Francesco Gaetano Caltagirone
October 9, 2025
•[ spyware, espionage, government ]
Report that Graphite spyware was used to spy on the businessman; tool sold to governments.
Simply.com
October 9, 2025
•[ ddos ]
Massive DDoS on DNS affected many customer sites per provider updates.
Multiple compromised email accounts at third undisclosed US university
October 9, 2025
•[ phishing, data leak ]
Credential-phishing on university payroll platforms diverted salary payments.
Prospect
October 9, 2025
•[ data leak ]
Security incident at Prospect exposed Bectu members personal and bank details.
An Giang Central General Hospital
March 1, 2025
•[ ransomware ]
Hackers encrypted the virtualized server system of An Giang Central General Hospital, halting all operations and forcing a switch to manual recordkeeping; no data exfiltration was reported.
Duc Giang General Hospital
October 5, 2024
•[ ransomware ]
In October 2024 cybercriminals attacked Duc Giang General Hospitals IT infrastructure, encrypting nine servers and causing major data loss and operational paralysis; no evidence of data exfiltration was reported.
Hong Ngoc General Hospital
June 15, 2024
•[ data leak ]
In June 2024 hackers advertised on cybercrime forums the sale of 112,000 patient and staff records stolen from Hong Ngoc General Hospital, including names, contact information, medical and financial data. The method of compromise was not disclosed, and no encryption was reported.
The Information Technology and Cybersecurity Service (STISC)
October 8, 2025
•[ DDoS, government ]
New DDoS attacks against Moldovan government IT infrastructure; some services temporarily unavailable.
CPAP Medical Supplies and Services, Inc.
October 8, 2025
•[ data leak, healthcare, government ]
Data breach affecting ~90,000 military members, veterans and families exposed SSNs and medical details.
Western Sydney University
October 6, 2025
•[ phishing ]
Mass fraudulent emails to students/alumni claiming degree revocation; university says messages were not legitimate.
Mecklenburg County Public Schools
September 2, 2025
•[ ransomware ]
Ransomware disrupted classes; district reported incident and restoration after a week.
Indonesian National Police
October 4, 2025
•[ data leak, government, hacker ]
Hacker Bjorka released a dataset of ~341k police personnel (names, ranks, units, contacts) from 2016 on a public site; authorities acknowledge leak discussions while probing identity of actor.
Aeroméxico
July 4, 2025
•[ data leak ]
Criminal group ShinyHunters claimed responsibility for compromising Aeromxicos Salesforce or related cloud application environment around July 4 2025, exfiltrating approximately 172 GB of passenger data including contact and ID information. Aeromxico has not confirmed the intrusion or the volume of records exposed.
Clarins Group
October 3, 2025
•[ ransomware, data leak ]
Press release states Clarins international e-commerce platforms were hit by ransomware; Everest allegedly leaked samples and claims access to ~600k customer records with personal/transactional info.
Unnamed Minnesota hospital
October 6, 2025
•[ ransomware, extortion, data leak ]
Ransomware group Radiant listed an unnamed Minnesota hospital on its leak site and issued a 7-day extortion deadline; hospital not yet identified and operational impact undisclosed.
United States Air Force
October 2, 2025
•[ data leak ]
USAF investigating a SharePoint permissions issue leading to exposure of PII/PHI; SharePoint access was blocked Air Force-wide while Microsoft and authorities investigate; no attribution yet.
Georgetown Brewing Co.
October 1, 2025
•[ data leak ]
Class-action notice cites brewerys disclosure of a cybersecurity incident impacting nearly twenty thousand people with PII; vector not detailed.
Doctors Imaging Group
May 11, 2024
•[ ransomware, data leak ]
Radiology practice disclosed that attackers had network access Nov 511, 2024 and copied files with PHI/PII; 171k people impacted; ransomware attribution Undetermined.
BK Technologies
September 20, 2025
•[ data leak ]
BK Technologies reported an intrusion on Sept 20; attackers accessed and stole non-public data from compromised systems; company says impact is not material and mostly covered by insurance.
Healthcare Interactive
July 8, 2025
•[ data leak, hacked, phi ]
Healthcare Interactive reported that hackers accessed its network between July 812, 2025 and exfiltrated files containing extensive PHI/PIIincluding names, DOBs, SSNs, contact details, insurance enrollment IDs, diagnoses, provider names, lab results, medical images, treatment plans, and possibly claims datawith the breach detected around July 22; the attack vector wasnt disclosed but regulators were notified.
