Full List

Search

Recent Breaches

• Boston Mountain Rural Health Center February 27, 2026 • [ hacking, IT incident, network server ] Boston Mountain Rural Health Center reported a hacking/IT incident involving a network server on February 27, 2026, affecting 4,800 individuals and potentially exposing sensitive personal health information; specific exposed data fields were not publicly reported.
• Undisclosed Mexican Bank #2 February 1, 2026 • [ ransomware, Qilin, electronic channels ] Banco de Mxico reported that an undisclosed bank suffered a February 2026 ransomware incident involving Qilin that affected electronic channels and electronic transfer services; no customer financial impact was reported and the institutions financial impact remained pending.
• Undisclosed Mexican Bank #1 January 1, 2026 • [ ransomware, LockBit, electronic transfer services ] Banco de Mxico reported that an undisclosed bank suffered a January 2026 ransomware incident involving LockBit that affected electronic transfer services; no customer financial impact was reported and the institutions financial impact remained pending.
• Hong Kong Hospital Authority (Kowloon East Cluster) April 3, 2026 • [ data leak, unauthorized retrieval, patient data ] The Hospital Authority detected unauthorized retrieval and leakage of patient data from the Kowloon East Cluster on April 3, 2026, affecting more than 56,000 patients; internal checks did not indicate a cyberattack, and police and privacy regulators were notified.
• City of Minot Water Treatment Plant March 14, 2026 • [ ransomware, critical infrastructure, utilities ] Minot, North Dakota officials confirmed a ransomware event impacted a server at the citys water treatment plant on March 14, 2026. The city said the water treatment plant and broader water system remained operational and safe, with no interruption to water service reported.
• The Northern Ireland Education Authority April 2, 2026 • [ cyberattack, personal information, data breach ] The Northern Ireland Education Authority reported a cyberattack on the C2k school IT network that disrupted access and involved targeted access to confidential personal information.
• Uffizi Galleries February 1, 2026 • [ cyberattack, backup restoration, operational disruption ] Uffizi Galleries confirmed a cyberattack but said nothing was stolen and disruption was limited to restoring backups.
• Sterling Seacrest Pritchard, Inc. August 12, 2025 • [ unauthorized access, email breach, data leak ] Sterling Seacrest Pritchard disclosed unauthorized access to its email environment that may have exposed personal information.
• Hasbro Systems March 28, 2026 • [ unauthorized access, cyberattack, operational disruption ] Hasbro identified unauthorized access to its network on March 28, 2026 and took select systems offline as a containment measure while continuing operations through business-continuity procedures; the company warned that interim measures could cause order-processing, shipping, and invoicing delays while it reviewed potentially impacted files.
• PSK WIND Technologies April 2, 2026 • [ data breach, hacktivism, server compromise ] Handala claimed it breached PSK WIND Technologies servers and deleted sensitive information tied to Israeli air-defense command-and-control systems.
• Uyghur Post March 5, 2026 • [ DDoS attack, availability, website offline ] Uyghur Post was hit by a sustained DDoS attack that knocked the website offline and prevented publication.
• Sandhills Medical May 8, 2025 • [ ransomware, unauthorized access, patient information ] Sandhills Medical disclosed that a ransomware attack led to unauthorized access to patient information.
• Oklahoma Tax Commission December 20, 2025 • [ unauthorized access, tax data, W-2 ] Oklahoma Tax Commission disclosed unauthorized access to W-2 and 1099 files in the OkTAP tax portal.
• ATM in Tyler, TX December 1, 2025 • [ malware, jackpotting, financial crime ] Court documents alleged three Dallas men installed malware on a Tyler ATM as part of a financial jackpotting scheme.
• At least one spyware-targeted WhatsApp user April 1, 2026 • [ spyware, malware, social engineering ] WhatsApp said about 200 users were tricked into installing a fake WhatsApp app containing spyware.
• St. Joseph County April 1, 2026 • [ data breach, cloud security, fax server ] St. Joseph County confirmed a breach of an external cloud-based fax server while disputing Handalas broader 2 TB data-theft claim.
• The Canada Life Assurance Company April 17, 2026 • [ unauthorized access, data leak, personal information ] The Canada Life Assurance Company confirmed unauthorized access through an employee account that exposed personal information for up to 70,000 people.
• Kent District Library April 24, 2026 • [ ransomware, cyberattack, service disruption ] Kent District Library closed all branches after a ransomware attack disrupted computer systems and network-dependent services.
• Unnamed taxpayer (IRIS profile) October 1, 2025 • [ unauthorized access, tax fraud, data manipulation ] Unauthorized individuals accessed a taxpayers IRIS profile and altered an October 2025 sales tax return to insert fake supplies worth Rs. 415.6 million.
• Venezuelan Ministry of Foreign Affairs January 1, 2026 • [ espionage, state-sponsored attack, data breach ] The same China-linked espionage campaign that compromised the Cuban Embassy in Washington D.C. also reportedly exploited Microsoft Exchange servers used by Venezuelas Ministry of Foreign Affairs and accessed officials email communications during the same January 2026 regional campaign.