Full List

Search

Recent Breaches

• Georgetown Brewing Co. October 1, 2025 • [ data leak ] Class-action notice cites brewerys disclosure of a cybersecurity incident impacting nearly twenty thousand people with PII; vector not detailed.
• Doctors Imaging Group May 11, 2024 • [ ransomware, data leak ] Radiology practice disclosed that attackers had network access Nov 511, 2024 and copied files with PHI/PII; 171k people impacted; ransomware attribution Undetermined.
• BK Technologies September 20, 2025 • [ data leak ] BK Technologies reported an intrusion on Sept 20; attackers accessed and stole non-public data from compromised systems; company says impact is not material and mostly covered by insurance.
• Healthcare Interactive July 8, 2025 • [ data leak, hacked, phi ] Healthcare Interactive reported that hackers accessed its network between July 812, 2025 and exfiltrated files containing extensive PHI/PIIincluding names, DOBs, SSNs, contact details, insurance enrollment IDs, diagnoses, provider names, lab results, medical images, treatment plans, and possibly claims datawith the breach detected around July 22; the attack vector wasnt disclosed but regulators were notified.
• Red Hat October 2, 2025 • [ extortion, data leak ] Red Hat confirmed incident affecting a consulting GitLab instance; extortion group claims access to repos and CERs with potentially sensitive client details.
• Serbian Civil Aviation Directorate October 17, 2025 • [ cyber-espionage, phishing, malware ] A cyber-espionage campaign linked to suspected Chinese threat actors compromised application servers at Serbias Civil Aviation Directorate. Attackers used phishing emails to deploy Sogu, PlugX, and Korplug malware, gaining persistent access for intelligence collection. No operational disruption was reported.
• Rajasthan Education Department April 29, 2025 • [ hacktivism, defacement ] Hacktivist group Pakistan Cyber Force defaced the Rajasthan Education Department website with inflammatory political messages claiming the Pahalgam attack was an inside job; the portal was taken offline and later restored.
• Flutter Entertainment (Paddy Power and Betfair) July 9, 2025 • [ data leak ] Unauthorized third-party access to Flutter Entertainments Paddy Power and Betfair systems exposed personal account data of about 800,000 users; the company contained the breach and reported no financial data compromise.
• Vice Ministry of Economy (Paraguay) et al. June 14, 2025 • [ hacktivism, website defacement, unauthorized access ] Hacktivist group CyberTeam launched coordinated website intrusions against Paraguayan government institutions, defacing and accessing official systems while denouncing national cybersecurity as ineffective; the Ministry of Economy confirmed limited unauthorized access but no data leak.
• Czech Police, Interior Ministry, and other government offices July 31, 2025 • [ government, hacktivism ] iRozhlas reports hackers attacked Czech police and government websites in retaliation for cooperation in Ukraine-related operations.
• Undisclosed city in Sweetwater County, WY June 15, 2025 • [ ransomware ] Local outlet notes ongoing silence from a Sweetwater County city one month after a June ransomware attack.
• Leading fixed-line operators in Crimea July 23, 2025 • [ ddos ] Distributed denial-of-service (DDoS) attack disrupted major fixed-line telecommunications operators across Crimea for several days, causing intermittent outages for subscribers; mitigation measures underway.
• Schools in Shropshire (11 schools) July 21, 2025 • [ ransomware ] Local council committee informed that a ransomware cyberattack impacted 11 schools in Shropshire.
• Nymburk Hospital July 8, 2025 • [ ransomware, extortion ] Czech police investigating a cyberattack on Nymburk Hospital including extortion elements; disruption reported.
• Surmodics, Inc. June 5, 2025 • [ data leak ] Surmodics shut down parts of its IT systems after detecting unauthorized access on June 5; SEC filing notes restoration ongoing and potential data theft being analyzed.
• Albemarle County, Virginia July 15, 2025 • [ ransomware, data leak ] Albemarle County said a specific ransomware group was responsible for a July attack that disrupted services and potentially accessed internal records.
• Nippon Steel subsidiary (Japan) June 20, 2025 • [ data leak, zero-day exploit ] Subsidiary blamed data breach on a zeroday exploit; extent and data types under investigation.
• Undisclosed US debt settlement firm February 15, 2025 • [ data leak ] A US debt settlement firm disclosed a breach affecting 160,000 individuals; limited details on intrusion vector provided.
• Compumedics Limited June 18, 2025 • [ ransomware, data leak ] Australian med-tech firm Compumedics reported a ransomware attack that resulted in exfiltration of data affecting approximately 318,000 individuals.
• Louis Vuitton Korea July 4, 2025 • [ data leak ] Bloomberg-reported cyberattack resulted in customer data leak affecting Louis Vuitton Korea customers; details limited at disclosure.