Portend Breaches

Smiths Group January 28, 2025 • [ hack, technology ] London-based engineering giant Smiths Group discloses a security breach after unknown attackers gained access to the company's systems.

CenterPoint Energy January 28, 2025 • [ leak, energy ] CenterPoint Energy, a large Texas energy company confirms it is investigating reports of stolen customer data that has been published on a cybercriminal forum after it was allegedly taken during the 2023 MOVEit breach.

Gazprom January 28, 2025 • [ hack, ddos, energy ] Ukrainian cyber experts have carried out a DDOS attack on the digital infrastructure of some of the largest Russian energy companies, Gazprom and Gazpromneft. Babel and a number of other media outlets report this , citing a source.

Miracle Ear (Health Services LLC) January 28, 2025 • [ hack, healthcare ] Unauthorized access from Jan 228, 2025 allowed cybercriminals to view and potentially exfiltrate sensitive personal and health data of at least 13,088 individuals. No service disruption reported and no encryption involved. Regulatory notifications occurred August 12, 2025.

Chronopost January 28, 2025 • [ data leak ] Chronopost confirmed a cyberattack discovered on January 28, 2025, that exposed personal data of about 210,000 clients, including names, addresses, and signatures. The company reported to CNIL and claimed no banking or payment data was compromised.:contentReference[oaicite:0]{index=0}

State Bar of Texas January 28, 2025 • [ ransomware, data leak ] The State Bar of Texas reported a ransomware-linked intrusion attributed to INC. Unauthorized access occurred between January 28 and February 9 2025 (intrusion start used as event_date = 2025-01-28), leading to exfiltration of personal data including names, SSNs, drivers license numbers, and limited financial or medical information. Approximately 2 700 individuals were notified. The Bar reported no evidence of encryption or operational disruption.

The Siegel Group, Inc. January 28, 2025 • [ data leak ] The Siegel Group reported that an unauthorized party accessed its network between Jan 28 and Feb 2, 2025; notices were filed with state AGs (e.g., Vermont) and mailed to impacted individuals.

DeepSeek January 27, 2025 • [ hack, ddos, technology ] Chinese AI platform DeepSeek disables registrations on its DeepSeek-V3 chat platform due to an ongoing "large-scale" cyberattack targeting its services.

More than 570 computers linked to Mexico's government January 27, 2025 • [ hack, malware, government ] Threat actors infect more than 570 computers linked to Mexico's government domain gob.mx with infostealer malware, exposing sensitive data and login credentials.

Frederick Health Medical Group January 27, 2025 • [ ransomware, malware, healthcare ] Frederick Health Medical Group warns that there will be delays in service as it is hit by a ransomware attack.

South African Weather Service (SAWS) January 27, 2025 • [ hack, government ] A cyberattack forces the government-run South African Weather Service (SAWS) offline, limiting access to a critical service used by the countrys airlines, farmers and allies.

Conad January 27, 2025 • [ ransomware, malware, retail ] Conad, an important wholesale chain in Italy, is hit with a Lynx ransomware attack.

Let's Secure Insurance Brokers January 27, 2025 • [ ransomware, finance ] Let's Secure Insurance Brokers is hit with a ransomware attack.

Individual January 27, 2025 • [ social, phishing, finance ] Police began investigating when a 90-year-old man told authorities he gave $49,900 to a courier purportedly acting on behalf of PayPal. Victim was deceived via fake PayPal email & link leading to remote access of computer/password theft

Episource January 27, 2025 • [ data leak ] Episource detected unauthorized access between January 27 and February 6 2025 affecting approximately 5.4 million individuals; attackers exfiltrated protected health information including SSNs, medical data, and insurance identifiers; no actor identified or ransom claim confirmed.

Marposs January 26, 2025 • [ ransomware, malware, manufacturing ] Marposs is hit with a ransomware attack

New York Blood Center (NYBC) January 26, 2025 • [ ransomware, malware, healthcare ] The New York Blood Center (NYBC), one of the world's largest independent blood collection and distribution organizations, says a Sunday ransomware attack forced it to reschedule some appointments.

Maagar-Tec January 26, 2025 • [ hack, technology ] The pro-Palestinian group called Handala reportedly breaches emergency systems used in Israeli schools, after compromising Maagar-Tec, and broadcasts rocket sirens and Arabic songs that Israels cyber agency called supportive of terrorism.

Individual in Austria January 26, 2025 • [ financial, phishing, finance ] Eine Sdoststeirerin hat sich im Jnner an die Polizei gewandt, nachdem sie vermutet hatte, Opfer eines Phishing-Betrugs geworden zu sein. Sie fiel einem Link in einer SMS zum Opfer, eine Betrgerbande behob daraufhin Geld von ihrem Konto. Die Polizei verffentlichte nun Fotos der mutmalichen Betrger aus Wien.

The House of Dior January 26, 2025 • [ data leak, personally identifiable information, supply chain attack ] Dior disclosed that a database was accessed on Jan 26, 2025 exposing data that includes names, contact details, address, DOB, and in some cases passport/ID or SSN. Believed to be related to broader LVMH/ShinyHunters vendor breach cluster.

Recent Breaches