Recent Breaches
-
March 14, 2025 • City of Gloversville, New York, experienced a ransomware attack discovered on March 14, 2025. The incident encrypted municipal servers and exposed payroll and banking information. Attackers demanded $300,000, and the city paid $150,000 to regain access; no ransomware group has publicly claimed responsibility.
-
March 13, 2025 • Ransomware hit Union County Pennsylvania with data theft affecting residents information.
-
March 13, 2025 • Romanian poultry producer Cocorico operator reported ransomware severely affecting operations.
-
March 13, 2025 • MTL disclosed that a data hosting/security vendor suffered a ransomware incident on or about March 13, 2025, potentially affecting information in MTLs possession; investigations and notifications initiated.
-
March 13, 2025 • UAS Asset Management disclosed unauthorized access to its systems and began mailing breach notices on March 19, 2025.
-
March 13, 2025 • Trocaire College identified unauthorized access to its systems. A forensic investigation determined that sensitive personal information may have been acquired by an unauthorized actor. The college notified affected individuals in January 2026 and reported the incident to regulators.
-
March 12, 2025 • Chinese group UNC3886 deployed custom backdoors on outdated Juniper MX routers.
-
March 12, 2025 • Leroy Merlin notified customers in France that a cyberattack targeted its information system and that some customers personal data may have leaked outside the company. The notification listed exposed data elements (identity/contact details, date of birth, and loyalty-program information) and stated that banking data and online account passwords were not included. The company said it took steps to block unauthorized access and contain the incident, and cautioned customers to watch for phishing attempts impersonating the brand.
-
March 11, 2025 • Italian report described alleged surveillance using commercial spyware against a public figure.
-
March 11, 2025 • Ransomware forced Yap health department to disconnect network and operate manually.
-
March 11, 2025 • On March 11 2025, Maine-based classified ads publisher Uncle Henrys suffered a ransomware-style attack that deleted its primary website database and took the site offline until April 15. Attackers demanded Bitcoin. Management stated only a few advertisement entries were copied and no personal data compromise was confirmed.
-
March 11, 2025 • On March 11 2025, Maine-based classified ads publisher Uncle Henrys suffered a ransomware-style attack that deleted its primary website database and took the site offline until April 15. Attackers demanded Bitcoin. Management stated only a few advertisement entries were copied and no personal data compromise was confirmed.
-
March 10, 2025 • A hacker known as Gloomer claimed to have breached the OmniGPT AI chatbot platform, stealing and leaking millions of user messages and account details. Data samples were posted on BreachForums and reported by multiple cybersecurity outlets, though OmniGPT has not confirmed the incident.
-
March 10, 2025 • TerrePower detected suspicious activity between December 12 and December 16, 2024. An unauthorized actor may have viewed and obtained files containing sensitive personal identifiers. Notifications began March 7, 2025.
-
March 10, 2025 • Social media platform X (formerly Twitter) suffered a massive cyberattack involving a large-scale DDoS assault that caused worldwide outages and service disruptions. The company activated additional defenses through Cloudflare to mitigate the impact. The hacktivist group Dark Storm claimed responsibility for the attack, while Elon Musk suggested possible involvement of state-sponsored actors after attack traffic was traced to IPs originating from Ukraine a claim the group denied. The disruption temporarily affected user access and platform functionality, marking one of the largest attacks against X since its rebranding.
-
March 10, 2025 • Sausalito reported hacking targeting city systems, prompting meeting cancellation and recovery steps.
-
March 10, 2025 • Retailer mailed breach letters following cybersecurity incident affecting customer information.
-
March 10, 2025 Russian news report referenced a cyber incident but details remain undetermined
-
March 10, 2025 • Austin pediatric orthopedics notified breach impacting ninety thousand patient records.
-
March 10, 2025 • Company notified individuals after unauthorized access enabled exposure of sensitive consumer information.