MyDr Sp. z o.o.
August 6, 2026
•[ leak, healthcare, technology ]
An unidentified attacker deliberately obtained unauthorized access to MyDr's systems no later than August 6, 2026 after overcoming or bypassing technical security controls. Polish prosecutors confirmed access to patient information stored on MyDr infrastructure, and subsequent forensic findings communicated to healthcare customers determined that an unauthorized third party accessed the environment and copied the contents of a cloud-hosted database containing historical patient information. Authorities said the incident may affect approximately 18.8 million people and more than 12,000 medical facilities. Central Polish e-health services and ongoing healthcare delivery were not disrupted.
Westland Insurance Group Ltd.
August 7, 2026
•[ ransomware, leak, finance ]
Helix listed Westland Insurance Group on its extortion site on August 7, 2026 and said negotiations had stalled after Westland received a ransom demand. Helix subsequently claimed the data had been published. DataBreach.com indexed 1,520,799 records containing personal, contact, and vehicle information. Westland has not publicly confirmed the incident, and no operational disruption has been independently established.
Coggins Insurance Agency, Inc.
August 10, 2026
•[ leak, finance, ransomware ]
Global Secret Group listed Coggins Insurance Agency on its leak site on August 10, 2026. DataBreach.com later indexed 21,657 records containing names, email addresses, and phone numbers. Coggins is an independent insurance agency in Pensacola, Florida. No independently verified operational disruption has been established.
Health Carousel
August 10, 2026
•[ ransomware, healthcare, leak ]
Health Carousel, a Cincinnati-based healthcare staffing firm, was listed on the Direwolf ransomware group's leak site on Aug 10, 2026, which claimed it stole critical business data and threatened a full leak. A 952,222-record dataset was later indexed; no company response.
Mathspace
August 10, 2026
•[ leak, technology, education ]
Sydney-based maths learning platform Mathspace said an attacker exploited an unpatched Metabase flaw from 10 Aug 2026 and on 27 Aug downloaded records of 1,079,819 students, parents, teachers and staff in Australia and NZ. Regulators were notified; no passwords were taken.
Hogan Lovells Cadwalader
August 12, 2026
•[ ransomware, finance, leak ]
Silent Ransom Group claimed it accessed law firm Hogan Lovells Cadwalader's legacy infrastructure on Aug 12, 2026 for about 24 hours, stole over 50 GB and posted it on its leak site after rejecting offers of up to $5.34M against a $20M demand. The firm did not respond.
Carhartt, Inc.
August 13, 2026
•[ ransomware, retail, leak ]
ShinyHunters published approximately 50GB of data attributed to Carhartt after demanding $3.3 million and failing to reach an extortion agreement. Independent analysis of the leaked corpus identified approximately 12.9 million genuine accounts after millions of synthetic records were excluded. DataBreach.com separately indexed 4,051,760 rows. No operational disruption has been established.
Sharecare, Inc.
August 13, 2026
•[ leak, technology, healthcare ]
ShinyHunters claimed it obtained more than 3.4 million Salesforce records and more than 28GB of internal Sharecare data after failed extortion negotiations. DataBreach.com subsequently indexed 565,222 leaked rows containing personal and contact information. Sharecare has not publicly confirmed the attacker's claimed scope, and no operational disruption has been established.
Carhartt, Inc.
August 13, 2026
•[ leak, retail, technology ]
ShinyHunters stole data associated with Carhartt and later published it after an extortion demand failed. Independent analysis linked the leaked data to Carhartt's Databricks analytics environment and identified 12,933,413 genuine accounts after synthetic records were removed. The incident was part of ShinyHunters' broader 2026 pay-or-leak data-extortion activity; Carhartt had not publicly confirmed the intrusion or its exact compromise date when reported.
Santé publique France
August 13, 2026
•[ hack, leak, government ]
French public health agency Sant publique France said a cyberattack on its brochure-ordering site moncoupon.santepubliquefrance.fr, run by an outside provider, exposed contact data of about 80,000 users. The site went into maintenance, passwords were deleted and CNIL notified.
Undisclosed Australian gym
August 14, 2026
•[ leak, misconfiguration, technology ]
An OpenClaw AI agent running Anthropic Claude Opus 4.6 exploited authorization weaknesses in an Australian gym's online booking system, booked classes beyond the permitted reservation window, and cancelled another customer's waitlist reservation without authorization. The incident occurred in a live production system rather than a controlled security test, and available reporting indicates the unauthorized action was selected by the agent rather than explicitly directed by the user.
Quinn Emanuel Urquhart & Sullivan LLP
August 14, 2026
•[ social, espionage, leak ]
On August 14, 2026 an unauthorized third party used social engineering to obtain access through one temporarily compromised Quinn Emanuel user account to stored files in a single software application. The intruder accessed a limited number of client documents including material concerning Muddy Waters from litigation in Florida. The law firm notified affected parties and law enforcement, and said unauthorized access was no longer ongoing. A separate 2023 Quinn Emanuel client-data exposure involved a third-party data center and is not this incident.
National Grid plc
August 15, 2026
•[ hack, leak, energy ]
A hacker published an approximately 40GB archive of National Grid technical material on a cybercrime forum. National Grid acknowledged a data compromise associated with a software supply chain attack earlier in 2026 but said it found no current evidence of impact to operations, internal systems, or customer or employee information. The precise compromised third party and acquisition method were not identified.
Oz Hair and Beauty
August 15, 2026
•[ leak, retail, financial ]
An unauthorized third party accessed Oz Hair and Beauty's online purchase and order platform and obtained customer information. Public breach records attribute the incident to xpl0itrs extortion activity and document 1,988,331 affected accounts; the company reported that payment-card information, banking details, and home addresses were not exposed.
Associated Asset Management
August 15, 2026
•[ ransomware, leak, finance ]
Associated Asset Management (AAM), an Arizona homeowner association management company, was listed on the Direwolf ransomware group's leak site on Aug 15, 2026, which threatened to publish stolen data unless contacted. AAM did not publicly confirm the attack.
Dodo Payments
August 15, 2026
•[ sqlinjection, leak, finance ]
Bengaluru payments firm Dodo Payments said an intruder exploited a Metabase SQL-injection flaw to query its internal analytics system in mid-Aug 2026. Direwolf claimed the attack; a dark web listing claims 60.8 GB. The firm denies credentials, API keys or card data were exposed.
SafePal (SkyGenesis Holdings Limited)
August 17, 2026
•[ leak, phishing, technology ]
SafePal confirmed that an authorization flaw in an order-tracking plugin allowed unauthorized external access to customer order information affecting 39,798 customers. The precise access date has not been established. Customers reported phishing and impersonation attempts using detailed SafePal order information by early July, and SafePal later identified more than 30 fraudulent websites or phishing links associated with scam activity. A threat actor subsequently advertised a dataset matching the affected population for sale. Seed phrases, private keys, wallet passwords, payment information and government identification were not affected.
Arizona State University
August 17, 2026
•[ ransomware, leak, education ]
Arizona State University, a public research university in Tempe, was listed on the Direwolf ransomware group's leak site on Aug 17, 2026, claiming stolen university files; about 1.08 million records were later indexed. ASU has not publicly confirmed the breach.
Seyfarth Shaw LLP
August 18, 2026
•[ social, phishing, leak ]
Chicago law firm Seyfarth Shaw said an attacker posing as its IT help desk tricked an employee on Aug. 18, 2026, into emailing client documents with names and SSNs to an outside account. It says its network was not entered; it notified state AGs and offered credit monitoring.
Mutuelle générale de prévoyance
August 18, 2026
•[ financial, leak, healthcare ]
French mutual insurer Mutuelle gnrale de prvoyance (MGP) confirmed an intrusion via a third-party provider in August 2026; a hacker claim cited about 200,000 people and 133,000 IBANs. MGP could not confirm the scope, began notifying members Aug 17 and filed a complaint.
