Data Breaches Digest - Week 3 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 12th January and 18th January 2026.

12th January

Attackers claim PayPal credential leak, but researchers doubt the data’s useful

BLACKSTORE Data Breach Exposes Over 100k Customer Records

Californian privacy regulator fines two marketing firms for selling health information

Canopy Health Confirms Cyberattack, Patients Not Notified for Six Months

Downtime pushes resilience planning into security operations

EU’s Chat Control could put government monitoring inside robots

Here’s the truth about Instagram Data Breach 2026

Instagram denied claims of a data breach and assured that it's a bug that has been fixed

Instagram Denies Data Breach After Password Reset Emails, 6.2 Million Accounts Added to Have I Been Pwned (HIBP)

Instagram Denies Data Breach as Password Reset Emails Panic Users

Instagram denies data breach reports, says user accounts are secure

Instagram Refutes Data Breach Claims, Confirms User Accounts Remain Safe

Kyowon group investigates ransomware attack amid possible data leak

Kyowon Group Investigates Ransomware Attack, Potential Data Leak

Kyowon Group shuts down internal network after suspected ransomware attack

Manchester United captain’s X account hacked, club asks fans not to interact

Massive 2025 Data Breach Leaks 184 Million Passwords, What It Means and How to Stay Safe

Max severity Ni8mare flaw impacts nearly 60,000 n8n instances

Meta denies Instagram data breach claims, says password reset issue is fixed

Meta denies viral claims about data breach affecting 17.5 million Instagram users, but change your password anyway

New Zealand: Another health provider hacked - but took six months to let patients know

New Zealand: News of a second healthcare data breach emerges - six months after the fact

New Zealand: Second health provider, Canopy Health, hit in major cyber attack

“Nissan has 5 days before we leak their data,” attackers threaten

Oman Football Association Allegedly Breached in Ransomware Incident

OSSE San Juan Data Breach Exposes Government Utility Records

Researchers Uncover Service Providers Fueling Industrial-Scale Pig Butchering Fraud

Reset your Instagram Password Email: All you need to know about New Phishing Attack

'Serious cyber attack' at Nuneaton school latest as impact of hackers revealed

South Korea: Fair Trade Commission (FTC) chief says business suspension of Coupang possible amid data-breach probe

South Korea: Financial firms warn mandatory voice phishing compensation could backfire

Spanish energy giant Endesa discloses data breach affecting customers

Telegram built-in proxy exposes real IPs using single-click flaw, researchers warn

Data-Leaking Ransomware Report - 2025

Welcome to last year's Annual DLR Report, an exclusive presentation of Data-Leaking Ransomware Operator's Global, UK and US Victims that were claimed between 1st January and 31st December 2025.

DBD discovered and researched 7874 Global Ransomware Victims over 143 Countries and Islands, including 4062 US Ransomware Victims over 51 States and Districts, claimed by 132 Data-Leaking Ransomware Operators in 2025.

DBD also discovered and researched 67 New Active Ransomware Operators in 2025, further details of which can be found in our PRiSM application.

Download PDF



Data Source: Data Breaches Digest.

Ransomware Operator Claims - Week 1 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 29th December 2025 and 4th January 2026, kindly assisted by our partners.

DBD discovered and researched 100 Ransomware Victims over 25 Countries and Islands claimed by 23 Data-Leaking Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 2 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 5th January and 11th January 2026.

11th January

17.5 million Instagram accounts exposed in major data breach

Apex Legends maker warns players about hacker trying to take control of characters

California bans data broker reselling health data of millions

Change Your Password: Data Breach May Have Impacted 17.5 Million Instagram Users

Europol Raids Disrupt Black Axe Cybercrime Ring in Spain

Generative AI in Enterprises: Security Risks Most Companies Are Not Measuring

Getting Unwanted Instagram Password Reset Emails? Don't Click Those Links

Health Portal Users Anxious As ManageMyHealth Data Breach Unfolds

Instagram addresses data breach claims after millions reportedly impacted by password reset emails

Instagram Data Breach: Were 17 Million Accounts Exposed? Meta Assures 'Accounts Remain Secure'

Instagram Data Breach Alert: Are Millions of Users’ Accounts at Risk Right Now?

Instagram Data Breach Alert: Details of 17.5 Million Accounts Allegedly Leaked

Instagram Data Breach Exposes 17 Million Accounts Worldwide

Instagram Data Breach Exposes 17 Million Accounts Worldwide - Reset Your Password Immediately

Instagram Data Breach Hits 17.5 Million Accounts - Reset Password Now!

Instagram data breach scare: Over 17 million users hit by sudden and unexpected password reset emails. What should you do now?

Instagram denies breach amid claims of 17 million account data leak

Instagram denies data breach after password reset emails spark leak claims

Instagram “Reset your Password” Email: Is there a Data Breach at Meta?

Instagram says accounts 'are secure' after wave of suspicious password reset requests

Instagram Says There Was No Data Breach Over the Weekend

Instagram says there’s been ‘no breach’ despite password reset requests

Instagram Users Alarmed as Password Reset Emails Surge Worldwide

Instagram’s “17 Million User Data Leak” Was Just Scraped Records from 2022

Major Instagram data breach: Did 17.5 million accounts just get exposed?

Manage My Health starts notifying affected practices after major cyber breach

Massive Instagram data breach exposes 17.5 million users

Massive Instagram data breach exposes personal info of over 17 Million users

Massive Instagram data breach leaks info of over 17 million users

Meta denies data breach of 17.5 million users; asks users to ignore password reset emails

Meta Denies Instagram Data Breach: Blames “Bug” for Mass Password Reset Emails

Meta Denies Instagram Data Breach, Says 17 Million Accounts Remain Secure

Millions Flooded with Fake Reset Emails After Massive Instagram Data Breach

New Data Breach at Meta Reveals Sensitive Information for Millions of Instagram Users

Over 17.5 million Instagram users’ personal data for sale on dark web

Personal information of 17.5 million people leaked from Instagram onto the dark web

Ransomware attack on Manage My Health portal breaches 86,000 patient records

Ransomware Attacks Surge 47% in 2025 Despite Takedowns

Reports of massive data breach on Instagram, suspicions of exposure of personal information of over 17 million users

This is why you received a password reset email from Instagram

Why did Instagram send password reset emails to users? Meta platform issues BIG statement amid data breach claims

10th January

17.5 Million Instagram Accounts Compromised in Major Dark Web Leak

17.5 Million Instagram Users Exposed Following Massive Global API Leak

17.5 million Instagram users may be impacted in 'significant' data breach

A massive breach exposed data of 17.5M Instagram users

An Instagram data breach reportedly exposed the personal info of 17.5 million users

Another Meta data breach exposes sensitive information of millions of Instagram users

BreachForums Hack: Hackers Expose All User Records from Popular Dark Web Forum

BreachForums hacking forum database leaked, exposing 324,000 accounts

CISA Urges Emergency Patching for Actively Exploited HPE OneView Flaw

City of Midway confirms ransomware breach involving police records system

Coupang customers face a surge in phishing attempts after a major data breach

Covenant Health data breach affects nearly 500,000 patients

Cyber incidents cost firms up to $5m and can take weeks to recover from

Database of 323,986 BreachForums Users Leaked as Admin Disputes Scope

Europol Arrests 34 Black Axe Members in Spain Over €5.9M Fraud and Organized Crime

Europol‑Backed Operation Leads to 34 Arrests in Black Axe Crime Network Bust

Illinois Department of Human Services (IDHS) suffered a data breach that impacted 700K individuals

Inside Immigration and Customs Enforcement’s surveillance arsenal - and the hackers resisting it

Instagram again under scrutiny: leaked data of 17.5 million users, including phone numbers and email addresses

Instagram Data Breach Exposes Millions To Cyber Threats

Instagram data leak: 17.5 million users affected

Instagram Data Leak Exposes Sensitive Info of 17.5 Million Accounts

Instagram users warned over suspicious password reset emails

Kensington and Chelsea Council doesn’t expect systems to be fully operational until the summer after cyber attack

Kentucky Launches Mobile ID App as State Expands Digital Identity and Age Verification Efforts

Malwarebytes warns of Instagram data breach impacting 17.5 million users

ManageMyHealth data breach: 86,000 Northland patients affected

ManageMyHealth patients affected by cyber attack fear missing records, fallout from hack

Massive data breach impacts 17.5 million Instagram accounts

Massive Instagram data breach: Millions of numbers & emails leaked

Massive Instagram Data Breach Exposes Personal Details of 17.5 Million Users

Massive Instagram Data Breach Triggers Phishing‑Laced Password Reset Emails Across the U.S.

MuddyWater Launches RustyWater RAT via Spear-Phishing Across Middle East Sectors

North Korea–linked APT Kimsuky behind quishing attacks, FBI warns

Personal medical data possibly exposed in Healthcare Interactive, Inc. data breach

Phishing Campaign Uses Maduro Arrest Story to Deliver Backdoor Malware

Phishing Emails Mimic Internal Comms via Microsoft 365 Spoofing

Phishing texts impersonate the North Platte Nebraska Hospital Corporation

Spain arrests 34 suspects linked to Black Axe cyber crime

Telcos see surge in ransomware and espionage in 2025

Telecom networks face surge in ransomware and espionage attacks in 2025

Top 10 Ransomware Attacks Through 2026: The Most Expensive Mistakes (and the Defenses That Work)

Urgent Data Breach Alert Sent to 377,082 Americans As Gas Station Chain Says Names, Social Security Numbers and Other Personal Information at Risk

Urgent warning as 17.5 million Instagram accounts exposed in leak & users targeted by surge in ‘password reset’ attacks

9th January

$15 Billion Pig Butchering Scam Boss Chen Zhi Extradited to China

88.5 Percent of Phishing Attacks Target Online Account Credentials

21,000 SIM Cards, Fake KYCs and Phishing Scams: Central Bureau of Investigation (CBI) Arrests Vodafone Idea's Area Sales Manager

377,000 Impacted by Data Breach at Texas Gas Station Firm

Aisuru and Kimwolf Botnets Operational Mechanics: Uncovering the Beneficiaries

Are Hacktivists Going Out of Business? Or Just Out of Style

Armenia Government Mailings Database Allegedly Breached and Up for Sale

At least $26 million in crypto stolen from Truebit platform as crypto crime landscape evolves

Attackers Use Over 240 Exploits Ahead of Ransomware Attacks

Aurora College says classes will resume on January 12th following a cyber attack

Avoid the Ragebait. Phishing Emails Exploit Anger Over Immigration and Customs Enforcement (ICE) to Trick Users

Basketball player arrested for alleged ransomware ties freed in Russia-France prisoner swap

Billions of Chrome users at risk: Google confirms another zero-day vulnerability

China-Linked Hackers Exploit VMware ESXi Zero-Days to Escape Virtual Machines

China-Nexus Espionage APT UAT-7290 Targets Telecom Infrastructure in South Asia, Expands to Southeastern Europe

CISA Retires 10 Emergency Cybersecurity Directives Issued Between 2019 and 2024

Coupang customers on alert over phishing attempts after data breach

Coupang founder apologises for customer data breach

Criticism of Manage My Health cyber attack response mounts as another deadline passes

Cyber Incident Forces Australian Insurer Prosura to Shut Down Key Systems

Deepfake Face-Swapping Tools Are Creating Critical Security Risks

Dermatology Associates Data Breach Exposes Protected Health Information

Dollar Financial Group Money Mart Data Breach Exposes Social Security Numbers

Europol Leads Global Crackdown on Black Axe Cybercrime Gang, 34 Arrested

Fake Fortinet Sites Steal VPN Credentials in Sophisticated Phishing Attack

FBI Warns North Korean Hackers Using Malicious QR Codes in Spear-Phishing

FBI Warns of North Korean QR Phishing Campaigns

Flare uncovers phishing campaigns scamming Canadians with fake toll and parking violation texts

Fog Ransomware Attacking US Organizations Leveraging Compromised VPN Credentials

Fog Ransomware Targets U.S. Organizations via Compromised VPN Credentials

France frees alleged Russian hacker wanted by US for crypto ransom attacks

Gulshan Management Services Data Breach After Successful Email Phishing Attack

Hacker Behind Wired.com Leak Now Selling Full 40 Million Condé Nast Records

Hackers target misconfigured proxies to access paid LLM services

Hale Makua Health Services falls victim to Qilin Ransomware

How AI agents are turning security inside-out

Illinois Department of Human Services data breach affects 700K people

Illinois Man Charged for Snapchat Social Engineering Scheme Exposing Intimate Images of Hundreds of Women

Illinois man charged with hacking Snapchat accounts to steal nude photos

India Under Cyber Attack: Evasive Panda Spies Through Fake App Updates, Steals Data for Years

Inman city officials confirm cyber attack

Jaguar Land Rover Cyberattack: Q3 Wholesales Down 43%

Kasetsart University Campus Server Breached, Agricultural Data Leaked

Kensington and Chelsea Council Warns Residents Following Serious Data Breach

Kensington and Chelsea cyber attack: How each service was affected, next steps and recovery timeline

Kimsuky Spearphishing Campaign Targets U.S. with Malicious QR Codes (Quishing), FBI Warns

Leaking of personal details a concern for victim of Manage My Health breach

Leiden University suffers data breach

London council cyber attack exposes personal data and highlights risks of shared public-sector IT

Lynx Ransomware Group Breaches Spanish Transport Firm Grupo Ruiz

Lynx ransomware group claims Regis subsidiary on dark web leak site

MAESTRO Toolkit Exploiting VMware VM Escape Vulnerabilities

Major US Utilities Affected by 130GB Data Breach After Pickett Attack

ManageMyHealth breach victims warned to beware of bank account theft

Med Atlantic Data Breach Exposes Social Security Numbers & Health Information

“Militant pro-trans organization” hacks UK Free Speech Union and exposes its backers

North Korean Hackers Use Phony QR Codes in Phishing Attacks on US Orgs, FBI Warns

North Korean hackers using malicious QR codes in spear phishing, FBI warns

North Korean Kimsuky Threat Actors Use Malicious QR Codes to Target Foreign Policy Experts

North Korean Spear-Phishing Attacks Use Malicious QR Codes

Paris à Coeur Ouvert Data Breach Exposes Contributor Info

Pediatric Dentistry of Oklahoma Data Breach Exposes Patients Social Security Numbers

Pornhub data breach exposes millions of users’ records used for extortion

Prosura attackers put insurer's customer data up for sale

Public exploit just put Cisco’s identity systems on edge

Putinswap: France trades alleged ransomware crook for conflict researcher

Qilin ransomware gang alleges cyberattack against Cressi

QR codes a powerful new phishing weapon in hands of Pyongyang cyberspies

Radware Discloses ZombieAgent Technique to Compromise AI Agents

Ransomware growth undeterred by crackdowns, report finds

Ransomware hits on logistics double in 2025

Rmoney India Data Breach Exposes 1.5GB of Customer and KYC Data

Russian APT28 Runs Credential-Stealing Campaign Targeting Energy and Policy Organizations

Security teams are paying more attention to the energy cost of detection

Settlement Resolves Data Breach Litigation Against Falcon Healthcare-Interim Healthcare of Lubbock Texas

Shock to global cyber ecosystem as US exits 66 international bodies

SIM sale scam: Central Bureau of Investigation (CBI) nabs Vodafone area sales manager; 21,000 cards used for phishing scams

Snapchat hacker stole hundreds of nude images, FBI seeking victims

Software supply chain threats are finally on the OWASP Top 10

Takedowns and arrests didn't slow down ransomware in 2025

Telecom sector faced immense pressure from ransomware groups in 2025

Telecom sector sees steady rise in ransomware attacks

The Role of Initial Access Markets in Ransomware Campaigns Targeting Australia and New Zealand

Threat Actors Attacking Systems with 240+ Exploits Before Ransomware Deployment

Trend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows Versions

Trend Micro warns of critical Apex Central RCE vulnerability

Use of XMRig Cryptominer by Threat Actors Expanding

Valley Eye Associates Data Breach Exposes Protected Health Information

Warren County, New York, Recoups Payment in Phishing Probe

What Is Penetration Testing: Tools, Process, and Importance

White supremacist dating site data breach shows when cyber risk becomes uninsurable

Why AI-Powered Cyber Defense Is No Longer Optional for Modern Businesses

Wi-Fi evolution tightens focus on access control

Years online, but no safeguards: How Illinois exposed 700,000 health records

8th January

17-year-old PowerPoint flaw still actively exploited by attackers, CISA warns

APT28 Hackers Launch Global Phishing Campaign Across Europe, Americas, and Asia

ASML compromise falsely claimed by refuted NordVPN hacker

Astaroth Banking Trojan Targets Brazilians via WhatsApp Messages

Australia: Queensland doctor’s office allegedly hacked by brutal ransomware gang

Australian Insurer Prosura Confirms Cyber Incident, Takes Online Services Offline Amid Investigation

Australian insurer Prosura investigating cyber attack

Black Shrantac Ransomware Strikes Peru Water Authority and Schneider

Bosch Choice Welfare Benefit Plan reports data breach affecting 55,000 members

California Privacy Protection Agency (CPPA) fines data broker selling lists of Alzheimer's patients

China-Linked UAT-7290 Targets Telecom Networks in South Asia

China-Linked UAT-7290 Targets Telecoms with Linux Malware and ORB Nodes

Chinese hackers breach emails of US congress staffers

Chinese hacking group breaches email accounts of US House committee staff

Chinese Hacking Group Salt Typhoon Hacks US House Staff Emails

Chrome hits scammers with rate limiting for push notifications

CISA retires 10 emergency cyber orders in rare bulk closure

CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited

CISA sunsets 10 emergency directives thanks to evolution of exploited vulnerabilities catalog

CISA tags max severity HPE OneView flaw as actively exploited

CISA Warns of Attacks on PowerPoint and HPE Vulnerabilities

Cisco Patches ISE Security Vulnerability After Public Proof-of-Concept (PoC) Exploit Release

Cisco warns of Identity Service Engine flaw with exploit code

Conduent data breach impact expands as Texas filing shows nearly 14.8 million affected

Congressional staff emails hacked as part of Salt Typhoon campaign

Coolify Discloses 11 Critical Flaws Enabling Full Server Compromise on Self-Hosted Instances

Covenant Health data breach affects nearly 500,000 patients

Critics pan spyware maker NSO’s transparency claims amid its push to enter US market

Cyber attack hit car volumes at Jaguar Land Rover (JLR) by 43% in Q4

Cyberattack hits Jaguar Land Rover’s sales numbers hard

Cyberattack spree hits Korean universities, hospitals

Cybercriminals are scaling phishing attacks with ready-made kits

Data stolen in Kensington and Chelsea council cyber attack

Data stolen in London council cyber attack

Discord Controlled NodeCordRAT Steals Chrome Data via NPM Packages

Fake Browser Updates Target WordPress Administrators via ‘Modern Recent Posts’ Plugin

Fake ChatGPT and DeepSeek Extensions Spied on Over 1 Million Chrome Users

FBI warns about Kimsuky hackers using QR codes to phish U.S. orgs

Fifth of Breaches Take Two Weeks to Recover From

France Swaps Alleged Ransomware Operator for Jailed French Academic in Russia

GoBruteforcer Botnet Evolves with AI-Driven Tactics, Targets Linux Servers

GoBruteforcer Botnet Targets Linux Servers

Hackers abuse Google Cloud to send trusted phishing emails

Hackers Spoof Office 365 Domains to Launch Stealthy Internal Phishing Attacks

Healthcare systems face mounting risk from CrazyHunter ransomware

How the US shut down power in Caracas, and what it signals for the future of cyber warfare

HTML tables facilitate clandestine QR code phishing

IBM Bob Prompt Injection Vulnerability: Researchers Could Bypass the AI Agent’s Security Measures

Internal domain phishing increasingly fueled by misconfiguration, complex routing exploits

Iran-linked hacker group claims to have hacked, surveiled senior Mossad agent

Is Email the Entry Point to a Well-Rounded Disinformation Attack?

Italian diving legend Cressi hit by cyberattack, claim Russian hackers

Kaspersky Warns of Growing Ransomware and App Based Threats in Retail Sector

Manufacturing industry blocks ransomware attempts, adversaries shift to data theft

Marks & Spencer cheers 'record' Christmas but fashion sales slump after cyber attack

Marks & Spencer (M&S) Christmas food sales soar but clothing suffers from cyber-attack fallout

Marks & Spencer (M&S) counts the cost of the "long tail" of cyber attack at Christmas

Maximum Severity “Ni8mare” Bug Lets Hackers Hijack n8n Servers

Microsoft Warns of Rising Phishing-as-a-service (PhaaS) Attacks in 365 Environments

Moody’s forecasts growing AI threats, regulatory friction for 2026

More than 100,000 households warned after cyber attack on Kensington and Chelsea Council

n8n Users Urged to Patch CVSS 10.0 Full System Takeover Vulnerability

Nascent CrazyHunter ransomware takes aim at healthcare

New China-linked hackers breach telcos using edge device exploits

New Malware Campaign Targeting Hospitality Sector

New n8n Vulnerability (CVE-2026-21858) Allows Unauthenticated File Access and RCE

New Phishing Attack Impersonates DocuSign to Deploy Stealthy Malware on Windows Systems

New Zealand patient data stolen in Manage My Health breach

New Zero-Click Attack Lets ChatGPT User Steal Data

NordVPN Refutes Hacker Claims of Internal Network Compromise

October 2025 Healthcare Data Breach Report

Patients fret as ManageMyHealth data breach drama plays out

pcTattletale Founder Bryan Fleming Pleads Guilty in Federal Stalkerware Case

Phishing Attacks Exploit Misconfigured Email Routing Settings to Target Microsoft 365 Users

Phishing from Within: Microsoft’s Urgent Alert on Email Routing Flaws

Phishing kits dominated major attacks in 2025

Phishing kits soared in popularity last year as rookie hackers ramped up DIY cyber attacks

Proof-of-Concept (PoC) released for unauthenticated RCE in Trend Micro Apex Central (CVE-2025-69258)

Proofpoint warns of surge in Microsoft device code phishing

Pulse Urgent Care Suffers Security Breach, Personal Data Compromised

Qilin Ransomware Hits Telstar-Hommel, Cressi, and PTS Goldkist

QR Code Phishing via HTML: New Attack Vector Emerges

Ransomware attacks kept climbing in 2025 as gangs refused to stay dead

Ransomware Recovery Firms Share in the Hacking Spoils

Recently fixed HPE OneView flaw is being exploited (CVE-2025-37164)

Regis Resources Cyber Attack: Mining Industry Security Breach Analysis

Researchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed Packages

Russia frees French researcher in prisoner swap for alleged ransomware hacker

Security Experts Dire Warning on AI Agents in 2026

Sedgwick breach linked to TridentLocker ransomware attack

See You in the Afterlife: The Journey of Stolen Data After Phishing Attacks

Suspected Cyber Scam Kingpin and Head of ‘Prince Group’ Chen Zhi, Arrested in Cambodia and Extradited to China

Telecom firms faced constant cyber threats in 2025

Texas court blocks Samsung from tracking TV viewing, then vacates order

The number of phishing kits doubled in 2025, bringing stealth, innovation and the same old themes

The Ransomware Ground Game: How A Christmas Scanning Campaign Will Fuel 2026 Attacks

The Ransomware Payment Ban: A Well-Intentioned Distraction?

Thousands have personal data stolen in cyber attack on London council

TMX Finance Settlement Reaches $42 Million Over Data Breach

Trump Orders US Exit from Global Cyber and Hybrid Threat Coalitions

UK: Cyber-Attack School Extends Closure To At Least Monday

UK Moves to Close Public Sector Cyber Gaps With Government Cyber Action Plan

UK sets aside £210 Million to improve cyber security in public services

Universidad Nacional Autónoma de México (UNAM) Contains Cyberattack, Confirms No Data Breach

US cyber attack on Venezuela exposes Critical National Infrastructure (CNI) vulnerabilities

US Man Jailed After FBI Traced 1,100 IP Addresses in Cyberstalking Case

US To Leave Global Forum on Cyber Expertise

Victorian Catholic college suffers alleged cyber attack

VMware ESXi zero-days likely exploited a year before disclosure

Voice cloning defenses are easier to undo than expected

Watch out! This fake Windows BSOD is a trap

WhatsApp Worm Spreads Astaroth Banking Trojan Across Brazil via Contact Auto-Messaging

Why Ledger's Latest Data Breach Exposes the Hidden Risks of Third-Party Dependencies

Your domain, their bait: Microsoft warns businesses on internal email phishing loopholes

7th January

900,000 Users Hit as Malicious Chrome Extensions Steal ChatGPT, DeepSeek Chats

Aforeserve Data Breach Exposes Customer Support and Device Records

AI-driven shopping and privacy risks: What retail and e-commerce should prepare for in 2026

Alleged cyber scam kingpin arrested, extradited to China

ASML Alleged Data Leak: 154 Databases Published Online

Australia: Insurer Prosura hit by cyber data breach, customers contacted by 'threat actor'

Banking phishing drove 23% of employee clicks

Barracuda report finds phishing kits doubled in 2025 as attacks grew more evasive

BD Morning Data Breach Exposes User and Admin Records

Black Cat Behind SEO Poisoning Malware Campaign Targeting Popular Software Searches

Black Cat Hacker Group resurfaces with Fake Notepad++ Sites to Install Malware and Steal Data

Black Cat Hacker Group Uses Fake Notepad++ Websites to Distribute Malware and Steal Data

Canadian Fugitive Arrested in Spain in Connection With Massive Desjardins Data Breach

China intensifies Cyber-Attacks on Taiwan as Energy Sector Sees Tenfold Spike

Chrome “WebView” Vulnerability Allows Hackers to Bypass Security Restrictions

Complex Routing, Misconfigurations Exploited for Domain Spoofing in Phishing Attacks

Conduent Business Services Data Breach Victim Count Swells to More Than 14.7 Million

Coupang to Compensate 33.7 Million Customers ₩1.685 Trillion After Data Breach

CrazyHunter Ransomware Attacking Healthcare Sector with Advanced Evasion Techniques

Crimson Collective Claims to Disconnect Brightspeed Internet Users After Hack

Critical jsPDF flaw lets hackers steal secrets via generated PDFs

Critical macOS Flaw Lets Attackers Bypass Apple Privacy Controls Without Consent

Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control

Critical RCE Vulnerability in Legacy D-Link DSL Router Models Requires Device Replacement

Crypto Hardware Wallet Maker Ledger Impacted by Third-Party Data Breach

Cyber hygiene tips to cut ransomware risk in 2026

Cyberattack forces British high school to cancel classes and delay reopening

Cybercrooks find a simple trick to bypass malicious QR code detection - HTML tables

Cybersecurity still fails at the click

Cyble’s Transport & Logistics Threat Landscape Report 2025: Ransomware Attacks more than Double, Disrupting Global Supply Chains

European Space Agency (ESA) calls cops as criminals lift off 500 GB of files, say security black hole still open

Fake Booking.com emails and BSODs used to infect hospitality staff

Founder of pcTattletale Spyware App Pleads Guilty in Federal Stalkerware Case

Free ‘ClickFix Hunter’ Tool Tracks Growing Social Engineering Epidemic

Futurize Sistemas Data Breach Exposes Over 1 Million Records

Gen AI data violations more than double

Ghost Tap Malware Fuels Surge in Remote NFC Payment Fraud

Gnavi Data Breach Exposes Over 600k Records and Manager Data

Google Cloud Service Exploited in New Phishing Campaign

Google Patches High-Severity Chrome WebView Flaw CVE-2026-0628 in the Tag Component

Hacker claims Condé Nast breach, threatens release of data from 2.3 million WIRED subscribers

Hacker offering US engineering firm data online after alleged breach

Hackers abuse Google Cloud to send trusted phishing emails

Hackers Claim to Disconnect Brightspeed Customers After Breach

Hackers Create Fake DocuSign Login Page to Steal User Credentials

Hackers Exploit Routing Misconfigurations to Successfully Spoof Organizations

Hackers Exploited Routing Scenarios and Misconfigurtions to Effectively Spoof Organizations

Hackers Using Malicious Imageless QR Codes to Render Phishing Attack Via HTML Table

Hackers Using Malicious QR Codes for Phishing via HTML Table

Hauken Engineering Hong Kong Alleged Data Breach Exposes 106k Records

Hawaii Issues Warning of ‘Potential Phishing Campaign’

Identity security planning for 2026 is shifting under pressure

Illinois Human Services data breach exposes health information of more than 700,000 residents

Illinois state agency exposed personal data of 700,000 people

Imperial Beach Clinic Discloses Data Breach to California Residents

Infostealers and Lack of MFA Led to Dozens of Major Breaches

Inside the Chip: Rethinking Cybersecurity from the Ground Up

Inside the Fake Parcel Scam: How Bulk SMS Phishing Targeted Victims Across India

Jaguar Land Rover sales collapse in wake of cyber attack

Keio University: Apology and Notice Concerning Unauthorized Access Incident and Possible Personal Data Breach

Ledger Confirms Data Breach Through Service Provider, Customer Information Stolen

Ledger Data Breach: Global-e Hack Exposes Customer Info

Ledger Data Breach Exposes Customer Details, Sparks Phishing and Security Fears

LockBit 5.0 Emerges with New Sophisticated Encryption and Anti-Analysis Tactics

London council warns 100,000 households' personal details could have been stolen in cyber attack

Lone Hacker Used Infostealers to Access Data at 50 Global Companies

Major Australian gold producer confirms cyber attack

Major Data Breach Hits Company Operating 150 Gas Stations in the US

Malicious Chrome Extension Steal ChatGPT and DeepSeek Conversations from 900K Users

ManageMyHealth issues update on patient data breach

Max severity Ni8mare flaw lets hackers hijack n8n servers

MFA Failure Enables Infostealer Breach At 50 Enterprises

Microsoft leads phishing impersonation rankings in Q4

Microsoft Warns Misconfigured Email Routing Can Enable Internal Domain Phishing

Microsoft warns of a surge in phishing attacks exploiting email routing gaps

Ministry of Science and ICT warns Korea institutions after hacking forum data breach

Misconfigured email routing enables internal-spoofed phishing

Morgan Records Management Breach: Everest Group Claims 52GB Exfiltration

n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions

New GoBruteforcer attack wave targets crypto, blockchain projects

New Veeam vulnerabilities expose backup servers to RCE attacks

New WordPress domain renewal phishing campaign uncovered

NordVPN data breach scammer claims chip parts maker ASML, gets caught lying again

Number of phishing attacks doubles in one year

Nuneaton school reopening delayed to next week after cyber attack

OKX Wallet Warns of New Phishing Scam Targeting Solana Users

One Hacker, 50 Organizations And All Because MFA Wasn’t Enabled

Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers

Options Community Services Society Hit by Lynx Ransomware

ownCloud urges users to enable MFA after credential theft reports

Owner of Stalkerware Maker pcTattletale Pleads Guilty to Hacking

Pell City School System data breached by cyber attack

Personal LLM Accounts Drive Shadow AI Data Leak Risks

Phishing Kits Doubled as Cyber-crime Scaled in 2025

Phishing scam hits Texarkana Planning and Zoning applicants

Phishing-as-a-service kits doubled in 2025 as tactics evolve

Pink Power Ranger Hacker Deletes White Supremacist Dating Site Live

Prosura & VroomVroomVroom Data Breach: Customer Data for Sale

Ransomware Hits a Claims Giant: What the Sedgwick Breach Reveals About Modern Extortion Attacks

Rebuilding Digital Trust in the Age of Deepfakes

SafePay ransomware zeroes in on smaller firms

Saint Petersburg State University of Economics Data Breach Exposes 80k Records

School Shuts Down For Days After Cyber-Attack

Sedgwick Acknowledges Data Breach After TridentLocker Ransomware Claim

Sedgwick Acknowledges Data Breach Linked to TridentLocker Ransomware Attack

Senior living, healthcare ransomware attack impact increased to almost 480,000 people

Spanish airline Iberia attributes recent data breach claims to November incident

Stalkerware operator pleads guilty in rare prosecution

Storm-0249 hijacks security tools to fuel ransomware

Surge in Malicious QR Codes Sparks New Phishing Threat

Telecommunications Sector Sees a Four-fold Jump in Ransomware Attacks in last 4 Years

The Shift Left of Boom: Making Cyberthreat Prevention Practical Again

The State of Ransomware in the U.S.: Report and Statistics 2025

This phishing campaign spoofs internal messages - here's what we know

Two American Cyber Experts Plead Guilty to Targeting Multiple U.S. Victims Using Ransomware

UK announces grand plan to secure online public services

UK announces plan to strengthen public sector cyber defenses

UK Government Admits Flaws in Cyber Resilience Strategy, Overhauls Cyber Policy with New Action Plan

UK Launches £210 Million Cyber Action Plan

UK school shuts for days after cyber-attack disables IT systems

Unpatched TOTOLINK EX200 Flaw Enables Root-Level Telnet Access

Used Booking.com lately? You might have accidentally installed malware

Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication

Veeam patches three RCE flaws in backup systems, one critical

Versatile Malware Loader pkr_mtsi Delivers Diverse Payloads

Watch out for this fake Windows BSOD - it's actually malware

What European security teams are struggling to operationalize

When AI agents interact, risk can emerge without warning

When workflows go rogue: critical n8n vulnerability opens door to system commands

Who Are The Hackers Behind Manage My Health’s Cyber Attack?

Why Legitimate Bot Traffic Is a Growing Security Blind Spot

6th January

Aarong Data Breach Exposes 3.5 Million Customer Records

American Trust Data Breach Affects 886 in Texas

As Ransomware Attacks Surge, Healthcare Must Look Beyond Compliance to Establish a Cyber Risk Mindset

Attackers claim 1 Million+ customer records stolen from top US internet provider

Bitfinex Hack Mastermind Behind $10 Billion Theft Gets Early Release

Bolttech purportedly hacked by Everest ransomware gang

Check your inbox: These companies were the most impersonated in phishing attacks in 2025

Christmas Phishing Surge Chains Docusign Spoofing with Identity Theft Questionnaires

ClickFix campaign sets sight on European hospitality sector

Covenant Health Data Breach: 478K Patients Impacted

Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers

Critical n8n Vulnerability Allows Arbitrary Command Execution (CVE-2025-68668)

Critical New Vulnerability in Automation Platform n8n Allows Arbitrary Command Execution

Crypto wallet shop Ledger confirms customer data lifted in Global-e snafu

Denton County MHMR Center Data Breach Affects 109,000 Patients

Desjardins data breach: Quebec suspect arrested in Spain

Disney fined $10 Million for tracking children under 13 online

Dozens of Global Companies in Aviation, Defense, Engineering, and More Breached via Infostealer Credentials

Drastic Drop in Crypto Phishing Losses in 2025, Attacks on ‘Whales’ Declining?

Dublin Medical Center Data Breach in Exposes Patient Records

Elite Auto Data Breach Exposes 1 Million Customer Records

EU proposal could reduce Europeans’ control over personal data

European Space Agency discloses major cyber attack on external servers

Exploited vulnerabilities accelerated in 2025, CISA Known Exploited Vulnerability (KEV) catalog shows

Fake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRat

Fake Google Support Phishing Scam Targets User Login Details

Fake WordPress Domain Renewal Email Targeting Admins to Steal Credit Card Data

First Federal of Pascagoula Moss Point Discloses Data Breach from Feb 2025

Flare Researchers Analyze SafePay Ransomware Leak Data

Founder of spyware maker pcTattletale pleads guilty to hacking and advertising surveillance software

From deepfake bosses to perfect emails: Scams SMEs must watch for in 2026

Fugitive wanted in connection with Desjardins data breach arrested in Spain

Gulshan Management Services Data Breach Affects 128k Texans Exposing Social Security Numbers

Hacker dressed as Power Ranger wipes white supremacist websites live on stage in stunning takedown

Hacker Steals $27.3 Million Using Multi-Signature Wallet

Hackers Demand Ransom After Major New Zealand Health Data Breach

Hacktivist Exposes and Deletes White Supremacist Websites Live at Conference

Health care data breach affects over 600,000 patients, Illinois agency says

High-Severity Flaw in Open WebUI Affects AI Connections

Higham Lane School Cyberattack Disrupts IT Systems, Forcing Temporary Closure

Hospitality Sector Hit By PHALT#BLYX ClickFix Malware Campaign

How AI And Cloud Are Helping Hospitals Fight Ransomware In India

How AI-Driven Phishing Attacks Evade Legacy Email Filters

How to stay safe after the Ledger customer data leak: experts urge privacy first

Increase Usage of Generative AI Services Creates Cybersecurity Challenge

Investigating $3.3 million phishing scam in Warren County

Is GenAI Leaving Two-Thirds of Security Teams Behind?

Jaguar Land Rover production plunges 43 per cent following devastating cyber attack

Jaguar Land Rover sales plunge after cyber attack disruption

Jaguar Land Rover sales slump sharply amid US tariffs and cyber-attack

Jaguar Land Rover sales tumble after cyber attack disruption

Jaguar Land Rover wholesale volumes down 43% after cyberattack

Jaguar Land Rover's Q3 Sales Crash Amid Cyber-Attack Fallout

Kimwolf Android botnet abuses residential proxies to infect internal devices

L’Orange Bleu Data Breach Exposes Fitness Club Financials and Manager PII

Largest Healthcare Data Breaches Still Matter Years Later, With 2024 Exposing Over 276 Million Records

Ledger Confirms Global-e Breach, Warns Users of Phishing Attempts

Ledger Hit by Another Data Breach: Customer Information Exposed via Third-Party Partner Global-e

Ledger Suffers New Data Breach via Payment Processor

Ledger Users Targeted in Phishing Scam Following Global-e Data Breach

Man sought in connection with massive Desjardins data breach is arrested in Spain

Manage My Health data breach ransom deadline arrives

Manage My Health hack: New Zealand's worst cybersecurity incidents

ManageMyHealth cyber attack exposes patient data as responsibility falls on private operator

ManageMyHealth data breach: First tranche of affected GPs notified

Microsoft becomes most spoofed brand in phishing attacks (again)

Millions of Android Powered TVs and Streaming Devices Infected by Kimwolf Botnet

Missing MFA Strikes Again: Hacker Hits Collaboration Tools

More than 40,000 hit by Dartmouth College data breach

Neighbourly gets injunction to stop release of hacked information

New ClickFix Attack Deploys Fake Windows BSOD Screens to Deceive Users into Running Malicious Code

New D-Link flaw in legacy DSL routers actively exploited in attacks

New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands

New Sophisticated Phishing Attack Mimics Google Support to Steal Logins

New VVS Stealer Malware Targets Discord Users via Fake System Errors

New Zealand: High Court acts swiftly to try to contain Northland-focused Manage My Health, Neighbourly cyber attacks

New Zealand patient data breach sparks urgent review

New Zealand Probes Major ManageMyHealth Data Breach, Hacker Claims Stealing Over 428,000 Files

NordVPN Denies Breach After Hacker Leaks Data

NordVPN Denies Data Breach Following Threat Actor Claim on Dark Web

NordVPN Dismisses Breach Claims Saying Only Dummy Data Leakage

NordVPN Hack Claim - Is Your Data Secure? Here’s What Really Happened

Nuneaton school to be closed until 'at least' Monday after cyber attack

One of Quebec’s ‘most wanted’ fugitives arrested in Spain in connection with Desjardins data breach

pcTattletale Founder Pleads Guilty to Fraud After 2024 Data Breach

PeckShield Flags $27.3 Million Multi-Sig Wallet Exploit Linked to Tornado Cash

Phishing actors exploit complex routing and misconfigurations to spoof domains

Phishing and fraud, Arizona ranks No. 2 in online scams

Phishing campaign abuses Google Cloud services to steal Microsoft 365 logins

Phishing trends in 2026: The rise of AI, MFA exploits and polymorphic attacks

Python-based VVS Stealer sneaks off with your Discord data

QR Code Phishing Attacks surge in 2025, targeting Mobile Devices: A Growing Cybersecurity Threat

Ransomware attacks surge across transport and logistics sector

Ransomware escalates in scale and sophistication through 2025

Ransomware Explained: From Initial Access to Extortion Guide

Ransomware negotiators help businesses deal with cybercriminals

Ransomware on the rise: why mid-market firms are in the crosshairs

Resecurity Exposes ‘The Com’: Inside a Teen-Driven Cybercrime Network Behind Global Data Breaches

Resecurity Went on the Cyber Offensive - When ‘Shiny Objects’ trick ‘Shiny Hunters’

RondoDox Botnet Operators Set React2Shell Flaw in Their Sights

Russian hackers are abusing Viber to spy on Ukraine

Scattered Lapsus$ Actors Reappear Behind ‘ShinySp1d3r,’ Expanding RaaS and Insider Recruitment Efforts

Sedgwick confirms breach at government contractor subsidiary

Sedgwick confirms Data Breach Following TridentLocker Ransomware Gang Claim

ShinySp1d3r Emerges: Ex-Lapsus$ Operators Pivot to Ransomware-as-a-Service

SW Automation Targeted by Lynx Ransomware Attack

Taiwan Reports 2.6 Million Chinese Cyberattacks Per Day in 2025

Taiwan says China's attacks on its energy sector increased tenfold

The roles and challenges in moving to quantum-safe cryptography

Top 10 Ransomware Groups of 2025

Trusted cyber workers plead guilty to secret ransom ring

Tuoni C2 Malware Uses AI-Enhanced Stealth Techniques to Compromise Major U.S. Real Estate Firm

Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users

Ubisoft Data Breach Brings Chaos To ‘Tom Clancy’s Rainbow Six Siege’, Stolen Info Reportedly At Center Of Multi-Group Hacker War

UK: Lack of training opening up councils to future cyber attacks

UK government admits years of cyber policy have failed, announces reset

UK Launches New Cyber Unit to Bolster Defences Against Cyber Threats

UK Unveils £210 Million Cyber Overhaul as Nation Faces “Critically High” Digital Threat

UK’s Higham Lane School Cyberattack Forces Closure, Impacts Telephones, Emails, Servers

United Arab Emirates (UAE) warns of digital threats, says there is one cyber-attack every 39 seconds

Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover

Vendor breach compromised the data of over 37,000 VeraBank customers

Vida Y Salud Health Data Breach Affects 34k Texans & Exposes Social Security Numbers

VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX

West London council contacts 100k households after personal data taken in cyber attack

What Healthcare Organizations Should Know About Advanced Persistent Threats

What security teams miss in email attacks

Why 8.25% of retail companies faced ransomware and what that means for 2026

5th January

3.5 million hit by University of Phoenix data breach

$35 Million Cryptocurrency Theft Linked to LastPass Password Manager Data Breach

126,000 affected by cyberattack on New Zealand patient portal Manage My Health

AI generated scams and phishing in 2026

AI security risks are also cultural and developmental

Alleged NordVPN Data Breach: Salesforce Database and Source Code Reportedly Exposed

Aurora College suspends classes after cyberattack

Aurora College working to get systems back up after cyber attack

Bitfinex Hack Convict Ilya Lichtenstein Released Early Under U.S. First Step Act

Blaze Credit Union Members Notified of Massive Data Breach

Brightspeed Investigating Cyberattack

British crimefighter honored for role in LockBit takedown

California Launches DROP Centralized Data Deletion Tool for Residents

California Unveils DROP Tool for Personal Data Deletion

Cerenade Data Breach: 100 GB of Sensitive Data Stolen

China averaged 2.6 million cyberattacks on Taiwan daily

Chinese cyberattacks on Taiwan infrastructure averaged 2.6 million a day in 2025, report says

CISA Known Exploited Vulnerabilities (KEV) Catalog Expanded 20% in 2025, Topping 1,480 Entries

CISA Known Exploited Vulnerabilities Soared 20% in 2025

CISA loses key employee behind early ransomware warnings

ClickFix attack uses fake Windows BSOD screens to push malware

Cloud file-sharing sites targeted for corporate data theft attacks

Communication Criticized in Handling of Recent Healthcare Hack

Conflicting Narratives in Security Incident: Hackers Claim Resecurity Breach, Firm Says Honeypot

Covenant Health data breach affects nearly 500,000 patients after revised investigation

Covenant Health patient data breach numbers skyrocket

Crimson Collective Claims Breach of BrightSpeed: 1 Million+ Records at Risk

Crimson Collective Claims Breach of U.S. Fiber Broadband Provider Brightspeed

Critical IBM API Connect Vulnerability Enables Authentication Bypass

Crypto Hardware Wallet Ledger Faces User Data Breach

Crypto Scam Targets Cardano with Fake Eternl Wallet and Token Lure

Crypto Wallet Firm Ledger Confirms Customers Affected by Third-Party Data Breach

Crypto Wallet Maker Ledger Confirms Data Breach on Global-e Platform

Crypto wallet firm Ledger faces customer data breach through payment processor Global-e

Cyber attack forces Nuneaton school to close as whole IT system 'taken down'

Cyber attack shuts Nuneaton school for a few days

Cyberattack forces British high school to close

Cybersecurity firm turns tables on threat actors with decoy data trap

Cybersecurity Insiders Admit to Role in BlackCat Ransomware Campaign

Data brokers in hot water as California gives residents control of their personal data

Data Security Incident at Artisans’ Bank Vendor Exposes Information of Over 30,000

Disney Fined $10 Million for Violating Children’s Privacy Laws on YouTube

Drivers of cyber extortion surge examined

European Space Agency confirms cyber attack impacting external servers

European Space Agency Confirms Cybersecurity Breach on External Servers

European Space Agency Confirms External Servers Affected By Hack

European Space Agency Confirms Server Breach

Everest Ransomware Group Hits IDeaS, Bolttech, and DESY

Experts Trace $35m in Stolen Crypto to LastPass Breach

Fake 2FA Emails Target MetaMask Users’ Wallet Recovery Phrases

Gentex Optics Data Breach Exposes SSNs and DOBs

Google Tasks Used to Deliver Stealth Phishing Attacks

Hacker deletes ‘Tinder for Nazis’ and leaks thousands of profiles online

Hacking trio reemerges as a threat, but suffers setback over a honeypot

Hacktivist deletes white supremacist websites live onstage during hacker conference

Higham Lane School in Nuneaton closes after cyber-attack

Hope Cooperative Data Breach Exposes PII & PHI

How To Build Ransomware-Resilient AI Data Pipelines: A Practical Guide for Modern Enterprises

Identity: the new perimeter of ransomware defence

Illinois Department of Human Services Exposes Sensitive Data of 700,000 Individuals Online

Illinois Department of Human Services Reveals Data Breach

Ilya Lichtenstein Released Early After Bitfinex Hack Conviction

Inha University Confirms Data Leak, Sues Gunra

Inside the shadow market: The afterlife of data lost in a phishing attack

Kaspersky warns AI chatbots increase privacy risks for retail and e-commerce

Kimwolf Android Botnet Infects Over 2 Million Devices via Exposed ADB and Proxy Networks

Lawsuits over TriZetto data breach filed against Cognizant

Ledger confirms leak of customer data from third-party Global-e hack

Ledger customers impacted by third-party Global-e data breach

Ledger discloses customer data leak tied to third-party processor Global-e

Ledger Hit by Another Data Breach - Customer Names and Contact Details Exposed

Ledger Hit by New Data Breach as Hardware Wallet Demand Surges

Ledger reveals payments partner leaked customer names, contact information in new data breach

Leduc County Confirms Ransomware Attack Disrupting Municipal Operations on Christmas Day

LockBit takedown coordinator wins OBE in New Year honours

London Council Says Hackers Took Sensitive Data

Lynn Community Health Center Data Breach Affects 6,200 Patients

Lynx Ransomware Attack Hits Multiple Global Companies Including Government Agency

Major crypto wallet company reports sensitive customer data leak

Malware Campaign Abuses Booking.com Against Hospitality Sector

Manage My Health data breach ransom deadline arrives

ManageMyHealth breach: Patients at risk of identity theft, extortion

ManageMyHealth hack: New Zealand's worst cybersecurity incidents

ManageMyHealth Provides Update on Ongoing Cyberattack Investigation

Mercadien PC Data Breach Exposes Sensitive Personal & Financial Info

MetaMask Users Hit by Fake 2FA Scam: Wallets Drained in Seconds

MetaMask users suffer 2FA security verification phishing scam

MetaMask Users Targeted by Advanced Phishing Scheme with Fake 2FA Alerts

National Crime Agency (NCA) officer awarded OBE for role in LockBit ransomware takedown

Neighbourly data breach: Stuff files High Court injunction

Netstar Australia listed on ransomware site after alleged data theft

New ransomware tactics to watch out for in 2026

New VVS Stealer Malware Targets Discord Accounts via Obfuscated Python Code

New Zealand: Government orders review into ManageMyHealth data breach

New Zealand Health Cybersecurity Under Siege: Lessons from a Data Breach

New Zealand Orders Review of Manage My Health Breach Affecting 100,000+ Patients

Nord Security confirms systems are secure after fake breach allegations

NordVPN claims alleged data breach is 'false' and that user data is safe

NordVPN Denies Alleged Salesforce Server Leak, Provides Proof of Security

NordVPN Denies Breach After Hacker Claims Access to Salesforce Development Data

NordVPN denies breach claims, says attackers have "dummy data"

NordVPN denies data breach after hackers claim Salesforce leak - here's everything we know so far

Over 108,000 South Carolina residents had Social Security numbers compromised in data breach

Over 478K compromised in Covenant Health breach

Pharma’s most underestimated cyber risk isn’t a breach

Phishing campaign abuses Google Cloud Application Integration

Planned Parenthood Northern California Data Breach Exposes SSNs & Medical Info

Play ransomware touts Garner Foods hack

Popular VPN maker NordVPN shares details on yesterday's alleged Salesforce user data breach

Researcher Wipes White Supremacist Dating Sites, Leaks Data on okstupid.lol

Researchers Warn of Data Exposure Risks in Claude Chrome Extension

Russia-Aligned Hackers Abuse Viber to Target Ukrainian Military and Government

Russia-linked hackers nab highly sensitive Bolttech data, demand ransom

Russian hackers target European hospitality industry with ‘blue screen of death’ malware

Security Firm SlowMist Warns of New MetaMask Phishing Attack

Sedgwick discloses data breach after TridentLocker ransomware attack

Sedgwick Probes Data Security Incident at Government-Focused Subsidiary

Share Ourselves Data Breach Exposes Sensitive Patient Info

SHOFCO Data Breach: 129,000 Member Records Put up for Sale

Sinobi Claims Responsibility for 14 New Corporate Breaches

SlowMist Flags Potential Security Risk at HitBTC Exchange

SlowMist Security Alert Highlights Sophisticated 2FA Phishing Campaign Targeting MetaMask

Sophisticated Attacks On Whales Rise Despite 83% Phishing Decline In 2025

Sophisticated Phishing Attack Targets MetaMask Users Through Fake 2FA Security Alerts

Students at Nuneaton school urged not to log into school systems after cyber attack

Stuff files court injunction over Neighbourly data breach on dark web

The evolving menace: Ransomware in 2025 and what to expect in 2026

The Healthcare Sector’s Digital Contagion: Ransomware’s Relentless Grip

The New MetaMask Phishing Scam: What You Need to Know

Trusted Google Notifications Used in Phishing Campaign Targeting 3,000+ Organizations

US broadband provider Brightspeed investigates breach claims

Triad Packaging Inc. Data Breach - Sicarii Ransomware Claims Attack

US Cyber Pros Plead Guilty Over BlackCat Ransomware Activity

US hints at cyber role in Venezuela power outage during Caracas operation

VSCode IDE forks expose users to "recommended extension" attacks

VVS Stealer Uses Advanced Obfuscation to Target Discord Users

Wellpoint Data Breach Exposes Protected Health Information

What Are the Main AI-Assisted Cyber-Attacks and Scams?

Windows Users at Risk as Critical Zoom Vulnerability Exploited

Your Hinge app could be running a malware campaign: here’s how