Ransomware Operator Claims - Week 19 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 4th May and 10th May 2026, kindly assisted by our partners.

DBD discovered and researched 201 Ransomware Victims over 49 Countries and Islands claimed by 33 Data-Leaking Ransomware Operators, including 2 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 20 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 11th May and 17th May 2026.

15th May

2025 Saw a Surge in Wireless Vulnerabilities

AI Didn't Break Identity Security. It Exposed What Was Already Broken

AI Makes Phishing Scams Harder to Identify in the Workplace

American Lending Center Data Breach Affects 123,000 Individuals

Australia: Tasmanian hospitality group confirms CMD Organization ransomware attack

Avada Builder WordPress plugin flaws allow site credential theft

Belgium: National Annual Holiday Service (RJV) warns of phishing campaigns relating to holiday pay payments

Boys & Girls Club of the Northern Plains lays out next steps after cyber attack

California hits General Motors with $12.75 Million privacy settlement over driver data

CalPhishing Scam Uses EvilTokens Kit, Outlook Invites to Steal M365 Sessions

China-Linked Hackers Deploy New TencShell Malware Against Global Manufacturer

China-linked hacking group targets Azerbaijani energy firm in multi-wave cyberattack

CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

CISA orders all federal agencies to patch exploited bug in Cisco SD-WAN systems by Sunday

Cisco patches another actively exploited SD-WAN zero-day (CVE-2026-20182)

Cyber Attacks Continue to Accelerate in India as Ransomware Activity Expands in April 2026

Deepfake detection is losing ground to generative models

Detectives chase down voice phishing mule in South Korea, earn praise

Device code phishing surges across criminal toolkits

Endue Software agrees to $870,000 settlement over February 2025 data breach

Esse Health Agrees to Pay 2.53 Million to Settle Data Breach Lawsuit

Financial scams target psychology over technology as AI voice phishing spreads among retirees

Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence

Foxconn confirms cyber attack on North American facilities

From phishing to porn star impersonators: how scamming athletes became a billion-dollar industry

Getting Schooled By ShinyHunters

Gremlin Stealer Evolves into Modular Threat with Advanced Evasion Capabilities

Hackers selling bundled enterprise data on the dark web to maximise profits

Hacking drives 46% jump in Korea personal data breaches as penalties surge

Inside the REMUS Infostealer: Session Theft, MaaS, and Rapid Evolution

Kimsuky PebbleDash and AppleSeed Malware Campaigns

Korea Internet & Security Agency (KISA) and Seoul police arrest telecom operators for spoofed-number phishing

Luxembourg: Fake LuxTrust email claims account was hacked

Malicious node-ipc npm Packages Trigger New Supply Chain Security Alarm

Man vs Machine: AI is Making Traditional Vulnerability Management Operationally Irrelevant

Microsoft backpedals: Edge to stop loading passwords into memory

Microsoft Reports Severe Zero-Day Flaw in On-Prem Exchange Servers

Microsoft warns of Exchange zero-day flaw exploited in attacks

NCC Group warns ransomware attacks on Operational Technology (OT)-heavy industrial environments are intensifying amid IT/OT convergence

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

OpenAI Confirms Limited Impact From TanStack npm Supply Chain Attack, Urges macOS App Updates

OpenAI Warns Mac Users to Update Apps After Supply-Chain Attack

Pharma giant West Pharmaceutical discloses ransomware attack disrupting operations

Ransomware drives 58% of Singapore cyber incidents

Russian Hackers Target 13,500 Signal Accounts in Hijacking Campaign

Shadow AI is becoming the next governance headache

South Korea: Voice Phishing Suspects Surge, Calls Grow for Undercover Probes

Suicide prevention website tracked and shared visitors’ data without consent

Suspected Belarusian State Nexus Actors Target Ukraine with New Cobalt Strike Cyberespionage Campaign

TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates

The economics of ransomware 3.0

Thieves unlock stolen iPhones using cheap tools sold on Telegram

Two Unpatched Windows Exploits Target BitLocker, SYSTEM Access

Tycoon 2FA Operators Adopt OAuth Device Code Phishing to Bypass MFA

Tycoon 2FA Operators Use OAuth Device Code Phishing to Bypass MFA

Unpatched Microsoft Exchange Server vulnerability exploited (CVE-2026-42897)

Western Orthopaedics says criminals stole the data of over 113,000 patients

What Fronter AI Models Like Mythos and GPT-Cyber Mean for Modern Cybersecurity

York City officials reveal little about 2025 ransomware exposure, aftermath

Zombie linkages are keeping expired domains trusted for years

14th May

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

18-year-old NGINX vulnerability allows DoS, potential RCE

90% of ransomware attacks target SMEs

A spyware investigator exposed Russian government hackers trying to hijack Signal accounts

AI cyber capability is speeding past earlier projections

African National Congress (ANC) hit by data breach: 2 million private member records exposed

Apple’s iPhone Privacy Feature Expands to More Users Worldwide

Belarus Hackers Target Ukraine With Spear-Phishing

British Airways hit by Telegram breach claims involving pilot data

Canada: Claim dropped in Acciona/Metro Van data breach case

Canvas breach: Australian schools the likely target of sophisticated phishing scams

Canvas Data Breach Pushes Instructure to Pay Ransom After Second Hack

China-Linked Twill Typhoon Uses Fake Apple and Yahoo Sites for Espionage

Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

Cullen/Frost Data Breach Exposes Sensitive Info for 4.6k Clients

Cyber Attacks Continue to Accelerate in India as Ransomware Activity Expands in April 2026

Dutch lab failed security standards before hackers stole 850,000 cancer patients’ data

Exim BDAT Vulnerability Exposes Email Servers to Remote Attacks

Expert Insights on the West Pharmaceutical Ransomware Attack

Extant Aerospace Data Breach Exposes SSNs for Thousands of Individuals

Fake Job Interview Apps Drop JobStealer Malware on Windows and macOS

FamousSparrow Targeted Oil and Gas Industry via MS Exchange Server Exploit

Fired hacker twins forget to end Teams recording, capture own crimes

FlowerStorm phishing gang adopts virtual-machine obfuscation to evade email defenses

Fluke Data Breach: SSNs and Health Records Compromised

Foxconn confirms cyber attack affecting some North American facilities

Foxconn Confirms Cyberattack

Foxconn confirms cyberattack amid claims of stolen Apple and Nvidia data

Foxconn Confirms Cyberattack as Nitrogen Ransomware Claims 8TB Data Theft

Foxconn confirms cyberattack following Nitrogen ransomware claims

Foxconn confirms cyberattack on North American factories amid Nitrogen ransomware claims

Foxconn Confirms Cyberattack, Security Experts Discuss

Foxconn factories resume operations after ransomware attack

Foxconn hack gives Apple an unwanted peek behind the curtain

Foxconn Hit by Cyberattack, Nitrogen Ransomware Gang Claims Involvement

Foxconn hit by ransomware attack; hackers claim stolen Apple and Nvidia data

Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300)

Fragnesia Extends Linux Kernel Security Challenge with Root-Level Exploit

From dark web to DarkSphere - the new cyber attack frontier

Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike

Google Launches Android Spyware Forensics Tool for High-Risk Users

Hacker hijacks robotic lawnmowers across the world

Hacker Houses And Hyper-Scaled Crime: Are We In A New Era Of Cyber Risk?

Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin

Hackers Steal 11 Million Apple & NVIDIA Files

Horizon Media say January data breach compromised personal information

India emerges as top ransomware target in APAC as cyberattacks surge 165% in Q1 2026

India Most Targeted By Ransomware Attacks In APAC During Q1 2026

Industrial firms hit hardest by ransomware attacks

Information Commissioner’s Office (ICO) Publishes Five-Step Plan to Counter Emerging AI-Powered Attacks

Instructure Pays ShinyHunters Ransom to Protect 275 Million Canvas Users’ Private Data

Interim Healthcare of West Texas Data Breach: Patients of Lubbock and Amarillo Impacted

Iran launches DDoS Cyber Attack on Spotify says retaliation to Khamenei’s Killing

Iran-Linked MuddyWater Group Breached Organizations in 9 Countries in Q1 2026, Including Major Electronics Maker

Israeli spy firms double down on new data methods to uncover Starlink users

It is official that half of CISOs pay in ransomware attacks

Jaguar Land Rover annual profit falls 99% after US tariffs and cyber-attack take toll

Jaguar Land Rover profits slumps 99 per cent, tariffs and cyber-attack cited as reasons

Jaguar Land Rover (JLR) profits take major hit from cyber attack and competition in China

Jaguar Land Rover’s full-year results hit by cyber attack but car giant “recovered well” in Q4

KongTuke hackers now use Microsoft Teams for corporate breaches

Lawsuits Follow Disruptions from Cyber Attack on Canvas

LifeSpring Home Care Data Breach: 7,509 Patients Affected

Machine identities outnumber humans 109 to 1

Major tech manufacturer Foxconn confirms cyberattack hit North American factories

Malaysia’s emerging hybrid organised crime threat

Mays Housecall Data Breach Exposes PHI for 5,208 Patients

Microsoft sacks Israel subsidiary boss over using its cloud to store spying data

Microsoft says 8.3 billion email phishing attacks in Q1, QR code attacks up 146 percent

Mistral AI allegedly breached by Dune-loving criminals following TanStack supply chain hit, 450 repos exposed

Most Organizations Now Use AI Agents for Sensitive Security Tasks

Mt. Spokane Pediatrics Data Breach - What You Need to Know and What to Do Next

Mustang Panda Linked to Updated FDMTP Backdoor in Asia-Pacific Espionage Campaign

National Treasury Management Agency (NTMA) yet to recover €2.5m stolen in phishing attack

New Fragnesia Flaw Hands Linux Local Users Root Access

New Fragnesia Linux flaw lets attackers gain root privileges

New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption

NGINX is critically vulnerable: hackers can crash servers and run remote code with no authentication

Nitrogen Ransomware claims massive data theft from Foxconn

Nitrogen Ransomware Gang Claims Attack as Foxconn Confirms Breach

Nitrogen ransomware gang claims major data theft from Apple’s key supplier Foxconn

No User Data Impacted in Third-party Breach, OpenAI Says

North Korean hackers pose as police in spear phishing attacks

OpenAI Addresses TanStack NPM Supply-Chain Attack Impact: ⁠Production Systems, Intellectual Property Not Compromised

OpenAI asks macOS users to update after TanStack npm supply chain attack

OpenAI confirms security breach in TanStack supply chain attack

OpenAI says hackers stole some data after latest code security issue

OpenAI says no user data breached after security issue with open-source library

Over 70% of organizations hit by identity breaches

Patching one Linux kernel critical exploit spawns another: a third vulnerability in two weeks

‘Personalized’ Iranian Cyber Attack Targets Israeli Morale

Pivot Health Data Breach Exposes Sensitive Health Details of Patients

PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

Q1 2026 Ransomware Attacks Hit 2,122 Organizations Worldwide

QBE warns cyber attacks are speeding up in Asia-Pacific

Ransomware attack on American Lending Center compromised over 123K individuals

Ransomware attacks on West Pharmaceutical and Foxconn highlight growing cyber risks to manufacturing sector

Ransomware Group Targets Fortinet and Cisco Devices To Breach Networks

Ransomware made up 58% of cyber incidents in 2025

Ransomware, Critical Vulnerabilities, and the Security Gap No One Is Closing Fast Enough

South Africa: Durban hospital targeted in ransomware incident

South Africa: Good, boring cybersecurity

Spirit Medical Transport Data Breach - What You Need to Know and What to Do Next

Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets

Taiwan: Researchers probed for cybersecurity data breach

TeamPCP Claims Mistral AI Breach, the Company Announces Being Impacted by the TanStack Supply Chain Attack

TeamPCP Claims Sale of Mistral AI Repositories Amid Mini Shai-Hulud Attack

TeamPCP hackers advertise Mistral AI code repos for sale

The AI authorship crisis is becoming a cyber-security problem

The First AI-Crafted Zero-Day Was Easy to Spot. The Next One May Not Be

The Gentlemen RaaS Leverages Fortinet and Cisco Edge Devices for Initial Access

The shadow of hacker attacks and bot fraud on the World Cup

The third major Linux kernel flaw in two weeks has been found - thanks to AI

Vimeo Confirms Data Breach Impacting 119,000 Users and Customers

West Pharmaceutical Services confirms cyberattack after data theft and system encryption

West Pharmaceutical starts restoring operations after ransomware attack

Who is Nitrogen group, what does Foxconn do and what data was hacked? Ransomware hackers claim breach at Foxconn

Why Australian Dark Web Data Is Now Being Sold in Bundles - and What It Means for Organizational Exposure in 2026

Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

Your iPhone Gets Stolen. Then the Hacking Begins

13th May

58% of CISOs Would Consider Paying Ransomware Gangs

122 Australian Schools & Universities Impacted In Data Breach Affecting Millions

716,000 Impacted by OpenLoop Health Data Breach

AI and phishing-as-a-service drive increase in email attacks

AI fuels rise in phishing attacks

Android Adds Intrusion Logging for Sophisticated Spyware Forensics

Android pushes new scam, theft, and AI protections in 2026 update wave

Apple Enables Encrypted RCS Messaging Between iPhone and Android

Avada Builder Flaws Expose One Million WordPress Sites

Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation

Best Western parent company says hackers spent 6 months inside hotel systems, exposing guest data

Bring Your Own Vulnerable Driver (BYOVD) Attacks Help Ransomware Gangs Bypass Endpoint Defenses

Canvas Breach Hackers Reach Deal After Claiming 275 Million Records Stolen

Canvas Cyberattack: Instructure Pays ShinyHunters Ransom, US House Committee Asks for Investigation

Canvas Owner Reaches Agreement With Cybercriminals After Ransomware Attack

Canvas owner reaches ‘agreement’ with threat actors after data breach

Canvas owner reaches deal with ShinyHunters after global data breach

Capitol Pain Institute Data Breach: Protected Health Information Exposed

Chinese hacker ringleader extradited over US$25.4 million theft targeting BTS’ Jungkook, others

Chinese hacker suspect extradited to South Korea over $32m theft targeting BTS’ Jungkook and others

Critical Exim GnuTLS Flaw Enables Remote Code Execution

Critical Fortinet FortiSandbox Flaw Enables Remote Code Execution

Cybersecurity Is No Longer a Gatekeeper, But the Engine of Delivery Across Digital Economy

European defense tech giant Thales dragged into fresh data leak claims

Fake Income Tax email alert! ‘SilverFox’ hackers target Indians with dangerous malware

Fallout from the ransomware attack on Canvas used by thousands of universities

Fewer Groups Now Drive Majority of Global Attacks

FIFA World Cup 2026: Cyber Attack Single Point Risk

Fortinet Patches Critical RCE Vulnerabilities in FortiSandbox and FortiAuthenticator

Foxconn confirms cyberattack affecting some North American facilities

Foxconn confirms cyberattack after hackers claim theft of Apple data

Foxconn confirms cyberattack claimed by Nitrogen ransomware gang

Foxconn Confirms Cyberattack on North American Facilities, Production Hit

Foxconn Confirms North American Factories Hit by Cyberattack

Foxconn confirms Ransomware Attack

Foxconn Hit by Ransomware Attack Claiming Theft of Apple Project Data

From Exposure to Action: How to Operationalize Identity Risk Intelligence

GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data

Google Boosts Android Security With AI-Powered Protections

Google Debuts Android Spyware Logging Tool for High-Risk Users

Google Detects AI-Created Exploit, Thwarts ‘Mass Exploitation Operation’

Google Launches New Android Security Features to Fight Scams, Theft

Government to Scrutinize Instructure Over Canvas Disruption, Data Breach

Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000

Hacker checks out Amazon baby monitor, finds mother of all security flaws

Hackers Claim 11 Million Files Stolen From Foxconn, Supplier to Apple and Nvidia

Hackers tipped off Dutch telco Odido about its own data breach

Hackers Upgrade ClickFix Attacks Using Decade-Old Python SOCKS5 Proxy Tool

Here’s why Odido didn’t pay a ransom in the recent cyberattack

India Ranks Top in APAC Cyber Attacks Amid 165% Ransomware Surge

India tops APAC ransomware target list as cyberattacks surge 165% in Q1 2026

Information Commissioner's Office (ICO) fines South Staffordshire Water nearly £1 million after cyber attack

Instructure chose to a pay ransom following the Canvas cyber attack - research shows more than half of security leaders would follow suit

Instructure reaches agreement with hackers after Canvas data breach

Instructure Reaches Deal with ShinyHunters to Prevent Canvas Data Leak

International Anti-Ransomware Day 2026: Strengthening Cyber Resilience Against Evolving Threats

Iranian hackers targeted major South Korean electronics maker

Lawyers of data breach victims welcome almost £1 million fine for South Staffs Water over cyber attack affecting more than 600,000 people

Meta employees revolt over AI mouse-tracking software installed on work computers

Microsoft Fixes 17 Critical Flaws in May Patch Tuesday

Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days

Microsoft May 2026 Patch Tuesday Fixes 120 Vulnerabilities, No Zero-Day Exploits Reported

Microsoft on pace to break annual vulnerability record as AI-driven patch wave takes hold

Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws

Microsoft Windows Alert - Angry Hacker Drops 2 New Zero-Day Exploits

Microsoft’s agentic security system found four critical Windows RCE flaws

Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday

Microsoft’s Patch Tuesday Update Targets 120 Security Flaws

New critical Exim mailer flaw allows remote code execution

Palantir given complete access to NHS patient data

Plymouth radio station closes after 'ruthless' cyber attack

Pro-Iran hackers claim cyberattack on Spotify, cite ‘revenge’ for Khamenei's killing

Ransomware: Over Half of CISOs Would Consider Paying Ransom to Hackers

Ransomware attacks claim over 2,300 victims in one quarter and cause millions in losses

Ransomware gang claims theft of Apple files in Foxconn attack

Ransomware Gangs Use BYOVD and EDR Killers to Disable Security Tools

Ransomware hackers claim breach at Foxconn, a major electronics manufacturer for Apple, Google, and Nvidia

Ransomware hits Australian networks faster than ever before

Ransomware Q1 2026: Fewer Groups, Bigger Hits, Pre-Staged Access

Ransomware shifts to fewer groups as Thailand targeted

Regulator fines water company almost £1 million for cybersecurity failures

Signal enhances security with new features to combat phishing attacks

Signal responds to phishing attacks with new in-app security warnings

Skoda Auto Carmaker Discloses Online Shop Intrusion Potentially Impacting Customer Data

Škoda Auto discloses data breach after online shop hack

Skoda issues data breach alert for its online shop: hackers accessed customer information

Slovakian Admin of Dark Web Kingdom Market Jailed for 16 Years in US

Sophos 2026 Report Details Escalating Security Threats: Identity Security Breaches Cost $1.6 Million

South Korea: Chinese Hacker Ringleader Extradited for 38 Billion Won Theft

South Staffs Water fined £964k after data breach

South Staffs Water fined almost £1 Million after IT hack and data breach

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages

The Canvas Hack Shows Ransomware Isn’t Going Anywhere

The Environment Has Changed, But Your Identity Security Still Hasn’t

The First 24 Hours: What I Learned Responding to a Real-World Ransomware Attack

The hidden risk of non-human identities in AI adoption

UK moves to shield security researchers in cybercrime law overhaul

US lawmakers demand answers from Instructure after Canvas data breaches

West Pharmaceutical says hackers stole data, encrypted systems

West Pharmaceutical Services Hit by Disruptive Ransomware Attack

West Pharmaceutical Services hit by ransomware attack

When backups become the target: Why your recovery plan needs a rethink

When the Ransomware Gang Gets Hacked: What the Gentlemen Leak Reveals About Modern Ransomware Risk

Why Australia's ransomware spike misses the bigger story

Why Canadian Telecom Providers Are Prime Targets for Cyberattacks

Windows BitLocker zero-day gives access to protected drives, Proof-of-Concept (PoC) released

Wiping 96 US government databases after being fired may cost ex-hackers two decades in prison

Young & Company Data Breach: SSNs Exposed

12th May - International Anti-Ransomware Day

1.2 Million messaging app profiles leaked online: Were you impacted?

‘Agreement’ with hackers resolves data breach on Canvas learning platform

AI drives ransomware surge, experts urge faster defence

AI-Accelerated Ransomware Is Reshaping Risk for Financial Institutions

Amazon Quick authorization bypass let users reach blocked AI chat agents

American Lending Center Data Breach: 123,158 Individuals Impacted

Android will hang up on banking scammers for you - how its new anti-spoofing feature works

Apple supplier Foxconn confirms ransomware attack affected North American factories

Attackers Combine ClickFix With PySoxy Proxying to Maintain Persistence

Attackers Use Fake OpenAI Model to Push Credential-Stealing Malware

Australian firms urged to rethink ransomware defences

Banco Bilbao Vizcaya Argentaria (BBVA) haunted by fresh leak claims as customer banking data resurfaces online

Belmont Surgery Data Breach Exposes Sensitive Health Information

Binance stops $10.5B in fraud with AI, but the AI scam profits tell a different story

Biometric Authentication is Easier to Fake Than You Think

Canvas breach: 'Agreement' made with hackers over stolen data

Canvas breach ends in ransom deal, but student phishing risk remains

Canvas Data Breach: Instructure Reaches Deal With ShinyHunters To Return User Data

Canvas developer Instructure says 'agreement' reached with hackers

Canvas hack: Company pays criminals to delete students' stolen data

Canvas Hack Aftermath: Owner Instructure Reaches Deal With Hacker Group

Canvas Hackers ShinyHunters Say Their Official Domain Was Suspended

Canvas now admits it paid hackers after finals-week cyberattack - but is student data truly safe?

Canvas owner reaches ‘agreement’ with threat actors after data breach

Canvas owner struck a deal with hackers who breached its education platform twice

Canvas parent settles with hacker group that stole user data

Canvas platform strikes deal with hackers to delete students’ stolen data

Canvas reaches agreement with hacking group over massive data breach

Canvas Secures Data with Hacker's Agreement

Caveat Canvas: ShinyHunters Hacks The Education Sector

Checkmarx Jenkins AST Plugin Compromised by TeamPCP Using Credentials Stolen in the Trivy Supply Chain Attack

Class-action suit targets global commercial real estate firm for failing to protect client info during massive data breach

Congressman launches inquiry into how food retailers use surveillance pricing

Cushman & Wakefield Confirms Data Breach Impacting Over 310,000 Accounts

Cushman & Wakefield Data Breach Exposes 310,431 User Accounts

CVE-2026-41940 Vulnerability in cPanel Exploited to Steal Credentials

Dark web kingdom operator sentenced to 16 years as leading marketplace falls

EdTech Firm Instructure Pays Ransom as U.S. House Starts Investigation

Edtech giant Instructure strikes deal with ShinyHunters hackers prior to ransomware deadline

Education platform pays off hacker who shut down site during finals week

End‑to‑End Encrypted RCS Messaging Arrives Across iPhone and Android

Experts urge better scrutiny of cloud services after Canvas data breach

Fake Claude Code Installer Targets Developers With Browser Credential Stealer

Fake Invitation Phishing Is Becoming a Remote Access Problem for CISOs

Financial Foundations Data Breach: Social Security Numbers Exposed

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator

Foxconn confirms cyberattack after ransomware crew claims it stole confidential Apple, Nvidia files

Foxconn confirms cyberattack impacting North American factories

Foxconn Hit by Major Cyberattack as Ransomware Group Claims Theft of 8TB of Data

Foxconn Ransomware Attack Shows Nothing Is Safe Forever

General Motors to pay $12.75 million over driver data sales

Germany busts rebooted dark marketplace Crimenetwork selling drugs, forged documents

GhostLock Attack: Windows API Misuse Enables Ransomware-Like System Lockdown Without Encryption

Google Blocks AI-Driven Cyberattack in First Known Attempt at Mass Exploitation

Google Detects First Potentially AI-Generated Zero-Day Exploit

Google Drive loophole lets blocked malware reach Gmail, puts billions at risk

Google Says Hackers Used AI to Build Zero-Day Exploit

Google Thwarts Hacker Plan to Exploit AI for Mass Cyberattacks

Hacker breached Skoda’s online store and stole customer data

Hackers accessed BWH Hotels reservation system for months

Hackers claim 11 Million files from major Apple and Nvidia partner days after Wisconsin plant suffers “IT outage”

How AI and phishing-as-a-service are changing the email threat landscape

How to tell if your email address, passwords have been exposed

Hundreds of open-source packages, including TanStack and Mistral, compromised in fresh wave of supply chain attacks

Information Commissioner’s Office (ICO) fines water company £1m over data breach affecting 630,000 people

Information Commissioner’s Office (ICO) fines UK water company over major customer data breach

Information Commissioner’s Office (ICO) issues fine of nearly £1m against South Staffordshire Plc and South Staffordshire Water Plc following major cyber attack and data breach

Institute of Public Accountants (IPA) members hit by data breach

Instructure pays ransom after Canvas incident as Congress announces investigation

Instructure Pays Ransom to Resolve Canvas Data Breach Affecting 275 Million Users

Instructure reaches agreement with hacker after data breach, global outage

Instructure reaches 'agreement' with ShinyHunters to stop data leak

Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak

Instructure strikes deal with hackers who breached it twice

Instructure took a risky approach to recover stolen Canvas data

iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android

JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413)

Kaspersky 2026 Ransomware Report Details Shifting Threats, as Attacks Decline and Tactics Change

Malicious Hugging Face Repository Typosquats OpenAI

Microsoft May 2026 Patch Tuesday fixes 120 flaws, no zero-days

Mini Shai-Hulud Hits TanStack npm Packages

Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots

New York Life Data Breach Exposes Sensitive PHI and PII

NVIDIA confirms GeForce NOW data breach, pledges full support for investigation

Odido rules out compensation after massive cyberattack affecting 6.2 million accounts

On Anti-Ransomware Day, some good news arrives for cyber defenders

OpenLoop Health Data Breach Confirmed at 716,000 Individuals

Operation HumanitarianBait Uses Fake Aid Documents to Deploy Python Spyware

Oracle EBS data breach compromised close to 6,000 Informa employees

Over 1 Million Baby Monitors, Security Cameras Exposed Through Meari Flaws

Ransom deal reached with Canvas hackers who stole student and teacher data

Ransomware attacks near record as groups consolidate

Ransomware Hackers Crash Finals Season

Ransomware in 2026: Resilience replaces prevention as new cyber imperative

Ransomware Power Shifts to Fewer, Bigger Groups in 2026 productnation

Ransomware sector reconsolidating as Qilin, LockBit, and The Gentlemen expand influence in Q1 2026

Regina entertainment venues affected by cyber attack

RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded

SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA

School Learning Company Reaches Deal with Hackers in Ransomware Attack

Shai Hulud attack ships signed malicious TanStack, Mistral npm packages

Signal adds security warnings for social engineering, phishing attacks

Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root

Škoda confirms unauthorized access to its online shop

Škoda warns of customer data breach after online shop hack

South Staffordshire Water Fined £1m After Data Breach

State of ransomware in 2026

Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940)

Stolen Canvas data was “returned” after hacker agreement, Instructure says

Stolen information returned to Canvas and allegedly deleted from hacker logs

Taiwan's cybersecurity market shifts toward managed services as ransomware pressure mounts

The Canvas Breach Shows What Happens When SaaS Platforms Become Identity Infrastructure

The Exception Economy: When Security Teams Stop Protecting and Start Negotiating

The hidden smart fridge risks that emerge years after purchase

The Risks of AI Agents as High-Privilege Users That Never Pause

The State of Identity Security 2026: Identity is the new perimeter

Threat Actors Leverage Vercel’s AI Tools to Mass‑Produce Realistic Phishing Sites

Threat Actors Use Vercel AI to Mass-Produce Phishing

Three separate lawsuits filed against Instructure after data breach

U.S. bank disclose security lapse after sharing customer data with AI app

UK fines water supplier $1.3 Million for exposing data of 664k customers

UK water firm fined £1 Million after running Windows Server 2003

UK Water Supplier Fined Nearly £1 Million After Hackers Roamed Networks for Almost 2 Years

US government seeks Instructure testimony on massive Canvas cyberattack

Water firm fined after customers' details hacked

West Pharmaceutical Services Hit by Disruptive Ransomware Attack

West Pharmaceutical warns of ransomware attack impacting business operations

“When you watch Netflix, Netflix watches you”: Texas sues streaming giant for spying on kids

Why Agentic AI Is Security's Next Blind Spot

Why Ransomware Attacks Are Increasing in UK Businesses

‘You deserved more consistent communication from us, and we didn’t deliver’: Instructure CEO issues apology over Canvas cyber attack disruption

11th May

9-Year-Old Dirty Frag Vulnerability Enables Root Access on Linux Systems

AI cyber attack threatens global financial crisis, warns International Monetary Fund

AI-Driven Cybercrime Spikes: Ransomware Victims Up 389% in New Fortinet Study

Australia: Deadline set by cybercriminal group looms as some institutions regain Canvas access

Australian toy distributor listed by M3rx ransomware

Back-to-Back Ransomware Attacks on Ed Tech Firm Attract Congressional Scrutiny

Binance says AI security systems prevented $10.5 billion in user losses from crypto scams, phishing

Bulgaria: Authorities bust AI-assisted mass phishing scheme

BWH Hotels guests warned after reservation data checks out with cybercrooks

California Hits General Motors With Record $12.75 Million CCPA Privacy Settlement

Capsule Security Analysis Details Scope of Vulnerable AI Agent Attack Surface

China-linked New York robotics firm issues fix after hacker remotely hijacks thousands of lawn mowers

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

Criminal case opened in Poland after hacker attack on Belarusian online library kamunikat.org

Cyber attack disrupts swathe of universities, schools in US, Canada, Australia

Cyber-crime increasingly coming with threats of physical violence

Data after the breach: Economics of the dark web

Data Breach Disrupts Georgia Universities During Final Exams

Data breach fears for schools and universities grow after suspected ransom note

Deconstructing the Canvas (Instructure) Data Breach: What Happened and What Should Your Institution Do Next?

Dirty Frag: Linux kernel hit by second major security flaw in two weeks

Fake Claude Code Page Pushes PowerShell Stealer at Devs

Fake income tax emails target Indians: Kaspersky warns of ‘SilverFox’ hacker attack

Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads

Fake TronLink Extension Targets TRON Users in Phishing Scam

Fine of nearly £1 million issued against South Staffordshire Plc and South Staffordshire Water Plc following major cyber attack and data breach

Fortinet Warns AI Is Accelerating Global Cybercrime as Ransomware Victims Surge 389%

General Motors (GM) agrees to $12.75 Million California settlement over sale of drivers’ data

GhostLock Attack Leverages Windows file-sharing to Lock Files Access Like Ransomware

Global report finds businesses hide vast majority of ransomware attacks

Google Ads and Claude.ai Shared Chats Abused to Distribute Mac Malware

Google catches “first AI-assisted zero-day” as well as autonomous Android malware

Google researchers uncover criminal zero-day exploit likely built with AI

Google says criminals used AI-built zero-day in planned mass hack spree

Google Says Hackers Used AI to Develop a Zero-Day Exploit

Google says it likely thwarted effort by hacker group to use AI for ‘mass exploitation event’

Hackers Exploit Vercel GenAI to Mass-Produce Convincing Phishing Sites

Hackers Observed Using AI to Develop Zero-Day for the First Time

Hackers pushing innovation in AI-enabled hacking operations, Google says

Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation

Hackers used AI to develop zero-day exploit for web admin tool

Hogan Transports Data Breach Exposes Personal Information Including Social Security Numbers

Hong Kong: Cross-border data breach alerts in place, says Digital Policy Office

Identity security firm SailPoint discloses GitHub repository breach

Information Commissioner’s Office (ICO) fines Cl0p victim South Staffs Water over data breach

Information Commissioner’s Office (ICO) fines South Staffordshire Water £963,900 over significant data protection failures

Information Commissioner’s Office (ICO) fines Staffordshire water provider over serious cyber attack

Instagram messaging encryption removed, and privacy advocates are pushing back

Instructure Canvas hack update: Breach involved a specific teacher account type and interrupted finals

Instructure confirms hackers used Canvas flaw to deface portals

Iran’s cyberwar targets ordinary Americans. We need to dismantle the hacker network

Kaspersky Warns of Phishing Attacks Via Compromised Amazon Simple Email Service Accounts

LayerZero Apologizes After Lazarus Group Hacker Attack

LayerZero blames victims for $292 million hack, but apologizes as clients leave

Linux developers weigh emergency “killswitch” for vulnerable kernel functions

Mac Users Warned Over Fake Claude Install Instructions

March 2026 Healthcare Data Breach Report

Millions of Android users tricked into paying for fake call logs

MTN Ghana Warns Customers Against Phishing Link Scams

National Savings and Investments (NS&I) phishing attacks surge as Premium Bonds provider blocks 132,000 malicious emails

New Congoleum Data Breach: Personal Information of 4k Individuals Exposed

New GhostLock tool abuses Windows API to block file access

Nvidia GeForce NOW data breach confirmed - but luckily most of us will be safe, here's why

Official CheckMarx Jenkins package compromised with infostealer

OpenLoop Health Data Breach Affects 716,000 Individuals

Police Shut Relaunched Crimenetwork Dark Web Marketplace

Police take down relaunched criminal marketplace with 22,000 users, €3.6 million in revenue

Poor security left hackers inside water company network for nearly two years

Pro-Iranian hacker group claims to expose identities of Israeli special forces officers

Ransomware hackers are now threatening to indulge in Physical Harm or Violence

Rapid7 links Chaos ransomware campaign to Iranian state-sponsored MuddyWater espionage operation

Renegade recovers $190K after hacker returns 90% of stolen funds

Romanian Man Faces Up to 30 Years in US Prison Over Vishing Scams

Rushed Patches Follow Broken Embargo on New Linux Kernel Vulnerabilities

School app Canvas breach hits during finals

Schools negotiate with hackers following Canvas data breach

Second Canvas data breach causes major disruptions for schools, colleges

Security teams are turning to AI to survive alert overload

ShinyHunters Escalates Canvas Extortion with School by School Ransom Campaign

Skoda Data Breach Hits Online Shop Customers

Soomgo reports hacker extortion to authorities, probes possible data leak in Korea

South Korea: Former Police Officer Sentenced for Voice Phishing Money Laundering

Tables Turned: Gentlemen Ransomware Group Suffers Data Leak

TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack

Texas sues Netflix over alleged data practices that create ‘surveillance machinery’ without user consent

The scam economy has found its AI upgrade

The State of Ransomware - Q1 2026

TrickMo Android banker adopts TON blockchain for covert comms

TrickMo Variant Routes Android Trojan Traffic Through TON

‘Truly terrifying’: Alberta voter data breach raises fears for Canada’s electoral integrity

Two more Hong Kong educational institutions hit by Canvas learning platform data breach

Uber hid drivers’ data rights, Dutch watchdog rules, stands by €10 Million penalty

UK water company allowed hackers to lurk undetected for nearly two years, regulator finds

Universities worldwide still struggling with fallout from Canvas cyber attack

Unoaerre Ransomware Attack Disrupts Manufacturing Operations

Venmo privacy redesign changes the default of post visibility

Water company's leaky security earns near-£1 Million fine

We investigated the Vodafone data leak: Here is what hackers claim they stole

What is device token phishing?

What is Digital Invitation Scam and here's how to safeguard yourself from such cyber threats

What It Costs to Hire a Hacker on the Dark Web in 2026

Why Did the Renegade Hacker Return $190K in Stolen Crypto?

Why was Canvas hacked? Identity of the hacker explored as 275 million users impacted

Zara Data Breach Impacts Nearly 200,000 Customers

Zara data breach saw 197,000 people have information exposed - but luckily, hackers may not have accessed private info

Zara global data breach exposes information on nearly 200,000 customers

Zara Owner Inditex Confirms Customer Data Breach Affecting Nearly 200,000 People