Search Results for "Data breach"

Police Nationale (France) training platform users March 17, 2026 • [ data breach, hacking, government ] 01net reported that data relating to French police personnel was stolen after the e-campus training platform was hacked.

Nigeria's Corporate Affairs Commission (CAC) April 15, 2026 • [ unauthorized access, data exfiltration, data breach ] Nigerias Corporate Affairs Commission confirmed unauthorized access to limited aspects of its information systems; ByteToBreach claimed it exfiltrated about 25 million documents, roughly 750 GB, from CAC infrastructure, but CAC did not confirm the volume or identify the perpetrator.

Booking.com April 15, 2026 • [ unauthorized access, data breach, PII leak ] Booking.com detected suspicious activity affecting a number of reservations and notified customers that unauthorized third parties may have accessed booking details, names, email addresses, addresses, phone numbers, and information shared with properties; financial information was not accessed, and Booking.com reset reservation PINs for affected users.

EBR Systems February 13, 2026 • [ network disruption, unauthorized access, patient health data ] EBR Systems experienced a network disruption around February 13, 2026 and later determined that certain information stored on its network, including a limited amount of patient health data, was subject to unauthorized access; the incident was contained and did not cause material business disruption.

Basic-Fit April 13, 2026 • [ unauthorized access, data breach, data leak ] Basic-Fit detected unauthorized access to the system that records member visits and stopped the intrusion within minutes, but external security experts determined that data for active members in several countries had been downloaded, affecting about 1 million members overall, including around 200,000 in the Netherlands.

At least one Hungarian government ministries March 1, 2026 • [ credential leak, infostealer, stealer logs ] Bellingcat identified 795 Hungarian government email/password combinations circulating in breach data across 12 of 13 ministries, including defence, foreign affairs, interior, and finance; stealer logs indicated 97 machines across government departments may have been compromised, with some logs as recent as March 2026.

Rockstar Games April 11, 2026 • [ data breach, third-party breach, SaaS breach ] ShinyHunters claimed it stole nearly 80 million business records from Rockstar Games through a third-party SaaS/Snowflake-related breach; Rockstar said only a limited amount of non-material company information was accessed and that there was no impact on operations or players.

ChipSoft April 7, 2026 • [ ransomware, healthcare, data breach ] Embargo ransomware hit ChipSoft on April 7, 2026, disrupting its website and digital healthcare services, causing hospitals to disconnect or take ChipSoft-connected systems offline, and stealing medical personal data from several Dutch healthcare institutions; ChipSoft later said the stolen data had been destroyed.

National Supercomputing Center (NSCC) Tianjin February 6, 2026 • [ data breach, military, aerospace ] FlamingChina claimed to have breached the National Supercomputing Center in Tianjin and offered for sale more than 10 petabytes of allegedly stolen data, including claimed military, aerospace, research, and client datasets; the breach was not confirmed by NSCC Tianjin, but experts who reviewed samples said they appeared consistent with data expected from the facility.

Syracuse Police Department, N.Y. January 10, 2025 • [ unauthorized access, social security numbers, personal information ] Syracuse Police Department detected a security incident on Jan. 11, 2025, shut down its computer system to prevent spread, and later determined that certain digital files were accessed or acquired without authorization between Jan. 10 and Jan. 12; notifications were sent in 2026 to people whose personal information, including Social Security numbers, may have been compromised.

Williams Hart & Boundas June 30, 2025 • [ phishing, unauthorized access, personal information ] Williams Hart & Boundas discovered that a firm email account had sent and received phishing emails and determined the account had been accessed by an unauthorized individual; review found personal information in the account, and a Texas filing reported 7,844 affected Texas residents.

The Northern Ireland Education Authority April 2, 2026 • [ cyberattack, personal information, data breach ] The Northern Ireland Education Authority reported a cyberattack on the C2k school IT network that disrupted access and involved targeted access to confidential personal information.

Hasbro Systems March 28, 2026 • [ unauthorized access, cyberattack, operational disruption ] Hasbro identified unauthorized access to its network on March 28, 2026 and took select systems offline as a containment measure while continuing operations through business-continuity procedures; the company warned that interim measures could cause order-processing, shipping, and invoicing delays while it reviewed potentially impacted files.

PSK WIND Technologies April 2, 2026 • [ data breach, hacktivism, server compromise ] Handala claimed it breached PSK WIND Technologies servers and deleted sensitive information tied to Israeli air-defense command-and-control systems.

Sandhills Medical May 8, 2025 • [ ransomware, unauthorized access, patient information ] Sandhills Medical disclosed that a ransomware attack led to unauthorized access to patient information.

St. Joseph County April 1, 2026 • [ data breach, cloud security, fax server ] St. Joseph County confirmed a breach of an external cloud-based fax server while disputing Handalas broader 2 TB data-theft claim.

Venezuelan Ministry of Foreign Affairs January 1, 2026 • [ espionage, state-sponsored attack, data breach ] The same China-linked espionage campaign that compromised the Cuban Embassy in Washington D.C. also reportedly exploited Microsoft Exchange servers used by Venezuelas Ministry of Foreign Affairs and accessed officials email communications during the same January 2026 regional campaign.

ADT Inc. April 20, 2026 • [ vishing, social engineering, data breach ] ShinyHunters compromised an ADT employee Okta SSO account through vishing, used the account to access ADTs Salesforce instance, and stole personal information later assessed by Have I Been Pwned as affecting 5.5 million individuals.

Yau Yat Chuen Garden City Club October 31, 2025 • [ ransomware, data breach, personal data ] A ransomware attack encrypted files stored on the server supporting Yau Yat Chuen Garden City Club's club management system, rendering the system inoperable and affecting personal data of current and former members and supplementary card holders.

Rituals April 1, 2026 • [ data breach, unauthorized access, PII ] Rituals confirmed that an unauthorized download of My Rituals membership data occurred in April 2026, affecting customers in Europe, the United Kingdom, and the United States. The downloaded data included names, dates of birth, gender, postal and email addresses, phone numbers, preferred store locations, and account types; Rituals did not disclose the exact number of affected members, and reporting stated that passwords and payment data were not accessed.

Search Results (Data breach)