Editor's Message

Welcome to DBD. Cybercrime made global headlines in 2025. Attacks on well-known brands and organisations raised public awareness of the severity, frequency and impact of cyber attacks. Ransomware attacks were the highest ever recorded, and 2026 could be worse, as cyber criminals continue to extort their victims, with little chance of being brought to justice. It's a dangerous world out there, so please be extra vigilant and mindful of the risks and threats. Wishing you all the best for the New Year. Thanks again for all your support. Stay safe. :)


“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington D.C.



Thursday, 1 January 2026

Data-Leaking Ransomware Report - December 2025

Welcome to last month's DLR Report, an exclusive presentation of Data-Leaking Ransomware Operator's Global and US Victims that were claimed between 1st December and 31st December 2025.


DBD discovered and researched 867 Global Ransomware Victims over 72 Countries and Islands, including 390 US Ransomware Victims over 44 States and Districts, claimed by 61 Data-Leaking Ransomware Operators in December 2025.

DBD also discovered and researched 4 New Active Ransomware Operators called LOCKDOWN, MintEye Team, MS13-089 and Osiris in December 2025.

Download PDF



Data Source: Data Breaches Digest.


Tuesday, 30 December 2025

Ransomware Operator Claims - Week 52 2025

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 22nd December and 28th December 2025, kindly assisted by our partners.

DBD discovered and researched 220 Ransomware Victims over 53 Countries and Islands claimed by 34 Data-Leaking Ransomware Operators, including 1 Newly Discovered Ransomware Operator last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.


Monday, 29 December 2025

Data Breaches Digest - Week 1 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 29th December 2025 and 4th January 2026.


4th January

2025 Sees Sharp Drop in Crypto Phishing Losses, Report Finds

Bitfinex hacker Ilya Lichtenstein thanks Trump for early release under First Step Act

Crypto Phishing Losses Plunge 83% in 2025, but Wallet Threats Persist

Hacker offers alleged utility engineering data for 6.5 BTC after Pickett US breach

Hackers drastically shorten deadline for Manage My Health to pay ransom

Major Data Breach at University of Phoenix - Personal Details of Over 35 lakh People Exposed

Neighbourly users' private information up for sale on dark web after a breach

Potential Data Breach at Pickett USA Exposes Critical Energy Infrastructure

Tens of Thousands Leave Korea Telecom (KT) After Data Breach Prompts Fee Waivers

Wallet Drainer Phishing Losses Fall to $84 Million in 2025, Down 83%

3rd January

Associated Radiologists of the Finger Lakes Data Breach Exposes Patient Information

Bitfinex hacker Ilya Lichtenstein credits Trump for early release from prison

California residents can use new tool to demand brokers delete their personal data

Covenant Health data breach impacted 478,000+ people

Crypto phishing losses drop by 83%

Data breach impacting up to 100K South Carolinians, South Carolina Department of Consumer Affairs (SCDCA) says

From Billion-Dollar Heist to Early Freedom: The Bitfinex Hacker's Surprising Release

Hackers claim to hack Resecurity, firm says it was a honeypot

Handala hackers claim to have hacked former Member of Knesset (MK) Ayelet Shaked's phone, share pictures, videos online

Health care data breach affects 600,000 patients, Illinois agency says

Iranian hacker group Handala breaches phone of former Israeli justice minister

Libya's internet provider LTT targeted by DDoS attacks

Malware targeting personal data hits food delivery services

ManageMyHealth Data Breach: What It Means for Whānau and Health Data Security in Aotearoa

New Zealand: Health data breach raises concerns for Porirua patients

Norfolk council cyber attack fears spark risk level rise

Resecurity Says ShinyHunters Fell for Honeypot After Breach Claim

They Stole Bitcoin at $600 and Walked Free When It Hit $90,000

Trust Wallet says browser extension compromise related to Sha1-Hulud incident led to $8.5 million theft

University of Phoenix data breach hits 3.5 Million people

2nd January

2.2 Million Chrome, Firefox, Edge users impacted by meeting-stealing malware

10,000+ Fortinet Firewalls Still Exposed to 5-year Old MFA Bypass Vulnerability

Agentic AI Security Is Complicated, and the Hyper-Scalers Know It

AI-generated food scams are the new takeout nightmare

Allegedly stolen ASUS data completely exposed by Everest ransomware

Ameriprise Data Breach Exposes SSNs & Financial Details

Andover Eye Associates Data Breach Impacts Hundreds

APT42-linked infrastructure leveraged in Israel-targeted spear-phishing attack

Aultman Health System Data Breach Exposes Sensitive Personal & Health Information Including Social Security Numbers

Austin Associates Data Breach Leaks SSNs & Financial Info

Billion-dollar Bitcoin hacker Ilya Lichtenstein thanks Trump for early prison release

Bitfinex Hacker Walks Free: $10 Billion Crypto Heist Ends in Early Release

Cardano Users Warned of Possible Phishing Attempt Posing as ‘Eternl Desktop’ Update

Careto Hacker Group is Back After 10 Years of Silence with New Attack Tactics

Careto Hacker Group Resurfaces After a Decade, Unleashing New Attack Techniques

Careto Hacker Group Returns After a Decade of Silence with New Attack Tactics

China’s New Cybersecurity Law Is Here - And It Changes Everything for Businesses

Cognizant faces class-action lawsuits after TriZetto data breach

Cognizant Faces Multiple U.S. Class-Action Lawsuits Following TriZetto Data Breach

Cognizant Faces Multiple US Class-Action Lawsuits After TriZetto Data Breach

Cognizant hit with multiple US class-action lawsuits after TriZetto data breach

Cognizant Hit With Multiple US Class-Action Lawsuits Following TriZetto Data Breach

Covenant Health data breach after ransomware attack impacted over 478,000 people

Covenant Health Data Breach Impacts 478,000 Individuals

Covenant Health data breach impacts nearly 480,000 patients

Covenant Health says May data breach impacted nearly 478,000 patients

Cryptocurrency theft attacks traced to 2022 LastPass breach

Cyber Risk In 2026: How Geopolitics, Supply Chains and Shadow AI Will Test Resilience

Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign

Cybersecurity experts face 20 years in prison following ransomware campaign

Cybersecurity Pros Plead Guilty in Ransomware Case

Data breach compromises New Zealand’s ManageMyHealth portal

Data breach exposes users of major patient portal ManageMyHealth

Enerparc AG Allegedly Breached: Solar Project Data Leaked

ErrTraffic ClickFix Tool Industrializes Social Engineering Malware, Delivers Fake Website Glitches

European Space Agency confirms data breach impacted external servers

False sense of security: Inside New Zealand’s under-reported cyber war

Former Coupang Employee Dumped MacBook in River to Hide Data Breach Evidence

G5 Enterprises Data Breach Exposes Social Security Numbers

GlassWorm Malware Evolves to Target macOS Systems with Hardware Wallet Trojans

Google Tasks Feature Exploited in New Sophisticated Phishing Campaign

Hacker Claims 200GB Data Theft From European Space Agency - Here’s What We Know

Hacker Gets Hacked After Leaving Stolen Funds Exposed On-Chain

Hackers Abuse Google Tasks Notifications in Sophisticated Phishing Attacks

Hackers Abusing Google Tasks Notification for Sophisticated Phishing Attack

Health care data breach affects 600,000 patients, Illinois agency says

Hospitals are drowning in threats they can’t triage

How Legacy Active Directory Creates Ransomware Risks for Hospitals

Inside the Cyber Extortion Boom: Phishing Gangs and Crime-as-a-Service Trends

Kaspersky reveals the journey of stolen data after phishing attacks

La Poste and La Banque Postale Hit by Cyberattack, Online Services Disrupted

Libya Telecommunications Company announces its systems were subjected to a cyber attack

LockBit Ransomware Takedown Hero to Receive Prestigious Award from King of Britain

ManageMyHealth data breach: More than 108k users potentially affected

Nearly 480,000 impacted by Covenant Health data breach

Nearly 500,000 patients hit in massive healthcare data breach - everything you need to know

Neighbourly taken down after claims of data breach

Neighbourly website offline after suspected data breach

New York-based fashion maker claimed by Russia-linked hackers

New Zealand: GPs worried by lack of information on ManageMyHealth data breach

New Zealand: ManageMyHealth data breach concerning, but no clinical impact

Over 10K Fortinet firewalls exposed to actively exploited 2FA bypass

Over 108,000 South Carolina residents had Social Security numbers compromised in data breach

Owner of Lewiston hospital vastly underestimated scope of May data breach

Pakistan-linked hackers target Indian government, universities in new spying campaign

Phishing campaign abuses Google Cloud Application to impersonate legitimate Google emails

Pickett USA Data Breach Exposes Critical Infrastructure Data

Potential Wallet Phishing Campaign Targets Cardano Users via ‘Eternl Desktop’ Announcement

Private health records surface on dark web after Manage My Health hack

Qilin Ransomware Group Attack Hits Sugawara Laboratories and CSV Group

Ransomware volumes dip, but attack methods evolve sharply

Scattered Spider attacks cost UK retailers hundreds of millions

Sedgwick confirms cyber incident affecting its major federal contractor subsidiary

SINBON Electronics Hit by DragonForce Ransomware Attack

Suspected Phishing Campaign Targets Cardano Users Through Fake “Eternl Desktop” Announcement

Texas Pete hot sauce-maker claimed by Play ransomware gang

This holiday season, a new malware comes a-calling

Threat Actor Allegedly Claims Breach of Tokyo FM Broadcasting Systems

“Tinder for Nazis” hit by 100GB data leak, thousands of users exposed

Tokyo FM Data Breach: Hacker Claims Over 3 Million Records Stolen

Transparent Tribe Launches New RAT Attacks Against Indian Government and Academia

TriZetto Data Breach Triggers Class-Action Lawsuits Against Cognizant

Trust Wallet links $8.5 million crypto theft to Shai-Hulud NPM attack

Two U.S. Cyber Experts Plead Guilty, Alleged Collaboration With Notorious Ransomware Gang

Two U.S. cybersecurity professionals plead guilty in BlackCat/Alphv ransomware case

Two US Cybersecurity Pros Plead Guilty Over Ransomware Attacks

UK honors cyber sleuth who helped takedown LockBit ransomware cartel

US cybersecurity experts plead guilty to attacking US companies with ransomware

US lifts sanctions on three linked to Predator spyware

Warren County fell for $3.3M phishing scheme despite warnings from vendor

Wavlink routers and other IoT devices hit by React2Shell attacks

When cyber criminals start calling themselves names like 'Impact Solutions,' it’s time to worry

1st January

10 New Ransomware Groups of 2025 - And What to Expect Next in 2026

Aflac Discloses Full Scope of Data Breach - 22.65 Million People Impacted

Another cyber attack takes down France's online postal services

Coupang Data Breach Puts 33.7 Million Users at Risk

Coupang offers $1 billion compensation for data breach victims

Covenant Health reports expanded data breach affecting 284,000 Mainers

Hacker Breaches European Space Agency (ESA) Servers, Steals 200GB of Sensitive Space Data

Healthcare Firm Handing $2,000,000+ To Customers After Data Breach Exposes ‘Highly Confidential’ Information of 512,000 People

Humans at the Center of AI Security

Infosecurity's Top 10 Cybersecurity Stories of 2025

ManageMyHealth reveals scope of data breach

New GlassWorm malware wave targets Macs with trojanized crypto wallets

New Zealand: More than 120,000 Kiwis’ health data breached

New Zealand: Neighbourly informed of potential data breach

Ransomware Without Encryption: Why Pure Exfiltration Attacks Are Surging - and Why They’re So Hard to Catch

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers

Sensitive data 'likely taken' in Westminster council cyber attack

Sentinel Security & Atlantic Coast Life Insurance Companies Data Breach

The biggest cybersecurity and cyberattack stories of 2025

The Evolving Cybersecurity Challenge for Critical Infrastructure

Two U.S. CyberSecurity Pros Plead Guilty for Working as ALPHV/BlackCat Affiliates

Up to 126,000 ManageMyHealth users believed to be affected by cyber data breach

We all play a part in cyber-vigilance

What cybersecurity experts predicted for 2025 - and what actually happened

31st December

2 US Cybersecurity Experts Guilty of Extortion Scheme for ALPHV Ransomware

700Credit data breach impacts 5.8 Million individuals

2025 was a breakout year for zero-day exploits

30,000 Korean Air Employee Records Stolen as Cl0p Leaks Data Online

Abri Credit Union Data Breach Exposes Social Security Numbers

Akira Ransomware Attack Exposes Data Of 7,600 At MetroWest Community Federal Credit Union

AllerVie Health Patients Affected by Ransomware Attack

American cybersecurity pros guilty of ALPHV/BlackCat ransomware attacks

Apache StreamPipes Flaw Lets Anyone Become Admin

Appalachian Community Federal Ransomware Exposes Social Security Numbers

APT36 Targets Indian Government Systems Using Malicious Windows LNK Files

Atlantic Coast Life Insurance Data Breach Exposes Policyholders' SSNs & Medical Information

ChatGPT & DeepSeek Users Targeted in Massive Chrome Extension Data Breach

Chinese state hackers plant malware inside Windows

Coinbase support agent arrested in India for aiding hackers in data breach

Coupang Data Breach Prompts $1.17 Billion Payout and Shareholder Lawsuit

Crypto Malware Hacker Extradited to Korea for $1.18M Theft

Cybercrime Economics: AI’s Impact and How to Shift Defenses

Cybercrime Outpaces Online Security

Cybersecurity Experts Fall from Grace Amid Ransomware Scandal

Cybersecurity pros admit to moonlighting as ransomware scum

Cybersecurity Pros Turned Culprits in Ransomware Scandal

DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide

Disney will pay $10 million to settle children's data privacy lawsuit

Energy Capital Credit Union Breach Exposes Members' Social Security Numbers

ESET Warns Of First Known AI-Powered Ransomware That Learns From Each Victim System

European Space Agency Confirms Breach After Hacker Offers to Sell Data

European Space Agency Confirms Breach of External Servers Containing ‘Unclassified’ Information

European Space Agency (ESA) Confirms Data Breach Impacting Space Operations

European Space Agency Confirms New Data Breach; Classified Info May Have Been Stolen

European Space Agency (ESA) disclosed a data breach, hackers breached external servers

European Space Agency (ESA) Hit by Cyber Attack: Over 200GB of Data Stolen

European Space Agency investigates breach after hacker claims 200GB data theft

Everest Ransomware Leaks 1TB of Stolen ASUS Data

Former Sygnia and DigitalMint Cybersecurity Pros Plead Guilty to Orchestrating ALPHV (BlackCat) Ransomware Attacks

From Black Hole to Black Box: Forensics and Investigation Is the New Cyber Frontline

Hacker Claims European Space Agency Breach, Selling 200GB of Data

Hacker Targets European Space Agency, Claims Massive Data Theft

Hackers drain $3.9M from Unleash Protocol after multisig hijack

Hawaii: Phishing threat masquerading as Hawaiʻi departments

Hawaii: State warns of phishing campaign targeting Hawaii government websites

Hawaii officials warn of phishing scheme that impersonates state websites

Hawaii warns residents about phishing using fake government sites

IBM warns of critical API Connect auth bypass vulnerability

IBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass

Ka-ching! Legit browser extensions are now pilfering your private AI chats

Knownsec Data Breach: A Trove of Espionage Tradecraft with an Insider Narrative

Leidos QTC Health First Rehabilitation Resources Data Breach Exposes Social Security Numbers

ManageMyHealth data breach: Patients warned after unauthorised access

Massive Breach at University of Phoenix Due to the Oracle EBS Exploit, Korean Air Confirms Breach Claimed by CL0P

Microsoft Makes Teams ‘Secure by Default’ Starting January 2026

New Zealand: GPs worried by lack of information on ManageMyHealth data breach

Qilin Ransomware Attacks TaLachaim, Quasar and Z-Tronix

Ransomware attacks act as crystallized cyber threats for National Economic Stability

Ransomware Attacks on the Rise: US Professionals Turn to Cybercrime

Ransomware’s new playbook is chaos

Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry

Romania’s Oltenia Energy Complex reports a serious ransomware breach

RondoDox botnet exploits React2Shell flaw to breach Next.js servers

Security coverage is falling behind the way attackers behave

Security experts themselves carried out ransomware attacks

Sentinel Security Life Insurance Company Data Breach Exposes Social Security Numbers

Shai-Hulud Supply Chain Attack Drained $8.5 Million from Trust Wallet Users

Silver Fox Uses Tax-Themed Phishing To Spread ValleyRAT Malware Campaign Into India

Singapore Cyber Security Agency (CSA) Warns of Critical SmarterMail Flaw Enabling Unauthenticated Remote Code Execution

Soft Market, Hard Choices: The State of Cyber Insurance

Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack

Two Americans Plead Guilty in BlackCat Ransomware Scheme Targeting U.S. Victims

Two cybersecurity guys plead guilty to being hackers all along

Two U.S. Cybersecurity Professionals Plead Guilty to Acting as ALPHV/BlackCat Affiliates

Two U.S. Cybersecurity Professionals Plead Guilty to Working as ALPHV/BlackCat Affiliates

Two US cyber experts plead guilty to cooperating with notorious ransomware gang

U.S. Treasury Lifts Sanctions on Executives Previously Linked to the Intellexa Company and Predator Spyware

U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware

US cyber experts plead guilty to ransomware extortion plot

US cybersecurity experts plead guilty to orchestrating ALPHV ransomware attacks

US cybersecurity professionals plead guilty to Blackcat ransomware attacks

Warren County falls victim to $3.3M phishing scheme

Warren County loses $3 million to phishing scam

Warren County lost $3.3 million to fraudulent phishing scheme, officials say

Warren County Treasurer's Office mistakenly sends $3.3M in phishing scam

What consumers expect from data security

30th December

2 Cyber Pros Admit to Being BlackCat Ransomware Affiliates

80 Hospitals May Have Been Affected by the Oracle Health Data Breach

700Credit breach puts 5.8 million Social Security numbers at risk in alarming third-party failure

Aflac Reveals Just How Big Its Data Breach Really Was

AI Phishing, Supply Chains, and $3.5B Lost - Crypto’s Brutal 2025

AI-assisted phishing kit sets sights on Microsoft Outlook user credentials

Artemis Healthcare Falls Victim to Ransomware Attack

As MongoBleed exploitation escalates, 95% of systems remain unpatched

Associated Radiologists of the Finger Lakes, P.C. notifies patients of system data breach

At least 73% of U.S. adults have fallen for online scams. How you can avoid the latest con

Austin Legal Brawl: Oracle Swamped By Data Breach Class Action Fight

BioNet-Asia Targeted in Gentlemen Ransomware Attack

Cambodian Voice Phishing Gang Arrested in 1.93 Billion Won SpaceX Scam

Chinese APT Silver Fox Targets India with ValleyRAT Tax Phishing Scam

CISA orders feds to patch MongoBleed flaw exploited in attacks

Clop Ransomware Group Linked to 3.5 million University of Phoenix Breach

Coinbase CEO Brian Armstrong thanks Hyderabad Police for arresting former agent linked to $400 million cyber attack; shares online post

Coupang Faces Backlash Over $1.1 Billion Data Breach Payout in Vouchers

Coupang faces backlash over voucher compensation after data breach

Coupang to pay $1.17 billion after data breach hits 34 million users

Coupang to Pay $1.17 Billion in Vouchers After 33.7 Million User Data Breach

Coupang to pay almost $1.2 billion in compensation for data breach

Crypto phishing losses plunge 83% in 2025

CSA Tax & Advisory hack claimed by Lynx ransomware

Cyber Security Agency of Singapore (CSA) Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution

Cybersecurity Pros Turned Culprits in Ransomware Scandal

Denton MHMR Center Data Breach Exposes Sensitive Info 108,967 Individuals

EmEditor Homepage Download Button Served Malware for 4 Days

European Space Agency confirms breach of "external servers"

European Space Agency (ESA) confirms data breach

European Space Agency (ESA) confirms limited data breach

European Space Agency (ESA) Says Data Breach Was Limited to Servers with Unclassified Documents

Ex-Cybersecurity Pros Plead Guilty to $3M BlackCat Ransomware Scheme

Executives say cybersecurity has outgrown the IT department

Former Coinbase Support Agent Arrested in India Over Insider Data Breach

Former US cybersecurity professionals plead guilty to BlackCat/ALPHV attacks

France: CNIL Fines NEXPUBLICA FRANCE €1.7 Million for GDPR Security Failures

French software company Nexpublica fined for failings leading to data breach

Gentlemen ransomware compromises Romanian energy producer

Georgia And Texas Cyber Experts Admit To Ransomware Plot In Florida Court

Got an AI agent on your computer? Assume a breach, security researcher warns

Hacker allegedly claims a major WIRED data breach affecting 2.3 million

Hacker Arrested in KMSAuto Clipper Malware Campaign Targeting Cryptocurrency

Hacker Disposes of Coupang Data Breach Laptop in River, initiating $1.2 Billion as compensation

Hackers rang in the New Year by looting French universities

HoneyMyte (aka Mustang Panda) Deploys ToneShell Backdoor in New Attacks

How AI Enhances Phishing Threats - And Protects Against Them

How the UK Retail Sector Responded to the Scattered Spider Hack Wave

How To Protect Yourself From Cyber Attacks In The New Year: 10 Essential Tips

Korean Air Data Compromised in Oracle EBS Hack

KT Telco Femtocell Flaws Exposed Customers to Fraud, South Korean Police Arrested Five Individuals

Latest Oracle EBS Victims Include Korean Air, University of Phoenix

Lessons Learned from Top 10 Ransomware Incidents in 2025

Lithuanian hacker used KMSAuto malware to steal millions in cryptocurrency

MacOS developers targeted with crypto-stealing worms on Open VSX

ManageMyHealth Data Breach: Kazu Group Claims Ransomware Attack

Marquis Software Ransomware Attack Impacts Financial Institutions, Artisans’ Bank and VeraBank Confirm Data Exposure

Massive Aflac breach exposed millions of SSNs and other data

MetroWest Community Federal Credit Union Data Breach Impacts 7,573

Microsoft typosquatting scam swaps letters to steal logins

MongoBleed Vulnerability Exploited: Update MongoDB Now to Prevent Data Breach

More sophisticated Shai Hulud malware emerges

Murray Irrigation Limited (MIL) discovers data breach

Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor

New ErrTraffic service enables ClickFix attacks via fake browser glitches

New ‘GhostPairing’ Technique Enables Undetected WhatsApp Access

New Liberty Hospital; New York Blood Center; Memorial Blood Centers Settle Data Breach Lawsuits

New Shai-Hulud 3.0 variant discovered, closing out 2025 with a malware bang

New Spear-Phishing Attack Targeting Security Individuals in Israel Region

New Spear-Phishing Attack Targeting Security Individuals in the Israel Region

Nip In The Bud: The Split-Second Choices Of A Ransomware Crisis

Non-human identities push identity security into uncharted territory

Online Scams in Singapore: Fake Buyers Steal Over $622,000 Through Phishing Links

Over 22 million impacted by June data breach, Aflac says

Over 22 Million Records Exposed in Aflac Insurance Data Breach

Over two dozen illicit npm packages power targeted spear-phishing campaign

Pacific Railway Enterprises Data Breach Exposes SSNs & Financial Info

Pearlman Aesthetic Surgery Data Breach Affects 11,764 Patients

Phishing Campaign Spoofs India’s Income Tax to Target Businesses

Prevent Ransomware Attacks From Ruining Your New Year

Radio signals could give attackers a foothold inside air-gapped devices

Ransomware responders plead guilty to using ALPHV in attacks on US organizations

Record ransomware hits UK firms, causes billions in damage

Russia-Linked Hackers Escalate Attacks on US Taxpayers in 2025

Russian criminals suspected of being behind LastPass crypto thefts

Salvation Army allegedly breached by Interlock ransomware

Security teams debate how much to trust AI

Silver Fox Targets India with Tax-Themed Phishing Lures

Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware

Some parent, student information exposed in Prince William Schools data breach

South Korea: Government rebuts Coupang, says data breach far broader than claimed

St. Anthony Regional Hospital Data Breach Exposes PII & PHI

The 2025 npm worm that shook the software supply chain

These Chrome extensions read your ChatGPT and DeepSeek chats

Top 5 Banking Data Breaches of 2025

Treasury removes sanctions for three executives tied to spyware maker Intellexa

Trusted Google Services Abused in New Phishing Scam

Two Americans Admit to ALPHV BlackCat Ransomware Attacks on U.S. Victims

Two cybersecurity employees plead guilty to carrying out ransomware attacks

Two Security Experts Plead Guilty in BlackCat Ransomware Case

U.S. cybersecurity experts plead guilty for ransomware attacks, face 20 years in prison each - group demanded up to $10 million from each victim

US cybersecurity experts plead guilty to BlackCat ransomware attacks

What is an attack vector?

Widely Used Malicious Extensions Steal ChatGPT, DeepSeek Conversations

Zoom Stealer browser extensions harvest corporate meeting intelligence

29th December

1.6 Million+ Salvation Army transactions exposed, hackers claim

2.3 Million WIRED users exposed, hacker threatens release of 40 Million more records

2.5 Million+ Malicious Request From Hackers Attacking Adobe ColdFusion Servers

22 Million Affected by Aflac Data Breach

22.6 million hit in massive Aflac data breach with IDs, SSNs, healthcare info and more exposed - what to do now

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials

27 Malicious npm Packages Used in Phishing Attacks on Healthcare, Industrial Sectors

700Credit data breach exposes SSNs of 5.8 Million consumers

A hacker threw his Macbook into the river trying to avoid being caught. Of course, they caught him

Accused Coupang Data Thief Threw Laptop into the River, Founder Apologizes for Recent Data Breach

Aflac Data Breach by Scattered Spider Exposes 22.6 Million Records

Aflac Data Breach Exposes 22 Million People in Major Cyber Breach

After Asiana, Even Korean Air... Employee Names and Account Numbers Exposed

After robbing Amazon of Korea, the attacker threw his MacBook into the river

AI powered Cyber Attack hits Chinese TikTok rival Kuaishou

AI-Powered Phishing Kit Targets Microsoft Users for Credential Theft

Artemis Healthcare Data Breach Exposes Sensitive Patient Info

As tax filing approaches, hackers target US taxpayers

Automation forces a reset in security strategy

Binance-backed Trust Wallet hit by $7 Million hack, experts warn users

Browser-in-the-Browser Phishing Attack: How to Protect Yourself

Chinese state hackers use rootkit to hide ToneShell malware activity

Christmas gift: method to exploit MongoBleed vulnerability leaking MongoDB secrets showcased on web

Chrysler allegedly compromised by Everest ransomware gang

CISOs are managing risk in survival mode

Coinbase Breach Fallout: Former Support Agent Arrested in India

Coinbase Data Breach Fallout Reaches India as Insider Arrested

Coinbase’s $400 Million Nightmare: Insider Arrested Following Massive Data Breach

Coupang Allocates €850 Million in Vouchers for Data Breach Victims

Coupang Announces $1.18B Voucher Payout After Data Breach Hits 33M Users

Coupang Breach Suspect Tried to Hide Evidence by Throwing Laptop in River

Coupang data breach triggers $1.1 Billion compensation and political scrutiny

Coupang Faces U.S. Investor Lawsuit Over Data Breach Affecting Nearly 34 Million Customers

Coupang offers US$1 billion compensation for data breach victims

Coupang offers 50,000 won voucher but effectively gives customers 10,000 won

Coupang offers 50,000 won vouchers to 33.7 million customers after data breach

Coupang offers compensation to 33.7 million users over data breach

Coupang recovers smashed laptop that alleged data leaker threw into river

Coupang to Issue $1.17 Billion in Vouchers Over Data Breach

Coupang to Pay $1.1 Billion in Compensation to Users After Data Breach

Coupang to split $1.17 billion among 33.7 million data breach victims

Coupang unveils $1.17 billion compensation plan over data breach

Coupang Unveils Nearly 1.69 Trillion Won Compensation Plan Over Data Breach

Coupang’s W1.7 trillion payout plan fails to quell public anger

Coupang's Billion-Dollar Response to Data Breach

Coupang's compensation plan derided as 'bait'

Critical 0day flaw Exposes 70k XSpeeder Devices as Vendor Ignores Alert

Critical ‘MongoBleed’ Flaw Exploited in the Wild to Leak Database Secrets

Cyber attacks: 2025 the ‘tipping point’ as Jaguar Land Rover (JLR) and Marks & Spencer (M&S) incidents highlight risks

Data Breach Affects Patients of Multiple Fyzical Therapy & Balance Centers

Data breach at Korean Air leaks 30,000 employee records

Data theft alert: insurer Aflac notifying millions of clients

Dataset containing data from Wired circulating on hacker forums

Dozens of Chrome Extensions Hacked, Exposing Millions of Users to Data Theft

EazyTick Data Breach Exposes Over 20,000 User Records

Elford, Inc. Construction Data Breach: Project Files Leaked Online

Ericher Data Breach: Customs and Logistics Firm Sensitive Data Exposed

Farfetch owner Coupang announces compensation payout after data breach hits nearly 34 Million customers

Farfetch owner offers $1 billion in vouchers for those affected by data breach

Five Key Flaws Exploited in 2025's Major Software Supply Chain Incidents

Former Coinbase support agent arrested for helping hackers

Former Coinbase support agent arrested in India over major data breach as legal and security pressures mount

Fortinet warns of 5-year-old FortiOS 2FA bypass still exploited in attacks

French software company fined $2 million for cyber failings leading to data breach

From the Boardroom to the SOC: Why Some Organizations Recover Quickly from Ransomware While Others Stall

Greater St. Louis Oral & Maxillofacial Surgery Data Breach

GrubHub exploited in crypto scam via holiday promotion

Guernsey data breach ruling upheld over legal papers left outside

Hacker arrested for KMSAuto malware campaign with 2.8 million downloads

Hacker Claims Theft of 40 Million Condé Nast Records After Wired Data Leak

Hacker Dumped MacBook in River in Attempt to Destroy Digital Evidence

Hacker Dumped MacBook into River in Attempt to Destroy Digital Evidence

Hacker ‘Lovely’ Breaches Condé Nast, Leaks 2.3M Wired Subscriber Records

Hacker Threw MacBook in River to Erase Evidence in Coupang Data Breach

HoneyMyte APT Campaign Uses Kernel-Mode Rootkit to Deploy ToneShell

How to Spot the Most Common Crypto Phishing Scams

Income Tax Phishing Campaigns Linked to Silver Fox Hackers Target Indian Organizations

Indian train driver loses $29,000 in “digital arrest” scam

Insurance Giant Aflac Confirms 22.65 Million Individuals Affected by June Cyberattack

IoT Device Vulnerabilities in Smart Pet Feeders: Petlibro Exposes Pet, User and Employee Details

Kaspersky detected a fivefold surge in QR code phishing attacks in the second half of 2025

Korean Air data breach exposes data of thousands of employees

Korean Air discloses data breach after the hack of its catering and duty-free supplier

Korean Air employee data breach exposes 30,000 records after cyberattack

Korean Air employees' personal info leaked after supplier hit by hacking attack

Kumpulan Prasarana Rakyat Johor (KPRJ) Data Breach: 180GB Leaked

LLMs are automating the human part of romance scams

Mens Den Men Data Breach Exposes User Database and Emails

MongoDB Flaw Allows Unauthenticated Memory Access, Immediate Patching Required

MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide

More Tallahassee Memorial HealthCare (TMH) patient data involved in 2025 data breach, hospital says

Murfreesboro 559K Data Breach Settlement Reached in Tennessee Class Action

Murfreesboro Medical Clinic Settles Lawsuit Over 559K-record Data Breach

New AI-Assisted Phishing Kit Targets Microsoft Users to Steal Login Credentials

New Google-Themed Phishing Wave Hits Over 3,000 Global Organisations

New Phishing Kit with AI-assisted Development Attacking Microsoft Users to Steal Logins

New ransomware methods emerge: ClickFix & group alliances

New York Attorney General Fines Capital Region Orthopedic Practice $500K for 2023 Data Breach

Nura Clinics Data Breach Affects 5,207 Patients

Over 22 million were impacted by data breach in June, Aflac says

Phishing scam targets India’s drivers in large-scale e-Challan cyberattack

Rainbow Six Siege Betrayal: Five Hacker Groups and Bribed Ubisoft Staff Spark $339 Trillion Crisis

Rainbow Six Siege players given billions of credits in Ubisoft hack

Ransomware group claims to steal 650GB of Inha University data

Romania’s Oltenia Energy Complex suffers major ransomware attack

Romanian energy provider hit by Gentlemen ransomware attack

Shai-Hulud Returns with ‘Golden Path’ Malware in Latest NPM Supply Chain Attack

Silver Fox Hackers Attacking Indian Entities with Income Tax Phishing Lures

Silver Fox Hackers Target Indian Entities Using Income Tax Phishing Lures

SIM Box Scam: A Hidden Phishing Network Powered by Thousands of SIM Cards

Singapore: At least $622,000 lost to phishing scams since November

South Korea’s e-commerce platform Coupang to pay over $1.1B to customers over user data breach

Southern Oregon Neurosurgical and Spine Associates Data Breach

St. John’s Riverside Hospital Data Breach Affects 2,238

The biggest corporate security blunders of 2025

The Evolution of Ransomware Entry Points: Why the Perimeter Isn’t the Perimeter Anymore

Threat Actors Exploiting Critical ‘MongoBleed’ MongoDB Flaw

Top 10 Cyber Law Enforcement Operations of 2025

Top Ransomware Attacks of 2025: Major incidents, impacts & rising Cyber Threats Globally

Top US Accounting Firm Sax Discloses 2024 Data Breach Impacting 220,000

Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors

Trust Wallet says 2,596 wallets drained in $7 million crypto theft attack

Two more banks notifying thousands of victims about Marquis Software ransomware attack

Ubisoft Denies Data Breach Claims After Rainbow Six Siege Currency Hack

Ubisoft Shuts Down Rainbow Six Siege After MongoDB Exploit Hits Players

Ubisoft Takes Down Rainbow Six Siege After a Hacker Plays Santa and Gives Away Billions of In-Game Currency and Items

US, Australia say ‘MongoBleed’ bug being exploited

Why Peak Shopping Seasons Are Now Peak Cyber Risk Periods

‘Why should we pay these criminals?’: the hidden world of ransomware negotiations

WIRED Database Leak Exposes Millions And Hacker Threatens 40 Million More

Yet another phishing campaign impersonates trusted Google services - here's what we know

You’ve been targeted by government spyware. Now what?