Data Breaches Digest - Week 19 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 4th May and 10th May 2026.

7th May

AI and Dark Web Make Passwords Obsolete in 2026

Australia: Cyber attack exposes student and staff private details

Australia: Major cyber attack exposes private details of students and school staff

Australia: New South Wales, other states, investigating Instructure/Canvas data breach

Australia: Noosa students impacted in state-wide education data breach

Australian schools, universities left scrambling after personal data of students compromised in massive breach

Belarus: Online Library Kamunikat.org Down After Hacker Attack

Belarus: Online library website Kamunikat suffered a powerful hacker attack

Canadian government to pay $8.7 Million to settle data breach class-action involving Canada Revenue Agency (CRA) accounts

Cybercriminals Exploit Microsoft Teams to Phish Login Credentials and Bypass MFA

Duo Data Breach Victims File Lawsuit Seeking 1 Million Won Each

Experts warn passwords no longer sufficient in AI era

Fortinet warns ransomware cases jumped 389% as AI accelerates cyberattacks

Google Ads Campaign Targets GoDaddy ManageWP Login Credentials

Hackers Exploit Microsoft Teams to Steal Credentials and Bypass MFA

Iranian hackers masqueraded as different hackers to mask spying effort

Law Society criticises Legal Aid Agency (LAA) for lack of compensation after cyber attack

Major Canvas Data Breach Impacts Universities Worldwide: Have You Been Affected?

Major data breach as private information of Australian students and teachers leaked

Malicious NuGet Packages Target Chinese .NET Ecosystem Developers

New Phishing Attack Weaponizing Event Invitations to Steal Login Credentials

Queensland Department of Education confirms students, staff impacted by ShinyHunters data breach

Queensland education sector caught up in major security breach affecting more than 200 million people globally

Ransomware Is Evolving Even When the Numbers Look Better

Researchers Spot Uptick in Use of Vercel for Phishing Campaigns

Salesforce Marketing Cloud Vulnerabilities Expose Cross-Tenant Subscriber Data Risks

South Africa: FlySafair under fire after alleged data breach during R12 birthday ticket sale

The rise of staged attacks: phishing now accounts for 30% of malicious traffic

Vimeo data breach exposes personal information of 119,000 users after Anodot incident

vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution

VoIP Providers, Preferred by Attackers for High-Volume, Cheaper Email Scams that Reuse Phone Numbers

Wake schools notify parents of Canvas data breach

6th May

35,000 users hacked? Microsoft reveals massive global phishing attack

AI accelerates ransomware surge as global attacks jump 389%

AI Tools Expose PostgreSQL and MariaDB Flaws Hidden for Decades

AI-Powered Phishing Demands a Shift From Awareness Training to Immersive Simulations, Experts Argue

Aroostook Mental Health Center reports data breach

Attackers compromised Daemon Tools software to deliver backdoors

Australia Forms Cyber Incident Review Board to Strengthen Defences After Major Breaches

Azure AD Security Bypass Exploits Phantom Device Registration and PRT Abuse

Bank phishing declines but still drives 26% of attacks

Bots outnumber humans online. Can we at least outsmart them?

Boutique phishing kit Saiga 2FA reappears with new campaigns and ‘lorem ipsum’ metadata

China-linked APT group attacking government entities in South America and Europe

Chrome on Android can now hide your exact location from websites

CISA Urges Critical Infrastructure Providers to Make Plans to Remain Operational if hit by Cyber-Attack

CISA Warning: High-Severity Linux Flaw Puts Unpatched Systems at Risk

CISA Warns of Severe CopyFail Linux Vulnerability Under Active Exploitation (CVE-2026-31431)

CloudZ Malware Abuses Phone Link to Steal SMS OTPs

CloudZ RAT Exploits Microsoft Phone Link to Steal SMS OTPs

Conti, Akira Affiliate Sentenced to 102 Months in Prison for Ransomware and Extortion Operations Targeting over 50 Organizations

Coupang back in the red after data breach fallout

Coupang Posts $242 Million Q1 Loss Amid Data Breach Fallout

Coupang posts biggest quarterly loss in 4 years following last year’s major data breach

Coupang Posts Largest Quarterly Loss in 4 Years on Data Breach Fallout

Coupang swings to net loss in Q1 amid fallout from data breach

Critical Palo Alto Firewall Flaw Exploited to Gain Root Access

Critical vm2 sandbox bug lets attackers execute code on hosts

Critical vulnerability affects Ollama: 300,000 servers exposed to attackers

Cushman & Wakefield confirms Vishing-linked cyberattack amid claims by ShinyHunters and Qilin

D'Ambrosio Dodge Data Breach Exposes Sensitive Personal Information

DAEMON Tools developers confirm breach, release malware-free version

Data Breach Fallout Pushes Coupang Into Red as Demand Wavers

Data Extortion Groups Intensify Pressure On Global Aerospace Supply Chains

Dental data breach leads to proposed US$3.3 Million class action settlement

Department of Justice (DOJ) says ransomware gang tapped into Russian government databases

Dutch citizens are suing to stop the US from taking over their national ID system

Five Years Later: Lessons Learned From Colonial Pipeline Ransomware Attack

Fortinet flags surge in AI-driven cybercrime, 389% spike in ransomware victims

Fortinet reports 389% rise in ransomware victims

Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE

Google urges Android users to update their phones to combat phone takeover flaw

Google's Android Apps Get Public Verification to Stop Supply Chain Attacks

Hacker Exploits $1.4 Million Vulnerability in Ekubo Contract

Hackers abuse Google ads for GoDaddy ManageWP login phishing

Hackers compromise Daemon Tools in global supply-chain attack

Harvard, Oxford, and MIT named as hackers drop full Canvas breach victim list

Horizon Media Data Breach Exposes Social Security Numbers

IBM Italy Subsidiary 2026 Network Breach Reportedly Linked to Salt Typhoon

Investor Sues Coinbase to Return Frozen Assets Tied to 2024 Phishing Attack

Iran cybersnoops still LARPing as ransomware crooks in espionage ops

Iran-Linked APT Posed as Chaos Ransomware Member in Espionage Campaign

Iranian APT caught hiding behind Chaos ransomware activity

Iranian cyber espionage disguised as a Chaos Ransomware attack

Iranian state-backed spies pose as ransomware slingers in false flag attacks

Is Nvidia GeForce Now hacked? Alleged data breach situation explained

LaBonne's Markets Data Breach: Social Security Numbers Exposed

Law Society demands compensation for legal aid firms facing cashflow pressures from Legal Aid Agency (LAA) cyber-attack disruption

LinkedIn job scams push most professionals to verify roles before applying

Man sentenced for role in global ransomware group, targeted areas of southwest Ohio

Massive “Low and Slow” DDoS Attack Hits Platform With 2.45 Billion Malicious Requests in 5 Hours

Member of Prolific Russian Ransomware Group Sentenced to 102 Months in Prison

Microsoft reports large-scale phishing campaign targeting organisations across sectors

Microsoft the main target of AI phishing attacks, report uncovers

Microsoft tops phishing brand rankings in first quarter

Microsoft Uncovers Cyber Attack Across 26 Countries as Phishing Increasingly Mimics Real Customer Journeys

Microsoft warns of large-scale phishing attack hitting 13,000 companies

Millions of students’ personal data stolen in major education breach

Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks

Mt. Spokane Pediatrics Data Breach Affects 29k: SSNs Exposed

MuddyWater hackers use Chaos ransomware as a decoy in attacks

MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack

Multi-Stage AiTM Attack Uses Code Of Conduct Phishing Emails

Nepal: Cyber Bureau warns ConnectIPS users against phishing links

New CISA initiative aims for critical infrastructure to operate offline during cyberattacks

New Cisco DoS flaw requires manual reboot to revive devices

New phishing trick exploits Apple notifications to bypass spam filters

North Korean hackers targeted ethnic Koreans in China with Android ‘BirdCall’ malware

One in Eight UK Workers Has Sold Their Corporate Logins

Only 1 in 9 ransomware attacks are made public says research

Only 1 in 9 Ransomware Attacks Made Public as Data Exfiltration Hits 96%

Open Source is the Tip of the Iceberg: Why Proprietary Software, Hardware and Protocols Face Greater AI-Driven Security Risk

Over 35k users, 13k organisations hit in global phishing attack

Palo Alto Networks to Patch Exploited PAN-OS Zero-Day (CVE-2026-0300) Starting May 13th

Palo Alto Networks warns of firewall RCE zero-day exploited in attacks

Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution

Palo Alto warns of critical software bug used in firewall attacks

PAN-OS Flaw CVE-2026-0300 Exposes Firewalls to Remote Code Execution

Phishing can masquerade as emergency alerts for disasters, researchers warn

Pro-Iran hacker group taunts US over bounty, urges focus on Epstein case

Ransomware and Data Extortion Groups Intensify Targeting of Aviation and Aerospace Sector

Ransomware attacks surge in auto industry, raising stakes for dealers

Ransomware Damage Surges 389% as AI Accelerates Cyber Threats

Ransomware Gang Member Linked to Russian Cybercrime Group Sentenced to Prison

Ransomware Gangs Escalate Attacks on Aviation and Aerospace Sector

Ransomware negotiator jailed for 8.5 years after exploiting stolen children’s health records and making millions

Ransomware-Wielding Attackers Target cPanel and WHM Software

Remus Malware Bypasses Browser Application-Bound Encryption Protections

Report Confirms Processor Overconfidence in Stopping a Cyber Attack

Romanian Man Extradited to US for Role in Hacking Scheme 17 Years Ago

Root-level RCE vulnerability in Palo Alto firewalls exploited (CVE-2026-0300)

Russian Hacker in the U.S. Charged with Damaging Critical Infrastructure in Several Countries, Including Latvia

Russian hacker pleads guilty to cyberattacks on US and Ukrainian energy infrastructure

RXNT Notifies Customers About Cybersecurity Incident and Data Breach

ShinyHunters’ Instructure Canvas LMS and Vimeo Breaches Impact Millions of Users

South Africa: FlySafair leaked people’s private information during R12 ticket birthday sale

Starr Insurance Discloses Ransomware Attack

Student, faculty data ransomed by hacker group in Canvas breach

Suspected ‘courier’ in €10 million LuxTrust phishing scam arrested in France

Switzerland: Increase in ransomware and "phishing" cyberattacks

Sysco food distributor allegedly hit in Qilin ransomware claim

Taiwan High Speed Rail Hit by Spoofing Attack That Stops Three Trains

The Vimeo data breach exposed personal information of 119,000 people

US Army contractor leaks military base photos, personnel information for over a year

Vimeo Data Breach Exposes 119,000 Users Unique Email Addresses

Vimeo Data Breach Exposes Email Addresses of 119,000 Users

When Ransomware Hits, Governors Are Calling the National Guard

Why "strong passwords" can't save you from AI

Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs

Zero-Auth Flaw Exposes Department of Defense (DoD) Contractor to Cross-Tenant Data Breach

5th May

15-year-old hacker arrested over massive French government data leak

35,000 Users Targeted in Phishing Campaign in Just Two Days

A critical bug in corporate file transfer software lets hackers bypass login entirely

AI Adoption Outpaces Safety Policies, Leaving Organizations Exposed to Cyber Risk

Amazon Simple Email Service (SES) abused for sophisticated phishing attacks

Amazon Simple Email Service (SES) Turned Weapon: Sophisticated Phishing Attacks Surge Worldwide

Amazon Simple Email Service (SES) Phishing and BEC Attacks Leverage Leaked AWS IAM (Identity and Access Management) Keys

Anti-ICE Site GTFO ICE Accused of Exposing Data of 17,000+ Activists

Ardmore police database hit by ransomware attack

Aroostook Mental Health Center reports data breach

Attackers Abuse Amazon Simple Email Service (SES) To Send Authenticated Phishing Emails

Attackers Abuse Amazon Simple Email Service (SES) to Send Authenticated Phishing Emails That Bypass Security

Attackers Exploit Amazon Simple Email Service (SES) to Send Authenticated Phishing Emails

Australia: New South Wales government downgrades impact of alleged Treasury data breach

Australia launches cyber review board modeled on version disbanded in US

Canvas maker Instructure reveals data breach - confirms user personal information leaked

China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions

Clipboard to Encryption: The Critical Role of ClickFix in Ransomware Campaigns

CloudZ malware abuses Microsoft Phone Link to steal SMS and OTPs

Code of Conduct Phishing Emails Target 35,000 Users in Multi-Stage AiTM Attack

Connecticut Judicial Branch warns of targeted phishing scams

Conti ransomware gang member sentenced to 102 months in prison

Conti, Akira ransomware affiliate given 8-year sentence

Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE

Cyber attack hit UAE's Fujairah Port 'minutes before' Islamic Revolutionary Guard Corps (IRGC) missile strike

DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

DAEMON Tools trojanized in supply-chain attack to deploy backdoor

Dubai Police-led global operation takes down sophisticated investment fraud ring

Edtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threats

Education Sector Hit by Espionage, Phishing, and Supply Chain Attacks

Education Sector Under Attack From State Espionage, Spear-Phishing, and Supply Chain Attacks

Educational tech firm Instructure data breach may have impacted 9,000 schools

Europol built “shadow IT database” under terror pressure, then lost control

Experts warn Amazon's Simple Email Service is being abused to launch 'massive volume' of phishing attacks

Facebook Phishing Campaign Hijacks 30,000 Accounts Using Google AppSheet

Facebook Phishing Scam Devastates 30,000 Accounts Through Deceptive Blue Tick Verification Scheme

Fake SSA Emails Drive Venomous#Helper Phishing Campaign

Federal Trade Commission (FTC) bans data broker Kochava from selling sensitive location info

Federal Trade Commission (FTC) to ban data broker Kochava from selling Americans’ location data

FEMITBOT Network Abuses Telegram Mini Apps for Crypto Scams and Android Malware

Gateways Community Services Data Breach Exposes SSNs and More

German officials advance legislation that would expand law enforcement use of surveillance technology

German regulator sits on hands as facial recognition tool PimEyes amasses billions of faces

Goodwin University Data Breach Exposes Both PHI and PII

Google AppSheet Abuse Helped Phish 30,000 Facebook Accounts

Google Update: Android Flaw Could Put Billions of Devices at Risk

Hackers Mass-Exploit Critical cPanel Vulnerability May Impact 550,000+ Potentially Vulnerable Servers

Hackers steal students’ data during breach at education tech giant Instructure

Hackers Target Education Sector With Spear-Phishing Attacks

Healthcare Firm Suffers Major Data Breach - Personal, Medical and Health Records of 143,842 People at Risk

Helix Energy Solutions Data Breach Exposes PII: Thousands Affected

Instructure confirms breach; millions of Canvas users potentially impacted

Instructure Confirms Canvas Cybersecurity Incident, User Data Accessed

Instructure confirms cybersecurity incident

Instructure hacker claims data theft from 8,800 schools, universities

Instructure Inc. Data Breach: 3.65TB Data Stolen

Karakurt extortion gang ‘cold case’ negotiator gets 8.5 years in prison

Karakurt Ransomware Negotiator Sentenced to Prison

Kaspersky suspects Chinese hackers planted a backdoor into Daemon Tools in ‘widespread’ attack

Latvian Cybercriminal Jailed for Role in Multi-Million Dollar Ransomware Scheme

Latvian national sentenced for ransomware attacks run by former Conti leaders

Locked out at lunchtime: why ransomware is now a real risk for Scotland’s hospitality trade

Major cyber attack against San Diego Community College District

Major shift in Chinese cyber attack activity

Member Of Russian Ransomware Group Sentenced To Prison

MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks

Microsoft: Phishing campaign used fake compliance notices to compromise employee accounts

Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries

Microsoft Edge writes passwords to memory in cleartext: a gift for attackers

Microsoft Flags Mass Phishing Campaign Using Fake Compliance Emails

Microsoft reports 8.3 billion phishing threats as QR codes surge

Microsoft Reveals Phishing Attack Targeting 35,000 Users in 26 Countries

Microsoft warns of global campaign stealing auth tokens from 35K users

Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations

Most Financial Scams Don’t Hack Systems - They Hack People

Murata Electronics Data Breach: Social Security Numbers Exposed

Mythos AI hacking fears prompt UK health service crackdown on open-source code

National Cyber Security Centre (NCSC) Warns of an AI-Fuelled “Vulnerability Patch Wave”

New Infostealer Dubbed ‘Pheno’ Hijacks Windows’ Phone Link App to Steal MFA OTPs

New stealthy Quasar Linux malware targets software developers

New WhatsApp Flaws Could Affect Billions of Users After Meta Security Patch

North Korean APT Targets Yanbian Gamers via Trojanized Platform

North Korean hackers trojanize gaming platform to spy on ethnic Koreans in China

One in four MCP servers opens AI agent security to code execution risk

Personal data of hundreds of Asian football players exposed online

Phishing Campaign Impersonating the U.S. Social Security Administration Targets 80+ Organizations

'Phishing campaigns continue to improve sophistication and refinement': Microsoft flags major 'sophisticated' phishing campaign targeting 35,000 users across 26 countries

Pro-Iran hacker group claims access to Fujairah Port classified data

Pro-Iran hacker group claims coordinated cyber, missile attack on Fujairah Port

Pro-Iran hacker group claims it has classified data on 400 US Navy marines

Ransomware negotiator sentenced for role in major cyber crime group

Real estate giant confirms vishing incident as ShinyHunters and Qilin both come knocking

Retail stakeholders 'underestimate cyber attack disruption'

Saiga phishing kit returns to bypass multifactor authentication

San Diego Community College District (SDCCD) struggles to recover from cyber attack

ScarCruft hackers push BirdCall Android malware via game platform

ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows

ShinyHunters claims Cushman & Wakefield breach, 500k Salesforce records at risk

ShinyHunters impersonator claims to have hacked Nvidia’s GeForce Now

Silver Fox expands Asia cyber campaign with new ABCDoor malware

Silver Fox Uses Fake Tax Notices to Deploy ValleyRAT and New ABCDoor Backdoor

Sophisticated “Microsoft Advertising” Phishing Campaign Targeting Microsoft Ad Users

Southcoast Health Data Breach Exposes Social Security Numbers

Student hacked Taiwan high-speed rail to trigger emergency brakes

Teen hacker arrested over French government data leak

The Art of Security: It Is Time to Rethink the CISO’s Role

Transport businesses underestimate impact of disruption from a cyber attack

Trellix confirms data breach after hack of 'a portion' of its source code

Trellix investigates data breach after unauthorized access to source code repository

Trellix reports data breach following unauthorized access to source code repository

Trellix Reveals Unauthorized Access to Source Code

Triad Radiology Associates reports employee email data breach

Trojan abuses Microsoft Phone Link app to steal your passwords

U.S. court sentences Karakurt ransomware negotiator to 8.5 years

Uganda: Mobile money agents sentenced over client personal data breach

Unpatched flaws turn Ollama’s auto-updater into a persistent RCE vector, researchers say

Vimeo confirms breach via third-party vendor impacts 119K users

Vimeo data breach exposes personal information of 119,000 people

Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API

Western Orthopaedics Data Breach Exposes Patients' Personal and Health Information

What the Celebrity Stalkerware Breach Means for Executive Protection

Your Employees Know What Phishing Looks Like. They’re Still Getting Fooled. Here’s Why

Your job search is getting riskier, says LinkedIn - 9 ways to tell real listings from scams

4th May

7 Ways to Modernize Employee Phishing Training for AI-Driven Threats

15-year-old detained over massive data breach at French government agency

2026: The Year of AI-Assisted Attacks

AI Accelerated Cyber-Attacks Aren’t New, But They Are Faster

Amazon Simple Email Service (SES) increasingly abused in phishing to evade detection

Attempted cyber attack affects San Diego Community College systems

Backdoored PyTorch Lightning package drops credential stealer

Bluekit Phishing Kit Automates Domain Setup and Session Hijacking

Bluekit Phishing Kit Automates Domains, 2FA Lures, and Session Hijacking in One Panel

Bluekit phishing kit enables automated phishing with 40+ templates and AI tools

Boutique phishing kit Saiga 2FA reappears with new campaigns and ‘lorem ipsum’ metadata

Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise

Canvas Breach May Put 275 Million Users, 9,000 Schools at Risk

Canvas Confirms Data Breach Following ShinyHunters Claim

Canvas Parent Instructure Confirms Data Breach After ShinyHunters Claims Attack

CISA Alerts on cPanel & WHM Flaw Actively Exploited in Attacks

CISA says ‘Copy Fail’ flaw now exploited to root Linux systems

CISA Warns of Linux Kernel Zero-Day Vulnerability Exploited in Active Attacks

Critical Apache MINA Flaws Enable Remote Code Execution Attacks

Critical cPanel Vulnerability Weaponized to Target Government and MSP Networks

Cybercriminals Abuse Tanstack Package To Target Developer Environments

Cybersecurity professionals jailed for ransom attacks

Cybersecurity Professionals Sentenced to Prison for Ransomware Attacks

Data breach hits Canvas learning platform serving millions

Department of Justice (DOJ) Sentences Two Americans for ALPHV BlackCat Ransomware Attacks

DigiCert breached via malicious screensaver file

Edtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threats

Educational company Infrastructure reports cyber incident

Email Bombing and Fake IT Support Calls Fuel New Microsoft Teams Phishing Attacks

Email Bombing, Fake IT Support Calls Drive Microsoft Teams Phishing Surge

FBI Warns of Surge in Cyber-Enabled Cargo Theft Targeting Logistics Firms

Four Years in Prison for Cybersecurity Pros Turned Ransomware Attackers

Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701 Million

Hackers are mass-exploiting the cPanel bug to gain control of thousands of websites

Hackers breach Canvas learning platform serving millions, steal student data

Hackers replace top Google result for Homebrew with sponsored MacOS malware

Hackers threaten to leak Canvas messages and emails: 275 Million students at risk

If You See This X Message - A Hacker Is Attacking Your Account

Indirect Prompt Injection Is Now a Real-World AI Security Threat

Instructure confirms data breach, ShinyHunters claims responsibility

Instructure data breach: ShinyHunters says it stole data and private messages from 275 million teachers and students

Instructure Data Breach by ShinyHunters puts Students and Teachers to Cyber Risks

Instructure Faces Cyberattack Resulting in Data Breach Affecting Millions in Education Sector

Instructure Investigating Cyber Attack, Exposure of User Data

Instructure Restores Services Following Major Edtech Data Breach

Instructure, Parent of Canvas, Confirms Data Breach

Kaspersky Reveals SilverFox Cyber Attack Disguised as Tax Audit in Indonesia

KnowBe4 finds 86% of phishing attacks now AI-driven

“Legitimate” phishing: how attackers weaponize Amazon SES to bypass email security

Liberty Mutual listed on ransomware leak site as Everest group claims 108 GB data theft

Major car brands face 'unavoidable trade-off' as hackers target millions of vehicles, ex-FBI cyber chief warns

Man from Russian group sentenced in $56 million ransomware scheme

Multiple threat actors actively exploit cPanel vulnerability (CVE-2026-41940)

National Cyber Security Centre (NCSC) Warns Organisations to Act Fast as Hidden Software Flaws Surface

New ‘Bluekit’ Phishing Kit Uses AI Assistant to Simplify and Scale Cyber Attacks

New Phishing Scam Uses Fake Party Invites To Steal Passwords And Personal Data

New Zealand electrical contractor confirms cyber attack

Over 40% of UK Firms Hit by Cyber Attacks Last Year, Government Survey Finds

Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools

Phishing Emails Now Look Legitimate, One Wrong Click Can Expose OTP And Bank Accounts

Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass

Progress warns of critical MOVEit Automation auth bypass flaw

Ransomware accounts for 90% of cyber losses in manufacturing, claims data shows

Ransomware group claims breach of pro-Orbán Hungarian media firm

Ransomware In 2026: Newer Groups, Severe Impact

Ransomware Victims Jump To 7,831 As AI Crime Tools Scale Global Attacks

Rhode Island Settles With Deloitte for $12 Million Over 2024 Ransomware Attack on Benefits System

RMM Tools Fuel Stealthy Phishing Campaign

Sandhills Medical Foundation Notified Individuals of a May 2025 Data Breach

Sandhills Medical Foundation Ransomware Breach Draws Class Action Investigation Nearly a Year Later

ShinyHunters Claims Responsibility for Breach of EdTech Company Instructure

ShinyHunters Claims Responsibility for Instructure Data Breach

ShinyHunters impersonator claims to have hacked Nvidia’s GeForce Now

Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia

Small Defense Firms Lack Network Data to Stop Nation-State Hackers

South Korea: Phishing Sites Disguised as KakaoTalk, Claude Downloads Steal User Data

Teenager alleged to be Scattered Spider hacker arrested in Finland, faces US extradition

'The inbox is no longer the only front line': Report claims vast majority of phishing attacks are now generated by AI - here's how to stay safe

‘The inbox is no longer the only frontline’: Phishing attacks are evolving as cyber criminals ramp up ‘multi-channel’ campaigns over email and Microsoft Teams

Thousands of Facebook accounts stolen by phishing emails sent through Google

Trellix Confirms Source Code Repository Breach

Trellix discloses data breach after source code repository hack

Two cybersecurity pros get prison time for helping ransomware gang

US government warns of severe CopyFail bug affecting major versions of Linux

US healthcare marketplaces shared citizenship and race data with ad tech giants

Weaver E-cology critical bug exploited in attacks since March

Who owns the decision to pay ransomware attackers?

Your work apps are quietly handing 19 data points to someone

Data-Leaking Ransomware Report - April 2026

Welcome to last month's DLR Report, an exclusive presentation of Data-Leaking Ransomware Operator's Global and US Victims that were claimed between 1st April and 30th April 2026.

DBD discovered and researched 771 Global Ransomware Victims over 81 Countries and Islands, including 326 US Ransomware Victims over 42 States and Districts, claimed by 66 Data-Leaking Ransomware Operators in April 2026.

DBD also discovered and researched 8 New Active Ransomware Operators called Aur0ra, BlackWater, Cry0, Lamashtu, M3RX, Prinz Eugen, ShadowByt3$ and TiMc in April 2026.

Download PDF



Data Source: Data Breaches Digest.

Ransomware Operator Claims - Week 17 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 20th April and 26th April 2026, kindly assisted by our partners.

DBD discovered and researched 169 Ransomware Victims over 36 Countries and Islands claimed by 38 Data-Leaking Ransomware Operators, including 1 Newly Discovered Ransomware Operator last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 18 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 27th April and 3rd May 2026.

3rd May

2025 Wirral Bake Off winner loses 43,000 followers in cyber attack

April Was the Worst Ever Month on Record for Crypto Hacks

CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to Known Exploited Vulnerabilities (KEV)

Guam: Governor confirms GovGuam sites under cyber attack

Hacker attack on IBM Information Systems; affected services have been restored

How AppSheet Phishing Put 30,000 Facebook Accounts at Risk

Instructure confirms data breach, ShinyHunters claims attack

Instructure discloses second data breach in less than a year

Paying Ransom Won’t Help as VECT 2.0 Ransomware Destroys Data Irreversibly

Phishing campaign exploits Facebook verification hype, putting over 30,000 accounts at risk

Phishing scam targets Facebook blue tick verification, over 30,000 accounts at risk

Ransomware attack on Sandhills Medical impacted about 170,000 patients

Russian hacker who targeted global oil, gas facilities pleads guilty

SEO Poisoning Attacks Spread Malware via Fake KakaoTalk Downloads

ShinyHunters Claim NVIDIA GeForce NOW User Database Theft

Study warns cost-cutting use of generative AI could increase cyber-attack risks

Telegram Mini Apps abused for crypto scams, Android malware delivery

2nd May

2 US Cybersecurity Experts Jailed for Aiding ALPHV (BlackCat) Ransomware

86% of phishing attacks now AI-driven - Experts warn of a dangerous new era

ADT Confirms Data Breach Potentially Exposing Customer Information Nationwide

Attackers Abuse Google AppSheet, Netlify, and Telegram in Facebook Phishing Campaign

Attackers Deploy AiTM Phishing Pages to Access SharePoint, HubSpot, and Google Workspace

ConsentFix v3 attacks target Azure with automated OAuth abuse

Critical cPanel bug exposes millions of websites to full server takeover

Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks

Cybersecurity pros jailed for ransomware attacks linked to ALPHV BlackCat

French Government Agency Data Breach Exposes Over 1 Crore Citizen Records

Global Cyber Dilemma: FBI Criticizes China's Unchecked Hacker Deployments

Google AppSheet Exploited in 30,000-User Facebook Phishing Operation

Hackers hijack North American cargo shipments, FBI warns

Integrated Pain Associates Data Breach Exposes Social Security Numbers

Mitchell County closes probe into October 2025 cyberattack, confirms data theft

New Bluekit Phishing Kit Features AI Assistant

Qilin drives 43% rise in ransomware attacks

Stolen ChipSoft patient data destroyed following cyberattack

Tasmania: Kingborough Council data breach exposed property owners’ names online

Trellix Confirms Source Code Breach With Unauthorized Repository Access

Trellix discloses the breach of a code repository

Two US cybersecurity experts sentenced in ransomware case, third awaits July ruling

Two Former Cybersecurity Experts Sentenced to Four Years in BlackCat Ransomware Case

Up to $5,000 per Person Incoming in Data Breach Settlement Affecting 530,000 People in Minnesota and Wisconsin

1st May

15-year-old detained over French government agency data breach

30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign

45,000 Attacks, 5,300+ Backdoors Tied to China-Linked Cybercrime Operation

ADT data breach exposes customer information

AI-Powered Ransomware Surge Hits 7,831 Victims Worldwide

Almost half of UK businesses suffered a cyber attack in last year

American Express “Account Limited” phishing scam

As email phishing evolves, malicious attachments decline and QR codes surge

Attackers Abuse CAPTCHA and ClickFix Tactics to Boost Credential Theft Campaigns

Australia: Prime Properties listed as breach victim by M3rx ransomware

Bankinter fined €240K for EVO Banco data breach exposing 1.27 Million records

Bluekit combines AI and phishing in a new all-in-one platform

Booking.com Data Breach: How Can Travellers Stay Protected From Scams?

British cyber agency warns of looming ‘patch wave’ as AI speeds flaw discovery

Canada: Alberta voter info database shut down amidst probes of alleged data breach

Canada: British Columbia judge certifies major class action against TransLink over 2020 ransomware breach

Canada: Massive List of Electors data breach was inevitable - the United Conservative Party’s law-bending style of politics made it so

CAPTCHA and ClickFix Abuse Fuels Credential Theft Surge

China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists

Chinese hacker arrested for hacking into computers of US companies and Universities while allegedly working for Chinese technology company

City of North Battleford reports phishing activities

Commercial spam and phishing attacks increasingly leverage trusted platforms

Critical cPanel Vulnerability Lets Attackers Bypass Login, Gain Root Access

Cyber Breaches Survey: Phishing & Supply Chain Risks Soar

Cyber incident responders who carried out ransomware attacks given 4-year sentences

Cyber spies target Russian aviation firms to steal satellite and GPS data

Cyberattack hits Alexforbes as phishing emails sent from CEO’s account

Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks

Cybercriminals Leak Data From Minnesota Ransomware Incident

Delta Air Lines joins American Airlines, and Lufthansa to Issue Warnings as U.S. Travel Sector Faces Rising Threats from Business Aircraft Phishing and Cybersecurity Breaches

Edu tech firm Instructure discloses cyber incident, probes impact

FBI Warns of Surge in Hacker-Enabled Cargo Theft

Federal agencies must patch cPanel bug by Sunday, CISA says

Fortinet warns ransomware victims rise 389% amid AI

France: The State releases 200 million euros after the data breach at ANTS

France opens formal probe into teenage suspect in massive ID data breach

Hackers Use Jenkins Access to Deploy DDoS Botnet Against Gaming Servers

Health research charity reports itself to Information Commissioner’s Office (ICO) over major data breach

International authorities bust €50 Million online investment fraud network

Iran Hackers target Canonical Ubuntu Software with DDoS Attack

Liberty Mutual ransomware attack exposes thousands of policyholders, hackers claim

Massive Football Data Breach Exposes Top Players' Sensitive Information

Medicare Data Breach Exposes Sensitive Information

Michigan: Charges dismissed in Hillsdale County 2020 voting machine data breach case

Microsoft Flagged 8.3 Billion Phishing Emails in Q1 as QR Codes, CAPTCHAs Rise

Microsoft warns of surge in QR code phishing attacks

Multi-platform targeting, AiTM capabilities flexed by novel Bluekit phishing kit

Nearly every Linux system built since 2017 vulnerable to ‘Copy Fail’ flaw

New software supply chain attack uses sleeper packages for credential theft and CI tampering

New York State secures $2.25 Million penalty against Delta Dental over data breach failures

NightSpire: Wannabe warlords in ransomware’s shadow realm

Nine-Year-Old Zero-Day Flaw in Linux Kernel Discovered by AI-Equipped Security Researcher

North Korea monopolizes crypto crime market

North Korea’s Enormous Crypto Hacks Redefine Scale and Strategy

Phishing campaign mimics DHL to steal user credentials

Phishing emails prompt North Battleford to shut down recreation booking system

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

QuickBooks phishing scam targets refund disputes to steal banking details

QR code phishing surges 146% as Microsoft detects and analyzes 8.3 billion phishing threats in Q1 2026 - attackers are changing tactics to bypass security

QR code, CAPTCHA-gated phishing more than doubled in Q1 2026

Ransomware Attack on Good Samaritan Health Center Affects 10,000 Individuals

Ransomware attacks on auto industry rise, the security steps you need to take now

Ransomware Defenses Appear to Be Holding; Challenges Loom

Ransomware Victims Jump to 7,831 as AI Crime Tools Scale Global Attacks

Ransomware Victims Surge 389% As AI-Enabled Cybercrime Accelerates

Ryan Goldberg of Sygnia and Kevin Martin of DigitalMint Get 4 Years for BlackCat Ransomware

Sentencing of Ransomware Attackers Highlights Cybersecurity Challenges

Shadow AI risks deepen as 31% of users get no employer training

SonicWall releases firmware updates for three CVEs

South Korea: Golf Club Follows Duo in Latest Personal Data Breach

Steel Warehouse Co. Data Breach Exposes Social Security Numbers

Tens of thousands of screenshots linked to European celebrity exposed in spyware breach

Thailand: Nordic hacker arrested in Pattaya hotel scam

The Browser Blind Spot Your Privacy Program Is Missing

This selfie background editor is a password-stealing trap

Two American Cybersecurity Workers Jailed for BlackCat Ransomware Attacks

Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks

Two US Security Experts Sentenced to Prison for Helping Ransomware Gang

U.S. Consumers Lost $2.1 Billion in Social Media Scams in 2025

UAE issues warning as Iran deploys AI for cyber attacks

Ubuntu services hit by outages after DDoS attack

UK businesses face persistent cyber breaches, with phishing as a primary threat

UK cyber survey shows stagnant breach preparedness

UK Government Urges Action Amid ‘Significant’ Cyber Attacks

US ransomware negotiators get 4 years in prison over BlackCat attacks

US weighs cutting cyber fix deadlines to 3 days as AI speeds up cyberattacks

Vietnamese operation uses Google AppSheet for Facebook phishing, targets 30,000 accounts

Why Organizations Need to Adapt Their Defenses to Protect Against the Rise of Phishing-as-a-Service

30th April

7 Million Attacks in 28 Days: The Massive Surge in Device Code Phishing

9-Year-Old Linux Kernel Vulnerability “Copy Fail” Enables Full Root Access

15-year-old arrested in massive French Government data leak

15-year-old hacker 'breach3d' probed for massive French ID leak

AI is biggest cyber threat to CISOs, NCC Group warns

AI-Driven Cybercrime Led to a 389% Increase in Ransomware Victims

Airbus Subsidiary Victim of $2 Million Ransomware Attack

Asian Football Confederation reportedly suffers massive data breach

Australian Prudential Regulation Authority (APRA) Issues AI Risk Warning to Banks and Insurers

Auto industry ransomware attacks more than doubled in 2025

Backdoored WordPress Plugin Uses Remote Update for Code Delivery

Bad bots make up 40% of internet traffic

Billions of Chrome Users Urged to Update After Google Patches 30 Security Flaws

Canada Life data breach exposes personal information of thousands of customers

Carnival Corporation hit by suspected ransomware attack

China's hacker-for-hire ecosystem 'out of control'

CISA and Partners Publish Zero Trust Guidance For Operational Technology (OT) Security

Community Health Systems Data Breach: PHI and PII Exposed

Comparitech assesses healthcare ransomware decline in volume but escalates in impact, marking strategic shift

Coupang probe tests the U.S.’s willingness to protect its tech giants abroad

Courts approve to settle 2 class action healthcare data breach lawsuits

cPanel 0-Day Auth Bypass Exploited in the Wild, Proof-of-Concept (PoC) Released

cPanel zero-day exploited for months before patch release (CVE-2026-41940)

Critical cPanel Authentication Bypass Exposes Hosting Systems

Cyber Criminals Leak Data From Minnesota Ransomware Incident

Cyber is the Number One Global “People Risk”

Deep#Door Python Backdoor Evades Detection On Windows

Dental practice software maker fixes bug that exposed patients’ medical records

Device code phishing emerges as scalable threat to Microsoft 365 and Entra ID access

Dubai Police Smash International Scam Empire in Massive FBI and China-Led Operation

Dutch Health Tech Firm ChipSoft Confirms Destruction of Stolen Patient Data

Dutch healthcare software firm claims hackers destroyed stolen medical records amid ransom speculation

EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

Europol Busts Albanian Scam Call Centers in Major Online Fraud Case

FBI: Chinese Hacker Extradition Sends a Global Message

FBI and International Agencies Shut Down Scam Centers, Arrest 276 People

FBI links cybercriminals to sharp surge in cargo theft attacks

Federal charges filed against teen hacker allegedly part of Scattered Spider

Football Leaks hacker Rui Pinto acquitted of 241 counts in second Portuguese trial

Former incident responders sentenced to 4 years in prison for committing ransomware attacks

France arrests 15-year-old hacker who stole data of 11.7 million people

France Investigates 15-Year-Old Over Alleged ANTS Agency Hack

France investigates 15-year-old over alleged hack of national ID agency

France opens formal probe into teenage suspect in massive ID data breach

France probes teenage suspect in massive ID data breach

Frontwave Credit Union Data Breach; Social Security Numbers Exposed

Frontwave Credit Union Discloses Data Breach Involving Member SSNs

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

Hacker Extracts Over $5 Million from Wasabi Protocol

Hackers are actively exploiting a bug in cPanel, used by millions of websites

Hackers arrested for stealing and reselling 600,000 Roblox accounts

India’s cybersecurity watchdog warns of AI-driven cyber threats

Jenkins Patches High-Severity Plugin Vulnerability Including Path Traversal and Stored XSS

KnowBe4 Research Finds 86% of Phishing Attacks are AI Driven

Linux Kernel Flaw ‘Copy Fail’ Exposes Widespread Privilege Escalation Risk

Manufacturing Industry Top Target of Costly Cyber Attacks

Massive Online Scam Network Busted By Europol In €50 Million Crackdown

Metropolitan Police face criticism for using AI to spy on their own officers

Microsoft Detects 8.3 Billion Email Phishing Threats in Q1 2026

Misconfigured Server Run by Hackers Leaks 345,000 Stolen Credit Cards

Moldova’s health insurance agency reports possible data leak after cyberattack

Most modern phishing campaigns are AI-enabled

Movistar Peru data breach impacts 4 million users

Nearly half of UK businesses pwned last year as phishing keeps doing the job like it's 2005

New Bluekit phishing service includes an AI assistant, 40 templates

New Global Scam Uses Fake Meeting Links to Run PowerShell Malware

New Linux ‘Copy Fail’ flaw gives hackers root on major distros

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

New Phoenix Platform Drives Brand-Impersonation Smishing

New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials

Nine-year-old Linux kernel flaw enables reliable local privilege escalation (CVE-2026-31431)

One tiny exploit gives full Linux access: all kernels since 2017 are vulnerable

Over 40% of UK firms suffered cyber attack last year, survey finds

Phishing Campaign Abuses Event Invitations To Target U.S. Firms

Phishing Now Top Method for Initial Unauthorized Network Access

Polymarket denies data breach claims by hacker Xorcat

Private Chats, Photos of Celebs Exposed in Suspected Stalkerware Leak

ProFTPD SQL Injection Flaw Enables Remote Code Execution

Proof-of-Concept (PoC) Released for Critical ASUSTOR ADM Root RCE Vulnerability

PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

Qilin Ransomware Enumerates RDP Authentication History on a Compromised Server

Qinglong Vulnerabilities Enable RCE, Exploited in Attacks

Ransomware Attacks on Schools: 4 Warning Signs IT Teams Shouldn’t Ignore

Ransomware Defense Starts with Your Vendors

Ransomware Victims up 389%, Time-to-Exploit (TTE) in Less Than Two Days: How Can Defenders Stay Ahead?

Robinhood admits its own email system was used to scam you

Roblox account hackers make $225K profit, but end up in handcuffs

Sandhills Medical Foundation Ransomware Attack Affects 169,000 Patients

Sandhills Medical Says Ransomware Breach Affects 170,000

SAP npm Packages Compromised to Steal Developers, CI/CD Secrets

SilverFox phishing campaign uses fake tax audits to deploy backdoor malware

SMS phishing campaign targets Australia & New Zealand

South Africa: Durban beachfront phishing syndicate busted

South Korea: Financial Supervisory Service (FSS) Orders 4.5-Month Business Suspension for Lotte Card Over Data Breach

Tax season phishing scams surge with fake government sites

Teen Hacker Breach: French ID Agency Data at Risk

Thailand: Hacker who scammed Pattaya hotel guests arrested

Thailand: Swedish hacker arrested in Pattaya for hotel data breach scam targeting tourists

Think It's A Party Invite? New Phishing Scam Uses Fear of Missing Out (FOMO) to Steal Your Passwords

Three Arrested for Hacking Over 610,000 Roblox Accounts

Tri-Cities Gastro Data Breach Exposes Personal Information Including SSNs

UK Education Sector Faces Surge in Cyber Breaches Despite Stable National Threat Levels

Vertu Motors lands multi-million payout from Jaguar Land Rover (JLR) cyber-attack

Vertu Motors settles £3.9m insurance claim from Jaguar Land Rover (JLR) cyber attack

Vertu Motors to receive £3.4m insurance payout after Jaguar Land Rover (JLR) cyber attack disruption

Vertu secures £3.4m payout after Jaguar Land Rover (JLR) cyber disruption

Windows Zero‑Day Vulnerability Enables NTLM Credential Theft

29th April

88% of self-hosted GitHub servers exposed to Remote Code Execution (RCE), researchers warn (CVE-2026-3854)

A Chinese man could have stolen aerospace software from NASA and Pentagon with phishing for 4 years

A Quarter of Healthcare Organizations Report Medical Device Cyber-Attacks

A sneaky cyber enemy is creeping into our browsers and password managers

Agentic AI’s Problem Isn’t Capability It’s Accountability

Americans lose $2.1 billion to Facebook scams, an eightfold jump since 2020

Amtrak data breach exposes millions of customer records

Barrier to hacking drops as AI and dark web tools let anyone launch cyberattacks, Europol warns

Buggy Vect ransomware is effectively a data wiper, researchers find

Canada: Government Employees Affected by Canada Life Data Breach

Churchill Claims Services Data Breach Exposes 2,610 Records

CISA Adds Actively Exploited ConnectWise and Windows Flaws to Known Exploited Vulnerabilities (KEV)

CISA Alerts on Microsoft Windows Shell Zero-Day Under Active Exploitation

CISA orders feds to patch Windows flaw exploited as zero-day

CISA Warns ConnectWise ScreenConnect Vulnerability Actively Exploited in Attacks

CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)

Construction Tycoon Rishikesh Gauli Arrested by Nepal Police for Data Breach

Corporate Affairs Commission (CAC) finally speaks on manipulation of firms’ data after cyber attack in Nigeria

cPanel, WHM emergency update fixes critical auth bypass bug

Critical cPanel Authentication Vulnerability Identified - Update Your Server Immediately

Critical Cursor Vulnerability Exposes Developer Workstations To Remote Code Execution

Critical Flaw In VECT 2.0 Ransomware: Large Files Being Permanently Destroyed

Critical Flaw Turns Vect Ransomware into Data Destroying Wiper

Cursor AI Agent Wipes PocketOS Database and Backups in 9 Seconds

Cursor AI Extension Token Access Flaw Could Lead to Full Credential Compromise

Cursor AI IDE vulnerability allows code execution via hidden Git hooks

Cursor Extension Flaw Exposes Developer API Keys

Cyberattack shuts down Adams County servers; Week-long restoration effort continues

Estée Lauder reaches proposed settlement in Canada data breach class action

European police dismantles €50 million crypto investment fraud ring

Europol's Internet Organised Crime Threat Assessment (IOCTA) 2026 report flags shift to industrialised cybercrime powered by AI, ransomware and data theft

Fake tickets to phishing: the scams targeting 2026 FIFA World Cup soccer travellers

FBI’s Hospital Cyber Plea: Why Info-Sharing Fails Against the Ransomware Wave

Floppy to Mythos, how ransomware grew into multibillion-dollar industry

'For sale on the dark web': Australian travellers may be caught up in Euro rail pass data breach

GitHub Fixes Critical RCE Bug CVE-2026-3854 Within Hours of Discovery

GitHub fixes RCE flaw that gave access to millions of private repositories

Hackers Abuse Robinhood Signup Process to Deliver Phishing Emails

Hackers arrested for hijacking and selling 610,000 Roblox accounts

Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining

Identity discovery: The overlooked lever in strategic risk reduction

India: CERT-In Warns of AI-Driven Cyber Threat Surge, MSMEs at Highest Risk

Industrial manufacturing tops Digitain cyber risk ranking

Internet Organised Crime Threat Assessment (IOCTA) 2026 Report Warns of Rising AI-Driven Cybercrime and Dark Web Threats

Large technology wholesaler in South Africa hit by data breach

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets

Mass Data Breach at Matchmaking Firm Spurs Fears of Deepfake, Fraud Risks

Microsoft Confirms Windows Flaw Is Being Exploited After Incomplete Patch

New AI-Powered Bluekit Phishing Kit Targets Major Platforms with MFA Bypass Attacks

New ransomware is so badly coded it destroys your files instead of holding them hostage

New VECT 2.0 Ransomware Destroys Files Over 128 KB Across Windows, Linux, and ESXi

New VECT 2.0 Ransomware Targets Multi-Platform Systems

New Wave of North Korean Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs

New Zealand: A March cyber attack on the Hutt City Council – that originated from a staff member responding to a phishing email – has exposed the identity and financial information of hundreds of people to hackers

New Zealand: Hundreds at risk after ‘malicious’ Hutt City Council cyber attack

New Zealand: Identity and financial details leaked in Lower Hutt council cyber attack

New Zealand council cyber attack leads to ID and financial data being exposed

Nigeria: Corporate Affairs Commission (CAC) denies manipulation of DAAR Communications records after cyber attack

Official SAP npm packages compromised to steal credentials

One git push from disaster: this fundamental GitHub flaw could’ve compromised the world’s code

Payroll-Related Phishing Emails Circulating Across New Jersey

Phishing in contaminated water: Mountain View warns residents of scams after water main breach

Phishing scam targeting expectant women masquerades as Malaysian government aid scheme

Phoenix Rising: Exposing the PhaaS Kit Behind Global Mass Phishing Campaigns

Polymarket denies data breach, says hacker is selling public data

Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen

Polymarket Rejects Dark Web Claims of Massive Data Breach

Popular WordPress redirect plugin hid dormant backdoor for years

Protecting U.S. Critical Infrastructure as Global Tensions Rise

Ransomware accidentally destroys all files larger than 128KB, preventing decryption - VECT code likely partly vibe coded with AI or used an old code base, security researchers suggest

Ransomware posts rise 22% as leak sites proliferate

Ransomware Responsible for 90% of Manufacturing Cyber Losses

Researchers Track 2.9 Billion Compromised Credentials

Resilience report finds manufacturing leads global cyberattack targets, with ransomware dominating losses

Resilience report highlights financial impact of ransomware on manufacturing

Robinhood users beware: the "perfect phishing email" is waiting for you

Royal Canadian Mounted Police (RCMP) says no compensation after firearm owners’ data breach affecting 2.2 million people

SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack

Scammers vibecode server to verify stolen credit cards, leak details of 345K cards

ShinyHunters Ransomware strikes Vimeo and Carnival Corporation

Signal promises new security measures after wave of phishing attacks

Signal warns users after sophisticated phishing attacks compromise German officials

SLOTAGENT Obfuscation Tactics Challenge Security Researchers

Sri Lanka discloses another missing payment, days after hackers stole $2.5 Million from its finance ministry

Starr Insurance Data Breach Exposes Sensitive Personal and Medical Information

Stealth Spear-Phishing Campaign Targets Government Systems: New Malware Uses Obfuscation And Staged Payloads To Evade Detection

Stelia North America hacked in ransomware attack

Stolen patient data from Dutch firm ChipSoft destroyed after cyberattack

Suspected Russian phishing campaign targets German officials via Signal

Swiss police arrest 10 suspected members of Nigeria-linked crime group Black Axe

Teen hacker’s lavish lifestyle curtailed after feds uncover Scattered Spider links

Thailand: Hacker who scammed Pattaya hotel guests arrested

This New Ransomware Is So Broken It Permanently Destroys Your Files Instead of Encrypting Them

U.S. Charges Suspected Scattered Spider Member for Infiltrating Sensitive Computer Systems

UK Biobank data breach exposes half a million records

US, China partner on scam center takedown in Dubai

US-Estonian Suspect Arrested Over Alleged Scattered Spider Cyberattacks

Uzbekistan investigates alleged leak of state employee data

Vect 2.0 RaaS Expands Attacks Across Windows, Linux, and ESXi

Vect 2.0 Ransomware Acts as Wiper, Thanks to Design Error

VECT ransomware is so flawed it can’t even unlock encrypted files, researchers warn

Vect unveiled: Inside an emerging ransomware group’s affiliate network

Vimeo Confirms Data Breach After Hackers Access User Database

Vimeo confirms data breach linked to third-party analytics vendor, hackers threaten leak

With VECT ransomware, paying is not an option

Your Data Under Siege: Ransomware Threatens Millions; Smart Ways to Protect Yourself from Digital Blackmail

28th April

$2.4 billion utilities company Itron reports internal network security breach

2025 Saw Fewer Healthcare Breaches Than 2024

150,000+ football passports leaked weeks before FIFA World Cup

ADT Confirms Major Data Breach Exposing Millions of Names, Partial SSNs

ADT data breach affects 5.5 million customers as hackers begin leaking stolen info online

AI, Encryption, and Crypto Power New Wave of Global Cybercrime

Alleged China-Linked Hacker Extradited To U.S. By Italy

Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research

Alleged Chinese State Hacker Extradited to US

Alleged Chinese state-backed hacker extradited from Italy to US over COVID-era cyber espionage case

Alleged 'Hafnium' hacker-for-hire extradited to the United States

Ameriprise data breach hits 48,000 customers

Australia and New Zealand (ANZ) Organizations Are in the Ransomware Crosshairs - What the Dark Web Is Telling Us

Australia scam losses rise as reports fall in 2025

Bank of Scotland customers in new data breach fear as Lloyds pays out £200,000

Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign

Broken VECT 2.0 ransomware acts as a data wiper for large files

Canada’s first SMS blaster case leads to three arrests

Canadian authorities arrest 3 in SMS blaster phishing scheme

Carnival Corporation Investigating Possible Ransomware Attack

Checkmarx confirms LAPSUS$ hackers leaked its stolen GitHub data

China-linked hackers led phishing campaigns targeting journalists and activists, researchers say

Chinese National Extradited Over Silk Typhoon Cyber Campaign

Chinese National Xu Zewei Extradited for HAFNIUM Cyberattacks, Appears in US Court for 9-Count Indictment

Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattacks

Chinese spear-phishing campaign targets NASA employees

Chinese-Backed Smishing Rings Scale Credential Theft via SMS and Over-the-Top (OTT) Apps

ClickUp Data Leak Exposes Enterprise Emails for Over a Year

ClickUp Hardcoded API Key Exposes Almost 1,000 Customer Emails, Including Government and Corporate Giants

Connected Credit Union Data Breach Exposes Sensitive PII Including SSNs

Credit Technologies Data Breach Potentially Exposes Personal Information of Individuals

Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

Cyber Insurance Data Gives CISOs New Ammo for Budget Talks

Cyberattacks in Spain: What small businesses should know

Cybersecurity Incident Strikes Contractor Handling Jurong Region Line (JRL) MRT Stations and NEWater Factory 3 Projects

DDoS Cyber Attack makes eBay lose $200m per Day

Don't pay Vect a ransom - your data's likely already wiped out

Even cybersecurity researchers are exposing secrets in their arXiv LaTeX source

Ex-Ransomware Negotiator Pleads Guilty to Extorting U.S. Victims, $10 Million in Assets Seized

FBI extradites Chinese hacker accused of stealing COVID-19 research

Feuding Ransomware Groups Leak Each Other's Data

Fidelity to pay $1.25 million over 2024 data breach affecting 77,000 customers

French police arrest 21-year-old "HexDex" hacker over 100 alleged data breaches

Germany Caught Up in Likely Russian Signal Phishing

Germany suspects Russia behind signal phishing attack on top Government officials

Germany Suspects Russia Is Behind Signal Phishing That Targeted Top Officials

Gmail Users Warned About Sophisticated AI-Driven Phishing Attacks

Green Imaging Data Breach Exposes Patient Medical and Personal Information

Guardz Warns MSPs of Cloud Ransomware and Business Email Compromise (BEC) Risks

Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw

Hackers exploit Robinhood account creation tool to launch worrying phishing scam

Has your Signal account been hacked in the latest phishing attacks?

Have I Been Pwned claims Pitney Bowes hit by 8.2 Million email address leak

Have you asked Ryanair for compensation? Your bank details could now be for sale

How Many People Fall for Phishing Scams in USA

How to Recognize and Avoid Phishing Attacks in 2026

Hugging Face LeRobot Vulnerability Enables Unauthenticated Remote Code Execution Attacks

Industrial Control Systems (ICS) intrusion detection has blind spots that complicate plant security

Inside an OPSEC Playbook: How Threat Actors Evade Detection

Iranian APT OilRig Hides Malware Config Inside Google Drive Image

Isle of Man: Manx Telecom notifies customers of data breach

Italy extradites Chinese hacker accused of spying during Covid-19 pandemic to US

JC Resorts Data Breach Exposes Social Security Numbers

Kamasers DDoS Botnet With Loader Capabilities Attacking Organizations to Deploy Ransomware

Lawsuit accuses Impac Mortgage of waiting two years to disclose borrower data breach

Lloyds Bank compensates another 1,625 customers after ‘alarming’ data breach

Medical Device Maker Medtronic Announces Data Breach

Medtronic Confirms Breach After Hackers Claim 9 Million Records Theft

Medtronic confirms cyberattack on corporate IT systems amid claims of massive data theft

Medtronic Confirms Data Breach After ShinyHunters Claims

Medtronic Confirms Data Breach, No Impact on Operations or Patient Safety

Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202

Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

Missouri Democrats Call for Investigation Following School Voucher Data Breach

Missouri Lawmakers Clash Over Massive School Voucher Data Breach

Monumental Sports & Entertainment Data Breach Affects 10k

MP David Davis's website hit by suspected cyber attack

MP Sir David Davis's website shut down in suspected cyber attack

Navigator360 has suffered a hacker attack: more than 93 GB have been stolen

New Bank of Scotland data breach fears as 80,000 more customers hit by IT glitch

New BlobPhish Attack Leverages Browser Blob Objects to Steal Users’ Login Credentials

New DHL Phishing Scam Uses 11-Step Attack Chain to Steal Passwords

New Linux FIRESTARTER Backdoor Targets Cisco Firepower Devices

New phishing scam targets your Fear of Missing Out (FOMO) with fake party invitations

No Metrics Are Better Than Bad Metrics in the Security Operations Center (SOC), Says National Cyber Security Centre (NCSC)

North Korean Hackers Target Crypto Firms with ClickFix and AI-Made Zoom Lures

Notepad++ Releases 8.9.4 Patch to Fix String Injection Vulnerability (CVE-2026-3008) in 8.9.3

Over 500,000 Lloyds customers hit by data breach - yet bank finds zero fraud cases

Pack2TheRoot: 12-Year-Old Linux PackageKit Flaw Enables Full Compromise

Paragon is not collaborating with Italian authorities probing spyware attacks, report says

Phishing Emails That Look Real Target Robinhood Users via Gmail Dot Alias Feature

Phishing scam targeting Robinhood via Gmail: the alias trick deceives users with flawless emails

Police arrest 10 suspected members of Black Axe cybercrime gang

Pro-Iran hacker group claims release of 2,379 US Marines’ data in Persian Gulf

Ransomware accounts for 90% of cyber losses in manufacturing

Ransomware Turf War as 0APT and KryBit Groups Trade Blows

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

Robinhood account creation flaw exploited for phishing emails

Robinhood Phishing Emails Target Users via Account Creation Flaw

Robinhood Users Hit by Phishing Campaign Leveraging Gmail Address Quirk

Robinhood Users Targeted by Gmail Dot Trick Phishing Attack

Robinhood Vulnerability Exploited for Phishing Attacks

Security researcher claims ClickUp vulnerability is leaking customer data

ShinyHunters claims it stole 1.4 million records from Udemy

Signal Phishing Campaign Targets German Officials in Suspected Russian Operation

Signal to roll out anti-phishing safeguards following account takeovers

Signal warns users after Russian hackers compromise accounts

Silk Typhoon: Hacker extradited to the US for “COVID espionage”

Sophisticated Phishing Attack Targets Microsoft Teams Users

Study warns cost-cutting use of generative AI could increase cyber-attack risks

Targeted Covid-19 research: Chinese state-sponsored hacker arrested by FBI after Italy extradition

The intricate balancing act of cyber resilience

The metrics killing your Security Operations Centre (SOC), and what to use instead

Third-party cyber risks emerge as weak link for banks after data breach concerns

Ukrainian police detain hackers suspected of stealing thousands of Roblox accounts for resale

US Healthcare Data Breach Crisis Impacts Millions

US reportedly charges Scattered Spider hacker arrested in Finland

US state privacy fines reached $3.425 billion in 2025

US Supreme Court appears split over controversial use of ‘geofence’ search warrants

VECT: Ransomware by design, Wiper by accident

VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXi

VECT Ransomware: When Paying is Not a Recovery Strategy and Won't Get Your Files Back

VECT Ransomware: Why Paying Won’t Get Your Files Back

Vect ransomware actually destructive wiper malware

Video service Vimeo confirms Anodot breach exposed user data

Video site Vimeo blames security incident on Anodot breach

Vimeo Confirms User and Customer Data Breach

Vimeo faces extortion demands from ShinyHunters: “pay or leak”

Weeks After Remita, Sterling Bank Hack, More Nigerian Institutions Succumb to Data Breaches

Why Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks About

Why Unofficial Download Sources Are Still a Security Risk in 2026

27th April

82 Chrome Extensions Found Selling User Data, 6.5 Million Users Affected

500,000 UK volunteers’ medical data listed for sale on Alibaba

Abu Dhabi Department of Finance Super Admin Access Sale

ADT Breach Confirmed: Names, Phone Numbers, and Addresses Exposed

ADT Breach Exposes Data of 5.5 Million Customers, ShinyHunters Likely Behind Attack

ADT Confirms Data Breach After Extortion Attempt by ShinyHunters

ADT confirms data breach after ShinyHunters threatens data leak

ADT confirms new data breach after hacking group threatens record leak

ADT Data Breach Exposes Sensitive Personal Information for 5.5 Million Accounts

AI startup Mercor faces mass litigation following data breach

Alleged Silk Typhoon hacker extradited to US for cyberespionage

Americans lost over $2.1 billion to social media scams in 2025

Amtrak data breach exposes millions of customer records

Attackers Chain Flaws to Backdoor CODESYS Applications and Deploy Malicious Code

Attackers use Microsoft Teams, fake mailbox repair utility to breach organizations

BlackFile Group Targets Retail and Hospitality with Vishing Attacks

BlackFile hackers target retail, hospitality with vishing and data extortion

Canada arrests three for operating “SMS blaster” device in Toronto

CARE Clinic Data Breach Potentially Exposed PHI

Carnival Corp. probes alleged data breach

Carnival Corporation Targeted in Ransomware Attack

Carnival Cruise Line Faces Ransom Demand From Hacker: Warns Online Claims May Be Inaccurate

Carnival Investigates Potential Data Breach Affecting Millions Of Cruisers

Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23rd Attack

China-Backed Groups are Using Massive Botnets in Espionage, Intrusion Campaigns

Chinese spy posed as researcher in spear-phishing campaign targeting NASA to steal defense software

Client information data breach costs Fidelity $1.25 million in Massachusetts fine

Consumers lost $2.1 Billion to social media scams in 2025, Federal Trade Commission (FTC) reports

Critical Gemini CLI Vulnerability Enables Remote Code Execution Attacks

Critical infrastructure giant Itron says it was hacked

Crypto thieves ramping up attacks on Apple users

CTM360 Exposes Global GovTrap Campaign With 11,000+ Fake Government Portals Targeting Citizens Worldwide

Cyber crooks got Robinhood to send phishing emails to its own users

Device codes are the new frontier for phishing as Barracuda detects 7 million attacks in four weeks

Ellipal Cryptocurrency Wallet Suffers Alleged Data Breach

Extradition Drama: Italian Government Approves Chinese Hacker's Transfer to U.S.

Fake Android Apps Distributing Spyware, Linked to Italian Surveillance Vendor IPS

Fake CAPTCHA International Revenue Share Fraud (IRSF) Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud

Family Federation for World Peace and Unification (FFWPU) and Tongil Group Face Extensive Data Breach

FBI, Indonesian Authorities Team to Take Down Site Ripping Off Users for Millions

Fidelity Fined $1.25 Million Over Client Data Breach

Fidelity to Pay $1.25 Million Over 2024 Data Breach

Fidelity to Pay $1.25 Million to Settle Massachusetts Claims From 2024 Data Breach

Former FBI Deputy Cyber Chief Calls for Terrorism Classification for Healthcare Ransomware Actors

Former Ransomware Negotiator Pleads Guilty to Aiding Attackers

French passport-and-ID portal taken offline after cyber-attack, causing application backlog

French police arrest hacker ‘HexDex’ for alleged widespread data theft

Garmin cyberattack disrupts online services, no evidence of customer data breach

Germany accuses Russia of targeting top politicians in Signal phishing attack

Germany blames Russia for Signal phishing attacks on MPs

Germany suspects Russia is behind Signal phishing that targeted top officials

GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions

Google users receive $30 bills after fake CAPTCHA scammed them into sending premium text messages

Hacker who allegedly carried out cyberattacks for China is extradited to U.S.

Hackers claim millions of records stolen in ADT breach

Hackers got data on 5.5 million ADT customers by phishing, report says

Hackers impersonate Microsoft Teams help desk to breach corporate networks

Home security giant ADT data breach affects 5.5 million people

How account takeover is reshaping higher-education cyber risk

How to Prepare for GenAI-Driven Threats and Ransomware Attacks

India: CERT-In warns of AI-driven cyber attack risks

International Tensions: Extradition of Chinese Hacker Xu to U.S. Sparks Controversy

Italy: Extradition decree signed for Chinese hacker arrested at Malpensa Airport

Italy extradites alleged Chinese hacker to US accused of spying for Beijing during COVID-19 pandemic

Italy extradites alleged Chinese state hacker to US

Italy extradites Chinese hacker to US

Italy extradites Chinese national wanted by US for alleged hacking

Italy extradites ‘dangerous foreign hacker’ from China wanted by US authorities

Italy plans to send ‘wanted’ Chinese hacker to US authorities

Itron discloses cyberattack after unauthorized access to internal systems

Itron, Inc. Discloses Data Breach After Hackers Accessed Internal Systems

Itron IT Breach: Unauthorized Access Detected on Internal Network

Jeff Honeycutt Insurance Agency Data Breach Exposes Client Info

Kent District Library blames ‘ransomware’ for closures

Korea's Fair Trade Commission (FTC) Orders Coupang, Naver to Revise Unfair Data Breach Clauses

LAPSUS$ Claims Vodafone UK Breach in New Alleged Cyberattack

Lee & Lee Country Club Personal Data Breach...Possible Involvement of North Korean Hackers

Linux ELF Malware Generator Evades Machine Learning (ML) Detection Using Semantic-Preserving Changes

Litecoin Hit by Zero-Day Vulnerability, Triggers 13-Block Reorganization

Maryland property search tool is back online, nearly two weeks after cyber attack

Medical device giant Medtronic confirms data breach incident

Medtronic confirms breach after hackers claim 9 million records theft

Medtronic Data Breach Exposes Millions of Records

Medtronic reports data breach on corporate IT systems

Microsoft Store App Vibing.exe Accused of Harvesting Screens, Audio, and Clipboard Data

Money launderer for crypto thieves given 5-year sentence

Money launderer linked to $230 Million crypto heist gets 70 months in prison

Morocco’s road safety agency warns of fake website used for phishing scam

Most Cybersecurity Professionals Feel Undervalued and Underpaid

Multiple OpenClaw Vulnerabilities Enable Policy Bypass and Host Override Attacks

Narteks Tekstil A.S. Suffers Krybit Ransomware Attack

Nessus Agent Vulnerability on Windows Allows Arbitrary Code Execution as SYSTEM

Netflix Phishing Scams: They’re More Dangerous Than You Think

Now a ransomware turns quantum computing safe in encryption

One ransomware crew now drives half of all cyber claims

Operation TrustTrap Reveals 16,800 Fake Domains Exploiting User Trust

PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

Proof-of-Concept (PoC) Exploit Released for Critical Metabase Enterprise RCE Vulnerability

PyPI package with 1.1 Million monthly downloads hacked to push infostealer

Qilin Ransomware claims to have breached Inspira, Muller, A&A, Longwood, Exclusive, Istarpal

Ransomware attacks affect 2 senior care providers

Ransomware hackers are now targeting victims with an Infrastructure driven Approach

Researchers Identify Fast16 Sabotage Malware That Pre-Dates Stuxnet

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

Robinhood account creation flaw abused to send phishing emails

Robinhood suffers phishing attempt ahead of quarterly earnings

Russia suspected of targeting senior officials in major cyberattacks

ShinyHunters group claims massive data theft from home security provider ADT

ShinyHunters Leaks Data of Udemy, Zara, 7-Eleven in Salesforce Linked Breach

South Texas Oncology and Hematology Pays $1.1 Million to Settle Data Breach Lawsuit

Sri Lanka: Banks alert customers to phishing attacks

Supreme Court signals location data searches should require a warrant

Synmosa Biopharma Hit by Dragonforce Ransomware Attack

Tennessee becomes second state to ban cryptocurrency ATMs over scam concerns

Texas Tech University Health Sciences Center says 2024 breach impacted 813,892 patients

The $700 million question: How cyber risk became a market cap problem

The AI criminal mastermind is already hiring on gig platforms

‘This was not an isolated incident’: Chinese national exposed by NASA investigation in serial defense software theft phishing campaign that lasted years

Toronto Police Bust Mobile Smishing Network Targeting Thousands

Two researchers stumble on pre-Stuxnet malware that may have targeted Iran's nuclear program

U.S. utility giant Itron discloses a security breach

Udemy Data Breach Results in 1.4 Million Accounts Leaked by ShinyHunters

Uganda Ministry of Agriculture (MAAIF) Suffers Data Breach

UK Biobank data breach exposes medical records of 500,000 people

UNC6692 Hackers Exploit Microsoft Teams to Deploy SNOW Malware

US Sanctions Target Cambodian Scam Network Leaders

Utilities Tech Supplier Itron Discloses Cyber-Attack, Operations Unaffected

Vidar Infostealer Spreads via Fake CAPTCHAs, Hides in JPEG and TXT Files

What the Medtronic Breach Means for Security Experts

Why Energy Infrastructure Is Cybersecurity’s Next Frontier

Widely Used Browser Extensions Selling User Data

Your adblocker might be tracking you: researchers flag dozens of browser extensions openly selling data

Your Identity and Access Management (IAM) was built for humans, AI agents don’t care