Full List

Search

Recent Breaches

• Jamnagar cyber-fraud case (farmers targeted) January 1, 2025 • [ fraud, malware ] Two men arrested by Jamnagar cybercrime police for siphoning 6.4 lakh INR through a fraudulent mobile app scam targeting farmers phones in Gujarat
• Herbapol Lublin S.A. July 31, 2025 • [ ransomware ] Polish trade press reports cyberattack on Herbapol Lublin with a ransom demand; operational interruptions mentioned.
• Claim Expert January 1, 2025 • [ data leak, data exfiltration ] Data exfiltration and exposure of Pick n Pay customer information (~105 k records) from Claim Experts system by Bashe group; no encryption or operational disruption reported
• OneDayOnly January 1, 2025 • [ data leak ] Data exfiltration from OneDayOnlys cloud storage claimed by KillSec; company confirmed incident but denied exposure of customer financial data
• Campaign: Incidents in Brazil's financial sector (roundup) July 5, 2025 • [ Financial ] Roundup article listing recent cybersecurity incidents impacting Brazils financial sector; logged as campaign-level entry.
• At least one Crypto firm targeted via macOS malware June 30, 2025 • [ malware, cryptocurrency, theft ] Indonesian outlet Liputan6 reports North Korean actors using macOS malware to target cryptocurrency companies, consistent with DPRKs crypto theft campaigns.
• At least one individual tricked by phony Chinese e-commerce sites (multiple brands) June 30, 2025 • [ phishing ] GovInfoSecurity roundup highlights campaigns using phony Chinese retail websites to mimic brands and defraud consumers; treated here as campaign-level item.
• IStories & Verstka (independent media) June 20, 2025 • [ denial of service ] Qurium linked a Russian hosting provider (Biterika) to DoS floods that hit IStories and Verstka after a sensitive expos; ownership ties point to a sanctioned tech institute staffer.
• Polish Air Navigation Services Agency (PANSA) July 25, 2025 • [ cyberattack, sabotage, service disruption ] Polish authorities opened an investigation into potential sabotage affecting air traffic control systems; disruptions triggered review of cyber causes.
• Undisclosed European ministry July 31, 2025 • [ malware, apt, intelligence collection ] HackRead reports DoNot APT deployed LOPTiKMod malware against a European ministry to collect intelligence; attribution aligns with prior DoNot operations.
• Louis Vuitton UK (LVMH) July 31, 2025 • [ cyberattack, data leak ] HackRead notes a cyberattack affecting Louis Vuitton UK customers, marking the third LVMH incident in three months; details limited.
• 99 Cents Only Stores (data linked to Dollar Tree acquisition context) July 30, 2025 • [ ransomware, data leak ] HackRead reports INC claimed 1.2TB of Dollar Tree data; company statements elsewhere indicate samples match data tied to defunct 99 Cents Only Stores.
• Mailchimp July 31, 2025 • [ ransomware, data leak ] Everest ransomware group claimed a small breach of Mailchimp systems, sharing limited details; no disruption reported.
• McDonald’s recruitment chatbot platform June 1, 2025 • [ data leak ] SecurityWeek reported that a recruitment chatbot platform used by McDonalds leaked data on approximately 64 million job applicants worldwide.
• Belk, Inc. July 29, 2025 • [ ransomware ] Ransomware group INC claimed an attack on Belk; the retailer's confirmation and scope had not been disclosed at report time.
• United States National Guard (select components) June 15, 2025 • [ espionage, nation-state ] SecurityWeek reported that China-linked Salt Typhoon compromised National Guard systems in an espionage operation; details limited.
• Cierant Corporation January 1, 2025 • [ ransomware, data leak ] SecurityWeek: HHS tracker shows >232k impacted at Cierant (Cleo file transfer/Cl0p) and ~280k at law firm Zumpano Patricios after May 6 intrusion with possible exfiltration.
• Zumpano Patricios (law firm) May 6, 2025 • [ ransomware, data leak ] SecurityWeek: HHS tracker shows >232k impacted at Cierant (Cleo file transfer/Cl0p) and ~280k at law firm Zumpano Patricios after May 6 intrusion with possible exfiltration.
• Columbia University July 3, 2025 • [ data leak, hacktivism ] University said a hacker with a political agenda broke into IT systems and stole targeted student data; no threat activity detected since June 24.
• Ezynetic (IT vendor to Moneylenders Credit Bureau/ Credit Bureau Singapore) June 24, 2024 • [ data leak ] PDPC fined Ezynetic after breach impacting ~190,000 whose data, including credit reports, was put for sale; uncovered June 24, 2024.