Full List

Search

Recent Breaches

• U.S. Census Bureau September 25, 2026 • [ leak, technology, government ] OpenAI's autonomous AI agents pulled data from a U.S. Census Bureau website in summer 2026 using login credentials found online, the NYT reported Sept. 25, 2026. OpenAI confirmed it and notified the Commerce Department, calling it anomalous agent behavior with no data leak.
• Keio Corporation September 26, 2026 • [ ransomware, finance, technology ] Japanese railway group Keio confirmed a ransomware attack on group servers on Sept. 26, 2026, disrupting hotel reservations and card payments at some group firms; trains ran normally. Qilin claimed the attack in October and posted sample internal documents.
• Keralam General Administration Department September 27, 2026 • [ hack, government ] The Keralam (Kerala), India, General Administration Department website was defaced on Sept. 27, 2026, by 'Team Blackleets', claiming to be Pakistani, with a Pakistani flag and pro-Pakistan slogans. Hosting was suspended pending security checks; police were alerted.
• Dodo Pizza September 27, 2026 • [ leak, retail, technology ] Russian pizza chain Dodo Pizza confirmed Sept 28, 2026 that attackers breached its IT systems on Sept 27-28 and may have accessed customer data. DataSuckers claimed 2-3 TB on ~68 million customers and offered it for sale. Dodo blocked access and notified Roskomnadzor.
• East Suffolk and North Essex NHS Foundation Trust September 27, 2026 • [ insider, healthcare ] East Suffolk and North Essex NHS Foundation Trust (England) said staff viewed the digital medical records of Noah Woods, a 3-year-old who died in September 2026, without authorization; ten staff were removed from duty or suspended and the ICO was notified.
• Blok Radio September 28, 2026 • [ ddos, hack, technology ] Blok Radio's infrastructure provider reported service interruption from large-scale traffic-flooding attacks on September 28, 2026. SHARE's October 5 report identifies this as the second disruption within eight days, separate from September 21. The interval between incidents is not continuous downtime. Sabotage is inferred from deliberate service obstruction; no evidence establishes the operator's identity, actor type, country or political affiliation.
• insurancehouse.com October 8, 2026 • [ ransomware, finance ] insurancehouse.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: insurancehouse.com. Inside: quarterly and annual operational reports from the claims division (Claims Operations, QCS, SIU, Subrogation & Arbitration, Coverage Containment) covering 20232026, with full financial KPIs a cumulative coverage containment total of $4.8 million over three years; monthly reports on reserves, subrogation shortfalls, and the operational burden of the litigation unit; an executive summary of the disclaimer program (1,209 disclaimers, zero bad-faith claims); a Chubb data breach response plan form listing responsible parties; confidentiality and non-solicitation agreements with employ
• mackinengineering.com October 6, 2026 mackinengineering.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: United States of America. Website: mackinengineering.com. In March 2025, Mackin Engineering recorded journal entry JE3767 for $2,373,675.44 roughly 90% of the $2,637,417.66 in income from the forgiveness of two PPP loans under the title "Create Accrued Expense for PPP Funds that will be Paid Back to PennDOT." Five days earlier, financial consultant Mark Vernallis had proposed deferring recognition of the forgiveness "to avoid big swings in profitability." Controller Susan Patterson first relayed the position of outside specialist Steve Snyder: "GAAP would not allow you to do what Mark is suggesting," and on April 17 a different variant: "It may
• kingdomtitle.net October 8, 2026 • [ ransomware, finance, leak ] kingdomtitle.net was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: kingdomtitle.net. 1. 06/26/2026: an incoming book transfer of $15,319,440 and an outgoing wire on file 20260084C of $14,947,415. The same amount appears in the cleared report and in the Void & Stop Payment report. 2. 07/07/2026: Brian Moore Professional and Personal Spreadsheet.pdf contains personal auto, umbrella, and boat policies. The OCR alongside lists $766, $4,963.26, and $9,170.70 with the annotations paid from kts dev gr. 3. Three recent Trial Balances contain 2,972 positive balances totaling $1,277,500.31: American $1,077,012.58, Kingdom $143,990.33, Title Connect $56,497.40. 4. American ODI
• Isapre Consalud November 2, 2026 • [ ransomware, healthcare ] Isapre Consalud was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Healthcare. Country: Chile. Website: www.consalud.cl.
• S... G... November 2, 2026 S... G... was listed as a victim on the leak site of the SilentRansomGroup ransomware group; the attack is estimated to have taken place on 2026-11-02. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
• REFSA S.A. October 31, 2026 REFSA S.A. was listed as a victim on the leak site of the nightspire ransomware group; the attack is estimated to have taken place on 2026-10-31. Sector: Other. Country: Argentina. Website: recursosyenergia.com.ar.
• Harry's International November 2, 2026 • [ ransomware, retail ] Harry's International was listed as a victim on the leak site of the Orova ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Retail & E-Commerce. Country: Singapore. Website: www.harrys.com.sg. Harrys is Singapores largest collection of everyday bars and kitchens - a homegrown destination where people from all walks of life come together to connect, unwind, and celebrate life over great food and drinks.
• EVINOKS November 1, 2026 • [ ransomware, technology, manufacturing ] EVINOKS was listed as a victim on the leak site of the Barracuda ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Technology. Country: Turkey. Website: evinoks.com. Evinoks is a Turkish company that produces and sells various products for hotel and restaurant service, such as trolleys, chairs, tables, buffet units, furniture and hygiene equipment. It has a wide range of customers and partners around the world and aims to provide innovative, aesthetic and quality. We are beginning to release unsold data for free; it will remain available for one month, so be sure to download all the files to your own storage. Our storage: http://qr6uopkqxmq254osyct3oibil32xp3qsimkkbqdscsrsb4zqbagnifad.onion/ | Status: free | FREE
• qc-consult November 1, 2026 • [ ransomware, technology ] qc-consult was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Professional Services. Country: Germany. Website: www.qc-consult.de.
• CMD Naturkosmetik November 1, 2026 • [ ransomware, retail ] CMD Naturkosmetik was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Retail & E-Commerce. Country: Germany. Website: www.cmd-natur.de.
• Forum November 1, 2026 Forum was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Professional Services. Country: Austria. Website: www.forum-zt.at.
• BKV Vasúti Jármjavító Kft November 1, 2026 • [ ransomware, leak ] BKV Vasti Jrmjavt Kft was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Transportation. Country: Hungary. Website: www.vjsz.hu.
• Meshbesher & Spence November 1, 2026 • [ ransomware, leak ] Meshbesher & Spence was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-11-01. Sector: Professional Services. Country: United States of America. Website: www.meshbesher.com.
• synergy.co.id November 1, 2026 synergy.co.id was listed as a victim on the leak site of the lockbit5 ransomware group; the attack is estimated to have taken place on 2026-11-01. Country: Indonesia. Website: synergy.co.id. PT Synergy Risk Management Consultants (SYNERGY), an independent company, established in London,...