Data Breaches Digest - Week 37 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 7th September and 13th September 2026.

📅 10th September

AI adoption brings new security headaches for already stretched CISOs

AI-fueled cyberstalking earns Ohio man 15 years behind bars

Anthropic discloses fourth AI hacking incident missed in earlier review

Chrome getting major releases every 2 weeks as Google races to outpace attackers

Cybercriminals are building phishing pages that exist only inside victims’ browsers

Ongoing exploitation of Cisco vulnerabilities: hackers drop web shells

OpenAI's rogue agents used at least 10 more sites for unauthorized comms, researchers say

Trezor warns users of email provider breach, phishing attacks

WatchGuard RCE flaw now exploited in ransomware attacks

📅 9th September

82% of Canada's top AI companies won't say how long they keep your data

$245 million in stolen crypto funded racketeering crew’s lavish lifestyle

AdaptHealth confirms 4.1 million people exposed in July cyberattack

AI Workflow Flaw Could Let Attackers Access Sensitive Data by Simply Asking

AI-driven hack snags 375 Brazil government employee logins

Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets

As Ransomware Attacks become common, recovery rates Worsen

BigBear 2.0 phishing campaign compromises MFA-protected Microsoft accounts

Boston Scientific cyber-attack puts medical supply chains in the spotlight

CEVA cyber-attack shows how provider disruption spreads

Check Point Research Exposes Cross-Account Data Leak in ChatGPT

Chinese AI firms are siphoning capabilities from American models, CISA warns

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

ClickFix Crypto Scam Hides Its Command Server Inside Google Sheets

ClickFix Moves into the Browser to Steal Cryptocurrency

Columbus Man Sentenced in First Take It Down Act Conviction for Cyberstalking and AI-Generated Obscene Material

COMHAR Data Breach Exposes Social Security Numbers

Consent Phishing: The Attack That Doesn’t Need Your Password

Coupang data breach hits 200,000 Taiwan users; consumer group calls for stricter oversight

Cyber Attack at Three UK Airports Leaks PII of 8.7 Million Customers

DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval

Department of Information and Communications Technology (DICT) said Philippine Ports Authority (PPA) ransomware report was false positive

eAssist Dental reportedly struck by ransomware attack

Electronic health record company says customer data stolen in breach

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Fake GTA6 ‘Leaked Download’ Caught Spreading RATs, Infostealer and Wiper Ransomware

Financial Services Data Exposure Doubles as Cyber Attack Recovery Costs Hit $2.4 Million

Former AT&T Employee Jailed For Helping Hacker Steal From Customers

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Gigabud Uses Android App Cloning to Evade Fraud Detection

Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)

Google warns of new Chrome zero-day bug exploited in attacks

Grindr settles privacy lawsuit tied to disclosure of users’ HIV statuses for $35 million

Group of bipartisan lawmakers ask US government to ban several hack-for-hire firms

Hacker Steals Around US$320 Million In Bitcoin Then Returns Most Of It

Hackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory

Hasbro Data Breach Reveals Employee Personal and Financial Information

Healing Paper Compensates 220,000 After Gangnam Unni Data Breach

Hibbett Data Breach Exposes Employee Social Security Numbers

How Ransomware negotiations work in the Real World

Huntress Uncovers Phishing Attacks Using Fake Browser Pages and Rogue RMM Tools

HYBE's Weverse Hit by Another Data Breach...Information Security Investment Drops Despite Return to Profit

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Isle of Man: Information Commissioner investigating Treasury data breach

Kaspersky survey reveals SMBs face increasing cyber threats

Lincoln National Data Breach Exposes Social Security Numbers

Luminis cybersecurity incident highlights ‘concerning’ rise in attacks on healthcare

Luxembourg: Fake Wero text messages currently circulating

Man gets 15 years for extorting women with AI-generated porn videos

Manchester Airports Group Data Breach Caused by Four-Year API Key Exposure

Microsoft Patch Tuesday Fixes 966 Vulnerabilities, Including 2 Exploited 0-Days

Microsoft Patch Tuesday Hits Record 974 CVEs, Two Exploited

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026

Multiple Chinese hacking groups seen using identical Chrome zero-day exploit

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

New Mexico’s trial against Facebook for alleged role in Cambridge Analytica data breach begins

New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access

New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser

Nigeria: Publisher laments hacking of website

Non-Human Identities (NHIs) Now the Number One Corporate Entry Point for Hackers

NovoCure Data Breach Reported to Securities and Exchange Commission (SEC): Details Limited

Odido hackers mock the police and hint at another major hack

Open Directory Blunder Exposes Redis Cryptomining Botnet Hitting 3,500+ Servers

Over 36,000 exposed Plex servers vulnerable to recent flaws

Over 150 million driver’s licenses posted on dark web after data breach

Ransomware attacks rise as backup recovery worsens

Ransomware gangs turn on each other

Ransomware group claims LA Metro as latest target, threatens data leak

Ransomware in 2026: Attacks Up, Payments at 23% Low

Researcher Drops New Microsoft Defender Proof-of-Concept (PoC) Showing ShieldBreak Patch Can Be Bypassed

Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls

Researchers find hidden backdoor in PC firmware that bypasses Secure Boot

Researchers Trace Risks in Claimed Condé Nast Data Exposure After Contacting Seller

Russian Web Developer Extradited in Multimillion-Dollar Bank Fraud Scheme

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

SAP Patches Maximum Severity “Overpass” Flaw

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor

ShinyHunters claims Florida DMV breach, puts data on the clock

Singapore extends Singpass passkey to Android users to curb phishing scams

Skullcandy Dime 3 earbuds expose users to Bluetooth hijacking

South Korean Payment Gateways Hit by Mass Credit Card Data Breach; Suspected Chinese Hacker Alerted Regulators First

Springfield schools closed as cyberattack locks access to student medical records

SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise

Two Ransomware Groups Claim Attacks on Nationwide Home Healthcare Provider

U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok

US says Chinese firms extracted billions of tokens from frontier AI models

Vengeful researcher bypasses Microsoft’s Patch Tuesday fix with new Windows zero-day

Veradigm Confirms Patient Data Exposed in Third-Party Data Breach

Veradigm warns of patient data breach after ransomware gang claims attack

Veradigm’s 3rd Breach in 2 Years Exposes SSNs

Westchester Institute for Human Development (WIHD) Data Breach Compromises Protected Health and Personal Information

What breach and attack simulation needs to become in the AI era

Why Lower Phishing Volume Doesn't Mean Lower Cyber Risk for the Education Sector

📅 8th September

220 million traveler records exposed in Vietnam-linked APIS leak

A $10 Million Reward is the Latest U.S. Move to Slow Iranian Cyberattacks

A hacker stole $340 Million in a crypto heist, then returned most of it

Adobe fixes critical Magento zero-day exploited to backdoor servers

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

AI Coding Tools Now a Prime Target for Threat Actors, Google Warns

AI Customer Service Agents Can Be Hacked to Bypass MFA, Steal OTPs and Expose User Data

Attackers Use Multi-Hop Google Redirects for Phishing Campaign

Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours

BigBear 2 Phishing-as-a-Service (PhaaS) Campaign Steals 5000+ Microsoft Credentials

BigBear 2.0 Evilginx2 Phishing Campaign Bypasses Microsoft 365 MFA With Session Cookie Theft

BigBear 2.0 phishing campaign hijacks Microsoft 365 sessions after MFA

BigBear 2.0 Phishing Campaign Hijacks Microsoft 365 Sessions to Bypass MFA

BigBear 2.0 Phishing Service Targets Microsoft 365 Accounts Worldwide

BigBear phishing crew nets thousands of Microsoft 365 credentials

Bimbo Bakeries USA Data Breach Exposes Social Security Numbers

Bimbo Bakeries USA Data Breach Exposes SSNs in Oracle E-Business Suite Zero-Day Attack

Bitcoin hacker returns most of $340 million stolen in crypto heist

Bitcoin hardware wallets Trezor and Ledger in hot water over data breaches

Boss says threat of cyber-attack to Stockton Council is 'constant'

Catalyst Brands Data Breach Exposes W-2 Information

ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account

Chrome is now shipping updates every 2 weeks as AI changes the security landscape

CISA Cuts Critical Infrastructure Security Resources

Compromised identities a key driver of ransomware attacks across education sector

Critical Dell Secure Connect Gateway Flaws Enable Unauthenticated Admin Access and Remote Code Execution

Cyberattack encrypts systems at Bavarian municipal utility

Cybersecurity Information Sharing Act of 2015 Temporarily Extended

Data breach exposes sensitive data of 220,000 users on cosmetic procedure platform Gangnam Unni

DoppelCart fraud network uses 119,000 fake shops to steal credit cards

Driver’s License Data Breach: What to Do if Your Information Was Stolen

Elixir Medical Data Breach Impacts PHI and PII of Current and Former Employees

Exposed Database Left 220 Million Airline Passenger, Crew Records Open to the Internet

France Establishes New Government-Focused Cyber Incident Response Unit

FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials

French prosecutors confirm arrest of suspected ZeroBytes hacker behind tax cyberattack

Grindr Settles UK Data Privacy Claims for £26m

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Grindr to pay out $35 million in UK HIV data-sharing settlement

Hackers Abuse Legitimate Node.js Runtime to Hide Persistent Backdoor in Enterprise Attacks

Hackers Abuse Sliver, Mimikatz and Ethereum C2 in Windows Post-Exploitation Attack

Hackers are stealing Claude tokens from subscribers

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

Hackers build AI frameworks for widescale credential theft

Hackers claim breach of LA Metro, which serves millions of Americans

Hackers Compromise Coder Module Registry to Serve Malicious Packages and Steal Credentials

Hackers Exploit Metabase Flaw in Mathspace Data Breach Affecting 1.07 Million Users

Hackers Stream Real Google Login Pages to Steal Passwords and 2FA Codes

How Invisible Text Can Turn AI Assistants Into a Phishing Threat

How to spot the new phishing scam targeting Apple Pay users

Hybe’s Weverse Suffers Major ‘Personal Data Leak,’ Tees Up ‘Full Investigation’ to ‘Minimize Exposed Information’

If you subscribed to New Yorker, Vogue, or WIRED, your accounts may be breached

IT help-desk vishing tricks executives into handing over Microsoft 365 access

Jellyfin 12.0 security fixes arrive alongside the removal of legacy client logins

Large KFC franchise operator in South Africa hit by 536GB data breach

Leaving Online Reviews Could Make You A Bigger Target For Phishing Scams

Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47 Million in BTC

Liquid Network’s $47 Million White-Hat Question: Who Decided the Price of the Rescue?

Machinery management specialist Macquarrie investigating data breach after ransomware claims

Massive data breach sees 220 million traveler records exposed - nine years of airline info leaked including passenger and passport details

Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data

Mathspace breach exposes data on over a million students and parents

Mathspace confirms data breach affecting more than 1 million users

Mathspace Data Breach Affects 1.08 Million Students, Parents and Staff

Mathspace data breach exposes information of more than 1 million students, parents and staff

Microsoft 365 users hit by two major threat campaigns - fake IT calls and phishing emails target users across the world

Microsoft Exposes New Phishing Attack: Hiding Within Words

Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited

Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

Natural Resources Wales (NRW) Freedom of Information (FoI) Blunder Exposes Diversity Data of Around 2,000 Employees

NFI North Data Breach Affects Almost 50,000 Individuals

NFI North data breach compromises sensitive information of nearly 50,000

NordVPN uncovers global phishing campaign impersonating 75+ brands to hijack corporate accounts

North Korea’s Lazarus cyber umbrella divided into six clusters

OneTouchPoint Agrees to Multi-Million Dollar Data Breach Settlement

Online reviews can expose hidden social ties, increasing risks of phishing attacks

OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor

Panzer Ransomware Targets Italian Manufacturers and Telecom Firms With ESXi-Ready Ransomware-as-a-Service (RaaS)

Panzer Ransomware Uses Double Extortion and Cross-Platform Builds to Target Enterprises

Philippine Ports Authority (PPA) ransomware report false; Department of Migrant Workers (DMW), Department of Labor and Employment (DOLE) sites restored

Phishing attacks in 2026

Phishing Campaign Targets 99% of US Military Bases During Heightened US-Iran Tensions

Provident Behavioral Health Data Breach Exposes PHI and PII

Ransomware in 2026: What the Data Demands From You

Roanoke email compromise led to data breach notification

Rhysida Leaks 5.26 TB of Berlin's Secret Files on the Dark Web

Russian suspect in bank account takeovers is extradited to US

Russian-Linked Hackers Breach Berlin Senate Through Outdated IT Infrastructure

SAP warns of maximum severity 'OVERPASS' kernel vulnerability

Scammer behind $245 million crypto heist pleads guilty to RICO charges

Schools will remain closed as Springfield works to resolve cyber attack

ShinyHunters claim Florida DMV breach, using Jeffrey Epstein's license as proof

ShinyHunters Claims Florida DMV Breach, Posts Jeffrey Epstein Record as Proof

ShinyHunters hackers claim breach of Florida "DAVID" DMV database

ShinyHunters lawyer up after police release audio clip of suspect in Odido hack

ShinyHunters Names Florida DMV in New Extortion Claim, Sets September 11th Deadline

Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

South Korea's 'Gangnam Unni' Beauty Platform Suffers Data Breach Affecting 220,000 Users, Exposing Treatment and Payment Records

The Gentlemen Ransomware Escalates Privileges Across a Windows Network

THost9 Android RAT Pairs Packed Loader With ADB Worm

Thousands of online shops in danger after critical Adobe Commerce/Magento zero-day exploit

Threat actors are giving AI agents a bigger role in cyberattacks

TitleEase Data Breach Exposes SSNs and Financial Information

Trezor Breach Tops 80K as Phishing Calls Hit Buyers

Trezor customers hit with phishing calls and letters after shipping-partner breach

Trezor Supply Chain Breach Now Impacts 81,000 Customers

UK cybersecurity agency urges firms to tackle risks of “shadow AI”

Using AI, Calif Creates Demo WeChat Exploit that Spreads Through Phone Calls

Verve Portraits data allegedly compromised by Settra ransomware attack

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

‘White hat’ hackers take $47 million bounty after $320 million crypto theft

Your LG TV Might Be Listening Even When It Looks Turned Off - Researchers Found Out How While Also Identifying webOS RCE Flaws

“Zero-click” WeChat worm could hijack accounts and spread via a single call

📅 7th September

$320 Million Vanishes From Liquid Network’s Bitcoin Reserves - And the ‘Hackers’ Say They’re the Good Guys

500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure

A whitehat hacker is holding $320 million in drained Bitcoin until developers prove they patched a fatal network flaw

AI Agents could help Ransomware hackers move through networks in just 10 Hours

AI Could Shrink the Supply of Exploits Governments Rely On

Are 200 million LG TVs listening in - even when switched off?

Attackers use rogue ScreenConnect clients to spread malware

Australia: Million-plus students, adults, lose data in major hack

Beaver County agency announces it was a victim of a ransomware attack

Berlin: The hacker group 'Rhysida' stole approximately 5.8 TB of confidential data from the government, leaking information including defense plans and the phone numbers and addresses of government officials

Berlin investigates new data leak after hackers publish stolen login credentials

Berlin Ransomware Leak Exposes State Secrets

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

Bitcoin network used by exchanges hit by $320 million exploit. Hackers claim they're the 'good guys'

Breached! Tutoring platform Mathspace says 1 million-plus Australians implicated by data breach

Condé Nast Data of 32.8 Million Users Offered for Sale After WIRED Leak

ConnectWise warns of new ScreenConnect flaw without patch

Crypto Hardware Wallet Maker Trezor Reports 67K Additional US Customers Impacted in ShipMonk Data Breach

Cryptolocker ransomware: A look back at its widespread impact

Cyber criminals are adapting ASCII smuggling for mass phishing campaigns

Cyber’s 2023 problem: Mini-cats or a new loss trend?

Data Breach: Natural Resources Wales (NRW) published staff ethnicity, religion and sexuality data by mistake

Data Breach: What to do if your information is exposed

Data Breach at American Clothing Giant Carhartt Exposes Nearly 13 Million People

DentaQuest sued for allegedly exposing 15 Million patients’ private information

F6 Threat Report Tracks 600 Million Records Across 164 Database Leaks

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

FBI investigating huge US and Canadian driver's license data breach on Russian cybercrime site

Former employee files class action against Ceva Logistics over data breach

G7, CISA Urge Urgent Shift to Post-Quantum Cryptography

Gangnam Unni breach exposes sensitive data of 220,000 users

Gangnam Unni Breach Leaks 220,000 Users' Personal, Medical Data

Genetic testing giant hit by data breach affecting 2.8 million

Hackers Abuse Trusted Google Services to Hide Credential-Stealing Phishing Attacks

Hackers are using 'invisible' Unicode characters to sneak phishing lures into emails

Hackers exploit new MikroTik RouterOS flaws to hijack routers

Hackers exploit RouterOS flaws to hijack MikroTik devices without authentication

How Hackers Use Email Addresses for Phishing and Account Takeover

HYBE's Weverse Platform Suffers Data Breach Affecting 420,000 Users, Exposing Payment Records

Identity attacks behind 85 per cent of education ransomware

India: Kerala Faces Cybersecurity Skills Gap as Ransomware Victims Rise 389%

Irish HSE fined €645K after medical records were found in mold and rubble

'It's extremely creepy': LG TVs collect far more data on you than you'd expect, says new report, including logging microphone audio while on standby and detecting your wireless devices including phones and smartwatches - and users are furious

Jaguar Land Rover to cut 4,000 jobs following last year’s cyber attack

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

June 2026 Healthcare Data Breach Report

Kimsuky Hackers Use OpenCode AI Agent to Mass-Produce Phishing Decoys in LNK Attacks

Liquid Hacker Vows to Return 4,000 BTC Once Bug Is Patched

Liquid Network Hack: $320 Million In Bitcoin Walked Out, And The Hacker Wants To Give It Back

Liquid Network Hackers Demand Bug Fix Before Returning $320M BTC

Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

Mathspace Breach Exposes 1.08 Million Students, Staff

Mathspace Breach Impacts More Than 1 Million Users in Australia, New Zealand

Mathspace data breach affects over 1 million users

Mathspace Data Breach Exposes Over One Million Users in Australia and New Zealand

Mathspace data breach hits over million users across Australia, New Zealand

Mathspace Data Breach Hits 1.08 Million Users in Australia, New Zealand

Mathspace discloses data breach affecting over 1 million people

Mathspace hack: More than one million students, parents and teachers impacted in major data breach

MikroTik under active exploitation: 122,500 routers expose SSH port, emergency patches available

Minnesota County Hit by Second Ransomware Attack After Officials Pay $128,000

Montana Supreme Court confirms records affected in nationwide C-Track data breach

Montana Supreme Court joins New Hampshire court, others in C-Track data breach

More than 1 million users affected in Mathspace data breach across Australia and New Zealand

More than one million affected in major Mathspace data breach across Australia and New Zealand

Multiple Class Action Lawsuits Filed Against IDScan

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)

N-able patches max severity N-central flaw amid ongoing attacks

N-able Patches Max-Severity N-central RCE Flaw CVE-2026-86218, Nearly 1,500 N-central Servers Exposed

N-able Releases Hotfix for Critical Remote Code Execution Vulnerability

National Cyber Security Centre (NCSC) Warns Shadow AI Creates New Security Risks

Natural Resources Wales: Notice of personal data breach affecting former and current employees

Natural Resources Wales Data Breach Exposes Sensitive Employee Diversity Information

Natural Resources Wales reports personal data breach affecting former employees

New SynkLoader malware distributed via Microsoft Teams phishing

North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters

OpenAI Confirms Wiki Incident, Plans New Framework for AI Misalignment Disclosures

OpenAI Reports Rogue Agent Web Takeover to EU Regulators as Safety Concerns Grow

Over 420,000 User Accounts Affected In Weverse Data Breach

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Phishers Are Hiding Malicious Emails in Plain Sight With Invisible Unicode

Phishing Network Hijacks Google’s Own Tools to Slip Past Email Filters

Popular travel app used by 23 Million lets anyone spy on users, including soldiers

Ransomware hackers dump 1.4 million stolen records from German government

Researcher Publishes CrowdStrike Privilege Escalation Zero Day

Rhysida Publishes Berlin Government Data After €2 million Extortion Demand Refused

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

South African firms urged to prep for more autonomous AI-driven orchestrated attacks

South Korea Records 40% Drop In Voice Phishing Cases After Tough Crackdown

Supposed White-Hat Hackers Drain $320 Million in BTC From Liquid Network, Say They’ll Return It After Fix

Teenage hacker charged over cyberattack on French tax authority

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE - Public Exploit Released

The Economics of Dwell Time and Why AI Native SIEM Changes the Equation

The Hidden Privacy Cost of Online Payments

The Hugging Face incident: Inside AI-led data breach that is reshaping OpenAI's safety rules

Toy Ghouls Targets Russian Organizations With New Windows Backdoors

Trezor data breach impact now reaches 81,000 customers

TVING Begins Accepting Compensation Claims for Personal Information Leak...Withdrawn Members Also Eligible

TVING Opens Compensation Claims for Data Breach Victims

UK app developers sue Apple for £2 Billion over tracking rules

US military disables ad trackers on troops’ phones over security concerns

US military troops can still be hit by targeted attacks despite disabling ad tracking on their devices - and leaders aren't happy

US Puts $10 Million Bounty on Alleged Iranian Cyber Chief

Weverse data breach affects 422,584 user accounts

Weverse data leak affects 420,000 users

Weverse, Hive's global fandom platform, suffers data breach affecting 422,000 accounts

What is 'ASCII smuggling'? How to safeguard yourself from such online phishing fraud

When does a Data Breach become “Cognizable Damage” under U.S. Law

Why Are So Many Security Professionals Keeping Breaches Quiet?

Why Hiding Chain-of-Thought Alone Doesn’t Stop Distillation Attacks

Zombie accounts could turn your forgotten profiles into hacker targets

Ransomware Operator Claims - Week 35 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 24th August and 30th August 2026, kindly assisted by our partners.

DBD discovered and researched 222 Ransomware Victims over 45 Countries and Islands claimed by 48 Data-Leaking Ransomware Operators, including 3 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 36 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 31st August and 6th September 2026.

📅 6th September

1.4 million stolen Berlin government files dumped on the dark web, triggering crisis response

Attackers conceal phishing lures using invisible Unicode characters

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Beyond Phishing: How AI is Advancing Enterprise Payment Fraud

FBI investigates data breach possibly linked to New Orleans cybersecurity firm

FBI looking into driver’s license data breach possibly linked to New Orleans ID-verification firm

FBI probes potential data breach of millions of drivers' licenses

FBI Warns a Password Reset Won't Save Your Hacked Email in New Scam

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Global Phishing Campaign Abuses Google Infrastructure to Evade Security and Steal Credentials

Houston-Based Genetics Firm Suffers Data Breach, Potentially Exposing Medical Data of 2,810,878 Patients and Staff

Identity-based attacks responsible for 85% ransomware in education

Is your forgotten login a hacker's backdoor?

Large-Scale Phishing Campaign Uses Invisible Unicode and ActiveCampaign to Evade Email Security Filters

Mathspace Data Breach Exposes Info of Over 1 Million Students, Parents, Staff

Medusa Ransomware Hits 500 US Firms, FBI Warns

Microsoft exposes phishing campaign using invisible Unicode characters

Microsoft finds an AI jailbreak trick fueling a 2.37 million email phishing wave

Microsoft has uncovered phishing attacks featuring invisible characters in the text that bypass email security measures

More than 150 million driver’s licenses may have been exposed in massive dark web data breach

Thousands of CARS24 records exposed as customer leads allegedly go for just $11

Top cybersecurity expert on Manchester Airports Group cyber attack risks - and what you can do about it

📅 5th September

8.8 Million Airport Records Were Published - Phishing Is Now the Immediate Risk

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Berlin launches crisis response after hackers publish stolen data

Claude, DeepSeek, and Qwen AI agents used to target governments across Asia

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Cybersecurity Crisis: Berlin Departments Hit by Ransomware

First Belgian bank to face criminal court for non-repayment of phishing victim

Hackers are exploiting another Chrome zero-day - Google rolls out urgent patch

If you see this iCloud message on your iPhone, don’t click it - it’s a scam

Meta sued over using “perv glasses” recordings to feed its AI

Natural Resources Wales confirms data breach

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

OpenAI confirms ‘wiki incident,’ says it’s ‘working on a framework’ for more disclosure

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

Post-Quantum Security Standards Exist, Migration Remains the Challenge

Ransomware’s weakest link is still the person clicking

Stolen Session Tokens Can Survive Password Resets: How Should Enterprises Respond?

The Netherlands: Fraudehelpdesk sees sharp rise in phishing attacks tied to Booking.com

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

Trezor Says ShipMonk Data Breach Exposes 67,000 More US Customers

Trezor Warns 67,000 U.S. Customers As Data Breach Discovery Expands

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

What Are 'Zombie' Accounts? Why Your Old Logins Are No Longer Safe

📅 4th September

14 Trojanized macOS Installers Linked to DPRK’s Contagious Interview Campaign Deliver OtterCookie

215 Exploited CVEs in H1 2026 as Android NFC Attacks Surge, AsyncRAT Leads Malware Data

67,000 more Americans using Trezor exposed to data breach

67,000 More Trezor Customers Exposed as Data Breach Widens

A German city may soon ban smart glasses on public transport, pools

Another swarm of OpenAI agents reached the open internet without the frontier lab’s knowledge

Bennett College in Greensboro struck by dark web data breach

Binance Warns of Phishing Scam Targeting Crypto Users With Fake Account Security Alerts

Binance warns users as phishing texts increase

California to Regulate AI Chatbot Toys Marketed at Children

CameraSwarm Hackers Compromise 14,500+ Dahua Cameras, Backdoor 1,900 Devices

CISA Flags Old ownCloud Flaw After Reported Philippine Nuclear Data Theft

Critical Citrix NetScaler auth bypass now leveraged in attacks

Crooks Behind Manchester Airports Group Hack Leaked Data of 8.8 Million People

Crystal Coast Pain Management Data Breach: SSNs Exposed

Cyber attack wave hits three more major US law firms

Data at law firms Quinn Emanuel, McDermott exposed in cyber breaches

DaVita to pay $15 million to settle data breach lawsuit affecting millions of dialysis patients

DPRK-Linked Hackers Use Trojanized macOS Installers to Deploy OtterCookie RAT

Egypt: InstaPay users warned of new phishing scam targeting bank accounts

FalconFlank Proof-of-Concept (PoC) Claims CrowdStrike Falcon Zero-Day Enables Privilege Escalation on Windows

FBI investigating potential data breach of more than 153 million driver’s license records

FBI issues warning about OAuth consent phishing

FCCI Data Breach: Protected Health and Personal Information Compromised

French Hospital Data Breach Draws €500,000 Fine Over 727,000 Records

French hospital hit with €500,000 fine after data breach exposes over 500K patient records

French Police Arrest Suspected ZeroBytes Hacker Over Tax Data Theft

G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules

G7 urges organizations to prepare for quantum cyber threats

Golden State Orthopedics Data Breach: 150GB Compromised

Google Chrome V8 Flaw Exploited in the Wild to Execute Arbitrary Code

Google patches actively exploited Chrome zero-day (CVE-2026-85046)

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Google warns of new Chrome zero-day flaw exploited in attacks

Hacker from Northumberland sentenced for stealing virtual gold

Hacker used AI agents for the entire attack chain, then mocked the victim company, leaving behind an 80-page security audit

Hacker used role at gaming giant Jagex in Cambridge to steal game wealth

Hackers Abuse AI-Era ASCII Smuggling to Hide Phishing Content in Millions of Emails

Hackers Abuse Leaked Amazon Web Services (AWS) Identity and Access Management (IAM) Keys to Hijack Amazon Bedrock AI Model Access

Hackers Bypass Microsoft 365 RejectDirectSend With Empty SMTP Sender to Spoof Internal Emails

Hackers Exploit Critical Super Forms WordPress Flaw to Upload Webshells and Execute Code

Hackers Hijack Amazon Web Services (AWS) Account to Run Paid AI Models in LLMjacking Attack

Hackers Use Claude, Qwen and DeepSeek AI Agents to Attack Government Networks

IDScan sued over alleged data breach affecting 153 million drivers

Immutable backup gap leaves firms exposed to ransomware

Ireland: Púca Festival warns of phishing scam

Kentucky Appellate Court Data Caught in Multi-State Cyber Data Breach

Ledger Is Being Sued for $500 Million Over a Data Breach It Sat On

MECCHA CHAMELEON Flaw Lets Malicious Custom Maps Achieve Remote Code Execution

Microsoft 365 Phishing Technique Uses Empty Envelope Sender to Evade Direct Send Blocking

Microsoft Teams Adds QR Code Protection to Block Phishing and Fraud

Microsoft Teams is about to make QR code phishing much harder

Microsoft Warns ASCII Smuggling Is Being Used to Hide Phishing Keywords From Email Filters

Midwest Spine and Brain Institute Impacted by Vendor Ransomware Attack

Minnesota court system data breach went undetected for months

Most of the bugs Claude Mythos found have never been checked by a human

New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges

New ransomware gang claims Boeing and Airbus supplier breach

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

OpenAI’s rogue agents keep escaping, with no formal process to investigate them

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

Pegasus spyware hits Serbian students and politicians in zero-click attack

Pegasus, New NoviSpy Variant Found on Serbian Students and Opposition Figures

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

Plex issues urgent patch warning, 300,000 media servers can be found online

Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws

Plex Urges Users to Update Media Server as Multiple Security Flaws Are Discovered

Pocket Bitcoin Data Breach Exposes Personal and Financial Information of 5,411 Customers

Pocket Bitcoin Reports Data Breach Affecting 5,411 Customers, Including KYC Documents

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

Quinn Emanuel and McDermott Confirm Breaches - Both US Law Firms Traced to a Single Hacked Employee

Researcher Releases Exploit of Claimed CrowdStrike Falcon Zero-Day

Roanoke tells city residents about data breach three months after it happened

RuneScape hacker stole and sold ‘virtual gold’ for more than £300k on black market

Saint-Étienne Hospital hit with $580,000 fine after data breach exposed 727,000 people's records

Sality Botnet Linked to 11 Million IPs Disrupted After 23 Years

Sality botnet taken down after 2 decades in service

Samsung Union Leaders Investigated for Alleged Data Breach

Scammers have figured out the best time to text you

September 2026 Patch Tuesday forecast: All we need is more time

ShipMonk Data Breach Exposes Personal Data of 67,000 Additional Trezor Customers

South Africa: Rand Water Hit By Cyber Attack

StormEncryptor Hits N-able Bug: 50% Unpatched

The Gentlemen claims Nutex Health cyber attack as company faces lawsuit

TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft

Trezor Confirms ShipMonk Data Breach Exposed 67,000 Additional US Customers

Trezor data breach expands to over 80,000 customers after ShipMonk kept old records

Trezor Data Breach Exposed Personal Information of 67,000 Additional US Customers

Trezor Data Breach Widens: 67,000 More US Customers Exposed Through ShipMonk

Two Citrix NetScaler Flaws Put Enterprise Edge Devices at Risk

UK account-hack losses surge as new reporting system exposes hidden cases

US and UK Join Forces Against Global Scam Centers and Cyber-Enabled Investment Fraud

US military disabled ad tracking on troops’ devices following reports of targeted attacks

US offers $10 million for info on Iranian allegedly behind cyberattacks on critical infrastructure

US, Britain to coordinate on scam center takedowns

What Okta and Microsoft’s Approaches Tell Us About the Future of Identity Security

📅 3rd September

2.8 million people affected by data breach at Baylor Genetics testing and diagnostic firm

3 Healthcare Breaches in Quick Succession Raises Concerns

150 Million Driver’s Licenses Exposed, Security Experts Discuss

412,000 The Town 2025 Ticket Buyers’ Data Hits the Dark Web

Aesto Health cyber attack impacts more than 9.5 million people

Agentic Ransomware Took Down Enterprise in Ten Hours: AI Left 80-Page Audit

AI agents help compress ransomware intrusion to under 10 hours, raising stakes for CISOs

AI is Making Phishing Scams Almost Impossible to Spot - 5 Steps Employers Should Take to Combat Latest Threat

AI-powered ransomware has arrived: Cybercriminals can now launch attacks for less than the cost of a coffee

American Vision Partners faces $1.75 Million settlement over 2023 cyber attack

As X Money expands, attackers target accounts through a wave of password reset requests

ASCII smuggling crosses over from AI prompt injection to phishing evasion

Attackers are Using Microsoft Teams Calls to Gain Access to Corporate Networks

Attackers Behind UK Airport Cyberattack Release Stolen Data

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Bain Capital Data Breach Exposes Personal and Financial Information

BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

CISA, FBI Urge Clearer Communication During Major Outages

Coder's registry infrastructure compromised to push malicious modules

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

Critical Elementor Pro flaw exploited to take over WordPress sites

CrowdStrike Disrupts Sality Botnet After More Than 20 Years

CVE-2026-84115 in Cleo Harmony: JWT Refresh Token Handler Flaw Exposes Remote Attack Risk

Cyber Attack Hits Cardiac Device Maker Boston Scientific, Disrupting Global Operations

DaVita settles ransomware attack lawsuit for $15 Million

Department of Justice (DOJ) Investigates Cyberattack Targeting Hundreds of Thousands of X Users

Department of Justice (DOJ) Joins X Investigation Into Attack on Hundreds of Thousands of Users to Identify Perpetrators

Don’t Take The Bait: The New Phishing Threats To Asset Managers

Dropbox Data Breach: 5,000 Accounts Hit Via Lenovo ID Flaw

Education Sector Faces Highest Per-Device Cyber Attack Intensity

FBI looking into potential data breach on the dark web

FBI Probes Data Breach Exposing 153 Million Driver’s License Scans on Dark Web

FBI Probes Possible Breach of 153 Million Driver’s Licenses

FBI reportedly opens inquiry into suspected IDScan.net data breach

Fewer attacks, more force: Link11’s European Cyber Report finds new DDoS records for the first half of 2026

Five Healthcare Providers Report Ransomware-Related Data Breaches

French hospital fined €500,000 after breach exposes data of 727,000

Group of UK politicians wants “AI kill switch” in case of national security threat

Hacker uses AI agents for entire attack chain, mocks victim with detailed security audit

Hackers Accessed 5,000 Dropbox Accounts Through Lenovo ID Flaw

Hackers Use QR Codes in Phishing Emails to Steal Login Credentials

Health data breach: EUR 500,000 fine against HÔPITAL PRIVÉ DE LA LOIRE

Hewlett Packard Enterprise (HPE) patches critical ArubaOS-CX remote code execution flaw

HumanEdge Data Breach: Social Security Numbers Exposed

International Operation Disrupts Sality P2P Botnet

IT-OT convergence: When ransomware hits the factory floor

Large group of Serbian opposition, activist figures targeted with spyware

Ledger sued for $500 Million over alleged data breach and crypto theft

Microsoft uncovers malware campaign using counterfeit installers to disable security defenses

Montana court filing system part of nationwide ‘data breach’

MyDr data breach: can affected patients seek compensation together?

New phishing trick gives hackers persistent access to your account, FBI warns

New ‘Spring Ring’ operation uses vishing via Microsoft Teams

NFI North Data Breach: 49,540 Individuals Impacted

Node.js: Old Technique Makes a Comeback

OpenAI Releases GPT-6 Astra Amidst Frontier AI Cybersecurity Concerns

Organizations Struggle to Detect, Contain Out-of-Scope AI Agents

Outsider Phishing Kit Survives Takedown With 700 New Pages

P&O Ferries apologises to passengers impacted by data breach

P&O ferry passengers hit by data breach during sailing

Passengers of P&O Ferries Hit by Data Breach During Strait of Dover Sailing

Pegasus Zero-Click Exploit Infects Serbian Student Activist's iPhone

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

Pemberton Township Falls Victim to ‘Phishing Scam,’ with $195K Wired to Unintended Recipient

Phishing campaign targets widely used RMM platforms in 46 countries

Plex warns users to patch security vulnerabilities immediately

Radiology vs. ransomware: How to defend imaging departments against cyberattacks

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

Russian man indicted for spreading malware to 80,000 freelancers

Russian national indicted after malware sent to 80,000 freelancers

Saskatchewan Health Authority (SHA) confirms patient data breach at Nipawin hospital

Scammers target Revolut users on wealthy British island Jersey

Serbia Faces Largest Documented Spyware Wave as Activists, Students Targeted with NSO Group’s Pegasus

Serious Data Breach in Montana’s Highest Court

Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means

SonicWall SMA 1000 under attack: critical zero-day enables complete compromise without authentication

SonicWall Warns of Two Actively Exploited SMA1000 Zero-Days, One Rated Maximum Severity

‘Spring Ring’ Vishing Attack Uses Fake IT Calls on Microsoft Teams to Install Malware

Swiss Bitcoin Service Pocket Bitcoin Reports Data Breach Affecting More Than 5,400 Users

Tech company ignored ethical hacker’s emails, so he contacted himself from their account

Thomson Reuters breach hit court systems in US and Canada

Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

Thomson Reuters Discloses Court Records Breach Spanning 11 States, the Virgin Islands, and Ontario

Thomson Reuters hit by cyberattack that saw court documents across 11 states accessed by a hacker

Thomson Reuters reveals breach that exposed U.S. and Canadian court records

Thomson Reuters' court data breach is a reminder of a risk clients think someone else is managing

TVING to Pay ₩3 Million Per Customer Over Data Breach; Security Investment to Quadruple

US and Canadian court data exposed in Thomson Reuters breach

US and Canadian Court Records Breached Following Thomson Reuters Incident

US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries

Why Stopping Upstream Scams Before Money Moves Is a Cybersecurity Problem

Your AI agent’s system prompt is not a security control

Your threat feed is someone else’s database: What ingesting malware intel at scale takes

📅 2nd September

A battery storage cyberattack would look exactly like a badly tuned controller

A Single Digital Trap Costs Trader Rs 3 Crore in Whale Phishing Scam

ATF confirms major cyberattack after Qilin claim: Were gun owners' records exposed?

ATF Major Incident Following Qilin Ransomware Claim

Attackers are going after prominent individuals through OAuth phishing, FBI warns

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

Australian organisations may soon face a 72-hour data breach reporting deadline

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

Battery storage cyber attack 'could cause national blackout' and £10 billion in damage

BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

Clark County warns of phishing scam targeting planning permit applicants

Critical JFrog Artifactory Vulnerability Exploited Days After Disclosure

Dropbox accounts breached through Lenovo email verification flaw

Dropbox Breach Traces Back to a Broken Sign-In Feature You Probably Never Knew Existed

Dropbox Data Breach: 5,000 Accounts Compromised

Educational Institutions Face Cyber Risks Far Beyond Phishing

Exploitation of Sangoma Switchvox flaw is underway (CVE-2026-9586)

Exposed ransomware server reveals automated $4 cyberattacks

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands

Facebook Ads Promote Fake Streaming Apps Delivering PanDa RAT

Fake IT Support Hackers Abuse Microsoft Teams and Quick Assist to Deploy Reverse Shell

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

FBI has a 'Public Service Announcement' for everyone on the internet: You may be targeted by...

FBI Investigates Nexus Dark Web Service Selling Over 153 Million US and Canadian Driver’s Licenses

FBI Warns Hackers Are Impersonating Officials and Media in OAuth Phishing Attacks

FulcrumSec Claims Responsibility for Manchester Airport Group Breach

Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Global sinkhole operation ends Sality botnet’s 23-year run

Hackers Chain Two New SonicWall Zero-Day Vulnerabilities

Hackers exploit critical JFrog Artifactory flaw to forge admin tokens

Hackers Exploit Critical SonicWall SMA 1000 SSRF and RCE Flaws in Active Attacks

Hackers Exploit LiteLLM Admin API Flaw to Turn Read-Only Access Into Full Server Takeover

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Hackers expose donor data from Russian fundraisers for Ukrainians, political prisoners

Hackers Use AI Malware to Break Into Brazilian Banks and Make Fraudulent Transfers

Health data of more than 9.5 million people leaked from Aesto record system

How Industry Coalitions Are Rallying to Secure Open Source Software for the AI Era

Ireland: HSE fined over data breach at former Midlands hospital

It sure looks like hackers breached a major ID card verification service

Kaspersky Uncovers LinkedIn Recruitment Phishing and New Cross-platform Spyware Targeting Africa, Others

Lessons From the Aftermath: Building Security that Fits the Environment You Have

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages

Manchester Airports Group Breach: FulcrumSec Publishes Alleged Stolen Data - Future Travel, Marketing Platform Details

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)

New pro-Ukraine hacker group targets Russian companies with custom ransomware

New report shows AI-related scams are costing Nevadans thousands of dollars

Nutex Health Says Patient Data Stolen, Hackers Threaten Leak

OpenAI’s agents exploited a patched Linux bug in Hugging Face incident: 6 steps to take ASAP

Ransomware group The Gentlemen claims Glassdoor breach, sets deadline for alleged data release

Ransomware Hackers Built Their Own C2 Framework to Steal Passwords and Kill Security Tools

Reports on alleged massive IDScan.net data breach: 153 million driver’s licenses for sale

Russian Man Extradited Over Malware Campaign Targeting Freelancers

Russian national facing 20 years for malware campaign that infected 80,000 freelancers

Sality botnet infrastructure dismantled in joint global takedown

Sality P2P Botnet’s Remarkable 23-Year Run Has Come to an End

Sality, one of the longest-running botnets, finally gets disrupted

Silver Fox Hackers Target China-Based Organizations With Counterfeit Software Installers

SonicWall SMA 1000 appliances under attack via zero-day flaws

SonicWall warns of actively exploited SMA1000 zero-day flaws

South Korea: Voice phishing cases plunge 40% after crackdown

South Korea: Voice phishing measures cut cases and losses by about 40 percent

The Philippines: Chinese national nabbed over alleged rogue cell site, phishing scheme

TVING Data Breach: 20 Million Records vs. 5 Million Subscribers - Korea's Largest Was 104 Million in 2014 Card Leak

U.S. or Korea? Coupang's data breach lawsuit faces key jurisdiction question

US charges Russian for infecting 80,000 freelancers with malware

Venezuelans plead guilty to hacking ATMs: "Jackpotting bandits are sweeping the nation"

Wave of X password reset emails could be hiding a sneak phishing attack

White hat hackers post UK prime minister’s residence on Booking.com - and people actually try to book it

WordPress backup plugin flaw exposes millions of sites to takeover attacks

X Investigates Password Reset Attack After X Money Launch, No Evidence of Breach

X Users Get Flooded With Password Reset Requests, Raising Fresh Data Breach Fears

X Users Hit By Wave Of Password Reset Requests, Triggers Fresh Data Breach Concerns

📅 1st September

9.5 Million Impacted by Aesto Health Data Breach

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

65% of Enterprises Have Seen AI Agents Act Out of Scope

A Coordinated Cyber Attack by Suspected Iranian Hackers Affected Over 100 Water Systems

Aesto Health says data breach affects over 9.5 million patients

Aesto healthcare data breach impacts 9.5 million people

AI Agents Are Now Orchestrating Entire Ransomware Attacks, Signaling a New Threat Era

AI Helps Drive Number of Linux Kernel CVEs to Near 2,000 Per Release

AI-driven voice phishing is on the rise: what organizations need to do to defend themselves

AI-Powered Phishing Is Making Traditional Email Security Less Effective

Anthropic: Attackers Using Infostealers to Hijack Claude Sessions

Anthropic boots users, wipes payment info to protect against malware attack

Attackers Abuse Trusted Cloud Services to Hide Phishing Attacks Against Financial Organizations

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Attackers Steal METR API Key and Burn $600,000 in AI Credits

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

Baptist Health warns patients of MyChart phishing scam

Berlin refuses to be blackmailed after network breach

Berlin’s Seven-Day Ransomware Isolation Gap Let Rhysida Steal Critical Infrastructure Data

Biggest Cyberattacks Changing the Security Landscape

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Canada: ‘All levels of government’ being impersonated by scammers, says Municipalities Newfoundland and Labrador (MNL)

Charity supporters’ warned after cyber attack exposes personal data

Chicago Family Health Center Data Breach Affects 90,000

China-Nexus Fire Ant Hackers Target Cisco Routers, TACACS Servers for Espionage

China's 'Fire Ant' campaign used compromised Cisco routers as platform for more attacks

City of Missoula warns of ongoing phishing scam

Clark County warns of phishing scam impersonating Planning Department

Cornerstone Healthcare Data Breach: 14,830 Patients Exposed

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Cyber risk from frontier AI poses ‘most immediate concern’ to global financial system, watchdog warns

Cybersecurity experts issue warning after Winona County pays $128k following ransomware attack

Dark web listing contradicts Dodo Payments’ data breach disclosures

eBay Disables Community Messages After Wave of Phishing Scams

Fake Claude Opus 5 app delivers malware and wipes its own tracks

FBI raises alarm over deceptive phishing campaign targeting prominent people

Fidelity Data Breach Costs $3.75 Million in Combined Fines

Financial Stability Board Sounds the Alarm Over Frontier AI Risks

Five Venezuelan Nationals Plead Guilty After Kansas ATM Jackpotting Attempts, FBI Reports 1,900 US Incidents Since 2020

Five Venezuelans plead guilty to ATM jackpotting attacks in US

Flock backlash turns into statewide fight as Florida pushes cameras off roads

Florida and Texas move to block Flock cameras over privacy concerns

FulcrumSec Leaks Manchester Airports Group Customer and Booking Data

Hacker breaches creators of Hello Neighbor horror game and blackmails them - demands game be removed from sale

Hackers abuse Faronics Deploy admin tool to install ScreenConnect

Hackers are using fake MP4 video files to smuggle payloads past security filters

Hackers breach 5,000 Dropbox accounts using only victims’ email addresses

Hackers Demand Ransom After Berlin Data Breach

Hackers give Glassdoor 172 hours to stop dump of allegedly sensitive data

Hackers push malicious Virtualizor update in BGP hijacking attack

Healthcare facilities operator Nutex says patient, employee data stolen in August incident

Healthcare Giant McKesson Investigates Data Breach Incident

Hong Kong: E-commerce data breach affects more than 33k

Horizon Eye Care Data Breach: PHI Potentially Exposed

Identity-based attacks involved in 85% of education ransomware incidents

India: Told to stop posting flaws, teen hacker uses government email ID to troll Cert-In

India Catches Meta Running Malware-Laced ‘Adult’ Ads on Facebook and Instagram That Drain Bank Accounts

Integrated Specialty Coverages Data Breach Exposes Driver's Licenses

Investigation opened on OpenAI by Montana Attorney General Austin Knudsen following data breach

Iranian cyber spies target aviation, fintech developers with new malware

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests

Ireland: HSE fined €645,000 over data breach affecting Westmeath hospital

Kiewit discloses data breach affecting employees and contractors after email account compromise

Majority of Senior Cybersecurity Leaders Have Limited Trust in AI

Manchester Airports Group hit by cyber attack

McKesson Confirms Data Breach as ShinyHunters Claims 284 Million Records Stolen

McKesson Confirms Data Breach, Experts Weigh In

McKesson data breach exposes prescribing physicians and their patients to fallout from a third-party attack

Mira Partners Suffers Personal Data Breach, Encryption Key Exposure Unclear

Nearly 22,000 Microsoft Exchange servers exposed as exploit goes public

Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks

Nephrology Associates Data Breach Affects 24k Patients

Novocure data breach affects more than 1,400 cancer patients

Omdia Study Highlights Declining Ransomware Recovery Rates and the Immutability Gap in Backup Storage

P&O ferry passengers hit by data breach during sailing

Qilin hackers leak ATF data, exposing criminal investigations and phone records

Qilin Leaks 6.3GB of Alleged ATF Files, Then Pulls Download Links

Ransomware Gang Claims Nutex Health Data Breach

Ransomware gang leaks sensitive files from ATF investigations

Ransomware Group Claims Andover As Victim Following Cyberattack

Ransomware in 2026

Recently patched PaperCut zero-days used in data theft attacks

Ross Township issues warning about phishing email claiming to be from planning commission

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Scammers Running Fake Cryptocurrency AML Wallet-checking Sites Hoodwink Users, Drain Wallets

Some seek compensation following Road Traffic Safety Directorate (CSDD) cyber attack in Latvia

South Africa: Gert Sibande Municipality issues urgent warning over phishing emails

Stronger Security Drives Ransomware Groups to Recruit From Within

The Gentlemen come calling as Nutex confirms sensitive data theft

The Most Immediate Threat to the Global Financial System Is AI Cyberattacks

They prey where kids play: how gaming phishing scams now target kids

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones

TVING data breach exceeds subscriber base, raising questions over 19.53 million figure

Ungentlemanly behavior: Insights into a ransomware operation

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks

White House Launches Pilot Program in Texas to Protect Water Infrastructure

Why are Ransomware Hackers giving victims only 7 days to pay the Ransom

Winona County Paid $128,000 Following Ransomware Attack

Winona County, Minnesota, Paid $128K Ransom to Restore Services

X Data Breach? Users Are Getting Flooded With Password Reset Emails Nobody Requested

X says attackers are targeting user accounts after the launch of X Money

📅 31st August

85% of Education Ransomware Starts with Stolen Identities

'128 Billion Won Fine' GS Retail Apologizes for Data Breach, Vows to Strengthen Security System

AI agent in Cursor linked to ransomware breaches at 7 companies

AI agents read legitimate llms.txt files from trusted companies and proceed to install malware

AI AppSec tools agree on just 5% of security findings

AI killed the typo. Now it’s time to rewrite phishing training

Anthropic locks out Claude users after infostealers hijack login sessions

Anthropic Warns Commodity Infostealers Are Hijacking Claude Sessions to Drain Paid Usage

Apple shares ‘shocking evidence’ against former employee accused of stealing company data for OpenAI

AshSqlite Vulnerability (CVE-2026-77846) Exposes Hidden JSON Fields

Attackers plant remote access tools on compromised PaperCut servers

Aurora Ransomware Hackers Use Cursor AI Agent for Hands-On Exploitation and ESXi Attacks

Aurora Ransomware Hackers Used AI to Attack Companies Across Nine Countries

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Australian app developer DigiGround investigating ransomware claims

Boston Scientific Cyberattack Limited to Unauthorized Access on Certain On-Premises Systems

Bureau of Alcohol, Tobacco, Firearms and Explosives Discloses Cyber Incident

Berlin Confirms Data Theft After Rhysida Attack: 5.79TB

Berlin confirms data theft after Rhysida ransomware attack claims

Berlin Won’t Pay Extortion Group Claiming Data Theft

Blind Eagle-Linked Loader Uses GitHub, VBScript, PowerShell and InstallUtil to Deploy AsyncRAT

CareCloud data breach affects more than 3.75 million people

CarGurus Data Breach Exposes 12.5 Million Accounts; Here's What Hackers Got

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

Chinese Fire Ant hackers turn Cisco routers into spying platforms

Court upholds firing of Korea Food Research Institute (KFRI) executive for crypto mining and data breach in Korea

Cronos blockchain restarts after $74 million Tectonic exploit

Cybersecurity's “Hiring Crisis” is Fueling the Cybercrime Talent Pipeline

Darksiders Publisher THQ Nordic Named on DireWolf Ransomware Leak Site

Data Breach & Blind Spots: The Cyber Risk for Supply Chains

Data Breach at Los Angeles County Museum of Art. What Was Leaked?

Delta School District reports website cyber attack

Department of Justice (DoJ) Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims

Extortion Group Claims Manchester Airports Group Data Breach

Fake Claude Opus 5 App Spreads New RevStealer Windows Malware

Fake MyChart messages target patients across Pennsylvania

Fidelity’s $2.5 Million Data-Breach Settlement Puts A Price On Losing Control Of Customer Data

Five plead guilty in latest federal ATM jackpotting case

Fogo Blockchain Halts Operations Due to Hacker Attack and $3 Million Theft

Fraudsters steal $6 million from Tectonic crypto platform after inflating token price

Free Cloudflare DNS Tweak Blocks Malware and Phishing Across Home Networks

Free Router DNS Tweak Blocks Malware and Phishing Across Home Networks

FulcrumSec Hackers Claim Manchester Airports Group Data Breach

GS Retail fined $9.3 Million following customer data breach

GS Retail fined 12.8 billion won over data breach affecting 1.66 million users

Guernsey: Doctor's appointment phone call led to data breach

Hacker puts data of 820 million Alipay users up for sale

Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson

Hackers demand €2 million from Berlin, threaten data leak

Hackers Steal Identity, Vehicle Data from Latvia’s Road Traffic Safety Directorate

Hackers threaten to spill the secrets behind America’s food safety giant Neogen

Hackers’ Own Malware Infection Exposes Their RATs, Phishing Kits and Attack Infrastructure

Hasbro Breach Exposes Employee Information

Hasbro Data Breach Exposed Employee SSNs and Driver's License Data

Hong Kong police arrest two men allegedly linked to HK$500,000 phishing scam

How AI could make it harder for governments to use hacking tools

How to Prepare for AI-Driven Cyberattacks

Human Rights Writers Association of Nigeria (HURIWA) faults police, National Data Protection Commission (NDPC) over delay in probe of alleged National Institute for Policy and Strategic Studies (NIPSS) data breach involving naval officer

Identity theft attacks account for 85% of ransomware cases in education

Identity-based attacks account for 85% of ransomware incidents in education

Identity-Based Attacks Are Responsible for 85% of Ransomware in Education

India: Hyderabad publisher hit by ransomware, €20m ransom sought

Infostealer Malware Steals Claude Session Cookies to Hijack Accounts and Bypass 2FA

Iranian-Linked Cyber Attack Shuts Down a UK Power Plant

Law Society of Scotland issues fraud alert after phishing email

Ledger Phishing Scam: Fake Wallet Website Targets Crypto Users - What You Need to Know

Manchester Airports Group Data Breach: FulcrumSec Claims the Theft of 86 GB via Exposed Iterable API Credentials

McKesson confirms cyber incident after ShinyHunters claims patient-data theft

McKesson Confirms Breach: 284 Million Records, $55 Million Demand

McKesson Confirms Data Breach as Attacker Deadline Looms

McKesson discloses data breach after ShinyHunters claims theft of 284 million records

Microsoft warns of TerminalFix attacks deploying reverse tunnels

Microsoft Warns of TerminalFix Campaign Hiding Malware in PNG Images

National Health Insurance Service (NHIS) phishing scam exposes gaps in South Korea fraud insurance

Nigeria: Rights Group Decries Delay In Probe Of Alleged Data Breach By National Institute for Policy and Strategic Studies (NIPSS)

Nigerians extradited to US for sextortion, deaths of two teens

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales

Only 33% of AI Agents Provisioned With Least-Privilege Access

Open ATF criminal case files leaked by Russian ransomware hackers

OpenAI Warns Astra AI Could Develop Zero-Day Exploits and Launch Autonomous Cyberattacks

P&O Ferries data blunder as it sends out passengers' personal details by text message

PaperCut Issues Second Emergency Patch as Researchers Break Fix for Exploited Zero-Days

Pharmaceutical giant McKesson warns of 'service degradation' following cyberattack

Phishing scam is targeting 'MyChart' patient portal users

Phishing scam spreading around Pennsylvania involving fake alerts from MyChart

Qilin hackers leak ATF data, exposing criminal investigations and phone records

Ransomware attack hits Norcross' computer systems, leaving disruptions, officials say

Ransomware attack reportedly exposes Carhartt data

Ransomware Gang Names ATF; Department of Justice (DOJ) Calls Breach ‘Major’

Ransomware-as-a-Service democratizes hacking

Rhysida Ransomware puts Berlin Government Data up for sale for 30 BTC

Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails

Security Leaders Weigh in on Recent PaperCut Vulnerabilities

ShinyHunters claims it stole 284 million patient records from McKesson

ShinyHunters Claims Theft of 284 Million Records from Healthcare Giant McKesson

Simple Router DNS Tweak Blocks Malware and Phishing Across All Connected Devices

Slovenian casinos reopen after cyberattack knocked gaming systems offline

Small businesses and cyberattacks: why phishing is still the threat to watch

'Sophisticated' AI swarm attacks are months away, OpenAI warns: What experts say businesses must do

South Korea fines GS Retail $9.2 million over data breach affecting 1.66 million customers

Steam Data Breach Exposes Over 12TB of Source Code, Unreleased Projects

Steam leak that exposed a decade of game history wasn’t even a hack

TerminalFix Attack Uses Fake Cloudflare CAPTCHA to Deploy Reverse Tunnel Into Corporate Networks

Threat actors are posing as AI crawlers to hunt for exposed credentials

US cities cancel Flock contracts at record pace in August

US healthcare giant McKesson breached, ShinyHunters claims 284 million patient records

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

What a Financial Data Breach Actually Costs a Fintech in 2026

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree

When a Cyber Loss Has No Conventional Hacker

Wippy Data Breach Exposes 736 Users' Height, Blood Type; South Korea Fines nRiZE ₩118 Million

Your Money and Data Are at Risk as Phishing Attacks Rise

ZeroBytes breaches Zéro Logement Vacant, data of nearly 48 million French property owners exposed