Methodist Church of Southern Africa
October 13, 2025
•[ ransomware, data leak ]
Ransomware actors claimed an attack on the Methodist Church of Southern Africa; verification and technical details remain limited.
City of Michigan
September 23, 2025
•[ ransomware ]
Ransomware on Sept 23 impacted part of city data and employees internet/telephone; systems being restored.
Naxtel; AZ Smart Offers; BirMarket; Elit Optimal; two additional Azerbaijani websites
October 18, 2025
•[ DDoS ]
Hezi Rash Group launched a politically motivated DDoS campaign against Azerbaijan on October 18, 2025. Six Azerbaijani websites, including telecom operator Naxtel and retailers AZ Smart Offers, BirMarket, and Elit Optimal, were rendered inaccessible for several hours. Outages were verified through Check-Host reports posted by the group.
HCMC Heart Hospital
March 1, 2024
•[ cyberattack, service disruption ]
Foreign IP addresses attacked the online appointment-booking website of HCMC Heart Hospital on March 1 2024, forcing system shutdown and repair; no data theft or exfiltration reported.
Memphis-Shelby County Schools (MSCS)
October 8, 2025
•[ supply chain attack, service disruption ]
Vendor messaging platform breach caused districtwide outage; data impact not indicated.
Sunweb Group
October 7, 2025
•[ data leak, phishing ]
Data breach exposed customer contact and booking details; agency warned customers to stay vigilant.
Assaf Harofeh Medical Center
October 1, 2025
•[ extortion, data leak, healthcare ]
Hospital hit during Yom Kippur; extortion demand ~$700,000; brief outage of shared records system reported; authorities probing possible data leak.
Legal Practice Board of Western Australia
October 2, 2025
•[ ransomware, data leak, health data ]
Ransomware attack in May led to compromise of additional data beyond initial disclosure; impacted info includes health, financial, and personal data.
Discord
October 3, 2025
•[ data leak, third-party breach ]
Third-party customer support vendor was breached, exposing support tickets, personal data, limited billing details, and a small number of government-ID images; Discord core systems unaffected.
General Directorate of Taxes and Domains
October 3, 2025
•[ data leak ]
Criminal group 'Black Shrantac' claims breach of Senegals DGID with large-scale data exfiltration; impact on DGID operations not detailed.
POST Luxembourg (national telecommunications infrastructure)
July 23, 2025
•[ cyberattack, outage, critical infrastructure ]
Cyberattack targeting Huawei telecommunications equipment caused a nationwide outage of 4G and 5G mobile networks in Luxembourg, disrupting emergency services, internet access, and electronic transactions for several hours.
Undisclosed financial institutions (ATM network)
July 30, 2025
•[ backdoor, financial theft, atm hacking ]
Infosecurity reports cybercriminals used Raspberry Pi devices to install a backdoor in ATM networks to steal funds.
Singapore traffic enforcement (dataset of offenders)
July 31, 2025
•[ data leak, government ]
AsiaOne reports that 1,300 names and addresses of traffic offenders were published online; police are investigating.
Undisclosed gaming mouse manufacturer (download site)
July 29, 2025
•[ malware, supply chain attack ]
PCWorld reports a gaming mouse vendors download page hosted malware for weeks, infecting users who downloaded driver/software packages.
Delfingen Industry
July 31, 2025
•[ cybersecurity incident ]
Company notice references a cybersecurity incident affecting IT systems; details limited pending investigation.
City of Nuremberg
July 7, 2025
•[ cyberattack ]
Local reporting indicates the City of Nuremberg website suffered a cyberattack causing outages; noted as not the first time.
Undisclosed Florida orthopedic practice
July 8, 2025
•[ data leak, healthcare ]
Beckers reports a data breach affecting a Florida orthopedic practice; details on scope and vector limited.
Deutsche Welthungerhilfe (WHH)
July 2, 2025
•[ ransomware, data leak ]
RaaS group listed WHH and offered stolen data for sale; WHH shut down affected systems, involved police and DPA, and refused to pay.
At least one Russian industrial company
January 1, 2025
•[ phishing, spyware, data leak ]
Kaspersky-reported campaign uses phishing and a new spyware ('Batavia') to exfiltrate sensitive documents and system info from Russian industrial firms.
