laboratory Services Cooperative (LSC)
December 30, 2024
•[ data leak ]
Laboratory Services Cooperative, a U.S. medical testing provider based in Texas, disclosed that unauthorized actors accessed and exfiltrated PHI and PII data of approximately 16 million individuals. No encryption or operational disruption occurred, and no threat actor has been publicly identified.
Fourlis Group (IKEA franchise operator)
November 27, 2024
•[ ransomware, data leak ]
A ransomware attack on November 27 2024 disrupted Fourlis Groups IT infrastructure supporting IKEA operations in Greece and other regional markets. The company reported that forensic investigators did not prove the leakage of personal data, confirming no verified exfiltration. The attack caused significant operational disruption, with reported recovery costs of approximately 20 million ( US $23 million) but no ransom payment.
Nsw Online Registry (Department Of Communities And Justice)
March 26, 2025
•[ data leak ]
Major breach led to downloads of sensitive court files including Avos and affidavits.
Columbia Eye Clinic
January 9, 2025
•[ data leak ]
Clinic confirmed January 913 network access to files with patient information.
Access Financial Services Limited
March 24, 2025
•[ data leak ]
Jamaica lender addressed recent cybersecurity incident and reassured stakeholders.
Belgian Government Websites
March 25, 2025
•[ ddos, hacktivism ]
Pro-Russian group claimed DDoS causing availability issues on Belgian government sites.
Presidency Of Costa Rica (YouTube Account)
March 21, 2025
•[ account takeover, cryptocurrency scam ]
Costa Rica presidencys YouTube account was hijacked and posted crypto content.
Northwest Retirement Plan Consultants
August 31, 2024
•[ data leak ]
NWRPC reported August 31, 2024 network access exposing sensitive information; notifications sent.
Orthominds
December 11, 2024
•[ data leak ]
Dental software vendor began sending data breach notifications to affected clients and individuals.
Undisclosed organizations in China
May 27, 2025
•[ cyberattacks, espionage ]
China publicly accused individuals allegedly linked to Taiwans military of cyberattacks and espionage against Chinese entities.
BYOND
May 26, 2025
•[ ddos, extortion ]
BYOND endured a weeks-long DDoS that repeatedly knocked services offline; an extortion note said attacks would stop if BYOND went open-source.
Cetus Protocol
May 23, 2025
•[ cryptocurrency hack, theft, financial loss ]
DApp/DeFi project reported theft of ~$223M in crypto; bounty offered and legal action suspension proposed if funds returned.
Morgan County 911
May 19, 2025
•[ ransomware ]
Morgan County 911 reported a cyber issue affecting administrative systems; core dispatch, CAD, and radio services were not impacted while security measures were increased.
Arla Foods
May 19, 2025
•[ cyberattack ]
Arla confirmed a cyberattack that disrupted production and caused delivery delays while affected systems were isolated and restored.
Polish ruling party websites
May 16, 2025
•[ hacktivism ]
Reports the ruling partys websites were attacked two days before the presidential election; officials attributed the activity to Russia-aligned actors on Telegram.
Effortel
May 16, 2025
•[ data leak ]
Test files with names, DOB, emails, phones, addresses, passport and SIM data for ~70,000 MVNO customers were accessed via a support portal during a database integration test.
Pravosudiye
May 15, 2025
•[ hacktivism, data destruction, government ]
Russias national case management/e-filing system was reportedly hacked in Oct 2024, erasing roughly a third of its archive and disrupting court websites and communications for about a month; the operation has been claimed by pro-Ukraine hackers.
Coinbase
May 15, 2025
•[ insider threat, data leak, supply chain ]
Coinbase disclosed a data breach involving bribed third-party support agents; customer data was accessed and losses estimated at $180$400M for remediation and reimbursements.
Weis Markets
May 14, 2025
•[ payment card theft, data leak ]
Weis Markets completed its investigation and reported skimmers at multiple locations capable of capturing payment card track and PIN data; notices published to customers.
Kurdish forces
May 14, 2025
•[ espionage, vulnerability, zero-day ]
Turkey-linked espionage operators exploited a zero-day in Output Messenger to surveil Iraq-based Kurdish forces, collecting communications and device data; Microsoft attributed the activity to a Turkey-aligned group focused on intelligence collection.
