Connex Credit Union systems
June 2, 2025
•[ data leak ]
An unauthorized access between June 23, 2025, allowed attackers to steal sensitive personal and financial data; no evidence of account compromise; notifications began late July into early August; credit monitoring offered
Sabo (global fashion label)
July 30, 2025
•[ data leak ]
Hackread reports global fashion label Sabo suffered a data breach exposing customer records online.
Foreign embassies in Moscow
July 30, 2025
•[ cyber espionage ]
MarketScreener cites Microsoft: Russias FSB targeted foreign embassies in Moscow in a cyber espionage campaign.
City of Erfurt
July 29, 2025
•[ ddos ]
Welt reports the city of Erfurts website was temporarily paralyzed by a cyber incident, likely DDoS-related.
Claro Argentina
July 17, 2025
•[ data leak ]
Local outlet reports a claim that Claro Argentinas database was hacked and is for sale on the dark web.
Cookeville Regional Medical Center (CRMC)
July 16, 2025
•[ ransomware ]
Local paper confirms ransomware at CRMC; hospital switched to downtime procedures while responding to the incident.
PIX banking transaction system
July 4, 2025
•[ cybercrime, financial fraud ]
Police in Brazil arrested a suspect tied to a $100M+ banking hack scheme; article frames it as multi-bank cybercrime operation.
GMX (decentralized exchange)
July 30, 2025
•[ theft, vulnerability ]
The Record reports theft from the GMX exchange with attackers stealing cryptocurrency through an exploit path still under investigation.
Undisclosed Russian pharmacy chains
July 31, 2025
•[ ransomware ]
The Record reports multiple Russian pharmacies were shut down due to a cyberattack disrupting operations and payment/services.
Undisclosed rural Nebraska school district
June 30, 2025
•[ phishing, BEC ]
A rural Nebraska school district lost approximately $1.8 million to a phishing/BEC scheme that diverted funds from intended recipients.
Mower County (Minnesota)
July 17, 2025
•[ ransomware ]
Mower County reported restoration progress following a ransomware incident that disrupted county services for roughly two weeks.
Anne Arundel Dermatology
March 25, 2025
•[ data leak ]
Practice disclosed a data breach impacting about 1.9 million individuals, following an intrusion earlier in 2025; investigation and notifications ongoing.
Avantic Medical Lab
July 3, 2025
•[ ransomware, data leak ]
Everest listed the lab June 10 and leaked 31 GB of patient files on July 3; contents include PHI, EOB files, and some financial details.
Wiley Rein LLP
July 12, 2025
•[ espionage, unauthorized access, state-sponsored attack ]
Firm notified clients that Microsoft 365 accounts of certain personnel were accessed in an apparent intelligence-gathering operation; suspected China-affiliated group.
Haskar Integration (Russian military drone supplier)
July 15, 2025
•[ data destruction, hacktivism, military ]
Ukrainian cyber operators claimed access and subsequent wiping of 47TB of technical data from Haskar Integration, a major supplier to Russian forces; backups also deleted.
Seoul Guarantee Insurance (SGI)
July 14, 2025
•[ ransomware ]
Ransomware attack began early Monday; joint investigation confirmed ransomware; SGI core systems offline for third day, causing widespread confusion.
UK Ministry of Defence (ARAP applicants)
July 19, 2025
•[ data leak ]
Article discusses government response to the previous ARAP data breach; thousands at risk; records of 18,714 applicants exposed; coding reflects exposure context.
UK Ministry of Defence (Special Air Service personnel)
July 21, 2025
•[ data leak ]
Army ordered an immediate review after media reports that identities of at least 20 SAS soldiers were publicly available online; follows earlier MoD ARAP leak revelations.
France Travail (French public employment service)
July 12, 2025
•[ data leak ]
France Travail reported unauthorized access to personal data, discovered July 12; employment portal was closed for analysis; at least 340,000 job seekers impacted, third such incident in <2 years.
Allianz Life Insurance Company of North America
July 16, 2025
•[ data leak ]
Allianz Life confirmed that a threat actor accessed a third-party cloud CRM on July 16, exposing PII for most of its 1.4M customers.
