At least one Singapore cryptocurrency user
August 15, 2026
•[ hack, phishing, finance ]
Singapore Police reported an increase since mid-August 2026 in cases where scammers gained unauthorized access to victims' email accounts and then compromised linked cryptocurrency accounts. Investigations found that several affected email accounts had appeared in previous data breaches, suggesting attackers exploited exposed credentials and password reuse. Attackers could search compromised inboxes for cryptocurrency exchanges, create rules to hide exchange messages, and intercept password-reset links, OTPs and verification emails. The specific perpetrators, their country of origin, number of victims and losses were not disclosed.
Associated Asset Management
August 15, 2026
•[ ransomware, leak, finance ]
Associated Asset Management (AAM), an Arizona homeowner association management company, was listed on the Direwolf ransomware group's leak site on Aug 15, 2026, which threatened to publish stolen data unless contacted. AAM did not publicly confirm the attack.
Dodo Payments
August 15, 2026
•[ sqlinjection, leak, finance ]
Bengaluru payments firm Dodo Payments said an intruder exploited a Metabase SQL-injection flaw to query its internal analytics system in mid-Aug 2026. Direwolf claimed the attack; a dark web listing claims 60.8 GB. The firm denies credentials, API keys or card data were exposed.
SafePal (SkyGenesis Holdings Limited)
August 17, 2026
•[ leak, phishing, technology ]
SafePal confirmed that an authorization flaw in an order-tracking plugin allowed unauthorized external access to customer order information affecting 39,798 customers. The precise access date has not been established. Customers reported phishing and impersonation attempts using detailed SafePal order information by early July, and SafePal later identified more than 30 fraudulent websites or phishing links associated with scam activity. A threat actor subsequently advertised a dataset matching the affected population for sale. Seed phrases, private keys, wallet passwords, payment information and government identification were not affected.
Bits of Gold
August 17, 2026
•[ hack, finance, technology ]
Hackers gained unauthorized access to a third-party data analytics system used by Bits of Gold and accessed personal information belonging to approximately 200,000 customers. The company said funds, digital assets, passwords, private keys, CVV codes, and scanned identification documents were not affected.
PayUp
August 19, 2026
•[ ransomware, finance, technology ]
PayUp, an Austin, Texas fintech offering early vendor payments and invoice factoring to property managers, was listed on the Direwolf ransomware group's leak site on Aug 19, 2026, claiming stolen customer records. PayUp has not confirmed the claim.
Undisclosed U.S. individual
August 21, 2026
•[ social, finance, government ]
Scammers initially impersonated an American Express representative and then NYPD and FBI personnel, using transfers, real officer names and badge numbers, and a video call to build credibility. The victim ultimately provided personal identification information.
Brookview Financial
August 24, 2026
•[ leak, ransomware, finance ]
DragonForce listed Brookview Financial on its leak site on August 24, 2026 and claimed theft of customer information including credit reports and Social Security numbers. DataBreach.com indexed 254,414 leaked rows containing customer contact information. Brookview Financial is a private mortgage lender headquartered in Hamden, Connecticut. The company has not publicly confirmed the incident, and no operational disruption has been independently established.
Greenberg Traurig
August 26, 2026
•[ ransomware, leak, finance ]
Silent Ransom Group accessed U.S. law firm Greenberg Traurig's work devices in Aug 2026 and leaked stolen files with about 126,000 SSNs on Sept 2 after ransom talks stalled. The firm confirmed limited document access, notified regulators and reported 150,000 affected in Oregon.
Mercury Technologies
August 28, 2026
•[ leak, finance, technology ]
San Francisco fintech Mercury's client email list, stored by feedback-software vendor Canny, was exported and sold, according to The Seven Deadly Sins, which claimed to have breached Canny in late Aug 2026. Mercury has not commented and the claim is unconfirmed.
DriveWealth
September 4, 2026
•[ social, finance, technology ]
Jersey City, N.J., brokerage DriveWealth said unknown attackers using social engineering accessed its network on Sept. 4-5, 2026, and took retained personal data of customers of partner apps Revolut, Stake and Hatch. No trades were affected; customers were notified.
Hilltop National Bank
September 8, 2026
•[ finance, hack ]
Hilltop National Bank, a Casper, Wyoming community bank, had IT disruptions from Sept. 8, 2026, then identified a cybersecurity incident, took internal systems offline and closed all branches Sept. 9. Online banking was out until about Sept. 22. Cause and actor undisclosed.
Brevo (formerly Sendinblue)
September 9, 2026
•[ hack, technology, finance ]
On September 9-10, 2026, an intruder abused a flaw in Brevo SAML SSO tenant scoping to access 138 customer accounts. The attacker used six of the accounts to distribute fraudulent messages from legitimate customer email channels and exported contacts from 43 accounts. Trezor was one affected Brevo customer; 347,149 newsletter email addresses were exported and misleading messages reached roughly 347,000 subscribers. Brevo shut the attack route and signed out sessions on September 10. The attack did not establish a breach of Trezor wallet infrastructure. The 138 customer accounts are effects within one compromised Brevo platform, not separate CED records.
Undisclosed Costa Rican credit bureau
September 12, 2026
•[ leak, finance, technology ]
Costa Rican officials linked jarol1488 to theft of a credit bureau database containing personal and financial information. Authorities detected the public posting on September 12, 2026; this date is used as a discovery proxy, not a verified intrusion or extraction date. Cero Riesgo was named in attacker material but had not confirmed that the published information originated from its systems. Officials authenticated only part of a public sample, not the claimed 400 million-plus records. The database was advertised for US$2,500. The exact extraction system was not forensically confirmed. The minister described the attacker as South American without identifying a country.
St James' Anglican School
September 15, 2026
•[ ransomware, hack, education ]
Hackers accessed systems at St James' Anglican School in Perth, Western Australia, copying current and former students' and families' personal data, incl. bank details, medical records and photos. The school said it contained the incident; ThreeAM ransomware claimed it.
Keio Corporation
September 26, 2026
•[ ransomware, finance, technology ]
Japanese railway group Keio confirmed a ransomware attack on group servers on Sept. 26, 2026, disrupting hotel reservations and card payments at some group firms; trains ran normally. Qilin claimed the attack in October and posted sample internal documents.
insurancehouse.com
October 8, 2026
•[ ransomware, finance ]
insurancehouse.com was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: insurancehouse.com. Inside: quarterly and annual operational reports from the claims division (Claims Operations, QCS, SIU, Subrogation & Arbitration, Coverage Containment) covering 20232026, with full financial KPIs a cumulative coverage containment total of $4.8 million over three years; monthly reports on reserves, subrogation shortfalls, and the operational burden of the litigation unit; an executive summary of the disclaimer program (1,209 disclaimers, zero bad-faith claims); a Chubb data breach response plan form listing responsible parties; confidentiality and non-solicitation agreements with employ
kingdomtitle.net
October 8, 2026
•[ ransomware, finance, leak ]
kingdomtitle.net was listed as a victim on the leak site of the settra ransomware group; the attack is estimated to have taken place on 2026-10-08. Sector: Financial Services. Country: United Kingdom of Great Britain and Northern Ireland. Website: kingdomtitle.net. 1. 06/26/2026: an incoming book transfer of $15,319,440 and an outgoing wire on file 20260084C of $14,947,415. The same amount appears in the cleared report and in the Void & Stop Payment report. 2. 07/07/2026: Brian Moore Professional and Personal Spreadsheet.pdf contains personal auto, umbrella, and boat policies. The OCR alongside lists $766, $4,963.26, and $9,170.70 with the annotations paid from kts dev gr. 3. Three recent Trial Balances contain 2,972 positive balances totaling $1,277,500.31: American $1,077,012.58, Kingdom $143,990.33, Title Connect $56,497.40. 4. American ODI
Krycler, Ervin, Taubman & Kaminsky
October 1, 2026
•[ ransomware, leak, finance ]
Krycler, Ervin, Taubman & Kaminsky was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-01. Sector: Professional Services. Krycler, Ervin, Taubman & Kaminsky is a prominent accounting, litigation support, and consultin
g firm based in Sherman Oaks, California. Established in 1987, the firm is dedicated to providi
ng personalized service and achieving high-quality standards for its clients.
We will upload 88gb of corporate data soon. lots of employee documents (passports, DLs, SSN, de
ath and birth certs), financials, insurance, credit cards, client information, NDAs and so on.
UNION FA
October 2, 2026
•[ ransomware, finance ]
UNION FA was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-10-02. Sector: Other. Country: Greece. Website: rogdianakis.gr. rogdianakis.gr leads to (or is directly related to) the company Union FA (Union Financial Associates) , which is owned by Giorgos Rogdianakis (CEO of the company). This is a company that provides accounting, tax and consulting services to businesses.
