Volkswagen Group France
October 14, 2025
•[ ransomware, data leak ]
Qilin gang claimed a ransomware attack on Volkswagen France with ~150GB of data allegedly stolen; investigation ongoing.
Zerodha
October 15, 2025
•[ phishing, account compromise ]
Economic Times details Kamaths brief X account compromise after clicking phishing email
Aunt Martha’s Health and Wellness
July 15, 2025
•[ data leak ]
Attackers accessed patient and employee information in July 2025; data exfiltrated but no encryption, actor attribution, or quantity of records reported.
Cardiovascular Medicine Associates, PA (MyCardiologist)
June 12, 2025
•[ data leak, healthcare, email compromise ]
Hackers accessed MyCardiologists email environment between May 30 and June 12 2025, exfiltrating patient information including medical and insurance details; no encryption or quantitative data reported.
Kelowna International Airport
October 14, 2025
•[ hacktivism, system intrusion ]
Pro-Palestinian messages appeared on PA/displays; brief disruption while systems isolated and restored
Russian IT service provider
October 15, 2025
•[ data leak, espionage, apt ]
China-linked Jewelbug infiltrated Russian IT provider for months, exfiltrating repositories and data
Mango
October 15, 2025
•[ data leak ]
External marketing provider breach exposed limited customer contact data; Mango said core systems unaffected
Sony Interactive Entertainment (PlayStation Network)
October 7, 2025
•[ account takeover, poor security practices, hacking ]
Hackers compromised a PlayStation Network account belonging to well-known gamer dav1d_123, apparently exploiting weak account protection or internal credential handling by PSN support. The incident revealed deficiencies in Sonys customer-support and account-security processes.
Waymo
October 14, 2025
•[ ddos, service disruption ]
Local coverage shows a prank dubbed a Waymo DDoS herded ~50 robotaxis
Goosehead Insurance Agency, LLC
March 6, 2025
•[ data leak ]
Between March 613 2025 an unauthorized third party accessed and copied files from Gooseheads network environment; Goosehead began investigation and later mailed breach notices in October 2025. Some open-source posts attributed the incident to a group calling itself CHAOS and claimed ~300 GB exfiltrated, but that actor attribution and total volume remain unconfirmed by Goosehead.
Ansell Limited
October 14, 2025
•[ data leak ]
Ansell disclosed unauthorized access to certain company data and began mitigation; no operational disruption reported.
Methodist Church of Southern Africa
October 13, 2025
•[ ransomware, data leak ]
Ransomware actors claimed an attack on the Methodist Church of Southern Africa; verification and technical details remain limited.
City of Michigan
September 23, 2025
•[ ransomware ]
Ransomware on Sept 23 impacted part of city data and employees internet/telephone; systems being restored.
Naxtel; AZ Smart Offers; BirMarket; Elit Optimal; two additional Azerbaijani websites
October 18, 2025
•[ DDoS ]
Hezi Rash Group launched a politically motivated DDoS campaign against Azerbaijan on October 18, 2025. Six Azerbaijani websites, including telecom operator Naxtel and retailers AZ Smart Offers, BirMarket, and Elit Optimal, were rendered inaccessible for several hours. Outages were verified through Check-Host reports posted by the group.
HCMC Heart Hospital
March 1, 2024
•[ cyberattack, service disruption ]
Foreign IP addresses attacked the online appointment-booking website of HCMC Heart Hospital on March 1 2024, forcing system shutdown and repair; no data theft or exfiltration reported.
