Full List

Search

Recent Breaches

• BePrime April 20, 2026 • [ unauthorized access, missing MFA, credential leak ] BePrime, a managed cybersecurity services provider in Mexico, was breached in April 2026 after attackers accessed administrator accounts lacking MFA, exfiltrating 12.6 GB of data that included plaintext credentials, client penetration testing reports, Cisco Meraki API keys controlling 1,858 network devices, and live surveillance camera feeds from client offices.
• Minidoka Memorial Hospital April 5, 2026 • [ cyber attack, healthcare, operational disruption ] A cyber incident on Easter morning limited imaging services at Minidoka Memorial Hospital in Rupert, Idaho, leading to temporary emergency patient transfers; internal systems were affected but patient care continued, and imaging was fully restored by midnight on April 19, 2026.
• Itron, Inc. April 13, 2026 • [ unauthorized access, corporate systems, energy management ] Itron, a provider of energy and water management solutions, detected unauthorized access to some corporate systems on April 13 2026; operations continued and no further unauthorized activity or customer impact was observed.
• Patriot Regional Emergency Communications Center March 31, 2026 • [ cyberattack, service disruption, emergency services ] A cyberattack disrupted non-emergency and business telephone lines for police, fire, and EMS departments in Pepperell, Dunstable, Townsend, and Ashby; 911 service remained functional and no private user information was reported compromised.
• Maryland Department of Assessments and Taxation April 14, 2026 • [ suspicious activity, web application security, incident response ] The Maryland Department of Information Technology detected suspicious activity on servers running the State Department of Assessments and Taxations Real Property Search website application on April 14, 2026 and took the site offline; no private data was reported compromised.
• Undisclosed Mongolian government entity January 1, 2025 • [ cyber espionage, backdoor, data exfiltration ] In January 2025, China-aligned GopherWhisper deployed Go-based backdoors and an exfiltration tool on roughly a dozen systems at an undisclosed Mongolian government institution, using Discord, Slack, Microsoft 365 Outlook, and File.io for command-and-control and data exfiltration.
• National Health Insurance Company (CNAM) April 1, 2026 • [ cyberattack, data exfiltration, health insurance ] CNAM confirmed a cyberattack that may have resulted in limited data exfiltration from Moldovas health insurance database.
• eBay Inc April 26, 2026 • [ DDoS attack, service disruption, hacktivism ] eBay experienced a widespread service disruption beginning April 26, 2026, affecting search, listings, checkout, and API functionality worldwide; the hacktivist group 313 Team claimed responsibility for a DDoS attack, but eBay did not confirm the cause.
• Signature Healthcare Brockton Hospital April 6, 2026 • [ cyberattack, data theft, healthcare ] A cyberattack detected on April 6, 2026 affected information systems at Signature Healthcare and Signature Healthcare Brockton Hospital, triggering downtime procedures, ambulance diversion, chemotherapy cancellations, EHR and patient portal outages, pharmacy prescription-fill disruption, lab delays, and medical-record request disruption; Anubis claimed it stole 2 TB of data, but Signature Healthcare did not confirm data theft.
• McGraw Hill April 14, 2026 • [ misconfiguration, data leak, extortion ] McGraw Hill confirmed that a Salesforce-hosted webpage misconfiguration exposed limited contact data, while ShinyHunters claimed millions of Salesforce records and attempted extortion.
• At least one critical infrastructure provider March 1, 2026 • [ advanced persistent threat, critical infrastructure, programmable logic controllers ] Iran-affiliated advanced persistent threat actors accessed internet-exposed Rockwell Automation/Allen-Bradley programmable logic controllers at one or more U.S. critical infrastructure providers, manipulated project files and HMI/SCADA displays, resulting in operational disruption and financial loss.
• Town of Apex June 23, 2024 • [ ransomware, unauthorized access, data breach ] The Town of Apex experienced a ransomware event in which unauthorized actors accessed town systems from June 23 to July 2, 2024, uploaded town data to a cloud storage provider, and potentially affected personal information of about 22,000 residents; Apex later recovered the data through court action.
• Philadelphia Insurance June 9, 2025 • [ unauthorized access, data leak, customer data ] Philadelphia Insurance Companies detected unauthorized access to its systems late on June 9, 2025; it proactively disconnected affected systems, stated the incident was not ransomware and involved no encryption, and later disclosed that customer data had been accessed.
• 170 Ukrainian prosecutors and investigators March 1, 2026 • [ espionage, email compromise, state-sponsored ] Russia-linked hackers compromised Ukrainian prosecutors and investigators email accounts as part of a broader email-espionage campaign involving at least 284 inboxes.
• Bitcoin Depot March 23, 2026 • [ unauthorized access, credential theft, cryptocurrency theft ] Bitcoin Depot detected unauthorized access to its IT systems on March 23, 2026; attackers obtained credentials for digital asset settlement accounts and transferred 50.903 Bitcoin, worth about $3.665 million, from company wallets, while customer platforms and data were not affected.
• Hims & Hers Inc. February 4, 2026 • [ third-party risk, data leak, PII ] Hackers accessed Hims & Hers third-party ticketing system between February 4 and February 7, 2026, stealing customer support ticket data that primarily included names and email addresses; medical records and healthcare-provider communications were not affected.
• CareCloud, Inc. March 16, 2026 • [ unauthorized access, network disruption, electronic health records ] CareCloud experienced unauthorized access and a temporary network disruption on March 16, 2026 that partially affected functionality and data access to one of its six electronic health record environments for approximately eight hours.
• Undisclosed organization December 1, 2025 • [ email bombing, Microsoft Teams impersonation, Snow malware ] UNC6692 used email bombing and Microsoft Teams helpdesk impersonation to deliver the Snow malware suite, moved laterally through the victim environment, reached domain controllers, extracted the Active Directory database and registry hives with FTK Imager, and exfiltrated the files using LimeWire.
• Medtronic April 17, 2026 • [ data leak, unauthorized access, personal records ] ShinyHunters listed Medtronic on its leak site on April 17, 2026, claiming theft of more than 9 million personal records and terabytes of corporate information; Medtronic confirmed unauthorized access to corporate IT systems but had not confirmed data theft.
• Nacogdoches Memorial Hospital January 15, 2026 • [ unauthorized access, personal health information, internal network breach ] A threat actor accessed Nacogdoches Memorial Hospitals internal network and information systems between January 15 and January 31, 2026, likely accessing personal and health information of 257,073 individuals.