Full List

Search

Search Results (technology)

• Multiple U.S. Targets (Law Firms, SaaS, Tech Firms) March 1, 2025 • [ espionage, malware, technology ] Chinese APT UNC5221 deployed the BRICKSTORM backdoor to infiltrate U.S. law firms and SaaS providers for intelligence collection. Campaign active from March through September 2025.
• Multiple U.K. Targets (Professional Services, Law Firms) March 1, 2025 • [ espionage, technology ] UNC5221 targeted British professional-services firms for espionage, part of the broader BRICKSTORM campaign observed globally in 2025.
• Multiple Netherlands Targets (BPO, MSP Providers) March 1, 2025 • [ espionage, technology ] UNC5221 compromised Netherlands-based BPO and MSP providers to gain secondary access to client environments; activity attributed to Chinese cyber-espionage operations.
• Multiple German Targets (Corporate Legal, Professional Services) March 1, 2025 • [ espionage, technology ] German professional-services and corporate-law entities were likely compromised by UNC5221 during the 2025 BRICKSTORM espionage campaign exploiting Ivanti edge devices.
• Singapore Cloud / Hosting Providers March 1, 2025 • [ espionage, technology ] UNC5221 leveraged Singapore hosting infrastructure for staging and potential local access during the 2025 BRICKSTORM campaign; targeting aligns with Chinese state-linked espionage.
• Multiple Japanese Targets (MSPs, Cloud Partners) March 1, 2025 • [ espionage, technology ] UNC5221 activity included compromises of Japanese managed-service providers as part of the BRICKSTORM espionage operation active in 2025.
• Orange Romania February 24, 2025 • [ financial, hack, leak ] In February 2025, the Romanian arm of telecommunications company Orange suffered a data breach which was subsequently published to a popular hacking forum. The data included 556k email addresses (of which hundreds of thousands were in the form of [phone number]@as1.romtelecom.net), phone numbers, subscription details, partial credit card data (type, last 4 digits, expiration date and issuing bank). The breach also exposed an extensive number of internal documents.
• Cocospy February 14, 2025 • [ hack, malware, technology ] In February 2025, the spyware service Cocospy suffered a data breach along with sibling spyware service, Spyic. The Cocospy breach alone exposed almost 1.8M customer email addresses which were provided to HIBP, and reportedly also enabled unauthorised access to captured messages, photos, call logs, and more. The data was provided to HIBP by a source who requested it be attributed to "zathienaephi@proton.me".
• Tata Technologies January 31, 2025 • [ ransomware, malware, technology ] Tata Technologies Ltd. suspends some of its IT services following a ransomware attack that impacted the company network.
• Smiths Group January 28, 2025 • [ hack, technology ] London-based engineering giant Smiths Group discloses a security breach after unknown attackers gained access to the company's systems.
• DeepSeek January 27, 2025 • [ hack, ddos, technology ] Chinese AI platform DeepSeek disables registrations on its DeepSeek-V3 chat platform due to an ongoing "large-scale" cyberattack targeting its services.
• Maagar-Tec January 26, 2025 • [ hack, technology ] The pro-Palestinian group called Handala reportedly breaches emergency systems used in Israeli schools, after compromising Maagar-Tec, and broadcasts rocket sirens and Arabic songs that Israels cyber agency called supportive of terrorism.
• Doxbin Scrape January 24, 2025 • [ leak, misconfiguration, technology ] In January 2025, 435k email addresses were scraped from the "doxing" service Doxbin. Posts to the service are usually intended to disclose the personal information of non-consensually third parties. The data was provided to HIBP by a source who requested it be attributed to "oathnet.ru".
• Centric.eu January 24, 2025 • [ ransomware, technology ] Ransomwaregroepering Clop claimt data van Centric in handen te hebben
• ipany (VPN software developed by a South Korean company) January 22, 2025 • [ espionage, technology ] Researchers from ESET link a previously undocumented China-aligned advanced persistent threat (APT) group named PlushDaemon to a supply chain attack targeting ipany a South Korean virtual private network (VPN) provider.
• Unnamed internet service provider (ISP) from Eastern Asia January 21, 2025 • [ hack, ddos, technology ] Cloudflare says it detected and blocked a 5.6 Terabit per second (Tbps) distributed denial-of-service (DDoS) attack, the largest ever attack to be reported to date.
• Rostelecom January 21, 2025 • [ leak, technology ] A major Russian telecommunications provider, Rostelecom, says that it is investigating a suspected cyberattack on one of its contractors after threat actors from Silent Crow claim to have leaked the company's data.
• Otelier January 17, 2025 • [ leak, misconfiguration, technology ] Hotel management platform Otelier suffers a data breach after threat actors breached its Amazon S3 cloud storage to stole millions of guests' personal information and reservations for well-known hotel brands like Marriott, Hilton, and Hyatt.
• Apex Custom Software January 16, 2025 • [ ransomware, malware, technology ] Apex Custom Software is hit with a ransomware attack.
• Multiple organizations in the Crypto Space January 15, 2025 • [ espionage, financial, finance ] Researchers at SecurityScorecard uncovered Operation 99, a campaign by the Lazarus Group, North Koreas state-sponsored hacking unit, targeting software developers looking for freelance Web3 and cryptocurrency work.