MKG Kirchrode
November 3, 2026
•[ ransomware, healthcare, hack ]
MKG Kirchrode was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Manufacturing. Country: Germany. Website: mkg-kirchrode.de. mkg-kirchrode.de 900GB MKG Kirchrode is a premium oral and maxillofacial surgery practice in Hannover-Kirchrode, Germany, led by Dr. med. Jennifer Rublack with Dr. Dr. Holger Moysich and Dr. Stephan Adam. Its 420 square meter facility offers the full spectrum of MKG surgery from wisdom teeth removal and dental implants to skin cancer reconstruction and aesthetic procedures like thread lifting and Botox. Three levels of anesthesia including general anesthesia and sedation are available for anxious patients, with a dedicated anesthesiologist on staff. The practice is equipped with an operating microscope, 3D CBCT imaging, soft laser and PRP therapy, offering both titanium and ceramic implants. Open Monday to Friday from 7:45 to 18:00, it provides barrier-free access, free parking and is just 1 minute from the U6 U-Bahn station. Services are available in German, English, Italian, French and Polish with interest-free installment payment plans.
Mitsubishi Motors Ukraine
November 2, 2026
•[ ransomware, manufacturing, hack ]
Mitsubishi Motors Ukraine was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-11-02. Sector: Manufacturing. Country: Ukraine. Website: itsubishi-motors.com.ua. itsubishi-motors.com.ua Mitsubishi Motors Ukraine is the official importer and distributor of Mitsubishi Motors vehicles in Ukraine, managing sales, service and parts through over 20 authorized dealers nationwide. Its model range includes the Outlander and Outlander PHEV crossover, Eclipse Cross, ASX and the legendary L200 pickup truck. As part of the Renault-Nissan-Mitsubishi Alliance, it benefits from global R&D, shared platforms and a 5-year warranty. The Ukrainian automotive market recovered to around 60,000 new car sales in 2025, with Mitsubishi holding a 3 to 5 percent share led by Outlander and L200. Services span new and certified pre-owned sales, original parts, financing through partner banks and full after-sales support. Strategic initiatives include expanding the PHEV hybrid lineup and preparing for fully electric model launches.
innovativedriven.com
November 3, 2026
•[ ransomware, technology, hack ]
innovativedriven.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-11-03. Sector: Technology. Country: United States of America. Website: innovativedriven.com. .
Harvard
November 18, 2025
•[ hack, leak, education ]
In November 2025, Harvard University suffered a data breach later linked to a ShinyHunters "pay or leak" extortion attempt. The data contained 851k unique email addresses relating to the university's alumni and fundraising systems, along with extensive profile information for donors, alumni, parents and some faculty, staff and students. In Harvard's disclosure notice, the university stated that the breach impacted "personal information such as email addresses, telephone numbers, home and business addresses, event attendance, details of donations to the University, and other biographical information pertaining to University fundraising and alumni engagement activities".
Baydöner
May 21, 2022
•[ hack, malware, retail ]
Turkish kebab chain Baydner was breached on May 21, 2022: malware on its IT manager's computer exposed web-service passwords, and attackers copied data on 505,337 people, then messaged an executive. Turkey's KVKK fined the chain 1M TL in 2026.
St. George Fire Protection District No. 2
December 23, 2023
•[ hack, government, technology ]
On 2023-12-23, law enforcement informed St. George Fire Protection District No. 2 that threat actors had infiltrated its network. A later lawsuit alleged that compromised remote-access credentials used by the district's managed service provider enabled the intrusion and that attackers used legitimate administrative tools while inside the environment. The district's domain controllers were compromised, and it subsequently rebuilt servers, switches, domain controllers, firewalls, and backup infrastructure. No data theft, affected-person count, actor, motive, or service interruption was publicly reported.
Amazon
May 15, 2024
•[ hack, leak, technology ]
Amazon confirms a data breach involving employee information after data allegedly stolen during the May 2023 MOVEit attacks is leaked on a hacking forum.
Seoul Facilities Corporation
June 28, 2024
•[ hack, leak, ddos ]
Two teenagers hacked servers supporting Seoul Facilities Corporation's Ttareungyi public bike-sharing service between June 28 and June 29, 2024 after identifying a web vulnerability that permitted access to member information without normal authentication. Approximately 4.62 million member records were stolen. During the June 28-30 incident, a DDoS attack also caused Ttareungyi-related pages to be unavailable for about 80 minutes. One suspect later told police that curiosity and a desire to show off motivated his actions; police also investigated whether the data may have been intended for sale but found no evidence that it was distributed to third parties.
Gazprombank
December 5, 2024
•[ hack, finance, espionage ]
Russian users report difficulties accessing services at Gazprombank, one of the countrys largest privately owned banks, following an alleged cyberattack by Ukraines military intelligence agency.
South Portland Public Schools
January 2, 2025
•[ hack, education ]
Jan. 6 South Portland Public Schools took down its internet network Sunday after a cyber breach threatened student data. The decision came after the school department's cyber security service detected a network break over the weekend. Director of technology Andy Wallace said in a letter to parents sent Monday morning that the decision was made to protect "student and other data." "We have been ...
Hewlett Packard Enterprise (HPE)
January 16, 2025
•[ hack, technology ]
The threat actor IntelBroker claims to have targeted Hewlett-Packard Enterprise (HPE) again, having access to the companys internal infrastructure.
New York Blood Center (NYBC)
January 26, 2025
•[ hack, healthcare ]
New York Blood Center said it does not have a "specific timetable for system restoration" following the attack, which has led to canceled appointments and delays
Telus
February 1, 2025
•[ hack, technology ]
Canadian telecom Telus notified some consumer customers in Sep 2026 that an attacker used compromised credentials to access their accounts between Feb 2025 and Jun 2026, viewing personal and billing data. Telus reset credentials, notified police and offered ID protection.
Intesa Sanpaolo
February 17, 2025
•[ hack, ddos, finance ]
Pro-Russian hacktivist group NoName057(16) claimed a coordinated DDoS campaign against Italian institutions and banks, causing temporary service disruptions but no data compromise; politically motivated, with activity spanning several days.
Ministry of iTaukei Affairs
April 4, 2025
•[ hack, government, technology ]
The Ministry of iTaukei Affairs official Facebook page was hacked and defaced by unauthorized users posting content such as Hollywood movie clips. No sensitive or internal data was compromised; cybersecurity teams are working to restore control.
4chan
April 14, 2025
•[ leak, hack, technology ]
Several gigabytes of internal 4chan backend data, including moderator emails, hashed passwords, and source code, were stolen and leaked online; brief service outage reported; no ransom or financial motive indicated.
The North Face
April 23, 2025
•[ hack, brute-force, retail ]
Attackers used previously leaked credentials in a large-scale credential-stuffing campaign against The North Faces online customer accounts in April 2025. Unauthorized logins exposed personally identifiable information from 2,861 customer profiles, though no financial data was accessed.
Bharat Sanchar Nigam Limited (BSNL)
April 23, 2025
•[ hack, ddos, technology ]
NSFOCUS identified DDoS traffic against Bharat Sanchar Nigam Limited websites on April 23, 25 and 26, 2025 using CLDAP, NetBIOS and NTP reflection. Its May 7 observations reported the corporate site and related online services still inaccessible. The duration of each traffic wave is documented, but continuous downtime and any effect on the wider telecom network are not established. The attacker is unidentified; Hacktivist and Protest are limited inferences from the India-Pakistan conflict-related campaign.
Power Grid Corporation of India Limited (POWERGRID)
May 2, 2025
•[ hack, ddos, energy ]
On May 2, 2025 NSFOCUS observed an NTP-reflection DDoS attack against POWERGRID public website lasting 31 minutes 26 seconds. Secondary cybersecurity reporting describes temporary website and online-service disruption, while NSFOCUS distinguishes possible online billing or fault-reporting effects from confirmed measurements. No disruption to the physical power grid was reported. No operator was identified; Hacktivist and Protest are inferred from the wider India-Pakistan cyber confrontation.
Hôpital Privé de la Loire
June 26, 2025
•[ hack, leak, healthcare ]
Hpital priv de la Loire in Saint-tienne, France (Ramsay Sant) had its electronic patient record accessed June 26-July 1, 2025 via a doctor's account. Hacker "Marak" claimed the theft and tried to sell the data. CNIL fined the hospital 500,000 on Sept. 3, 2026.
