City of Sheboygan
October 31, 2024
•[ ransomware, data leak ]
67,000+ residents PII including SSNs, state IDs, license plate numbers were accessed during an Oct 31, 2024 ransomware incident; breach letters filed May 2025.
National Police
September 1, 2024
•[ data leak ]
Dutch intelligence services said a previously unknown Russian group (LAUNDRY BEAR) hacked multiple orgs including police; the police GAL was stolen in Sept 2024.
Alera Group
July 19, 2024
•[ data leak ]
PlanSponsor reports Alera confirmed unauthorized access to its technology environment between July 19 and August 4, 2024; on April 28, 2025 it confirmed personal data may have been removed and disclosed a total of 10,874 affected individuals.
System Rejestrów Państwowych (Polish State Register System)
April 30, 2025
•[ ddos, hacktivism ]
On April 30, 2025, Polands System Rejestrw Pastwowych, which supports the national tax and registration systems, was targeted by a hacktivist DDoS campaign that caused temporary outages. Access to e-Declarations, CEPiK, and related government portals was disrupted for about one hour. No data theft or encryption occurred, and services were quickly restored.
WindTre S.p.A.
February 25, 2025
•[ data leak ]
WindTre confirmed unauthorized access was detected on 25 Feb 2025 affecting a resellers system; limited customer personal data (names/IDs/contacts) may have been exposed; incident reported to Italys DPA and described as contained.
Biopharma Company, Hinjewadi (Pune)
April 27, 2025
•[ ransomware, data leak ]
A ransomware attack discovered on April 27 2025 disrupted a biopharmaceutical company in Hinjewadi (Pune) after an unknown actor accessed internal servers, exfiltrated and encrypted data, and demanded USD 80,000 for decryption; the incident affected 15 on-premises research systems and is under investigation by Pune Cyber Cell.
Doctors Hospital Cayman Islands
April 28, 2025
•[ ransomware ]
On April 28 2025, Doctors Hospital in the Cayman Islands contained a ransomware incident that encrypted portions of its administrative IT environment. The hospital reported that its patient-record platform, hosted on a separate proprietary system, was unaffected. Operations continued with minimal disruption, and no evidence of data exfiltration was found.
Intendencia de Paysandú
July 24, 2024
•[ ransomware ]
On July 24 2024, the Paysand Department (Uruguay) suffered a ransomware attack that encrypted all servers and backups, paralyzing municipal operations for several days. Hackers demanded about USD 650 000 in bitcoin; AGESICs forensic investigation confirmed no evidence of data exfiltration or intellectual-property theft.
Dictation.ru (Total Dictation Project)
April 25, 2025
•[ ddos ]
Dictation.ru, the website for the Russian-language educational project Total Dictation, was targeted by two DDoS attacks on April 25, 2025, reaching 38,000 requests per second. All attacks were mitigated by Solar, and no data theft or service outage occurred.
Groupe 3R (Réseau Radiologique Romand)
April 22, 2025
•[ data leak ]
Groupe 3R (Rseau Radiologique Romand), a network of medical imaging centers in western Switzerland, disclosed a cyberattack detected in early April 2025. According to the organization, no images or examination results were lost or encrypted, but attackers copied medical and administrative patient data. Operations continued normally, and a report was filed with Swiss authorities.
City of Seattle (Crosswalks system)
April 21, 2025
•[ hacktivism, unauthorized access, system compromise ]
Hacktivists compromised Seattle pedestrian crosswalk systems to broadcast spoofed audio announcements mocking technology billionaires; no evidence of data exfiltration or wider operational impact reported.
Adyen NV
April 21, 2025
•[ ddos ]
Dutch payment processor Adyen suffered three distributed denial-of-service (DDoS) attacks in April 2025 that disrupted payment services for several hours across Europe; no data theft or system breach reported.
Uncle Henry’s
March 11, 2025
•[ ransomware, data breach ]
On March 11 2025, Maine-based classified ads publisher Uncle Henrys suffered a ransomware-style attack that deleted its primary website database and took the site offline until April 15. Attackers demanded Bitcoin. Management stated only a few advertisement entries were copied and no personal data compromise was confirmed.
Wolters Kluwer N.V.
April 12, 2025
•[ data leak ]
On April 12 2025, a BreachForums user known as IntelBroker offered for sale a 36 GB dataset allegedly stolen from Wolters Kluwer. The company confirmed an incident affecting its health-journals business but reported no compromise of tax or financial data. The exposed information consisted of professional contact details and profile metadata.
Jaaved Jaaferi / X (Twitter) account
April 5, 2025
•[ account takeover, phishing, scam ]
On April 5 2025, the verified X (formerly Twitter) account of Indian actor Jaaved Jaaferi was hijacked and used to post cryptocurrency scam and phishing messages. The actor warned followers via Instagram not to engage. Control was restored within hours, and no data theft or cross-platform compromise was reported.
Eisner Advisory Group LLC
September 4, 2023
•[ data leak ]
Between September 4 and 9 2023, an unauthorized actor accessed and acquired files from Eisner Advisory Groups network. A forensic review completed February 2025 determined the data contained sensitive personal information. Notification letters were mailed beginning April 8 2025.
Finnish polling-place portal (äänestyspaikat.fi)
April 8, 2025
•[ ddos ]
On April 8 2025, NoName057(16) targeted Finlands polling-place website nestyspaikat.fi with a DDoS attack linked to protests over Ukraine policy, briefly disrupting voter-information access.
Tempo Media Group
April 6, 2025
•[ ddos, service disruption ]
From April 6 to 10, 2025, Tempo Media Groups news portals (Tempo.co, Tempo English) suffered a large-scale Distributed Denial of Service (DDoS) attack that rendered the sites inaccessible for several days. The disruption followed Tempos investigative reporting on online gambling networks. No data theft or system compromise was reported, and the perpetrators remain unidentified.
Total Dictation Foundation
April 5, 2025
•[ ddos ]
On April 5, 2025, the official website of the Total Dictation literacy campaign experienced a Distributed Denial of Service (DDoS) attack that temporarily disrupted access during the event, according to Foundation director Vyacheslav Belyakov. No data compromise, perpetrator identification, or motive was reported.
Millennium Home Health Care, Inc.
January 16, 2025
•[ data leak ]
Millennium Home Health Care, Inc., a home-healthcare provider based in Tulsa, Oklahoma, reported unauthorized access to two servers between January 16 and 20, 2025.
