Recent Breaches
-
March 10, 2025 • Retailer mailed breach letters following cybersecurity incident affecting customer information.
-
March 10, 2025 Russian news report referenced a cyber incident but details remain undetermined
-
March 10, 2025 • Austin pediatric orthopedics notified breach impacting ninety thousand patient records.
-
March 10, 2025 • Company notified individuals after unauthorized access enabled exposure of sensitive consumer information.
-
March 10, 2025 • LKQ Corporation confirmed it was impacted by the Oracle E-Business Suite (EBS) hacking campaign after being listed by the Cl0p ransomware group. LKQ told the Maine Attorney General that personal information for more than 9,000 individuals was compromised, and an example notice letter indicated affected data included sole proprietor supplier information such as Employer Identification Numbers and Social Security numbers. According to LKQ, it launched an investigation on October 3, 2025 and completed its analysis of personal information compromise on December 1, 2025.
-
March 9, 2025 • The French government says Apple sent out threat notifications to customers alerting them to spyware attacks earlier in September.
-
March 9, 2025 • Apple notified French officials of targeted mercenary-spyware attacks (latest Sep 3, 2025); CERT-FR says this is the fourth wave in 2025; highly targeted espionage against high-profile users; Apple recommends Lockdown Mode and expert assistance; no attribution disclosed.
-
March 9, 2025 • Polish MSWiA hospital reported ransomware attack and activated emergency procedures
-
March 9, 2025 • Tri-Century Eye Care reported that it identified suspicious activity on September 3, 2025, secured its environment, and later determined on September 19, 2025 that an unknown actor gained unauthorized access to its network and acquired files containing personal and protected health information. The organization stated there was no evidence of access to its current electronic medical records system, but the acquired files may have included patient and employee identifiers (including SSNs and dates of birth) along with medical, insurance, and billing/payment information. Public reporting noted the incident impacts approximately 200,000 individuals and that the Pear ransomware group claimed responsibility and later published files allegedly stolen from Tri-Century.
-
March 8, 2025 • Cyberattack on the Ministry of Interior hospital in Krakw encrypted administrative and medical IT systems, fully paralyzing patient care and access to records. Hospital departments began restoring systems by March 11, indicating ~3 days of disruption. No data exfiltration or perpetrator identified.
-
March 8, 2025 • A software-update vulnerability at MFA provider 2Keys allowed access to contact data for federal service users (CRA/ESDC phone numbers; CBSA emails) authenticating between Aug 315, 2025; attacker sent phishing SMS to some numbers; government deems no further sensitive data accessed.
-
March 8, 2025 • Incruit reported signs of external attack and data exposure beginning March 8; customers were notified and regulators opened an investigation; scope and method under review.
-
March 8, 2025 • YNHHS reported that an unauthorized third party accessed its network and on March 8 2025 obtained copies of certain patient data. The health system disclosed the breach publicly on April 24 2025, stating 5.5M+ patients were affected. Data types vary by individual and may include demographics, patient type, medical record number, and in some cases Social Security numbers. No encryption or operational shutdown was reported.
-
March 7, 2025 • China-linked APT41/TA415 impersonated Rep. Moolenaar and USCBC in July 2025 spear-phishing to deliver malware and create remote tunnels to spy on U.S. trade-policy stakeholders; investigations ongoing; success not verified.
-
March 7, 2025 • Vendor Software Exploited Led To Exposure Of Chicago Public Schools Student Information.
-
March 6, 2025 • Tata Technologies, a subsidiary of the Indian conglomerate Tata Motors, was struck by the ransomware gang Hunters International, which claims to have exfiltrated around 1.4 terabytes (730,000 + files) of data and is threatening public release unless a ransom is paid. Hackread The company had earlier disclosed a ransomware incident disrupting some IT assets and services, though client-deliveries were reportedly unaffected.
-
March 6, 2025 • Provider network disclosed data breach tied to a May 2024 cyberattack
-
March 6, 2025 • Report claimed compromise of Israeli firm with emails and database leaked.
-
March 6, 2025 • A cybercrime group exploited a URL redirection vulnerability in a third-party contractor system for StubHub to steal around 1,000 digital tickets for major events, including Taylor Swifts Eras Tour. The stolen tickets, valued at approximately $635,000, were resold online for profit. The scheme operated between June 2022 and July 2023 before being uncovered through a coordinated investigation by cybersecurity and law enforcement agencies. Two individuals, Tyrone Rose and Shamara P. Simmons, were arrested and charged with grand larceny, identity theft, and computer tampering in connection with the operation.
-
March 6, 2025 • FlexCare sent breach letters after employee email compromises with sensitive data