At least one Singapore cryptocurrency user
August 15, 2026
•[ hack, phishing, finance ]
Singapore Police reported an increase since mid-August 2026 in cases where scammers gained unauthorized access to victims' email accounts and then compromised linked cryptocurrency accounts. Investigations found that several affected email accounts had appeared in previous data breaches, suggesting attackers exploited exposed credentials and password reuse. Attackers could search compromised inboxes for cryptocurrency exchanges, create rules to hide exchange messages, and intercept password-reset links, OTPs and verification emails. The specific perpetrators, their country of origin, number of victims and losses were not disclosed.
iTorrents.org
August 15, 2026
•[ hack, malware, technology ]
An unauthorized party compromised the iTorrents.org public torrent repository and manipulated torrent-file responses so users seeking movie downloads received links to MovieReaper Windows malware. Kaspersky identified several hundred infected individuals and organizations in multiple countries; those unnamed downstream victims are not counted as a single additional event.
Undisclosed organizations running self-hosted JFrog Artifactory
August 15, 2026
•[ hack, technology, government ]
Multiple unnamed actors exploited three JFrog Artifactory flaws against self-hosted instances from Aug 15 to Sep 8, 2026, creating admin accounts, planting backdoor plugins and exfiltrating configurations and cluster keys, Wiz reported. CISA added the flaws to KEV.
Bluesky
August 16, 2026
•[ hack, ddos, technology ]
On August 16, 2026, Bluesky users encountered service disruptions affecting website and app access, including login and feed loading, during a DDoS campaign lasting approximately 24 hours. Bluesky confirmed the attack on August 17 and implemented additional defenses. The pro-Iran hacktivist group Islamic Cyber Resistance in Iraq (313 Team) claimed responsibility but Bluesky did not independently attribute the incident. The event is distinct from a separate April 2026 DDoS campaign against Bluesky.
Bits of Gold
August 17, 2026
•[ hack, finance, technology ]
Hackers gained unauthorized access to a third-party data analytics system used by Bits of Gold and accessed personal information belonging to approximately 200,000 customers. The company said funds, digital assets, passwords, private keys, CVV codes, and scanned identification documents were not affected.
Alation, Inc.
August 18, 2026
•[ hack, technology, misconfiguration ]
Alation confirmed unauthorized activity in one of its systems on August 18. TeamPCP publicly claimed responsibility and alleged theft of 73 GB of data. Independent security telemetry linked Alation to the broader TeamPCP LiteLLM/Trivy supply-chain campaign and identified exposed Alation CI-runner material containing AWS credentials and internal repository references. The exact 73 GB quantity remains a threat-actor claim, and Alation has not confirmed customer-data theft. The separate availability degradation reported the same day is not coded as a disruptive effect because Alation has not established that it was caused by the intrusion.
Samagra Portal (Samagra Samajik Suraksha Mission, Government of Madhya Pradesh)
August 19, 2026
•[ hack, government, insider ]
Cyber police opened an investigation after officials discovered that a person's Samagra record had been updated even though authorized district-level officers had not made the change. Officials tightened portal security and referred the matter for investigation.
Undisclosed crates.io maintainer
August 20, 2026
•[ hack, leak, malware ]
On Aug 20, 2026, attackers hijacked a crates.io maintainer's account and published tampered versions of Rust crates arrayref, internment and append-only-vec carrying a credential- and wallet-stealing payload. Wiz linked it to North Korean actors; versions were removed.
HIT d.d. Nova Gorica
August 25, 2026
•[ hack, retail, technology ]
HIT detected unauthorized access to its information systems on August 25, 2026. The incident forced six casinos to close for roughly three days and caused limited hotel operations, cash-register problems and unavailable gaming and loyalty functions. Casinos began reopening on August 28 with reduced functionality. HIT had not disclosed whether data was stolen, whether a ransom was demanded, or who was responsible as of the source publication.
Boston Scientific Corporation
August 25, 2026
•[ hack, healthcare, manufacturing ]
Boston Scientific identified unauthorized activity on August 25, 2026 that caused a global network outage affecting certain on-premises and internal-facing systems. Manufacturing, order processing, shipping, and new LATITUDE remote-monitoring activations were disrupted. The company reported no indication of related unauthorized activity after August 25 and fully restored manufacturing, order fulfillment, and shipping on September 9. As of September 15, no credible cybercrime or ransomware group has publicly claimed responsibility and Boston Scientific has not attributed the attack.
Undisclosed Philippine marine engineering and shipbuilding company
August 26, 2026
•[ financial, hack, manufacturing ]
Injected code displayed fake verification content using Amatera-linked delivery infrastructure. Financial intent is inferred; visitor infections and linkage to the separate data theft are unconfirmed. Onset is unknown; event_date uses the publication-date fallback.
Canva Pty Ltd
August 26, 2026
•[ hack, ransomware, technology ]
Sydney design platform Canva said attackers using vendor Canny's link to its Salesforce account accessed limited enterprise customer contact and contract data in late Aug 2026. The Seven Deadly Sins claimed the theft, said it exported far more and listed Canva for extortion.
Freelom.net s.r.o.
August 28, 2026
•[ hack, leak, sqlinjection ]
ComSource reported that Space Bears attacked a Czech internet-service provider, first announcing the victim on 22 August 2026 and releasing data six days later. Outside leak-site tracking identifies the victim as Freelom.net s.r.o. and says Space Bears claimed SQL data containing client personal information. Freelom has not publicly confirmed the compromise; event_date reflects the reported data leak rather than the unknown initial-access date.
Undisclosed Claude user
August 31, 2026
•[ hack, malware, technology ]
A criminal operator used commodity infostealer malware on an affected user's computer to steal an active Claude login session and replay it to access the victim's Claude account and consume paid usage. This record represents a confirmed victim within a broader campaign affecting multiple Claude users; Anthropic's own systems were not breached.
Luminis Health
September 1, 2026
•[ hack, healthcare ]
Luminis Health (Annapolis, Maryland) was hit on Sept 1, 2026 by what it called an unauthorized criminal actor, taking systems offline at Anne Arundel Medical Center and Doctors Community Medical Center; phones were down over two weeks, MyChart until Sept 29, with ER diversions.
Florida Department of Highway Safety and Motor Vehicles
September 4, 2026
•[ hack, leak, government ]
FLHSMV discovered unauthorized access to its DAVID database on September 4, 2026, through compromised credentials belonging to one Plant City police employee. September 4 is a discovery proxy; ShinyHunters' claimed September 3 collection start was not independently confirmed. The group claimed responsibility and later released an archive inspected by Straight Arrow News. The agency did not publicly verify the named operator or its advertised victim count. No encryption or operational disruption was established.
Healing Paper
September 4, 2026
•[ hack, healthcare, technology ]
Healing Paper, the Seoul-based operator of cosmetic-surgery platform Gangnam Unni, said an unidentified attacker abused its consultation-records API on Sept 4, 2026, exposing data of 219,665 users in Korea, Japan and Taiwan. It blocked the route and notified users.
HBO Max (Warner Bros. Discovery) official Reddit account
September 6, 2026
•[ hack, malware, social ]
An unauthorized operator took over verified Reddit account u/hbomax and ran 108 deceptive paid advertisements over about 48 hours. Links impersonated HBO Max and software products and directed users to ClickFix command-pasting instructions that delivered malware. The malicious advertisements were paused after they were reported.
Liquid Network
September 6, 2026
•[ hack, financial, technology ]
Hackers exploited a bug in Liquid Network, the Blockstream-developed Bitcoin sidechain, on Sept. 6, 2026 to mint unbacked L-BTC and withdraw ~4,000 BTC ($320M) from its federation wallet. Liquid halted the network; self-described white hats returned 3,400 BTC.
Undisclosed healthcare organization
September 8, 2026
•[ hack, healthcare, technology ]
Google's Mandiant reported that a data extortion group breached an unnamed healthcare organization and stole drug research, corporate data and a proprietary AI model, then threatened to publish it unless paid. Disclosed in GTIG's Q2 2026 AI Threat Tracker.
