Ransomware Operator Claims - Week 17 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 20th April and 26th April 2026, kindly assisted by our partners.

DBD discovered and researched 169 Ransomware Victims over 36 Countries and Islands claimed by 38 Data-Leaking Ransomware Operators, including 1 Newly Discovered Ransomware Operator last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 18 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 27th April and 3rd May 2026.

30th April

7 Million Attacks in 28 Days: The Massive Surge in Device Code Phishing

9-Year-Old Linux Kernel Vulnerability “Copy Fail” Enables Full Root Access

15-year-old arrested in massive French Government data leak

15-year-old hacker 'breach3d' probed for massive French ID leak

AI is biggest cyber threat to CISOs, NCC Group warns

AI-Driven Cybercrime Led to a 389% Increase in Ransomware Victims

Australian Prudential Regulation Authority (APRA) Issues AI Risk Warning to Banks and Insurers

Auto industry ransomware attacks more than doubled in 2025

Backdoored WordPress Plugin Uses Remote Update for Code Delivery

Bad bots make up 40% of internet traffic

Carnival Corporation hit by suspected ransomware attack

CISA and Partners Publish Zero Trust Guidance For Operational Technology (OT) Security

Community Health Systems Data Breach: PHI and PII Exposed

Comparitech assesses healthcare ransomware decline in volume but escalates in impact, marking strategic shift

Coupang probe tests the U.S.’s willingness to protect its tech giants abroad

Courts approve to settle 2 class action healthcare data breach lawsuits

cPanel 0-Day Auth Bypass Exploited in the Wild, Proof-of-Concept (PoC) Released

cPanel zero-day exploited for months before patch release (CVE-2026-41940)

Critical cPanel Authentication Bypass Exposes Hosting Systems

Cyber is the Number One Global “People Risk”

Deep#Door Python Backdoor Evades Detection On Windows

Dental practice software maker fixes bug that exposed patients’ medical records

Device code phishing emerges as scalable threat to Microsoft 365 and Entra ID access

Dubai Police Smash International Scam Empire in Massive FBI and China-Led Operation

Dutch Health Tech Firm ChipSoft Confirms Destruction of Stolen Patient Data

Dutch healthcare software firm claims hackers destroyed stolen medical records amid ransom speculation

EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

Europol Busts Albanian Scam Call Centers in Major Online Fraud Case

FBI and International Agencies Shut Down Scam Centers, Arrest 276 People

FBI links cybercriminals to sharp surge in cargo theft attacks

Football Leaks hacker Rui Pinto acquitted of 241 counts in second Portuguese trial

France opens formal probe into teenage suspect in massive ID data breach

France probes teenage suspect in massive ID data breach

Frontwave Credit Union Data Breach; Social Security Numbers Exposed

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

Hacker Extracts Over $5 Million from Wasabi Protocol

Hackers are actively exploiting a bug in cPanel, used by millions of websites

Hackers arrested for stealing and reselling 600,000 Roblox accounts

Jenkins Patches High-Severity Plugin Vulnerability Including Path Traversal and Stored XSS

KnowBe4 Research Finds 86% of Phishing Attacks are AI Driven

Linux Kernel Flaw ‘Copy Fail’ Exposes Widespread Privilege Escalation Risk

Massive Online Scam Network Busted By Europol In €50 Million Crackdown

Metropolitan Police face criticism for using AI to spy on their own officers

Misconfigured Server Run by Hackers Leaks 345,000 Stolen Credit Cards

Moldova’s health insurance agency reports possible data leak after cyberattack

Movistar Peru data breach impacts 4 million users

Nearly half of UK businesses pwned last year as phishing keeps doing the job like it's 2005

New Bluekit phishing service includes an AI assistant, 40 templates

New Linux ‘Copy Fail’ flaw gives hackers root on major distros

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

New Phoenix Platform Drives Brand-Impersonation Smishing

New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials

Nine-year-old Linux kernel flaw enables reliable local privilege escalation (CVE-2026-31431)

One tiny exploit gives full Linux access: all kernels since 2017 are vulnerable

Over 40% of UK firms suffered cyber attack last year, survey finds

Phishing Campaign Abuses Event Invitations To Target U.S. Firms

Private Chats, Photos of Celebs Exposed in Suspected Stalkerware Leak

ProFTPD SQL Injection Flaw Enables Remote Code Execution

Proof-of-Concept (PoC) Released for Critical ASUSTOR ADM Root RCE Vulnerability

PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

Qinglong Vulnerabilities Enable RCE, Exploited in Attacks

Ransomware Attacks on Schools: 4 Warning Signs IT Teams Shouldn’t Ignore

Ransomware Defense Starts with Your Vendors

Ransomware Victims up 389%, Time-to-Exploit (TTE) in Less Than Two Days: How Can Defenders Stay Ahead?

Roblox account hackers make $225K profit, but end up in handcuffs

Sandhills Medical Says Ransomware Breach Affects 170,000

SAP npm Packages Compromised to Steal Developers, CI/CD Secrets

SilverFox phishing campaign uses fake tax audits to deploy backdoor malware

SMS phishing campaign targets Australia & New Zealand

South Africa: Durban beachfront phishing syndicate busted

South Korea: Financial Supervisory Service (FSS) Orders 4.5-Month Business Suspension for Lotte Card Over Data Breach

Tax season phishing scams surge with fake government sites

Teen Hacker Breach: French ID Agency Data at Risk

Thailand: Hacker who scammed Pattaya hotel guests arrested

Thailand: Swedish hacker arrested in Pattaya for hotel data breach scam targeting tourists

Think It's A Party Invite? New Phishing Scam Uses Fear of Missing Out (FOMO) to Steal Your Passwords

Three Arrested for Hacking Over 610,000 Roblox Accounts

UK Education Sector Faces Surge in Cyber Breaches Despite Stable National Threat Levels

Vertu Motors lands multi-million payout from Jaguar Land Rover (JLR) cyber-attack

Vertu Motors settles £3.9m insurance claim from Jaguar Land Rover (JLR) cyber attack

Vertu Motors to receive £3.4m insurance payout after Jaguar Land Rover (JLR) cyber attack disruption

Vertu secures £3.4m payout after Jaguar Land Rover (JLR) cyber disruption

Windows Zero‑Day Vulnerability Enables NTLM Credential Theft

29th April

88% of self-hosted GitHub servers exposed to Remote Code Execution (RCE), researchers warn (CVE-2026-3854)

A Chinese man could have stolen aerospace software from NASA and Pentagon with phishing for 4 years

A Quarter of Healthcare Organizations Report Medical Device Cyber-Attacks

A sneaky cyber enemy is creeping into our browsers and password managers

Agentic AI’s Problem Isn’t Capability It’s Accountability

Americans lose $2.1 billion to Facebook scams, an eightfold jump since 2020

Amtrak data breach exposes millions of customer records

Barrier to hacking drops as AI and dark web tools let anyone launch cyberattacks, Europol warns

Buggy Vect ransomware is effectively a data wiper, researchers find

Canada: Government Employees Affected by Canada Life Data Breach

Churchill Claims Services Data Breach Exposes 2,610 Records

CISA Adds Actively Exploited ConnectWise and Windows Flaws to Known Exploited Vulnerabilities (KEV)

CISA Alerts on Microsoft Windows Shell Zero-Day Under Active Exploitation

CISA orders feds to patch Windows flaw exploited as zero-day

CISA Warns ConnectWise ScreenConnect Vulnerability Actively Exploited in Attacks

CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)

Construction Tycoon Rishikesh Gauli Arrested by Nepal Police for Data Breach

Corporate Affairs Commission (CAC) finally speaks on manipulation of firms’ data after cyber attack in Nigeria

cPanel, WHM emergency update fixes critical auth bypass bug

Critical cPanel Authentication Vulnerability Identified - Update Your Server Immediately

Critical Cursor Vulnerability Exposes Developer Workstations To Remote Code Execution

Critical Flaw In VECT 2.0 Ransomware: Large Files Being Permanently Destroyed

Critical Flaw Turns Vect Ransomware into Data Destroying Wiper

Cursor AI Agent Wipes PocketOS Database and Backups in 9 Seconds

Cursor AI Extension Token Access Flaw Could Lead to Full Credential Compromise

Cursor AI IDE vulnerability allows code execution via hidden Git hooks

Cursor Extension Flaw Exposes Developer API Keys

Cyberattack shuts down Adams County servers; Week-long restoration effort continues

Estée Lauder reaches proposed settlement in Canada data breach class action

European police dismantles €50 million crypto investment fraud ring

Europol's Internet Organised Crime Threat Assessment (IOCTA) 2026 report flags shift to industrialised cybercrime powered by AI, ransomware and data theft

Fake tickets to phishing: the scams targeting 2026 FIFA World Cup soccer travellers

FBI’s Hospital Cyber Plea: Why Info-Sharing Fails Against the Ransomware Wave

Floppy to Mythos, how ransomware grew into multibillion-dollar industry

'For sale on the dark web': Australian travellers may be caught up in Euro rail pass data breach

GitHub Fixes Critical RCE Bug CVE-2026-3854 Within Hours of Discovery

GitHub fixes RCE flaw that gave access to millions of private repositories

Hackers Abuse Robinhood Signup Process to Deliver Phishing Emails

Hackers arrested for hijacking and selling 610,000 Roblox accounts

Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining

Identity discovery: The overlooked lever in strategic risk reduction

India: CERT-In Warns of AI-Driven Cyber Threat Surge, MSMEs at Highest Risk

Industrial manufacturing tops Digitain cyber risk ranking

Internet Organised Crime Threat Assessment (IOCTA) 2026 Report Warns of Rising AI-Driven Cybercrime and Dark Web Threats

Large technology wholesaler in South Africa hit by data breach

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets

Mass Data Breach at Matchmaking Firm Spurs Fears of Deepfake, Fraud Risks

Microsoft Confirms Windows Flaw Is Being Exploited After Incomplete Patch

New AI-Powered Bluekit Phishing Kit Targets Major Platforms with MFA Bypass Attacks

New ransomware is so badly coded it destroys your files instead of holding them hostage

New VECT 2.0 Ransomware Destroys Files Over 128 KB Across Windows, Linux, and ESXi

New VECT 2.0 Ransomware Targets Multi-Platform Systems

New Wave of North Korean Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs

New Zealand: A March cyber attack on the Hutt City Council – that originated from a staff member responding to a phishing email – has exposed the identity and financial information of hundreds of people to hackers

New Zealand: Hundreds at risk after ‘malicious’ Hutt City Council cyber attack

New Zealand: Identity and financial details leaked in Lower Hutt council cyber attack

New Zealand council cyber attack leads to ID and financial data being exposed

Nigeria: Corporate Affairs Commission (CAC) denies manipulation of DAAR Communications records after cyber attack

Official SAP npm packages compromised to steal credentials

One git push from disaster: this fundamental GitHub flaw could’ve compromised the world’s code

Payroll-Related Phishing Emails Circulating Across New Jersey

Phishing in contaminated water: Mountain View warns residents of scams after water main breach

Phishing scam targeting expectant women masquerades as Malaysian government aid scheme

Phoenix Rising: Exposing the PhaaS Kit Behind Global Mass Phishing Campaigns

Polymarket denies data breach, says hacker is selling public data

Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen

Polymarket Rejects Dark Web Claims of Massive Data Breach

Popular WordPress redirect plugin hid dormant backdoor for years

Protecting U.S. Critical Infrastructure as Global Tensions Rise

Ransomware accidentally destroys all files larger than 128KB, preventing decryption - VECT code likely partly vibe coded with AI or used an old code base, security researchers suggest

Ransomware posts rise 22% as leak sites proliferate

Ransomware Responsible for 90% of Manufacturing Cyber Losses

Researchers Track 2.9 Billion Compromised Credentials

Resilience report finds manufacturing leads global cyberattack targets, with ransomware dominating losses

Resilience report highlights financial impact of ransomware on manufacturing

Robinhood users beware: the "perfect phishing email" is waiting for you

Royal Canadian Mounted Police (RCMP) says no compensation after firearm owners’ data breach affecting 2.2 million people

SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack

Scammers vibecode server to verify stolen credit cards, leak details of 345K cards

ShinyHunters Ransomware strikes Vimeo and Carnival Corporation

Signal promises new security measures after wave of phishing attacks

Signal warns users after sophisticated phishing attacks compromise German officials

SLOTAGENT Obfuscation Tactics Challenge Security Researchers

Sri Lanka discloses another missing payment, days after hackers stole $2.5 Million from its finance ministry

Starr Insurance Data Breach Exposes Sensitive Personal and Medical Information

Stealth Spear-Phishing Campaign Targets Government Systems: New Malware Uses Obfuscation And Staged Payloads To Evade Detection

Stelia North America hacked in ransomware attack

Stolen patient data from Dutch firm ChipSoft destroyed after cyberattack

Suspected Russian phishing campaign targets German officials via Signal

Swiss police arrest 10 suspected members of Nigeria-linked crime group Black Axe

Teen hacker’s lavish lifestyle curtailed after feds uncover Scattered Spider links

Thailand: Hacker who scammed Pattaya hotel guests arrested

This New Ransomware Is So Broken It Permanently Destroys Your Files Instead of Encrypting Them

U.S. Charges Suspected Scattered Spider Member for Infiltrating Sensitive Computer Systems

UK Biobank data breach exposes half a million records

US, China partner on scam center takedown in Dubai

US-Estonian Suspect Arrested Over Alleged Scattered Spider Cyberattacks

Uzbekistan investigates alleged leak of state employee data

Vect 2.0 RaaS Expands Attacks Across Windows, Linux, and ESXi

Vect 2.0 Ransomware Acts as Wiper, Thanks to Design Error

VECT ransomware is so flawed it can’t even unlock encrypted files, researchers warn

Vect unveiled: Inside an emerging ransomware group’s affiliate network

Vimeo Confirms Data Breach After Hackers Access User Database

Vimeo confirms data breach linked to third-party analytics vendor, hackers threaten leak

With VECT ransomware, paying is not an option

Your Data Under Siege: Ransomware Threatens Millions; Smart Ways to Protect Yourself from Digital Blackmail

28th April

$2.4 billion utilities company Itron reports internal network security breach

2025 Saw Fewer Healthcare Breaches Than 2024

150,000+ football passports leaked weeks before FIFA World Cup

ADT Confirms Major Data Breach Exposing Millions of Names, Partial SSNs

ADT data breach affects 5.5 million customers as hackers begin leaking stolen info online

AI, Encryption, and Crypto Power New Wave of Global Cybercrime

Alleged China-Linked Hacker Extradited To U.S. By Italy

Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research

Alleged Chinese State Hacker Extradited to US

Alleged Chinese state-backed hacker extradited from Italy to US over COVID-era cyber espionage case

Alleged 'Hafnium' hacker-for-hire extradited to the United States

Ameriprise data breach hits 48,000 customers

Australia and New Zealand (ANZ) Organizations Are in the Ransomware Crosshairs - What the Dark Web Is Telling Us

Australia scam losses rise as reports fall in 2025

Bank of Scotland customers in new data breach fear as Lloyds pays out £200,000

Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign

Broken VECT 2.0 ransomware acts as a data wiper for large files

Canada’s first SMS blaster case leads to three arrests

Canadian authorities arrest 3 in SMS blaster phishing scheme

Carnival Corporation Investigating Possible Ransomware Attack

Checkmarx confirms LAPSUS$ hackers leaked its stolen GitHub data

China-linked hackers led phishing campaigns targeting journalists and activists, researchers say

Chinese National Extradited Over Silk Typhoon Cyber Campaign

Chinese National Xu Zewei Extradited for HAFNIUM Cyberattacks, Appears in US Court for 9-Count Indictment

Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattacks

Chinese spear-phishing campaign targets NASA employees

Chinese-Backed Smishing Rings Scale Credential Theft via SMS and Over-the-Top (OTT) Apps

ClickUp Data Leak Exposes Enterprise Emails for Over a Year

ClickUp Hardcoded API Key Exposes Almost 1,000 Customer Emails, Including Government and Corporate Giants

Connected Credit Union Data Breach Exposes Sensitive PII Including SSNs

Credit Technologies Data Breach Potentially Exposes Personal Information of Individuals

Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

Cyber Insurance Data Gives CISOs New Ammo for Budget Talks

Cyberattacks in Spain: What small businesses should know

Cybersecurity Incident Strikes Contractor Handling Jurong Region Line (JRL) MRT Stations and NEWater Factory 3 Projects

DDoS Cyber Attack makes eBay lose $200m per Day

Don't pay Vect a ransom - your data's likely already wiped out

Even cybersecurity researchers are exposing secrets in their arXiv LaTeX source

Ex-Ransomware Negotiator Pleads Guilty to Extorting U.S. Victims, $10 Million in Assets Seized

FBI extradites Chinese hacker accused of stealing COVID-19 research

Feuding Ransomware Groups Leak Each Other's Data

Fidelity to pay $1.25 million over 2024 data breach affecting 77,000 customers

French police arrest 21-year-old "HexDex" hacker over 100 alleged data breaches

Germany Caught Up in Likely Russian Signal Phishing

Germany suspects Russia behind signal phishing attack on top Government officials

Germany Suspects Russia Is Behind Signal Phishing That Targeted Top Officials

Gmail Users Warned About Sophisticated AI-Driven Phishing Attacks

Green Imaging Data Breach Exposes Patient Medical and Personal Information

Guardz Warns MSPs of Cloud Ransomware and Business Email Compromise (BEC) Risks

Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw

Hackers exploit Robinhood account creation tool to launch worrying phishing scam

Has your Signal account been hacked in the latest phishing attacks?

Have I Been Pwned claims Pitney Bowes hit by 8.2 Million email address leak

Have you asked Ryanair for compensation? Your bank details could now be for sale

How Many People Fall for Phishing Scams in USA

How to Recognize and Avoid Phishing Attacks in 2026

Hugging Face LeRobot Vulnerability Enables Unauthenticated Remote Code Execution Attacks

Industrial Control Systems (ICS) intrusion detection has blind spots that complicate plant security

Inside an OPSEC Playbook: How Threat Actors Evade Detection

Iranian APT OilRig Hides Malware Config Inside Google Drive Image

Isle of Man: Manx Telecom notifies customers of data breach

Italy extradites Chinese hacker accused of spying during Covid-19 pandemic to US

JC Resorts Data Breach Exposes Social Security Numbers

Kamasers DDoS Botnet With Loader Capabilities Attacking Organizations to Deploy Ransomware

Lawsuit accuses Impac Mortgage of waiting two years to disclose borrower data breach

Lloyds Bank compensates another 1,625 customers after ‘alarming’ data breach

Medical Device Maker Medtronic Announces Data Breach

Medtronic Confirms Breach After Hackers Claim 9 Million Records Theft

Medtronic confirms cyberattack on corporate IT systems amid claims of massive data theft

Medtronic Confirms Data Breach After ShinyHunters Claims

Medtronic Confirms Data Breach, No Impact on Operations or Patient Safety

Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202

Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

Missouri Democrats Call for Investigation Following School Voucher Data Breach

Missouri Lawmakers Clash Over Massive School Voucher Data Breach

Monumental Sports & Entertainment Data Breach Affects 10k

MP David Davis's website hit by suspected cyber attack

MP Sir David Davis's website shut down in suspected cyber attack

Navigator360 has suffered a hacker attack: more than 93 GB have been stolen

New Bank of Scotland data breach fears as 80,000 more customers hit by IT glitch

New BlobPhish Attack Leverages Browser Blob Objects to Steal Users’ Login Credentials

New DHL Phishing Scam Uses 11-Step Attack Chain to Steal Passwords

New Linux FIRESTARTER Backdoor Targets Cisco Firepower Devices

New phishing scam targets your Fear of Missing Out (FOMO) with fake party invitations

No Metrics Are Better Than Bad Metrics in the Security Operations Center (SOC), Says National Cyber Security Centre (NCSC)

North Korean Hackers Target Crypto Firms with ClickFix and AI-Made Zoom Lures

Notepad++ Releases 8.9.4 Patch to Fix String Injection Vulnerability (CVE-2026-3008) in 8.9.3

Over 500,000 Lloyds customers hit by data breach - yet bank finds zero fraud cases

Pack2TheRoot: 12-Year-Old Linux PackageKit Flaw Enables Full Compromise

Paragon is not collaborating with Italian authorities probing spyware attacks, report says

Phishing Emails That Look Real Target Robinhood Users via Gmail Dot Alias Feature

Phishing scam targeting Robinhood via Gmail: the alias trick deceives users with flawless emails

Police arrest 10 suspected members of Black Axe cybercrime gang

Pro-Iran hacker group claims release of 2,379 US Marines’ data in Persian Gulf

Ransomware accounts for 90% of cyber losses in manufacturing

Ransomware Turf War as 0APT and KryBit Groups Trade Blows

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

Robinhood account creation flaw exploited for phishing emails

Robinhood Phishing Emails Target Users via Account Creation Flaw

Robinhood Users Hit by Phishing Campaign Leveraging Gmail Address Quirk

Robinhood Users Targeted by Gmail Dot Trick Phishing Attack

Robinhood Vulnerability Exploited for Phishing Attacks

Security researcher claims ClickUp vulnerability is leaking customer data

ShinyHunters claims it stole 1.4 million records from Udemy

Signal Phishing Campaign Targets German Officials in Suspected Russian Operation

Signal to roll out anti-phishing safeguards following account takeovers

Signal warns users after Russian hackers compromise accounts

Silk Typhoon: Hacker extradited to the US for “COVID espionage”

Sophisticated Phishing Attack Targets Microsoft Teams Users

Study warns cost-cutting use of generative AI could increase cyber-attack risks

Targeted Covid-19 research: Chinese state-sponsored hacker arrested by FBI after Italy extradition

The intricate balancing act of cyber resilience

The metrics killing your Security Operations Centre (SOC), and what to use instead

Third-party cyber risks emerge as weak link for banks after data breach concerns

Ukrainian police detain hackers suspected of stealing thousands of Roblox accounts for resale

US Healthcare Data Breach Crisis Impacts Millions

US reportedly charges Scattered Spider hacker arrested in Finland

US state privacy fines reached $3.425 billion in 2025

US Supreme Court appears split over controversial use of ‘geofence’ search warrants

VECT: Ransomware by design, Wiper by accident

VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXi

VECT Ransomware: When Paying is Not a Recovery Strategy and Won't Get Your Files Back

VECT Ransomware: Why Paying Won’t Get Your Files Back

Vect ransomware actually destructive wiper malware

Video service Vimeo confirms Anodot breach exposed user data

Video site Vimeo blames security incident on Anodot breach

Vimeo Confirms User and Customer Data Breach

Vimeo faces extortion demands from ShinyHunters: “pay or leak”

Weeks After Remita, Sterling Bank Hack, More Nigerian Institutions Succumb to Data Breaches

Why Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks About

Why Unofficial Download Sources Are Still a Security Risk in 2026

27th April

82 Chrome Extensions Found Selling User Data, 6.5 Million Users Affected

500,000 UK volunteers’ medical data listed for sale on Alibaba

Abu Dhabi Department of Finance Super Admin Access Sale

ADT Breach Confirmed: Names, Phone Numbers, and Addresses Exposed

ADT Breach Exposes Data of 5.5 Million Customers, ShinyHunters Likely Behind Attack

ADT Confirms Data Breach After Extortion Attempt by ShinyHunters

ADT confirms data breach after ShinyHunters threatens data leak

ADT confirms new data breach after hacking group threatens record leak

ADT Data Breach Exposes Sensitive Personal Information for 5.5 Million Accounts

AI startup Mercor faces mass litigation following data breach

Alleged Silk Typhoon hacker extradited to US for cyberespionage

Americans lost over $2.1 billion to social media scams in 2025

Amtrak data breach exposes millions of customer records

Attackers Chain Flaws to Backdoor CODESYS Applications and Deploy Malicious Code

Attackers use Microsoft Teams, fake mailbox repair utility to breach organizations

BlackFile Group Targets Retail and Hospitality with Vishing Attacks

BlackFile hackers target retail, hospitality with vishing and data extortion

Canada arrests three for operating “SMS blaster” device in Toronto

CARE Clinic Data Breach Potentially Exposed PHI

Carnival Corp. probes alleged data breach

Carnival Corporation Targeted in Ransomware Attack

Carnival Cruise Line Faces Ransom Demand From Hacker: Warns Online Claims May Be Inaccurate

Carnival Investigates Potential Data Breach Affecting Millions Of Cruisers

Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23rd Attack

China-Backed Groups are Using Massive Botnets in Espionage, Intrusion Campaigns

Chinese spy posed as researcher in spear-phishing campaign targeting NASA to steal defense software

Client information data breach costs Fidelity $1.25 million in Massachusetts fine

Consumers lost $2.1 Billion to social media scams in 2025, Federal Trade Commission (FTC) reports

Critical Gemini CLI Vulnerability Enables Remote Code Execution Attacks

Critical infrastructure giant Itron says it was hacked

Crypto thieves ramping up attacks on Apple users

CTM360 Exposes Global GovTrap Campaign With 11,000+ Fake Government Portals Targeting Citizens Worldwide

Cyber crooks got Robinhood to send phishing emails to its own users

Device codes are the new frontier for phishing as Barracuda detects 7 million attacks in four weeks

Ellipal Cryptocurrency Wallet Suffers Alleged Data Breach

Extradition Drama: Italian Government Approves Chinese Hacker's Transfer to U.S.

Fake Android Apps Distributing Spyware, Linked to Italian Surveillance Vendor IPS

Fake CAPTCHA International Revenue Share Fraud (IRSF) Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud

Family Federation for World Peace and Unification (FFWPU) and Tongil Group Face Extensive Data Breach

FBI, Indonesian Authorities Team to Take Down Site Ripping Off Users for Millions

Fidelity Fined $1.25 Million Over Client Data Breach

Fidelity to Pay $1.25 Million Over 2024 Data Breach

Fidelity to Pay $1.25 Million to Settle Massachusetts Claims From 2024 Data Breach

Former FBI Deputy Cyber Chief Calls for Terrorism Classification for Healthcare Ransomware Actors

Former Ransomware Negotiator Pleads Guilty to Aiding Attackers

French passport-and-ID portal taken offline after cyber-attack, causing application backlog

French police arrest hacker ‘HexDex’ for alleged widespread data theft

Garmin cyberattack disrupts online services, no evidence of customer data breach

Germany accuses Russia of targeting top politicians in Signal phishing attack

Germany blames Russia for Signal phishing attacks on MPs

Germany suspects Russia is behind Signal phishing that targeted top officials

GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions

Google users receive $30 bills after fake CAPTCHA scammed them into sending premium text messages

Hacker who allegedly carried out cyberattacks for China is extradited to U.S.

Hackers claim millions of records stolen in ADT breach

Hackers got data on 5.5 million ADT customers by phishing, report says

Hackers impersonate Microsoft Teams help desk to breach corporate networks

Home security giant ADT data breach affects 5.5 million people

How account takeover is reshaping higher-education cyber risk

How to Prepare for GenAI-Driven Threats and Ransomware Attacks

India: CERT-In warns of AI-driven cyber attack risks

International Tensions: Extradition of Chinese Hacker Xu to U.S. Sparks Controversy

Italy: Extradition decree signed for Chinese hacker arrested at Malpensa Airport

Italy extradites alleged Chinese hacker to US accused of spying for Beijing during COVID-19 pandemic

Italy extradites alleged Chinese state hacker to US

Italy extradites Chinese hacker to US

Italy extradites Chinese national wanted by US for alleged hacking

Italy extradites ‘dangerous foreign hacker’ from China wanted by US authorities

Italy plans to send ‘wanted’ Chinese hacker to US authorities

Itron discloses cyberattack after unauthorized access to internal systems

Itron, Inc. Discloses Data Breach After Hackers Accessed Internal Systems

Itron IT Breach: Unauthorized Access Detected on Internal Network

Jeff Honeycutt Insurance Agency Data Breach Exposes Client Info

Kent District Library blames ‘ransomware’ for closures

Korea's Fair Trade Commission (FTC) Orders Coupang, Naver to Revise Unfair Data Breach Clauses

LAPSUS$ Claims Vodafone UK Breach in New Alleged Cyberattack

Lee & Lee Country Club Personal Data Breach...Possible Involvement of North Korean Hackers

Linux ELF Malware Generator Evades Machine Learning (ML) Detection Using Semantic-Preserving Changes

Litecoin Hit by Zero-Day Vulnerability, Triggers 13-Block Reorganization

Maryland property search tool is back online, nearly two weeks after cyber attack

Medical device giant Medtronic confirms data breach incident

Medtronic confirms breach after hackers claim 9 million records theft

Medtronic Data Breach Exposes Millions of Records

Medtronic reports data breach on corporate IT systems

Microsoft Store App Vibing.exe Accused of Harvesting Screens, Audio, and Clipboard Data

Money launderer for crypto thieves given 5-year sentence

Money launderer linked to $230 Million crypto heist gets 70 months in prison

Morocco’s road safety agency warns of fake website used for phishing scam

Most Cybersecurity Professionals Feel Undervalued and Underpaid

Multiple OpenClaw Vulnerabilities Enable Policy Bypass and Host Override Attacks

Narteks Tekstil A.S. Suffers Krybit Ransomware Attack

Nessus Agent Vulnerability on Windows Allows Arbitrary Code Execution as SYSTEM

Netflix Phishing Scams: They’re More Dangerous Than You Think

Now a ransomware turns quantum computing safe in encryption

One ransomware crew now drives half of all cyber claims

Operation TrustTrap Reveals 16,800 Fake Domains Exploiting User Trust

PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

Proof-of-Concept (PoC) Exploit Released for Critical Metabase Enterprise RCE Vulnerability

PyPI package with 1.1 Million monthly downloads hacked to push infostealer

Qilin Ransomware claims to have breached Inspira, Muller, A&A, Longwood, Exclusive, Istarpal

Ransomware attacks affect 2 senior care providers

Ransomware hackers are now targeting victims with an Infrastructure driven Approach

Researchers Identify Fast16 Sabotage Malware That Pre-Dates Stuxnet

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

Robinhood account creation flaw abused to send phishing emails

Robinhood suffers phishing attempt ahead of quarterly earnings

Russia suspected of targeting senior officials in major cyberattacks

ShinyHunters group claims massive data theft from home security provider ADT

ShinyHunters Leaks Data of Udemy, Zara, 7-Eleven in Salesforce Linked Breach

South Texas Oncology and Hematology Pays $1.1 Million to Settle Data Breach Lawsuit

Sri Lanka: Banks alert customers to phishing attacks

Supreme Court signals location data searches should require a warrant

Synmosa Biopharma Hit by Dragonforce Ransomware Attack

Tennessee becomes second state to ban cryptocurrency ATMs over scam concerns

Texas Tech University Health Sciences Center says 2024 breach impacted 813,892 patients

The $700 million question: How cyber risk became a market cap problem

The AI criminal mastermind is already hiring on gig platforms

‘This was not an isolated incident’: Chinese national exposed by NASA investigation in serial defense software theft phishing campaign that lasted years

Toronto Police Bust Mobile Smishing Network Targeting Thousands

Two researchers stumble on pre-Stuxnet malware that may have targeted Iran's nuclear program

U.S. utility giant Itron discloses a security breach

Udemy Data Breach Results in 1.4 Million Accounts Leaked by ShinyHunters

Uganda Ministry of Agriculture (MAAIF) Suffers Data Breach

UK Biobank data breach exposes medical records of 500,000 people

UNC6692 Hackers Exploit Microsoft Teams to Deploy SNOW Malware

US Sanctions Target Cambodian Scam Network Leaders

Utilities Tech Supplier Itron Discloses Cyber-Attack, Operations Unaffected

Vidar Infostealer Spreads via Fake CAPTCHAs, Hides in JPEG and TXT Files

What the Medtronic Breach Means for Security Experts

Why Energy Infrastructure Is Cybersecurity’s Next Frontier

Widely Used Browser Extensions Selling User Data

Your adblocker might be tracking you: researchers flag dozens of browser extensions openly selling data

Your Identity and Access Management (IAM) was built for humans, AI agents don’t care

Ransomware Operator Claims - Week 16 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 13th April and 19th April 2026, kindly assisted by our partners.

DBD discovered and researched 178 Ransomware Victims over 42 Countries and Islands claimed by 36 Data-Leaking Ransomware Operators, including 2 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.