Data Breaches Digest - Week 12 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 16th March and 22nd March 2026.

18th March

9 Critical Keyboard, Video, Mouse over Internet Protocol (IP KVM) Flaws Enable Unauthenticated Root Access Across Four Vendors

“Agents of chaos:” OpenClaw assistant discloses Social Security numbers

AI Issues Will Drive Half of Incident Response Efforts by 2028, Says Gartner

AI vs ransomware: High-stakes cybersecurity showdown

AI-Enabled Adversaries Compress Time-to-Exploit Following Vulnerability Disclosure

Amazon dodges €746 million fine as privacy regulator's maths doesn't add up

Amazon security boss says criminals abused max-security Cisco firewall flaw weeks before disclosure

Amazon threat intelligence teams identify Interlock ransomware campaign targeting enterprise firewalls

Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS

Apple Mail “trusted sender” phishing scam warning

Apple Rolls Out Real-Time Security Fixes Across iPhone, iPad, and Mac

Apple starts issuing lightweight security updates between software releases

Asahi cyberattack exposes food industry’s growing ransomware crisis

AWS Bedrock AgentCore Flaw Enables Stealthy C2 Channels and Data Theft

Bank software vendor Marquis says more than 670,000 impacted by August breach

Big tech companies step in to support the open source security ecosystem

Bitrefill accuses North Korea-linked Lazarus hacker group for compromising 18,500 purchase records

Bitrefill cyberattack linked to suspected North Korean hackers exposes limited customer data

CISA flags actively exploited vulnerability of file transfer software used by US Air Force and Sony

CISA official says agency has not seen uptick in cyber threats amid Iran war

Claude.ai: The Claudy Day Vulnerability Chains Prompt Injection, Open Redirects, and Data Exfiltration

Compromised Healthcare Admin sends warning after email pushes fake PDF and M365 phishing page

COVERT RAT Delivered Through Court-Themed Lures and GitHub Payloads

Critical CVE-2026-3888 Vulnerability Exposes Ubuntu to Root Escalation

Critical FortiClient SQL Injection Flaw Allows Unauthorized Database Access

Critical ‘RegPwn’ Vulnerability Lets Attackers Gain SYSTEM Access on Windows

Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23

Crypto e-commerce platform Bitrefill accuses North Korea of stealing 18,500 purchase records

Crypto Phishing Attack Surge Drives $49 Million February Losses

Crypto Phishing Scam Crackdown: US, UK, Canada Launch Operation Atlantic

Crypto Scam "ShieldGuard" Dismantled After Malware Discovery

Cyberattacks Spike 245% in the Two Weeks After the Start of War With Iran

Cybercriminals scale up, government sector hit hardest

Data Breach Scams Are Skyrocketing As Cybercriminals Exploit Fear: How To Spot Them

Dutch telecom's bid to keep Chinese kit fails as court backs spy agency fears

Fake SMS and WhatsApp messages fuel LPG booking scams in Punjab

FBI Intensifies Crackdown on Thai Scam Centers Targeting Americans

Georgia Inmate Allegedly Posed As Adult Film Star To Dupe NBA, NFL Players In Phishing Scam

Global fraud losses climb to $442 billion

Google Warns Ransomware Groups Are Pivoting To Data Theft As Profits Decline

Greek shipping giants in hackers' crosshairs as Iran conflict goes digital

GuardDog Telehealth Accesses Sensitive Medical Records Under False Pretenses

Hacker groups target the US and Israel - How are cyberattacks being used as weapons in Iran's war?

Hackers are doing their homework - and your VPN is first on the list, report warns

Hackers turn GitHub’s favourite OpenWebUI AI servers into crypto mining zombie army

How a Ukrainian Vishing Ring Stole €2 Million From EU Citizens - and Nearly Got Away

How Cortex XDR BIOC Rules Could Become an Attack Surface

Hundreds of code repos falling like dominoes, infected by new wave of self-replicating malware

Identity protection firm Aura suffers data breach exposing 900,000 records

Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access

Ireland: Limerick staff unable to login to work devices after cyberattack from hacker group

Japan to launch “hack back” powers this October

Konni Uses KakaoTalk to Spread EndRAT in Targeted Phishing Campaign

Kubernetes CSI Driver for NFS Flaw Allows Attackers to Modify or Delete Server Data

LeakNet boosts ransomware with ClickFix lures, stealthy Deno loader

LeakNet Ransomware Tactics: New ClickFix Lures Delivered via Compromised Legitimate Websites & Deno Loader

LeakNet Ransomware Tricks Victims Into Infecting Themselves Through Hacked Websites

LeakNet Scales Ransomware Operations With ClickFix Lures and Stealthy Deno Loader

London borough unable to collect council tax for over three months following cyber attack

Marquis: Ransomware gang stole data of 672K people in cyberattack

Marquis Ransomware Attack Exposes 672K Social Security Numbers

Marquis says over 672,000 people had personal and financial data stolen in ransomware attack

MetLife Japan probes suspected data breach affecting thousands

Microsoft Teams Vishing Attack Leads to Quick Assist Compromise

Mosley Glick O’Brien (MGO) Ransomware Breach Exposes 1.2TB of Data

New .NET AOT Malware Hides Code as a Black Box to Evade Detection

New ClickFix Scam Tricks Users Into Mapping Hacker-Controlled Drives

New “Darksword” iOS exploit used in infostealer attack on iPhones

New Ubuntu Flaw Enables Local Attackers to Gain Root Access

Nordstrom's email system abused to send crypto scams to customers

One in five UK small businesses could close after data breach

Ransomware gang exploits Cisco flaw in zero-day attacks since January

Ransomware gangs threatening to wipe data instead of double extortion

Ransomware Spotlight: Agenda

Robotic surgery firm Intuitive reports data breach after targeted phishing attack

Russians caught stealing personal data from Ukrainians with new advanced iPhone hacking tools

Safepay Hacks Navigator, Matt & Steve’s, Briway, Tiefenbacher, Brooker

Scam warning issued to all Brits who own a Gmail account

Sierra Management Group Data Breach: 100 GB Stolen

Sinobi Hits Interpack Northwest, Summa, Teco, McAfee, Eco Sound

Starbucks Sends Data Breach Alert to Customers After ‘Unauthorized Third Party’ Accesses Names, Social Security Numbers, Financial Account Numbers and More

Stryker contains cyber attack on its Microsoft environment

The Path of Least Resistance: Why Active Inertia is the Real AI Threat

The Washington Post will mine your data to decide how much you’ll pay

Threat Actors Target the Entire Retail Supply Chain

U.S. Network Footholds and Camera Targeting Linked To Iranian Cyber Operations

Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit

University of Mississippi Medical Center restores operations after ransomware attack

US: Social Security Data Breach Concerns - Investigation Into Alleged Unauthorized Access

Vidar Stealer 2.0 Exploits GitHub, Reddit to Deliver Malware via Fake Game Cheats

What to do after the Sears Home Services data leak: Millions of call recordings exposed

Whistleblower leaks massive amount of Crime Stoppers tips, claims anonymity is a lie

Woundtech Data Breach Affects Thousands: SSNs and More Exposed

17th March

100,000 personal emails of ex-Mossad research head leaked, pro-Iran hackers claim, Stryker attack contained

Advanced phishing intrusion against security firm executive detailed

AI Cyberattacks Rising: How Hackers Use Machine Learning to Launch Smarter Attacks

AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE

AI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds

AI-Driven Phishing Campaign Uses Browser Permissions to Harvest Sensitive Data

Amazon Web Services (AWS) Bedrock Sandbox Vulnerability Allows DNS bypass, No Patch Available

America’s largest medical device maker Stryker ‘back’ six days after Iran-linked cyber attack

Android OS-Level Attack Bypasses Mobile Payment Security

Apple pushes first Background Security Improvements update to fix WebKit flaw

Apple rolls out first ‘background security’ update for iPhones, iPads, and Macs to fix Safari bug

'Astonishing' Companies House data breach exposed millions of director's private information for months

Atlanta man indicted in athlete phishing and trafficking case

Attack on Stryker’s Microsoft environment wiped employee devices without malware

Attackers Hijack Legitimate Websites to Target Microsoft Teams Users

Average Number of Daily API Attacks Up 113% Annually

Baltimore Inspector General refers fraud, data sharing in crime prevention office for criminal investigation

Baltimore watchdog uncovers thousands in fraudulent billing, confidential data breach related to youth crimefighting program

Bitrefill Reports North Korean Cyberattack, Data Breach

Can Satellites be used to launch cyber attacks on corporate environments?

China hacker group leaks $7 Million crypto theft operation targeting wallet supply chains

CISA Alerts on Actively Exploited Chrome 0-Day Vulnerabilities

CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths

ClickFix Attack Targets Developers with MacSync Malware via Fake Claude Tools

CommonSpirit Health Patients Affected by Vendor Data Breach

CommuniCare Data Breach May Affect 19,885 San Antonio Patients

Coopsana Healthcare Data Breach Exposes Patient Records

'CursorJack’ Attack Path Exposes Code Execution Risk in AI Development Environment

Data allegedly from University of Mississippi Medical Center (UMMC) priced at $800K, posted on dark web

Data breach: UK lawmakers question Lloyds banking group over account glitch exposing customer details

Data extortion attacks on the rise

Document Protection: Why Hybrid Storage Is the Future of Security

Energy Department set to release its first-ever cyber strategy

EU sanctions Chinese and Iranian companies for carrying out cyberattacks against Member States

EU sanctions Chinese company behind 65,000-device hack

EU Sanctions Iranian and Chinese Firms for Cyberattacks Against European Networks

Europe sanctions Chinese and Iranian firms for cyberattacks

Fake invoice with Iowa City logo used in phishing attempt asking for fraudulent payments

Fake Pudgy World site steals your crypto passwords

Fraudulent shipment tracking scams escalate worldwide

French Rugby Federation files lawsuit over phishing-linked cyberattack

From Indian schools to China's chips, how cyber attack targets are shifting

Georgia cybercriminal allegedly duped NBA, NFL players in twisted phishing scam turned sex trafficking plot

Georgia man charged for robbing NBA, NFL players through stolen Apple account details

Georgian Charged for Running Phishing Scam Targeting NBA, NFL Players, While in Federal Custody

Giveth Blockchain Donation Platform Suffers Alleged Data Breach

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

Google Warns Ransomware Actors Are Shifting Tactics as Profits Fall and Data Theft Rises

Google Warns Ransomware Groups Shift to Data Theft as Profits Decline

Government Entities Targeted By CamelClone Espionage Campaign Using Rclone and Public Hosting Sites

Hacker takes over crosswalk system, plays anti-Trump profanities on speaker

Hackers Abuse Trusted Websites in New Attacks on Microsoft Teams Users

Hackers Hijack Corporate M365 Accounts with OAuth Device Codes

Hidden instructions in README files can make AI agents leak data

HumanizerPro.AI Data Breach Exposes Over 65K Users

Identity Drift: The Hidden Risk in Hybrid Active Directory Environments

INTERPOL Warns of Escalating Global Financial Fraud Threat, with AI-Enhanced Scams Four Times More Profitable

Intuitive Data Breach Exposes Customer Info

Intuitive suffers data breach after phishing attack

Intuitive Surgical cyberattack exposes customer and employee data through phishing breach

Intuitive’s Certain Business, Employee, Corporate Data Accessed in Recent Breach

Israel National Security Institute Suffers Data Breach by Handala

KakaoTalk weaponized in Konni spear-phishing campaign

Kerkering, Barberio & Co. Data Breach Exposes Sensitive Info for 4,179 Individuals

Konni Deploys EndRAT Through Phishing, Uses KakaoTalk to Propagate Malware

Koiride.com Airport Transfers Suffers Alleged Data Breach

LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader

LeakNet ransomware uses ClickFix, Deno runtime in stealthy attacks

Less Lucrative Ransomware Market Makes Attackers Alter Methods

MedPeds Associates Breach Impacts 21,430 Patients Exposing PHI and PII

Medusa ransomware gang claims attacks on prominent Mississippi hospital, New Jersey county

Millions of UK firms on alert after Companies House data exposure

New font-rendering trick hides malicious commands from AI tools

New Vidar 2.0 Infostealer Spreads via Fake Game Cheats on GitHub, Reddit

NHS supplier hit by cyber attack by pro-Iran activist hackers

Onset Financial Data Breach Exposes SSNs, Financial Info, and More

OpenClaw, the Fastest-Adopted Software Ever, Is Also a Security Blind Spot

Operation Atlantic: The US Secret Service’s Global Shield Against "Approval Phishing"

“Operation Atlantic” targets crypto phishing scams across the US, UK, and Canada

Parexel Data Breach Exposes SSNs and Other Personal Info

Payload ransomware hits Windows and ESXi with Babuk-style encryption

Phishing emails target AI defenses with unique obfuscation

Phishing scams use LiveChat to impersonate brands, steal data

Popular Chrome extension turns malicious, starts hijacking affiliate commissions

Ransomware Trends Show Why Cyber Pros Need New Skills

Ransomware’s Opening Play: Target Identity First

Researchers Uncover New Phishing Risk Hidden Inside Microsoft Copilot

RondoDox Botnet Grows To 174 Exploits With Large-Scale Residential IP Abuse

Russell Cellular Suffers Massive 61GB Customer Data Breach

Sophisticated Phishing Campaign Exploits Trusted Cisco Domains, Impersonates JPMorgan, Targeting European Security Vendor

Storm-2561 Uses Fake Fortinet, Ivanti VPN Sites to Drop Hyrax Infostealer

Stryker Confirms Massive Wiper Attack That Erased Thousands of Devices

Stryker says it’s restoring systems after pro-Iran hackers wiped thousands of employee devices

Surge in Nation State Attacks on UK Firms Amid Cyber Warfare Fears

Sweden’s BankID breached by hacker group as government prepares e-ID launch

Telekom Serbia Investigates Leak of 160,000 Customer Records

Telekom Srbija hit by customer data breach

That Google Calendar renewal warning might be a scam

UK's Companies House apologises for access and data breach

Ukraine: Mass mailing of phishing emails allegedly on behalf of the State Tax Service is recorded

Usha International Limited Data Breach and Extortion Attack

Vahid Online Doxxed and Breached by Handala Hack Team

Vantage Plastic Surgery Discloses Data Breach Affecting Patient Data

Verizon opens investigation into stolen customer data being sold online

Verizon Retail Customer Database Allegedly for Sale by Hackers: 6.3 Million Customers at Risk

Warlock Ransomware Group Augments Post-Exploitation Activities

Your staff will click: why cyber security must be engineered, not trained

16th March

875 Million Android Phones Face Risk Due to Hidden Chip Flaw

45,000 malicious IP addresses taken down, 94 suspects arrested

ACRStealer Upgrades With Syscall Evasion and TLS-Based C2 In New Campaign

Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse

Android 17 Launches Advanced Protection Mode to Stop Malicious Service Exploits

Android 17 Restricts Accessibility API to Prevent Malware from Requesting Excessive Permissions

Approval phishing fraudsters targeted as UK, Canada and US launch global operation

Are you being served? 4 ways the hospitality sector can defend against rising phishing attacks

Attackers exploit Oscars Best Picture hype for One Battle After Another to spread malware via Google

Bank of the Sierra urges vigilance as phishing attempts target customer data

BreachForums down, cyber defenders claim it was their doing

California Dental Care Provider Announces Data Breach

Canadian Retail Giant Loblaw Reports Data Breach Affecting Customer Information

China Demands Proof After Costa Rica Blames UNC2814 for ICE Cyberattack

CISA flags Wing FTP Server flaw as actively exploited in attacks

Class actions claim CarGurus data breach exposed 1.2 million consumers’ PII

ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers

Community bank reaches $2.4 Million agreement in 2023 data breach class action

Companies House chief apologises over data breach

Companies House online filing back to normal after glitch allowed users to change directors' details

Companies House Restores WebFiling After Flaw Exposed Director Details

CrackArmor Flaws Expose Linux Systems to Privilege Escalation

Cyber Attack: Inside the USD4 Million Equity Bank Heist in Rwanda

Cyber Attack on Medtech Firm Stryker Linked to Iranian Government Hacking Group

Cyberattack disrupts parking payments in Russian city

Cyberattack Targets Poland’s Nuclear Research Center, Investigation Underway

Da Vinci robot maker Intuitive Surgical hit by hackers, data compromised

Divine Skins Data Breach Exposes Data of Over 105,000 League of Legends Custom Skins Users, Anonymous Allegedly Behind It

DRILLAPP Backdoor Targets Ukraine, Abuses Microsoft Edge Debugging for Stealth Espionage

Europol and Microsoft dismantle major phishing platform that affected 500 Belgian victims

Evaluate Ltd Suffers Massive 1.33TB Ransomware Data Breach

Executive Aviation Targeted in Play Ransomware Attack

Experts Warn Ignoring Data Breach Notices Can Deepen Fraud Risks

Fake scandal clips on Facebook bait victims into investment scams

Fake Shipment Tracking Scams Surge in Middle East and Africa (MEA), Stealing Banking Data Through Real-Time Phishing

Fargo Data Breach Exposes Logistics Customer Records

FBI Calls for Help to Track Steam Malware Campaign

FBI Investigates Steam Games Linked to Malware and Crypto Wallet Theft

French ad tech giant Criteo loses €40 Million privacy fine appeal

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos

GlassWorm Campaign Expands Through Malicious Open VSX Extensions

Global cybercrime clampdown disrupts over 45K illicit IP addresses

Google Chrome under attack as over 3 Billion users at risk from active Hacker Exploits

Google Looker Studio Vulnerabilities Enable Attackers to Exfiltrate Data from Google Services

Google paid a record $17.1 Million to developers for finding software bugs

Hackers tried to breach Poland’s nuclear research centre

Handala Hack Leaks Sima Shine, Laura Gilinski, Updates Stryker

Hualun New Materials Suffers Massive Data Breach by SnowSoul

Hudson River Housing Data Breach Exposes SSNs and Bank Information

Huge online phishing platform that claimed 500 victims in Belgium has been dismantled

Hypertherm Data Breach Exposes Names and Social Security Numbers

IBM Detects Hive Ransomware Using AI-Generated Malware “Slopoly”

IBM Discovers ‘Slopoly’ AI-Generated Malware Linked to Hive0163 Ransomware

IBM Links Suspected AI-Generated ‘Slopoly’ Malware To Hive0163 Ransomware Operation

IBM Uncovers ‘Slopoly,’ Likely AI-Generated Malware Used in Hive0163 Ransomware Attack

Indirect Prompt Injection Attacks Cause OpenClaw AI Agents to Leak Sensitive Data

Infosys Ltd. Data Breach Exposes Financial Account Information

Intuitive Surgical confirms phishing-related data breach

Konni APT Hijacks KakaoTalk Accounts to Spread Malware in Multi-Stage Spear-Phishing Campaign

Konni Hijacks KakaoTalk Accounts in Spear-Phishing Malware Campaign

Loblaw responds to claims that it's downplaying recent data breach affecting Canadians

Luxembourg court overturns $858 million privacy fine against Amazon

Major data breach prompts about $6.5 Million penalty for Lotte Card

Major Iran-linked breach rocks medical tech firm

Man accused of posing as adult film star in phishing, trafficking scheme

Middle East and Africa (MEA) Shipment Phishing Scams Surge, Stealing Banking Data in Real Time

Mideast Data Breach: Saudi Arabian Company Suffers Data Leak

Namibia Airports Company (NAC) says no sensitive information stolen in recent data breach

Navia Benefit Solutions Data Breach Exposes Sensitive Health Data

New Phishing Scam Uses LiveChat to Pose as Amazon and PayPal in Real Time

New XWorm 7.1 and Remcos RAT Attacks Abuse Windows Tools to Evade Detection

Newly Discovered Phishing Campaign by Russian Hackers Targets Messaging Accounts of Government Employees, Journalists

NoName057(16) Targets Shas Party and Israeli Councils in DDoS Wave

North Korea hackers used KakaoTalk in spear-phishing campaign, report says

North Korea–linked hackers spread KakaoTalk malware via spear phishing in Korea

North Korea-sponsored cyberattacks utilize KakaoTalk to distribute malware

Operations of America’s largest medical device maker Stryker remain 'disrupted' after five days of Iran-linked cyber attack

Payload Ransomware claims breach of Royal Bahrain Hospital, threatens data leak

Peak Neuro Investigating Alleged Admin Panel Access Sale

Phishing attack on Starbucks employee portal exposes nearly 900 workers

Pilana Group Targeted in Akira Ransomware Data Breach

Poland Suspects Iranian Actors are Behind Attack on Its Nuclear Power Center

Pyongyang-sponsored hacking group uses KakaoTalk in malware distribution campaign

Qilin Ransomware Attack Hits Ruhnau Clarke and Biogel

Ransomware attacks hitting Japan’s small, midsize firms

Ransomware Group Claims Breach of Bahrain Hospital, Threatens Data Leak

Ransomware is shifting targets, many organisations are not prepared

Rasi Seeds Suffers Data Breach by SnowSoul Ransomware

Real-Time Phishing Campaigns Use Fake Shipment Alerts To Steal Banking Data In Middle East and Africa (MEA)

Researchers Find Data Leak Risk in AWS Bedrock AI Code Interpreter

Researchers Warn of Global Surge in Fake Shipment Tracking Scams

Retail Merchandising Services (RMS) Data Breach: Sensitive PII Exposed Including SSNs

Robotics firm Intuitive Surgical says cyberattack compromised business, customer data

Robotics surgical business Intuitive discloses phishing attack

Russia-linked espionage campaign targeting Ukraine using Starlink and charity lures

Scammers Are Now Sending Fake 'Your Data Was Breached' Emails

Scammers are now skipping inboxes and going straight for your calendar

Security Firm Executive Targeted in Sophisticated Phishing Attack

Security Flaw in AWS Bedrock Code Interpreter Raises Alarms

Starbucks data breach: employee records exposed

Stryker attack raises concerns about role of device management tool

Stryker attack wiped tens of thousands of devices, no malware needed

Stryker says hospital tools are safe, but digital ordering systems still down after cyberattack

Sweden’s digital ID provider CGI Sweden confirms data breach

Targeted Phishing Attack Breaches Biotech Company Data

Texas Firm Handing Out up to $5,000 per Person After Data Breach Exposed Names, Social Security Numbers and More

The Gentlemen Ransomware Hits Chase Asia, Payap University, and More

The Ransomware Economy is Shifting Toward Direct Data Extortion

The ransomware economy is shifting toward straight-up data extortion

The UK's plans to tackle ransomware

Threat actors linked to Russia target Ukrainian entities with new backdoor

U.S., UK and Canada launch operation targeting crypto phishing schemes

U.S., UK, Canada start Operation Atlantic to disrupt crypto approval-phishing scams

UK: Companies House Web Glitch Exposes Corporate Details to Fraudsters

UK’s Companies House confirms security flaw exposed business data

US Secret Service, UK and Canada launch Operation Atlantic targeting crypto approval phishing scams

Westminster Village Greenwood Data Breach Exposes Sensitive PII and PHI

What smart factories keep getting wrong about cybersecurity

Woman linked to An Post cyber attack committed string of offences

Zero lessons learned: Convicted scammer allegedly ran another athlete-focused phishing scam from federal prison

Data-Leaking Ransomware Report - Finance 2025

Welcome to a special DLR Report solely focused on the Finance Sector, an exclusive presentation of Data-Leaking Ransomware Operator's Global and US Victims that were claimed in the Finance Sector in 2025.

DBD discovered and researched 556 Global Ransomware Victims over 73 Countries and Islands, including 287 US Ransomware Victims over 42 States and Districts, claimed by 96 Data-Leaking Ransomware Operators in the Finance Sector in 2025, further details of which can be found in our PRiSM application.

Download PDF



Data Source: Data Breaches Digest.

Ransomware Operator Claims - Week 10 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 2nd March and 8th March 2026, kindly assisted by our partners.

DBD discovered and researched 249 Ransomware Victims over 45 Countries and Islands claimed by 39 Data-Leaking Ransomware Operators, including 2 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 11 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 9th March and 15th March 2026.

15th March

CarGurus breach linked to ShinyHunters exposes 12.4 Million records

Iran-Linked Hackers’ Fresh Strike On Albania Highlights Continued Negligence

Korea warns consumers as voice phishing exploits Middle East tensions

Loblaw Data Breach Impacts Customer Information

Payload Ransomware claims the hack of Royal Bahrain Hospital

Ransomware Attacks Hitting Japan’s Small, Midsize Firms

Teamsters Local 175 Data Breach Affects 24,780 People

Thailand: People’s Party’s access to ID verification system blocked after data breach

Thailand: People’s party faces backlash over major data breach

‘Your data has been breached’: But is the message itself hiding a scam?

14th March

45,000 Malicious IP Addresses Taken Down In International Cyber Operation

A French Health-Tech Giant’s Data Breach Exposed 15 Million Patients, Through “Comment” Boxes

AppsFlyer Web SDK hijacked to spread crypto-stealing JavaScript code

Authorities Crack Down on 45,000 Malicious IPs Powering Ransomware Attacks

Critical LangSmith Vulnerability Enables Complete Account Takeover

Cyber front heats up as Iran war triggers wave of hacker attacks

GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers

Global Authorities Take Down 45,000 Malicious IPs Used in Ransomware Campaigns

Global crackdown: Interpol dismantles 45,000 malicious IPs in massive cyber operation

Iranian hacker group targets former Israeli intelligence chief

Loblaw Data Breach: Hackers Gain Access to IT Network and Customer Data

Malicious npm Campaign Impersonates Solara Executor to Steal Discord and Crypto Wallet Data

Massive ransomware attack locks North Dakota farmers out of their smart planters

OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration

OpenClaw AI Vulnerabilities Risk Prompt Injection, Data Breach

Romania's eViza, eConsulat platforms targeted in cyber-attack

ShinyHunters Claims 1 Petabyte Data Theft from Telecom Giant Telus

Starbucks data breach impacts 889 employees

Thailand: Calls for accountability after People’s Party data breach

13th March

45,000 malicious IP addresses taken down in international cyber operation

45,000 Malicious IPs Dismantled by INTERPOL in Global Operation that Resulted in Over 90 Arrests

AI coding agents keep repeating decade-old security mistakes

AI phishing, malicious SVGs continues after surge over holidays

AI-assisted Slopoly malware powers Hive0163’s ransomware campaigns

AI-generated malware Slopoly used in Interlock ransomware attacks

AI-Generated Phishing Emails Slip Past Security Filters

Another DigitalMint Negotiator Accused of Ransomware Attacks and $75 Million Extortion Scheme

Aspen Title & Escrow Data Breach Exposes Sensitive PII

ATM Jackpotting Suspect Added to FBI’s Ten Most Wanted List

Australian hospitals on alert after Iranian hackers attack medical technology company Stryker

Authorities dismantle SocksEscort proxy network behind millions in fraud

Authorities Disrupt SocksEscort Proxy Botnet Exploiting 369,000 IPs Across 163 Countries

Authorities shut down cybercrime service that sold access to 369,000 home internet connections

Authorities Shut Down Malicious Proxy Network Used to Spread Malware

Baydöner Data Breach Exposes 3.7 Million Customer Records

Canada's largest food and pharmacy retailer discloses cyber attack

CenterWell Home Health reports potential data breach

Chinese Hackers Target Southeast Asian Militaries with AppleChris and MemFun Malware

Cloud attacks are getting faster and deadlier - here's your best defense plan

‘CrackArmor’ Vulnerability in AppArmor Impacts 12.6M Linux Systems

Critical Chrome Security Flaws Threaten Billions of Users Worldwide

Cyber Attack Raises Fears of Supply Chain Targets in Iran War

Decentralized Cybersecurity: Why the EU Vulnerability Database Is a Blueprint For the Future

Earthbound Holding Data Breach Affects 6k: PII Exposed

Electronic City Indonesia Suffers Customer Data Breach

England Hockey investigates potential data breach after AiLock ransomware claims

England Hockey investigating ransomware data attack

Fake enterprise VPN downloads used to steal company credentials

Family Energy Spain Network System Access and Breach

FBI seeks victims of Steam games used to spread malware

Foiling modern phishing across the attack chain

Gauteng Provincial Government Suffers 3.8TB Data Breach

Global cyberattacks remain near record highs in February 2026 despite ransomware decline

Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8

Google fixes two new Chrome zero-days exploited in attacks

Hack on Stryker systems sparks concerns over corporate targets in Iran conflict

Hacker Claims Leak of Source Code From CGI’s Swedish Unit

Handala Expands Destructive Cyber Operations Beyond Israeli Targets

Hanover County Public Schools Investigates Major ‘Data Incident’ That Disrupted Internet Access and Systems

Hebrew University of Jerusalem Suffers Destructive Data Breach

Hive0163 Ransomware Operators Use AI-Generated Slopoly Malware

How advanced phishing kits are forcing enterprises to step up email security

How Handala Became the Face of Iran’s Hacker Counterattacks

How Oscar season becomes prime time for malware attacks

INTERPOL Dismantles 45,000 Malicious IPs, Arrests 94 in Global Cybercrime

INTERPOL Operation Synergia III arrests 94 suspects, shuts down 45,000 malicious servers

INTERPOL Operation Synergia III Shuts Down 45,000 Malicious IPs, 94 Arrested

Interpol takes down 45,000 malicious websites in global cybercrime crackdown

Interpol teams up with tech firms to seize 45,000 malicious IPs, servers in global cyber crime crackdown

Interpol's 'Operation Synergia III' Nets 94 Arrests in Major Cybercrime Sweep

Intuitive Surgical hit by cybersecurity phishing incident

Iran War Bait Fuels TA453, TA473 Phishing Campaigns

Iran-Linked Hacker Attack on Stryker Disrupted Manufacturing and Shipping

Kenya Among 72 Nations in INTERPOL Operation That Disrupted 45,000 Cyberattacks

Kenya joins INTERPOL crackdown as 94 are arrested and 45,000 servers closed

Khyber News Knocked off-air in Satellite Cyber Attack

Law enforcement bin 45,000 malicious IPs

Law Enforcement Dismantles SocksEscort Proxy Network in Operation Lightning

Loblaw confirms data breach - Canadian retail giant says 'basic customer information' affected

Loblaw Data Breach - Hackers Accessed IT Network and Customer Information

Loblaw reports customer data breach after IT network intrusion

Lynx Ransomware Breaches Keller Polska & Africa Insurance

Medoucine Data Breach Exposes Over 813K Patient Records

Meta shuts down 150,000 Facebook scam accounts, 21 arrested in global crackdown

Michigan-based Stryker hit with cyberattack, says it's experiencing "global network disruption"

Microsoft Authenticator Flaw on Android, iOS Could Leak Login Codes for Millions

More reasons for concern? Rogue AI agents dodge antivirus software and publish passwords

Multi-Stage Remcos RAT Campaign Hides Behind JavaScript and PowerShell

New York cyber regulations for water organizations to take effect in 2027

Nine CrackArmor Flaws in Linux AppArmor Enable Root Escalation, Bypass Container Isolation

No restoration timeline for medical device maker Stryker after cyberattack

Pakistan: The Cyber Attack That Tried to Silence Khyber News

Phishing scam targets Minneapolis permit applicants as FBI issues warning

Phoenix Environmental Labs Ransomware Data Breach

Poland's nuclear research centre targeted by cyberattack

Police sinkhole 45,000 IP addresses in cybercrime crackdown

PowerShell and PsExec Used To Steal Data Before INC Ransomware Attack

PsExec and Renamed Backup Tools Enabled Data Theft Before INC Ransomware Attack

Ransomware data breaches soar in the U.S., affecting K12 and higher education privacy

Ransomware incident responder gave info to BlackCat cybercriminals during negotiations, Department of Justice (DOJ) alleges

Ransomware negotiator accused of extorting victims

Rayan Parto Danesh International Institute Data Breach

Researchers Identify AI-Generated Slopoly Malware In Ransomware Attack

RMZ Oilfield Engineering Hit by Qilin Ransomware Attack

SocksEscort Cybercrime Proxy Network Taken Down in Operation Lightning, Tens of Servers and Domains Seized

South Korea fines Lotte Card after hack exposes data of nearly 3 million customers

SQL Injection Vulnerability in Ally WordPress Plugin Exposes 200K+ Sites

Starbucks announces data breach

Starbucks Data Breach - Hundreds of Users’ Personal Data Exposed

Starbucks Data Breach Exposes Personal Data of 889 Employees

Starbucks Data Breach Exposes Personal Data of Hundreds of Users

Starbucks Data Breach Exposes Personal Information of Hundreds of Users

Starbucks Data Breach Exposes SSNs and Financial Account Information

Starbucks Data Breach Impacts Employees

Starbucks discloses data breach affecting hundreds of employees

Starbucks HR system breached, nearly 900 employees affected

Starbucks reveals data breach, hundreds of employees possibly affected

Starbucks suffers data breach via employee portal clone sites

Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials

Storm-2561 targets enterprise VPN users with SEO poisoning, fake clients

Stryker Battles Cyber Attack As Operations Face Major Disruptions

Stryker Corporation Data Breach: Investigation Ongoing

Stryker hit by cyber attack from Iran

Stryker Says Cyberattack Disrupted Processing, Manufacturing and Shipping

Suspected Iran-linked cyberattack hits medical technology giant Stryker amid Middle East tensions

TA453 and TA473 Drive Iran War-Themed Phishing Across The Middle East

Telus Digital confirms breach - hackers allegedly stole 'almost 1 petabyte of data'

Telus Digital Confirms Massive Data Breach by ShinyHunters

TELUS Digital investigates cybersecurity breach as threat actors claim massive data theft

Telus says it is investigating hack of its systems

The FBI is investigating malware hidden inside games hosted on Steam

The Stryker cyberattack and what hospitals should be doing

The web should be “casually anonymous” by default, Mozilla claims

Therapeutes.com Data Breach Exposes Patient Records

“Threat Actor” on the dark web claims Loblaw’s “low-level” data breach is a much larger threat

Undetected For Weeks: Closing The Ransomware Window In Operational Technology (OT) Networks

US Agencies Face CISA Deadline Over Critical Cisco SD-WAN Flaw

Veeam Fixes RCE Bugs in Critical Backup & Replication Platform

Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution

Viking Line confirms data breach linked to third-party supplier

What CISOs Should Know (And Do) About OpenClaw

What Is Phishing?

Why Are Platform Ecosystems - Like Salesforce - Often Targeted?

Why encrypted backups may fail in an AI-driven ransomware era

Will AI Save Consumers From Smartphone-Based Phishing Attacks?

XWorm RAT Dominates the Malware-as-a-Service Landscape with 174% Increase in Detections

12th March

€1 million online fraud scheme uncovered, three suspects arrested

83% of Cloud Breaches Start with Identity, AI Agents Are About to Make it Worse

226 Ransomware Attacks Reported in Japan in 2025

2023 FBI Server Breach Exposed Epstein Investigation Files in an ‘Isolated Cyber Incident’

AbelZeta Pharma Targeted in Ransomware Attack by SpaceBears Group

Agentic attack chains advance as infostealers flood criminal markets

AI-generated Slopoly malware used in Interlock ransomware attack

Alleged Sunrise Telecom Data Breach Puts 6 Million Customer Records at Risk

App meant to help people quit porn reportedly exposed the intimate habits of over 600,000 users

Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit

Apple patches older iPhones and iPads against Coruna exploits

Artificial intelligence drives 59% surge in ransomware across APAC region

Bell Ambulance Confirms Data Breach Affecting 237,830 Individuals

Bell Ambulance Breach Exposes Almost 240,000 Patients’ Data, Medusa Ransomware Claims Incident

Bell Ambulance data breach impacted over 238,000 people

Bonk.fun hacked: Domain hijacked, crypto drainer planted

Canadian retail giant Loblaw notifies customers of data breach

CGPEY International Private Limited Suffers Massive Data Breach

CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed

CISA Issues Emergency Directive Over Exploited Cisco SD-WAN Flaws

Critical Zero-Click Flaw in n8n Allows Full Server Compromise

Data breach on care management company impacts 5K patients at NYC Health

Department of Justice (DOJ) Announces Dismantling of World’s Largest Hacker Forums

Dutch police to scammers: report yourself or see your face on the metro

England Hockey Investigates Alleged AiLock Ransomware Attack

England Hockey investigating ransomware data breach

Ericsson US Discloses Data Breach as Hackers Steal Employee and Customer Data

Ericsson US Hit by Cyber Attack, Hackers Steal Personal Data of Employees and Customers

EV charging firm Elecq hit by ransomware

Fake government and Starlink apps used in malware campaign targeting Brazil

Feds Takes Down SocksEscort Proxy Network Used in Global Fraud Schemes

Foreign hacker accessed FBI’s Epstein investigation files in 2023, documents reveal

Foreign Hacker Breached FBI Epstein Investigation Files in 2023 After New York Server Was Left Exposed

Foreign Hacker Breaches FBI Server: Epstein Files Accessed In 2023

Foreign Hacker Breaches FBI Servers Holding Epstein Files, 2023 Incident Revealed

Foreign hacker in 2023 compromised Epstein files FBI held, source and documents show

Foreign hacker in 2023 compromised Epstein files held by FBI, source and documents show

Former Employee of Cybersecurity Companies Charged in ALPHV (BlackCat) Ransomware Extortion Case

Hackers Hijack Bonk.fun Domain, Deploy Wallet-Draining Phishing Prompt

Hackers Use Cloudflare Human Check to Hide Microsoft 365 Phishing Pages

Handala Hack Team Breach: Raz Zimmt, Verifone, Stryker

Hive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks

India Introduces Bug Bounty Program to Target Gaps in Aadhaar Ecosystem

Iran appears to have conducted a significant cyberattack against a U.S. company, a first since the war started

Iran Claim Massive Cyber-Attack on MedTech Firm Stryker

Iran Linked Hacker Group Claims Major Cyberattack on US Medical Company Stryker Says Operation Successful

Iran-linked cyber attack targets US medtech giant Stryker

Iran-linked hacker group launches debilitating cyberattack against US medical company

Iran-Linked Hacktivists Hit Stryker, Knocking Employees Offline Across Multiple Countries

Iranian Hackers Attack U.S. Company Stryker in Escalation of Cyber War

Isle of Man: Information Commissioner fell victim to a data breach herself

Law enforcement shuts down botnet made of tens of thousands of hacked routers

Lloyds, Bank of Scotland and Halifax apps showed customers other users' transactions

Lotte Card Fined $6.8 Million Over Data Breach Affecting 2.97 Million Customers

Maintaining Security and Protecting Smart Home Devices from Hackers

NCC Group says ransomware rose 50% as identity risk grew

New PixRevolution Malware Steals Brazil’s PIX Transfers in Real Time

NIXVAL IT Infrastructure Hit by NightSpire Ransomware Attack

NoName057(16) Launches Coordinated DDoS Attacks on Cyprus

Nuclear Facility Cyberattack Investigated as Possible Iranian Exploit

Online banking fraud losses hit record 10.4 billion yen in Japan in 2025

Oracle EBS hack disclosed by Michelin

Oticket Data Breach Exposes Over 450K User Records in Brazil

Phishing Campaign Delivers BeatBanker Trojan To Spread Cryptocurrency Miner and RAT

Phishing scam defrauds Chittenden Solid Waste District of $3 million

PixRevolution Malware Hijacks Brazil's PIX Transfers in Real Time

Police Scotland Fined After Sharing Victim’s Phone Data

Pro-Iran hackers claim cyberattack on major US medical device maker

Pro-Iran hackers hit US medical device giant Stryker in shocking cyberattack after Israel strikes

Proliance Surgeons Settles Data Breach Litigation for $4,450,000

Qilin Ransomware Hits Fortress Systems & Arimex Importadora

Ransomware attacks in Asia-Pacific up 59%

Ransomware attacks reported in Japan number 226 in 2025

Researcher discovers severe antivirus blind spot: corrupted ZIP files evade nearly all scanners

Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays

Saudi Aramco Investigates Alleged Workforce Data Leak

Scottish police fined £66K for collecting too much personal information from a suspect

Security Flaw in WordPress Plugin Puts 400,000 Websites at Risk

Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets

Stryker Corporation Hit by Cyberattack as Hackers Claim System Breach and Device Wipe

Stryker Cyber Attack: Iran-linked Handala hackers hit US medtech giant; Escalate the war into cyberspace

Stryker cyber attack latest as hackers wipe devices and Irish employees unable to work

Stryker Cyber Attack Raises Concerns for State and Local Government

Stryker Cyberattack Wipes Employee Devices, Handala Claims Closing Almost 80 Offices Belonging to the US Medical Giant

Stryker Faces Cyber Attack as Hackers Report System Breach and Device Destruction

Stryker hit with global cyberattack by suspected Iranian-backed group, thousands of workers affected at Cork plants

Stryker tells Securities Exchange Commission (SEC) that timeline for recovery from cyberattack unknown

Telus Digital confirms breach after hacker claims 1 petabyte data theft

Telus Digital hit with massive data breach

Thailand: Chinese man jailed for phishing scam

The State of Cyber Warfare in 2026: Nation-State Attacks, AI Weapons, and the New Digital Battlefield

Threat Actors Leverage Iran Chaos in Phishing Attacks

US charges another ransomware negotiator linked to BlackCat attacks

US disrupts SocksEscort proxy network powered by Linux malware

US hospitals under cyber attack? Iran-linked hackers claim to have hit medical major Stryker

US Medical Company Hit With Cyberattack, And This Hacker Group Is Claiming Responsibility

US sanctions North Korea IT worker networks in Laos, Vietnam

US, Europol disrupt SocksEscort network that exploited thousands of residential routers

Veeam warns of critical flaws exposing backup servers to RCE attacks

Verifone and Stryker hit by Iran-linked hackers as cyber retaliation fears grow

Viking Line hit by data breach

Viking Line Suffers Data Breach Exposing Customer and Internal Data

Vodien domain expiry scam targets payment card details

Vulnerability in MediaTek Chips Could Impact 25% Android Smartphones

War spreads into cyberspace after Iran-linked hackers hit medtech giant Stryker

What message Iran-linked hacker group Handala left after disabling laptops and phones of Stryker employees, America's medical devices company with $125 billion market cap

Who Is Handala - The Iran-Linked Ghost Group That Just Wiped 200K Stryker Devices

Wireless vulnerabilities are doubling every few years

Year-Long TriZetto Health Data Breach Leaks Sensitive Healthcare Information of 3.4 Million People

11th March

5 security tactics your business can't get wrong in the age of AI - and why they're critical

360training.com Data Breach Affects 24,594 Customers

235,000 affected by cyberattack on largest ambulance provider in Wisconsin

238,000 Impacted by Bell Ambulance Data Breach

A foreign hacker unknowingly breached FBI servers tied to the Epstein investigation

A major security flaw could affect 1 in 4 Android phones - here's how to check yours

A Meta-powered investment scam is spreading across 25 countries - how to spot (and avoid) it

‘Agents of Chaos’: New Study Shows AI Agents Can Leak Data, Be Easily Manipulated

AI agents speeding up crypto fraud

AI driven attacks surge with identity the primary target

AI is accelerating cloud cyberattacks, and one weak link stands out

Alleged Cal AI data breach exposes data of more than 3 million users

Ansell Healthcare Data Breach Affects 2k: Sensitive PII Exposed

Asus Routers Hijacked by KadNap Botnet for Malicious Proxies, Comprising Over 14,000 Devices

Australian officials suspect Singaporean company paid Optus ransomware after massive 2022 data breach

Automotive tech: A vast new cyber attack surface

BeatBanker Android Trojan Uses Silent Audio Loop to Steal Crypto

BeatBanker Trojan Spreads via Phishing, Deploys Crypto Miner and RAT on Targeted Devices

BlackSanta EDR Killer Malware Targets HR Workflows In Multi-Layered Attack

BlackSanta EDR-Killer Targets HR Teams in CV-Themed Campaign

BlackSanta Malware Shuts Down Protections, Targets HR and Recruiting Operations

BlackSanta Malware Targets HR Staff with Fake CV Downloads

Cadence Bank Reaches $5.25 Million MOVEit Data Breach Settlement with Claims up to $10,000

Canada: How a ransomware attack left an Ontario government health agency scrambling

Cedar Valley Services Data Breach Exposes Sensitive Patient Info

CISA orders feds to patch n8n RCE flaw exploited in attacks

CommonSpirit Health Breach Affects Over 19,000 Individuals

Compromised WordPress Sites Deliver ClickFix Attacks in Global Infostealer Campaign

Critical Microsoft Office Vulnerability Enables Remote Code Execution Attacks

Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials

Crypto Hacks Drop in February as Phishing and Wallet Scams Surge

Crypto Thieves Steal 87% Less in February as Phishing Surges

Cyber-Attacks on UK Firms Increase at Four Times Global Rate

Data breach caused IT issues in Lehigh Carbon Community College (LCCC) that led to temporary campus closures, school trustee says

Data breach hits Loblaw customers in Canada

Department of Government Efficiency (DOGE) employee may have stolen data of hundreds of millions of Americans

Docaret Ransomware Attack: French Firm Hit by The Gentlemen

Dozens of Lawsuits Filed in Response to Kettering Health Ransomware Attack

Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices

Elliott-Lewis Suffers Data Breach in Interlock Ransomware Attack

Epstein files compromised by foreign hacker who breached FBI

Ericsson discloses data breach, employee and customer data exposed

Expanded Identity Attack Vectors: From Document Fraud to Signal Manipulation

FBI Flags Phishing Campaign Collecting Planning and Zoning Permit Payments

Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets

Foreign hacker breached FBI servers that held Epstein files in 2023

Foreign hacker in 2023 compromised Epstein files held by FBI, source and documents show

Foreign Hacker Once Breached Epstein Files in FBI Servers, Reports Confirm in Newly Released Docs

Foreign hacker reportedly breached FBI servers holding Epstein files in 2023

Former Department of Government Efficiency (DOGE) Employee Accused of Social Security Data Theft Affecting 500 Million Americans

Former Phobos ransomware leader pleads guilty in U.S. court

FortiGate Edge Intrusions Lead to Deep Network Compromise, Rogue Workstations

France: National Cybersecurity Agency Reports Ransomware Attack Drop in 2025

FuturHealth Data Breach: Sensitive Data Exposed

GlobalNet Data Breach: Tunisian ISP Compromised

Hacker accessed FBI server that included Epstein files in 2023, files suggest

Hacker compromised FBI’s Jeffrey Epstein files during break-in at field office, report says

Hacker Group Handala Claims Hack of Stryker Corporation

Hackers Breached FBI Epstein Files

Hackers hijack Wordpress sites and deploy CAPTCHA ClickFix in global infostealer campaign

Hawaii: Finance Department warns public of Department of Motor Vehicles (DMV) phishing text scam

Hider Nex DDoS Attack Hits Multiple Kuwaiti Government Sites

Human Resources (HR) departments are being targeted with fake resumes that disable security protection

INC Ransom Group Mounts Rapid Campaign Against Law Firms

INC Ransomware Group Holds Healthcare Hostage in Oceania

Institute of Social Security Paraguay Hit by Ransomware Attack

Iran-linked cyber crew says they hit US med-tech firm

Iran-linked hacker group suspected in cyberattack on global Michigan-based company

Iran-linked hackers claim cyberattack on Albania’s parliament email systems

Iran-linked Handala hacker group targets US med-tech maker Stryker in cyberattack

Iran-Linked Handala Hackers Claim Major Hacks on Stryker and Verifone

Iranian hackers embedding themselves in the global cybercrime ecosystem

Iranian hackers take credit for massive cyber attack on US medical equipment firm

Ireland: All we know so far as Stryker speaks out on cyber attack that's left thousands of Irish unable to work

Ireland: Stryker's Cork base impacted by global cyber attack

Ivanti Endpoint Manager Authentication Flaw Targeted In Ongoing Cyberattacks

LakMobile Software Source Code Leak and Data Breach

LexisNexis L&P Confirms Data Breach After Hacker Leaks Stolen Information

Loblaw notifies customers of a low-level data breach

Major Cyber Attack Hits Global Medical Giant Stryker

Meadowlark Hills Data Breach: 14,442 People Impacted

Medical device giant Stryker confirms cyberattack as employees say devices were wiped

MedTech Giant Stryker Crippled by Iran-Linked Hacker Attack

Medtech giant Stryker offline after Iran-linked wiper malware attack

Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown

Meta says it culled millions of scam adverts amid accusations that it profits from them

MetroWest Community Credit Union says data breach affected over 20,000 members

Michelin Confirms Data Breach Linked to Oracle EBS Attack

Michigan-based Stryker hit with cyberattack, says it's experiencing "global network disruption"

Microsoft Active Directory Domain Services Vulnerability Allows Attackers to Escalate Privileges

Microsoft Fixes 79 Flaws in March Patch Tuesday, Including Two 0-Days

Microsoft Fixes Two Publicly Disclosed Zero-Days

Microsoft patches 80+ vulnerabilities, six flagged as “more likely” to be exploited

Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days

Ministerio de Hacienda Data Leak Exposes Employee Information

NADAP Data Breach Exposes Over 400,000 Records

New PhantomRaven NPM attack wave steals dev data via 88 packages

New SurxRAT Android Malware Uses AI To Automate Phishing and Steal Data

Newly released documents reveal foreign hacker breached FBI’s Epstein files in 2023, raising intelligence concerns

Nigeria Tops African Cyber Attack Chart at 4,326 Weekly Hits in February

Nissan North America Agrees to $1.5 Million Settlement After 2023 Data Breach

NoName057 DDoS: UkrNIAT, LAN, Amstor, DneprAzot & DSS

Oregon: This phishing scam is bombarding Oregonians’ cellphones

Patch Alert: Microsoft Fixes Nearly 80 Bugs, Including Critical Office Flaws

Phishing in Plain Sight: How Threat Actors Exploit GitHub Pages and Vercel to Harvest Banking Credentials

Police Scotland fined £66,000 over 'serious' data breach

Police Scotland fined as 'serious' data breach revealed

Portugal warns foreign state-backed hackers targeting officials' and military messaging accounts

Portugal warns of spy campaign targeting officials on WhatsApp and Signal

Pro-Iran hacktivist group says it is behind attack on medical tech giant Stryker

Pro-Iranian hacker group claims cyberattack on medical technology firm Stryker, crippling global operations

Ransomware surges across Asia-Pacific as AI fuels risk

Red Alert App Trojan Targets Israeli Users, Steals Sensitive Data Through SMS

Researchers Discover Major Security Gaps in LLM Guardrails

Researchers uncover AI-powered vishing platform

Researchers Uncover ‘LeakyLooker’ Vulnerabilities in Google Looker Studio

Resumés with malicious ISO attachments are circulating

ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites

Shlomo Insurance Company Targeted in Ransomware Attack

Software vulnerabilities push credential abuse aside in cloud intrusions

South Korea Liquidates 320 BTC After Bizarre Hack and Return Saga

SQLi flaw in Elementor Ally plugin impacts 250k+ WordPress sites

Steadfast Courier Data Breach Exposes Customer Information

Stryker cyber attack: 7 things to know as 'Iran-linked hackers' leave thousands unable to work

Stryker cyber attack: Hackers cripple medical giant's global systems

Stryker cyber attack: Has Iran added a new dimension to the US-Iran war? Why Iran-linked hackers targeted $100 billion medical giant Stryker Corp as stock crashed 4.5%

Stryker Cyber Attack: Pro-Iran Hackers Claim Incident On US Medical Device Maker

Stryker cyber attack: Thousands of Irish unable to work as hackers cripple global systems

Stryker cyber attack: Which Iranian hacker group is suspected behind the breach and why did Iran choose a global medical device giant for a wiper malware attack amid the US-Iran war?

Stryker Cyber Attack - Hackers Claim System Breach and Device Wipe

Stryker cyber attack hits 4,000 Irish workers as 'Iranian' hackers cripple global systems

Stryker cyber attack leaves thousands of Irish staff unable to work

Stryker headquarters in Portage closes amid cyber attack affecting global systems

Stryker hit by cyberattack linked to Iranian-affiliated hacker group, experts warn of growing threat

Stryker Hit by Devastating Cyber Attack Linked to Iranian-Backed Group

Stryker operations shut down after Iran-linked cyberattack

Stryker stock down: Medical equipment maker's systems defaced by cyberattack linked to pro-Iran hackers

SUCCESS Magazine subscriber database allegedly leaked on hacker forum

Suspected Iranian Cyberattack Targets U.S. Medtech Company Stryker

Suspected pro-Iran hacker group tied to Stryker cyberattack

Tycoon 2FA phishing service disrupted in global cybercrime crackdown

Tycoon 2FA Phishing-as-a-Service Platform Disrupted in International Operation

UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours

US tech bosses say cyberattacks are a matter of concern

User vigilance is the ultimate defense against phishing, Signal cautions

What happened at Stryker? Everything you need to know about cyber attack

Who Is Behind The Cyber Attack On Cork’s Stryker? Iran-Linked Group Suspected

Who owns your Chrome extension? Researchers warn side projects are being turned into malware

Why Security Culture Metrics Matter More Than Dashboards

10th March

24% of Ransomware Victims End Up Paying Out

AI, ransomware dominate discussions among cyber insurers

AI-driven cybercrime surges as China reports 158% spike in cases

AkzoNobel Says Cyber Incident at US Location Contained After Data Breach

Albania: Parliament reacts after Iranian hacker attack

APT28 hackers deploy customized variant of Covenant open-source tool

APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military

Asahi sees profits nosedive following cyber-attack

Attackers use AiTM phishing kit, typosquatted domains to hijack AWS accounts

Australia: Authorities warn of INC Ransom impact on regional networks

Automobile Club of Southern California (ACSC) Data Breach Exposes Driver's Licenses

Banks should refund victims of phishing, says EU court adviser

Bluffton alerts citizens to new email scam impersonating the city

Cal AI, New Owner of MyFitnessPal, Hit by Alleged Breach of 3 Million Users

China-Linked Hackers Hit Qatar with Backdoor Disguised as War News

CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited

CISA shortens patch deadline for critical Ivanti, SolarWinds bugs

Cloud Attackers Now Prefer Vulnerability Exploits Over Credentials, Google Cloud Finds

Cornerstone Specialty Hospitals pays $2.35 million to settle data breach class action lawsuit

Cryptocurrency Hack Losses Fall 87% in February as Scammers Shift to Phishing

Cyber attack reported at Community College of Beaver County

Cyberattack Forces Polish Hospital to Revert to Paper-Based Operations

Cybercrime isn't just a cover for Iran's government goons - it's a key part of their operations

Cybercriminals impersonating city officials to steal permit payments, FBI says

Department of Government Efficiency (DOGE) employee stole Social Security data and put it on a thumb drive, report says

Dutch intelligence warns about phishing attacks on Signal and WhatsApp

Dutch Intelligence Warns of Russian Phishing Attacks on Signal and WhatsApp

Egypt Ministry of Finance Targeted in Hacktivist DDoS Attack

ELECQ warns of data breach after ransomware attack on EV charger cloud

Ericsson breach: voice phishing call exposed over 15,000 records

Ericsson Breach Exposes Data of 15k Employees and Customers

Ericsson data breach exposes employee and customer information

Ericsson Data Breach Exposes Third-Party Service Risks

Ericsson discloses data breach after hack of third-party service provider

Ericsson US confirms breach after third-party provider attack

Estra Automotive Hit by INC Ransomware Group Data Breach

Expanding ransomware reach intensifies sector-wide cyber exposure

Fake Claude Code Spreads Malware to Windows, macOS Users

Fake CleanMyMac Website Pushes SHub Stealer To Drain Crypto Wallet Data

Fake Government Emails Used for New Fraud Scheme: FBI Issues Warning Over Permit Fee Phishing

Fake “learning path” scam documents aim to steal Microsoft 365 credentials

Fake LinkedIn Interview Used by Lazarus Hackers to Target AllSecure CEO

FBI Phishing Alert Issued As Scammers Use Real Permit Data To Solicit Fake Fees

FBI warns of phishing scams impersonating city officials for permit fees

Finnish intelligence warns of persistent cyber espionage from Russia, China

First Priority Group Hit by Everest Ransomware Attack

FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials

Google warns about data breach on Apple iPhones

Hackers may have breached FBI wiretap network via supply chain

Hackers Pose as IT Staff in Microsoft Teams to Install Malware

Hewlett Packard Enterprise (HPE) warns of critical AOS-CX flaw allowing admin password resets

Hospital Universitario Del Valle Data Breach Exposes Medical Records

Hotel Lucerna Tijuana Data Leak Exposes Guest Information

How to keep ransomware attackers at bay

Human Resources (HR), recruiters targeted in year-long malware campaign

ID Care Data Breach Exposes Sensitive PHI and PII

Insurance giant Globe Life to settle data breach class action for $4.66 million

KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet

Lakeside Pediatrics Data Breach Exposes SSNs and Health Information

Land Bank ransomware attack: Hackers demand R5.4 million in Bitcoin

Law enforcement disrupted Tycoon 2FA phishing-as-a-service platform

Loblaw investigates data breach after identifying suspicious activity

Loblaw notifies customers of a low-level data breach

Loblaw says some customers affected by data breach

MagicSlides.App Data Breach: 2.3 Million Accounts Compromised

Malformed ZIP Files Allow Attackers to Bypass Antivirus and EDR Detection

Man who accidentally discovered DJI robot vacuum backdoor awarded $30K

Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws

More companies paying ransoms as AI-powered cyberattacks intensify

Nevada Urges Casinos Not to Underplay the Risk of Cyberattacks

Nevada’s gaming board issues cybersecurity alert

New BeatBanker Android malware poses as Starlink app to hijack devices

New ‘BlackSanta’ EDR killer spotted targeting HR departments

New KadNap botnet hijacks ASUS routers to fuel cybercrime proxy network

New 'Zombie ZIP' technique lets malware slip past security tools

NoName057(16) DDoS Attacks Cyprus Gov, EAC, and Limassol Airport

NoName057(16) DDoS Downs Bezeq, Mekorot, Kavim, E.M.I.T. Aviation

Novel A0Backdoor spread in Teams phishing operation

O. Berk Company Data Breach Exposes Sensitive Info Including SSNs

Only 24% Of organizations Test Identity Recovery Every Six Months

Pays de la Loire Mobility Observatory Suffers Data Breach

Phishing campaign spoofs local officials to steal permit fees

Phishing Scammers Impersonating City, County Officials, Demanding Payment

Prevention is the Only Cloud Security Strategy That Works

Ransomware Chaos Shuts Beaver County College During Spring Break

Ransomware dominates UK cyber incidents, data loss surges

Recently patched Ivanti EPM flaw now actively exploited

Russia hackers target Signal and WhatsApp in global phishing attack

Russia-backed hackers breach Signal, WhatsApp acounts of officials, journalists, Netherlands warns

Russian Cybercriminals Target Signal and WhatsApp Accounts of High-Value Individuals in Large-Scale Phishing Operation

Russian Hackers Target Signal and WhatsApp Accounts in Global Cyber Campaign

Russian Hackers Target WhatsApp and Signal Accounts of Global Military and Government Officials

Russian military hackers revive advanced malware to spy on Ukraine, researchers say

SafePay ransomware claims hack of Smile Team Orthodontics

Saint Lucia Citizenship by Investment Programme Data Breach

Salesforce Customer Data Targeted in Sweeping Breach Claims

SAP Releases Security Update to Patch Multiple Remote Code Execution Vulnerabilities

Scammers impersonate zoning officials in permit phishing scheme, FBI warns

Secretaria de Salud de Tamaulipas Suffers Massive Data Breach

ShinyHunters claims it's behind ongoing Salesforce Aura data theft assault, warns more attacks to come

ShinyHunters Claims Snowflake, Okta, Sony, AMD, Lastpass, and Salesforce Data Compromise via Massive Salesforce Breach

ShinyHunters Hackers Threaten 400 Firms Over Stolen Salesforce Data

ShinyHunters Targets Hundreds of Websites in New Salesforce Campaign

Signal and WhatsApp accounts targeted in phishing campaign

Signal Confirms Sophisticated Phishing Scheme Caused Account Compromises

Signal issues scam warning to users after hackers target officials

Slavia Pojistovna Data Breach Exposes 150GB of Records

South Korea: Gwangju Prosecutors Sell Recovered Bitcoin, Transfer 31.58 Billion Won

South Korea: Financial Supervisory Service (FSS) moves to sanction Seoul Guarantee Insurance over ransomware outage

South Korea Enacts Punitive Data Breach Fines

South Korean Prosecutors Liquidate $21.5 Million in Bitcoin Seized From Phishing Case

Sputnik64 Food Ecosystem Suffers Customer Data Breach

SurxRAT Android Malware Uses LLMs for Phishing and Data Theft

Team Fearless DDoS Attacks Alon, Goldtec, Amarel, and Marketing Firm

Texas Cyber Crooks Siphon Off $70.4 Million In Data Breach Hits

The people behind cyber extortion are often in their forties

Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool

ThreatDown Uncovers First Cyber Attack Abusing Deno JavaScript Runtime for Fileless Malware Delivery

Top Iranian cybercriminal on FBI most wanted list reportedly killed in US-Israeli strike

TriZetto confirms year-long hack of its network exposed records on 3.4 Million people

Tyree Oil Data Breach Exposes PHI and PII: SSN, Financial Details, and More Exposed

U.S. Critical Infrastructure Faces Growing Threat From Iran-Linked Hackers

UFCW Local 342 Data Breach Affects 56,615 Members

UK plans to shift fraud fight onto telecoms, tech companies

US Contractor Trenchant Reportedly Linked to Global iPhone Hacking Toolkit Coruna

US Suspects China Cyber Attack on FBI Network, Internal Surveillance Data Allegedly Targeted

Vietnam-Based Fraud Network Powers Large-Scale Account Signup Abuse

VIP Keylogger Malware Campaign Hides In Images To Steal Credentials At Scale

Watch out Microsoft Teams users - hackers are spreading a dangerous new phishing scam, here's what we know

WhatsApp and Signal targeted by Russian hackers in global cyber campaign

9th March

1-Click Vulnerability in ZITADEL Enables Attackers to Take Over Entire Systems

2025 was a record year for ransomware, with Qilin beating them all

AI Agents Now Utilized in Cyberattack Infrastructure Management: North Korean APTs Capitalize on This Evolution

AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos

AI Chatbots Misused! Hacker Uses Claude & ChatGPT to Leak Data of Millions in Mexico

AI Security and Forensic Accounting: Protecting Financial Systems in an Automated World

AkzoNobel Says Cyber Incident at US Location Contained After Data Breach

Alabama Hospital Recently Informed About 2024 Data Breach

Alexes Hazen MD Data Breach Affects Patients

An iPhone-hacking toolkit used by Russian spies likely came from U.S military contractor

Arab, Alabama, Hit by $430,000 Phishing Fraud

Australia, New Zealand, Tonga, Warn of Rising INC Ransom Attacks Targeting Pacific Networks

Bank Phishing Refunds Should Be Easier, Says Court of Justice EU Advisor

CAEFF Paraguay Suffers Database Leak Exposing Student Records

Cal AI App Data Breach Exposes Three Million User Records

Campaign tricks Israelis into downloading a malicious version of a popular emergency app

Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft

Cisco Catalyst SD-WAN Flaw Is Now Facing Widespread Exploitation

ClipXDaemon Malware, a Stealthy Cryptocurrency Clipboard Hijacker on Linux

Cloud attacks exploit flaws more than weak credentials

Cognizant unit TriZetto breach exposes data of 3.4 million people

Cognizant’s TriZetto Provider Solutions data breach impacted over 3.4 million patients

CommuniCare Data Breach Affects 19,885 Texans: PHI and PII Exposed

Côté Sushi Data Breach Exposes Over 1 Million Customer Records

Could Your Tire Sensors Be Used to Hack Your Car? What to Look Out For

Critical ExifTool Vulnerability Lets Malicious Images Execute Code on macOS

Critical Nginx UI Vulnerability Exposes Server Backups and Sensitive Data

Customer portal remains offline after Halifax Water data breach

Data breach hits fintech lender Figure exposing nearly 1 million accounts

Data‑Theft Tactics Drive 47% Spike in Ransom Demands

Death Threats Demanding Players Throw Matches Raise Fears of Women’s Tennis Association (WTA) Data Breach

Dutch government warns of Signal, WhatsApp account hijacking attacks

Dutch Intel Warns of Russian Hackers Hijacking Signal, WhatsApp Attacks

Ericsson Inc Data Breach Affects Over 4k: PHI and PII Exposed

Ericsson US discloses data breach after service provider hack

Ericsson US Unit Reports Data Breach Tied To Third-Party Service Provider

EU's highest court says banks should refund phishing victims

EV charger business ELECQ zapped by ransomware crooks, customer contact data stolen

Fake Claude Code install pages highlight rise of “InstallFix” attacks

Fake CleanMyMac Site Uses ClickFix Trick to Install SHub Stealer on macOS

Fake imToken Browser Extension Targets Crypto Wallet Credentials

FBI warns of phishing attacks impersonating US city, county officials

Fraudulent ChatGPT and Gemini iOS Apps Target Users In New Phishing Scheme

Ghanaian Man Pleads Guilty in U.S. Court for Romance Scams That Stole $100 Million

Global Cybercrime Network Crippled: Europol-Microsoft Operation Highlights Power of Public-Private Partnerships

Global Cybersecurity Alert as New Ransomware Attacks Target Major Companies

Hacker abusing .arpa domain to evade phishing detection

Hacker Free-for-All Over Cisco SD-WAN Flaw

Hackers claim breach of hat brand worn by Nicole Kidman and Hilary Clinton

Hackers claim leak of 141,000 Success Magazine users

Handala Cyberattack Hits Israeli Weather Stations and Cameras

Immediate Restitution for Phishing Victims Suggested by EU Court of Justice Adviser: A Landmark Legal Opinion

Infutor Data Breach Exposes 676 Million Consumer Records

Internet Infrastructure Top-Level Domain (TLD) .arpa Abused in Phishing Attacks

Iran’s MuddyWater Hackers Target US Firms with New Dindoor Backdoor

Iranian hacker group says it accessed Jerusalem surveillance cameras for years

Kensington and Chelsea Council planning systems back online after major cyber attack

Kremlin hackers attempting to compromise Signal, WhatsApp accounts globally

Land and Agricultural Development Bank of South Africa (Land Bank) tightens security after ransomware attack

Largest shopping center in the Netherlands affected by data breach

Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials

Microsoft Teams phishing targets employees with A0Backdoor malware

Microsoft Warns AI is Supercharging Cyberattacks as Hackers Automate Phishing, Malware and Reconnaissance

MrBeast-advertised calorie app Cal AI allegedly hacked: 3 million subscribers exposed

Multiple Hikvision Product Vulnerabilities Allow Attackers to Escalate Privileges

New White House cyber strategy pledges to ease regulations, ‘impose costs’ on bad actors

NGINX UI critical vulnerability enables hackers to download full system backups

No more soft play, President Trump warns in new cyber strategy

Ontario health agency vendor suffered major ransomware attack in 2025

Patriot Outpatient Data Breach Affects 1,415 Patients

Phishing Attack Targets Journalists, Takes Over Signal Accounts

Phone Scam Ring Suspect Arrested by Law Enforcement in Florida for Government Impersonation Fraud

Pro-Iranian Hacktivists Join Nation-State Groups in Targeting U.S., Israel, Others

Qilin purports breach of US electric cooperative

Ransom Demands are Up, but Payouts are Down

Ransomware attacks rise 34% as AI accelerates cybercrime

Ransomware attacks up 24% in food and agriculture industry, cyber experts advise network segmentation

Ransomware hits auto sector as hackers eye taxis and charging stations

Ransomware in 2026: Why Boardrooms Must Now Own Cyber Risk

Ransomware In 2026: Why Prevention Is Now A Board-Level Discipline, Not An IT Project

Rapikom Venezuela Suffers Data Breach

Roblox users warned: 50 million login records are up for sale on the dark web

Russia-backed hackers breach Signal, WhatsApp accounts

Russian government hackers targeting Signal and WhatsApp users, Dutch spies warn

Russian hackers crack into officials’ Signal and WhatsApp accounts

Sagent Pharmaceuticals Data Breach by Worldleaks Ransomware Group

Salt Typhoon is hacking the world’s phone and internet giants. Here’s everywhere that’s been hit

Secure Messaging App Warns ‘Government Officials and Journalists’ Had Accounts Stolen After Falling For Scam

ShinyHunters claims ongoing Salesforce Aura data theft attacks

Signal and WhatsApp users face sweeping Russian phishing push, Dutch agencies warn

Signal Confirms Phishing Attacks Targeting Accounts of Government Officials and Journalists

Signal Confirms Targeted Phishing Attacks Resulting in Account Takeovers

South Africa: Finance Minister Confirms Ransomware Attack on Land Bank, R5.4 Million Ransom Refused

South Africa: Ransomware attack on Land Bank - Hackers demand R5.4 million

Stopping ransomware disruption with better planning

Texas Governor orders cybersecurity audit of Chinese medical devices over data breach risks

Threat Actor Exploits Flaws and Uses Elastic Cloud SIEM to Manage Stolen Data

Transport for London cyber attack impacted about 10 million commuters

TriZetto data breach: health tech giant reveals personal info of 3.4 million users may have been affected

TriZetto Provider Solutions Breach Hits 3.4 Million Patients

True scale of Transport for London (TfL) cyber attack emerges: What happened, who was responsible, and how many people were impacted?

Trump Administration Unveils New Cyber Strategy for America

Two charged in phishing scam involving alleged Toronto police impersonators

Tycoon 2FA phishing service disrupted in major sting

U.S. telecom Brightspeed faces multiple lawsuits over January data breach

UK Launches New Crackdown Unit to Tackle Cyber-Fraud at the Source

UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device

University of St. Thomas Data Breach: 1.8TB Stolen

Velvet Tempest uses ClickFix for DonutLoader and CastleRAT deployment

We’ve seen ransomware cost American lives. Here’s what it will actually take to stop it

Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure

White House floats Victims Restoration Program for millions affected by cyber fraud

WordPress plugin flaw exposes 60,000 plus sites to hacker attacks

Yantai International Cooperation Alleged Data Leak