Pacific Residential Mortgage
February 10, 2025
•[ ransomware, data leak ]
Pacres reported ransomware that locked systems and exposed consumer information.
Parcel Plus (Hanover)
March 28, 2025
•[ phishing, data leak ]
York County tax preparer reported spearphishing breach linked to foreign actors.
Lee University
March 22, 2024
•[ data leak, third-party breach ]
University filed notices after third-party software exploit enabled data access.
National Faster Payments System (Sbp)
March 26, 2025
•[ ransomware, denial of service ]
A large-scale hacker attack has hit Lukoil and its Faster Payment System. Users are complaining that they can't transfer money, and Lukoil employees have been unable to access their work computers since early morning.
Rbk Money
March 30, 2025
•[ cyber incident, service disruption ]
Russian source reported cyber incident impacting payments firm operations and services.
Dove Healthcare
September 29, 2024
•[ phishing, data leak ]
Healthcare provider disclosed email account compromise containing patient and employee information.
Coweta County School System
May 2, 2025
•[ cyberattack ]
District reported a serious cyberattack detected May 2, taking systems offline and restricting internal network access while investigating; impact to operations during testing period.
Corendon
May 1, 2025
•[ ddos ]
Dutch outlet coverage attributed coordinated Russian DDoS attacks against Corendon and Arriva, framed as retaliation for Dutch support to Ukraine; disruptions were temporary.
Masimo Corporation
April 27, 2025
•[ cyberattack, operational disruption ]
Masimo reported a cyberattack breaching on-prem systems, isolating impacted systems and causing production delays in fulfilling orders.
Legal Aid Agency
April 23, 2025
•[ data leak, government ]
Breach of LAA digital services first detected April 23; by May 16 the scope was deemed far wider. Government confirms theft of sensitive data on applicants dating back to 2010; online services were shut down as a precaution while NCSC/NCA investigated.
Incruit
March 8, 2025
•[ data leak ]
Incruit reported signs of external attack and data exposure beginning March 8; customers were notified and regulators opened an investigation; scope and method under review.
Undisclosed Taiwan government agencies
March 1, 2025
•[ phishing, malware, espionage ]
Trend Micro and THN describe a March 2025 spear-phishing campaign by China-aligned MirrorFace targeting public institutions in Japan and Taiwan using OneDrive-delivered ZIPs that dropped ROAMINGMOUSE and an upgraded ANEL backdoor; reporting outlines techniques and targeting, not specific victim impact details for a single named org.
Berkeley Research Group
March 1, 2025
•[ ransomware, data leak ]
BRG suffered a ransomware intrusion detected in March 2025 that led to data theft and encryption activity. Subsequent disclosures and DOJ statements indicate exposure of sensitive information relating to survivors involved in multiple Catholic diocesan bankruptcy cases; the firm engaged external responders and notified affected parties.
Raymond Lifestyle Ltd
February 20, 2025
•[ ransomware ]
Raymond reported a cybersecurity incident on Feb 20, 2025 that impacted some IT assets. In its Q4 FY25 results on May 13, the firm cited the ransomware attack and weak demand as factors weighing on total income and profit, indicating a disruptive event without confirmed exfiltration details.
LexisNexis Risk Solutions
December 25, 2024
•[ data leak ]
LexisNexis disclosed that data stored on GitHub was acquired by an unauthorized party; breach notifications began May 24, 2025.
Texas Health and Human Services Commission
December 5, 2024
•[ insider threat, data leak ]
HHSC update: following insider wrongdoing identified in 2024, the agency added 33,529 more affected, bringing the total to ~94,000 individuals; misconduct spanned 2021Jan 2025 and led to terminations and OIG referral.
City of Sheboygan
October 31, 2024
•[ ransomware, data leak ]
67,000+ residents PII including SSNs, state IDs, license plate numbers were accessed during an Oct 31, 2024 ransomware incident; breach letters filed May 2025.
National Police
September 1, 2024
•[ data leak ]
Dutch intelligence services said a previously unknown Russian group (LAUNDRY BEAR) hacked multiple orgs including police; the police GAL was stolen in Sept 2024.
Alera Group
July 19, 2024
•[ data leak ]
PlanSponsor reports Alera confirmed unauthorized access to its technology environment between July 19 and August 4, 2024; on April 28, 2025 it confirmed personal data may have been removed and disclosed a total of 10,874 affected individuals.
System Rejestrów Państwowych (Polish State Register System)
April 30, 2025
•[ ddos, hacktivism ]
On April 30, 2025, Polands System Rejestrw Pastwowych, which supports the national tax and registration systems, was targeted by a hacktivist DDoS campaign that caused temporary outages. Access to e-Declarations, CEPiK, and related government portals was disrupted for about one hour. No data theft or encryption occurred, and services were quickly restored.
