Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 17th August and 23rd August 2026.18th August
678,000 People Hit in French Tax Authority Data Breach
A hollowed out data layer is making CISOs fly blind into AI attacks
AI Models Escaped Test Environments and Hit Real Targets
Akira Ransomware forces victim devices into Safe Mode to evade Security detection
Attackers turn to AI for help identifying files worth stealing
C2Looper Backdoor Uses GitHub C2 and Shellcode Injection to Establish Ransomware Footholds
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
Claude Code Helps Ransomware Operator Steal LDAP Passwords, Backdoor VPNs and Exfiltrate SQL Databases
Duo rejects mediation as South Korea data breach suits escalate
Fake DMs, phishing & crypto: How hackers are turning high-profile X accounts into traps in India
France suffers from unprecedented cyber attack wave, with one hacker supposedly behind it all
French Ministry Data Breach Prompts Fresh EU Privacy Concerns
GitLab Critical Vulnerability Lets Unauthenticated Attackers Modify or Delete Projects
Hacker sells McDonald’s and Vodafone records stolen from Azure
Largest parcel courier company in South Africa allegedly hit by cyberattack
Microsoft Azure data breach? Over 3.6 million employee records allegedly stolen, check if you are one of them
Operation ASTERIX Processes 885,000 Phone Numbers to Find Crypto Users for Targeted Fraud
Origin Energy Data Breach Linked to Former Accenture Employee in Manila
Patient data potentially compromised in alleged dental clinic data breach
Pokémon Center Confirms Data Breach - Hackers Stole Customers’ Personal Data
Pokémon Center Data Breach Exposes Customer Names, Addresses and Order Details
Pokémon Center Data Breach Exposes Customers’ Personal and Order Data
SafePal data breach exposes nearly 40,000 users' information - is a hardware wallet less secure than a spare iPhone?
Shadow hVNC Lets Hackers Operate a Second Windows Desktop Invisible to the Victim
South Korea: Four in five data breach cases go unsolved as cyberattacks surge
The Identity Your IAM Program Forgot: Why Non-Human Identities Keep Causing Human-Scale Breaches
Threat Actors Use Claude Code, Codex and DeepSeek AI to Power Cyberattacks
VMware Syslog Path Traversal Becomes Root RCE, Persistent SSH Access and ESXi Ransomware
17th August
4 in 5 ransomware attacks due to compromised identities
40,000 Impacted by SafePal Data Breach
680,000 Impacted by French Tax Authority Data Breach
A simple video call can compromise millions of Android phones via a Unisoc modem flaw
After Trezor, SafePal reveals data breach affecting nearly 40,000 customers
Akira Ransomware Uses Safe Mode to Bypass EDR
Apple Mac Malware Lets Attackers Control Browser Sessions After Infection
Atrium Centers Data Breach Exposed Sensitive Patient and Employee Information
Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer
Attackers Probe Critical GeoServer SQL Injection Vulnerability
Australian kidswear brand launches investigation following hacker claims
Azure Cloud Credential Theft leads to Data Breach of McDonald’s and Vodafone
Baylor Genetics Data Breach Compromises Personal and Health Information
Baylor Genetics Reports Data Breach Exposing Patient and Employee Information
Binance-Backed SafePal Reveals Data Breach: 40,000 Users' Info Exposed
Bitcoin purchases halted after data breach puts 250,000 crypto users at risk
Bits of Gold Confirms Major Data Breach Affecting 200,000 Crypto Customers
Bits of Gold data breach exposes personal details of up to 250,000 crypto customers
Brookhaven ENT Data Breach Affects 30,403 Patients
Canada: Manitoba’s largest hospital still working to recover from ransomware attack
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
ChainDrop npm Worm Hijacks GitHub Actions OIDC to Poison 444 Packages With Valid SLSA Provenance
Check Point ransomware report signals rising AI use, faster exploit weaponization, widening threat landscape
China-Nexus Threat Actor Targeting Critical VMware Flaw
Christian charities in the UK affected by cyber attack
Columbia Machine Data Breach Exposes Social Security Numbers
Cost of a Data Breach Reaches Record $5 Million on Average
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
Crypto hardware wallet owners face fresh security risks after recent spate of personal data thefts
Crypto wallet provider SafePal discloses data breach affecting nearly 40,000 users’ order information
Cyber Attack Targets French Tax System, 678,000 Users Affected
Data breach also affects About You: logistics operations relocate
Details emerge on BlackFile’s recent attacks on financial companies
Digital Fraud Is Getting Harder to Spot: Read How Scammers Are Changing Their Tactics
ECU Health warns MyChart phishing emails could steal personal and financial information
ECU Health warns patients of MyChart email scams
ECU Health warns patients of phishing scam involving MyChart
European Telecommunications Standards Institute (ETSI) Proposes 17 Cybersecurity Standards to Support Cyber Resilience Act
Evanston Township High School (ETHS) opens amid recovery from ransomware attack
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Evooo1Bot Linux Botnet Hijacks Routers and Firewalls for DDoS, SOCKS5 Proxy and Credential Theft
ExfilSquad Hackers Leak 382GB of Microsoft Dynamics 365 (D365) Data From 13 Victims
Facial recognition gone wrong (again): Sainsbury’s suspends AI software in one of its stores
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
France’s tax authority admits hackers made off with data on 678,000 individuals
'Fraudulent Letters' - Trezor, SafePal Warning As 53,487 Owners Exposed
French tax agency hit by cyberattack, hundreds of thousands potentially exposed
French tax authority data breach affects 678,000 individuals
General Electric (GE) and Philips Investigate Data Theft Claims Following Clop Ransomware Breach
Guam: $1 Million stolen in Judiciary cyber attack wired to JP Morgan accounts, seized by FBI
Hackers are dumping millions of records from McDonald’s, Vodafone, and other Fortune 500 companies
Hacker claims 3.6 million Azure account records stolen from major companies
Hackers Exploit Attempts Target Critical SAP Commerce Cloud RCE Flaw
Hackers Use Compromised Azure Credentials to Steal Millions of Enterprise Employee Records
Health Sciences Centre Winnipeg still working to recover from ransomware attack
Hello, who’s this? RingCentral discloses data breach in wake of ShinyHunters hack claims
Hong Kong Baptist University (HKBU) hit by ransomware attack, data of nearly 1,800 users compromised
How QR-code phishing can slip past corporate security measures
India: Consumer Forum Orders Bank to Pay Rs 1.10 Lakh Over Unresolved Phishing Fraud
Infostealers Harvest 1.7 Billion Credentials in Six Months
Infostealers Hit 7.4 Million Hosts and Steal 1.7 Billion Credentials in 6 Months
Irregular faces criticism over ‘spin’ in AI hacking postmortem
Israel’s Bits of Gold Suffers Data Breach Affecting 200,000 Customers
Israel’s largest crypto broker Bits of Gold hit by data breach affecting 200,000 customers
Israeli Crypto Broker Bits of Gold Warns Customers After a Data Breach
Latvian State Forests blames miscommunication for recent cyber attack
LexisNexis Shuts Down Data Services Following Third-Party Cyber Attack
Liechtenstein Rules Out Paying Hackers’ Ransom After Data Breach
Lincoln Town Office Closed Following Weekend Cyber Attack
Massive Azure Breach Hits McDonald’s, Vodafone, TCS and More
MessiahGPT: An Uncensored AI Platform Selling Automated Cyberattack Tools on the Dark Web
MessiahGPT Unrestricted AI Model Lets Hackers Generate Ransomware and Phishing Kits
Microsoft working on Defender patch for ShieldBreak zero-day
Multiple Suicides Reported in US Cyber Operations Forces
Nearly 700,000 French Taxpayer Records Reportedly Stolen in Government Cyberattack
Nearly 750k had financial info, SSNs leaked in South Carolina loan company breach
New MessiahGPT AI Model Fueling Automated Ransomware and Phishing Attacks
New MessiahGPT BlackHat AI Tool Helps Hackers Create Ransomware and Phishing Attacks
New Ransomware Strain ‘JanaWare’ Quietly Targets Turkish Users for Years
NHS admits patient data breach...via pager
NHS Blood and Transplant (NHSBT) apologises over organ transplant data breach
Philips and General Electric (GE) investigating Clop ransomware data theft claims
Phishing scams disguised as party invitations target email accounts
Pokémon Center data breach exposes customer info, cancels some orders
Poland probes MyDr healthcare software breach potentially affecting 19 million people
Police bust cybercrime ring accused of stealing €30 million in four-day spree
Ransomware Attacks Double Year over Year as July 2026 Cyber Threat Volumes Continue to Rise Worldwide
Ransomware gang crashes own attack - with no-one to blame but themselves
Rivers Casino Philadelphia Must Face Data Breach Lawsuit, Judge Rules
SafePal Bitcoin Wallet Data Breach Stokes Fears of Physical Attacks
SafePal breach affects 39,798 customers, data allegedly for sale
SafePal Breach Hits Nearly 40,000 Customers, Data Is Already for Sale
SafePal Data Breach: 39,798 Customers’ Personal Information Exposed, Funds Secure
SafePal Data Breach Exposes 39,798 Crypto Customers, Wallet Keys Remain Secure
SafePal Data Breach Exposes 39,798 Crypto Wallet Owners' Details
SafePal data breach exposes 39K users - Why phishing risks are rising
SafePal data breach exposes nearly 40,000 crypto wallet customers
SafePal Data Breach Exposes Nearly 40,000 Customers as Crypto Industry’s Security Problem Persists
SafePal Data Breach Exposes Order Info for Nearly 40,000 Users
SafePal Data Breach Exposes Order Information of Nearly 40,000 Customers
SafePal Data Breach Exposes Personal Details of Nearly 40,000 Crypto Wallet Customers
SafePal Data Breach Exposes Personal Details of Nearly 40,000 Customers
SafePal Data Breach Hits Nearly 40,000 Customers' Order Records
SafePal Data Breach Hits Tens of Thousands of Customers
SafePal Exposes Personal Data of 39,798 Customers
SafePal latest crypto hardware wallet maker affected by breach, with nearly 40,000 impacted
SafePal Says 39,798 Customers Hit by Data Breach
SafePal warns of data breach affecting nearly 40,000 customers
SafePal Warns of Phishing Risk After Data Exposure Hits Nearly 40,000 Customers
Sakura Internet's rental server service hit by unauthorized access, potential data breach affecting 583 accounts
Shell Investigates Data Breach After Cl0p Ransomware Claims Theft of 89GB of Corporate Data
Shell Investigates Data Breach After Cl0p Ransomware Group Claims 89 GB Data Theft
Shipping Data Leaks Expose Hardware Wallet Buyers to Theft and Phishing
Signed ClickOnce Installer Uses Google Workspace Decoy to Deploy Credential Stealers and RAT
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Sogang University data breach exposes information of 180,000 people
Sunwest Bank Data Breach Exposes Social Security Numbers
Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
Tata Consultancy Services (TCS), HCL, Hexaware named in global Azure directory data leak linked to infostealers
The Romanian hacker "Virus", sentenced in the USA in the Gozi case, was caught in Sinaia with false diplomatic plates
The Security Risks of Second-Life Corporate Devices
UK police data lapse exposed highly sensitive records, watchdog says
Ukraine says cyberattack hit Russian e-commerce giant Wildberries amid drone strikes
UNISOC Modem Flaw Enables Remote Code Execution via Video Calls
Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access
Unlimited Technology Systems data breach exposes information of 3.8 Million patients
‘Unprecedented’ number of Apple users received recent spyware alert, say investigators
US Courts To Begin Publishing Spyware Records From 2029
US Government Hired a North Korean IT Worker, FBI Investigating
Vishing Attack Provides Threat Actor with Access to Quantum Health Network
West Midlands Police officer 'snooped' on people in secret data breach
WiFi networks can be used to identify people without cameras, study claims
Windows 11 is fully removing a legacy tool that malware and ransomware have abused for years, meet WMIC
Windows 11’s strongest security defenses can be bypassed without a screwdriver
Windows Malware Corrupts PE Headers While Dropping Files to Evade On-Access Scanners
WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover
Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and
Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 3rd August and 9th August 2026, kindly assisted by our partners.
