-
Taipei City Police Department
August 31, 2026
•
[ insider, government, financial ]
Taipei prosecutors on Aug 31, 2026 indicted a retired Taipei police detective (Cheng) and a suspended officer (Liu) for pulling hundreds of individuals' call records without authorization since 2018 and selling them to syndicate-linked money lenders for about NT$7.2 million.
-
TSC
September 1, 2026
TSC, a Latvian appliance and device repair firm in the LMT group, found in early Sept. 2026 that a hacker exploited a website flaw and exported its customer repair-order database, then demanded payment. Latvian police arrested a 23-year-old suspect in Riga on Sept. 15.
-
Westfield Public Schools
September 1, 2026
Westfield Public Schools (Union County, NJ) suffered a district-wide network outage from Sept. 1, 2026. INC Ransom claimed it, said it encrypted systems and posted files incl. employee W-2s. The district first cited hardware failure, then said the cause is under investigation.
-
IDScan.net
September 1, 2026
•
[ leak, technology ]
IDScan.net, a New Orleans ID verification firm, confirmed hackers may have copied customer data from its cloud after Nexus, a dark-web service advertised on Russian forum Exploit, sold 153M+ U.S./Canadian license scans in Sept 2026. FBI investigating; credit monitoring offered.
-
Springfield Public Schools
September 1, 2026
•
[ ransomware, education ]
Springfield Public Schools (Massachusetts) detected malicious traffic Sept. 1, 2026; its network crashed and schools closed for about a week. The FBI said student and staff data was made public; Interlock claimed the attack. District offered staff credit monitoring.
-
Luminis Health
September 1, 2026
•
[ hack, healthcare ]
Luminis Health (Annapolis, Maryland) was hit on Sept 1, 2026 by what it called an unauthorized criminal actor, taking systems offline at Anne Arundel Medical Center and Doctors Community Medical Center; phones were down over two weeks, MyChart until Sept 29, with ER diversions.
-
City of Vienna (Stadt Wien)
September 3, 2026
•
[ leak, government ]
From September 3 to 11 2026 an intruder used a web access vulnerability to copy documents from a municipal internal-documentation platform; city systems and accounts were not controlled. Vienna confirmed about 26000 pages or documents totaling 9 GB were acquired, affecting 2083 employees, 2885 residents, and 856 contractors. No publication or extortion was established.
-
Weverse Company Inc. (Weverse)
September 3, 2026
•
[ leak, technology, misconfiguration ]
An unauthorized party obtained information through a security flaw in a Weverse service API. South Korean authorities notified Weverse of the issue on September 3, 2026, and the operator subsequently confirmed exposure of 422,584 account-level entries containing internal account identifiers and purchase-related data. Weverse restricted access to its payment-information processing API and filed a breach report with KISA on September 4. The initial extraction date and actor remain undetermined; September 3 is the discovery proxy.
-
America's Food Basket
September 3, 2026
America's Food Basket, a cooperative of independent grocery stores in New York and other eastern states, was listed on the Wallstreet ransomware group's leak site on September 3, 2026 as a data theft victim. The company had not confirmed the claim as of late September 2026.
-
Florida Department of Highway Safety and Motor Vehicles
September 4, 2026
•
[ hack, leak, government ]
FLHSMV discovered unauthorized access to its DAVID database on September 4, 2026, through compromised credentials belonging to one Plant City police employee. September 4 is a discovery proxy; ShinyHunters' claimed September 3 collection start was not independently confirmed. The group claimed responsibility and later released an archive inspected by Straight Arrow News. The agency did not publicly verify the named operator or its advertised victim count. No encryption or operational disruption was established.
-
Healing Paper
September 4, 2026
•
[ hack, healthcare, technology ]
Healing Paper, the Seoul-based operator of cosmetic-surgery platform Gangnam Unni, said an unidentified attacker abused its consultation-records API on Sept 4, 2026, exposing data of 219,665 users in Korea, Japan and Taiwan. It blocked the route and notified users.
-
Undisclosed South Korean automotive and media organizations
September 4, 2026
Rapid7 reported Sept. 2026 that North Korea-linked hackers breached two South Korean automotive and media organizations via an edge server, planting a backdoor in their HAProxy load balancer and an SSH keylogger for long-term spying on traffic and credentials.
-
Blanco & Etcheverry
September 4, 2026
•
[ ransomware, leak ]
Gunra ransomware added Montevideo law firm Blanco & Etcheverry to its leak site on Sept. 4, 2026, claiming to have leaked 300 GB of data. The firm has not confirmed the attack or commented.
-
DriveWealth
September 4, 2026
•
[ social, finance, technology ]
Jersey City, N.J., brokerage DriveWealth said unknown attackers using social engineering accessed its network on Sept. 4-5, 2026, and took retained personal data of customers of partner apps Revolut, Stake and Hatch. No trades were affected; customers were notified.
-
HBO Max (Warner Bros. Discovery) official Reddit account
September 6, 2026
•
[ hack, malware, social ]
An unauthorized operator took over verified Reddit account u/hbomax and ran 108 deceptive paid advertisements over about 48 hours. Links impersonated HBO Max and software products and directed users to ClickFix command-pasting instructions that delivered malware. The malicious advertisements were paused after they were reported.
-
Liquid Network
September 6, 2026
•
[ hack, financial, technology ]
Hackers exploited a bug in Liquid Network, the Blockstream-developed Bitcoin sidechain, on Sept. 6, 2026 to mint unbacked L-BTC and withdraw ~4,000 BTC ($320M) from its federation wallet. Liquid halted the network; self-described white hats returned 3,400 BTC.
-
Association Francophone de Tennis de Table
September 7, 2026
Belgian table tennis federation AFTT confirmed a cyberattack in Sept. 2026 after a hacker claimed 1.69 GB of data on about 66,852 members and 17,441 users and posted samples. AFTT said it found no sign phone numbers or emails were taken and that most data was already public.
-
Undisclosed organizations
September 7, 2026
•
[ phishing, technology ]
CloudSEK found that BigBear 2.0, a phishing-as-a-service operation using adversary-in-the-middle login pages, captured over 5,000 Microsoft 365 credentials and session cookies and bypassed MFA at 258 organizations in 40+ countries. Operators remain unidentified.
-
Undisclosed Philippine nuclear research agency
September 8, 2026
•
[ espionage, leak, government ]
A suspected Chinese-speaking operator exploited an ownCloud authentication weakness and stole 176 files totaling about 372 MB from a Philippine nuclear research agency. The stolen material was already present on attacker-controlled infrastructure when researchers discovered it on 13 August 2026; the exact theft date is not established, so event_date uses the supplied source publication date.
-
National Directorate of Cyber Security (DNSC)
September 8, 2026
•
[ ddos, government, technology ]
Attackers launched approximately 2.8 million access requests against dnsc.ro at around 17:00 on 8 September 2026. About 50,000 requests passed DNSC's technical filters and overloaded the website, causing an interruption lasting less than 30 minutes. DNSC director Dan Cmpean said the attackers sought reputational impact by demonstrating vulnerability and undermining public and partner confidence. The specific group and its country of origin were not attributed.
