Editor's Message

Welcome to DBD. On March 8th, DBD celebrated it's 5th anniversary and PRiSM celebrated it's 2nd anniversary. Little did I know when I started both of these ventures just how much an impact they would have on my life and I'd like to thank each and everyone of you who have supported me over the years, with a special thanks to those individuals who have kindly shared their knowledge with me, and continue to do so. Thanks again for your support. Stay safe. :)

“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington DC

Monday, 18 August 2025

Data Breaches Digest - Week 34 2025

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 18th August and 24th August 2025.


21st August

Australia: Medical clinic data breach

Cyber attack exposes details of thousands of internet provider iiNet’s customers

The chilling journey your personal data could take on the dark web after a cyberattack

20th August

28% of Employees Would Use AI at Work Even if Banned

46% of Retail Hacks Linked to Security Gaps

47,000 people affected by data breach at Business Council of New York State

405,000 Dutch women receive letter about data breach at laboratory

A hacker tied to Yemen Cyber Army gets 20 months in prison

AI doesn’t know what’s sensitive, unless you tell it

AI Website Builder Lovable Abused for Phishing and Malware Scams

Allianz Life data breach exposes 1.1 million customers

At least three UK organizations hit by SharePoint zero-day hacking campaign

Britain targets Kyrgyzstan crypto networks aiding Kremlin with sanctions

British Telecoms Provider Colt Updates After Major Cyber Attack and Data Breach

Business Associate Data Breach Affects 87 Skilled Nursing Facilities

Business Council of New York State Data Breach Exposes 47,000 Individuals’ Sensitive Information

Commvault plugs holes in backup suite that allow remote code execution

Court rules that “Pay or Okay” model by Austrian newspaper violates GDPR

Cybercriminals target brokerages with ramp-and-dump scams

Cybersecurity training doesn’t work: time wasted with no impact, study finds

Data Breached from Dorset College in Phishing Attack

Department of Justice (DOJ) Charges 22-Year-Old for Running RapperBot Botnet Behind 370,000 DDoS Attacks

Europe's Ransomware Surge Is a Warning Shot for US Defenders

Executives Warned About Celebrity Podcast Scams

Experts Find AI Browsers Can Be Tricked by PromptFix Exploit to Run Malicious Hidden Prompts

Exploit for critical SAP Netweaver flaws released (CVE-2025-31324, CVE-2025-42999)

Fake Antivirus App Spreads Android Malware to Spy on Russian Users

FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage

Feds charge alleged administrator of ‘sophisticated’ Rapper Bot botnet

Free Chrome VPN extension capturing screenshots of all 100K users

Free meals, faulty logins and fried security put McDonald’s on hacker’s menu

Google Confirms Data Breach, Cautions Users on New Hacking Tactics

Google warns of new AI cyber threat using indirect prompt injection, know details about it

Hacker behind “Rapper Bot” DDoS-for-hire Botnet which carried out over 370,000 attacks arrested

Hacker downloaded data of all 270 thousand Intel employees due to a simple login vulnerability

Hacker Group Targets Houthi-Controlled Red Sea Ports Authority in Yemen Cyberattack

Hackers access data of 850,000 Orange Belgium customers

Hackers Expose Ukraine’s True War Losses: 1.7 Million Dead or Missing

Hackers steal Microsoft logins using legitimate ADFS redirects

Hackers Weaponize Active Directory Federation Services and office.com to Steal Microsoft 365 logins

Hackers Weaponize QR Codes in New 'Quishing' Attacks

He Hacked McDonald’s for Free Nuggets - What He Found Was Far More Dangerous

How Cybercriminals Exploit Generative AI for Sophisticated Phishing Attacks

Inotiv cyberattack disrupts operations after systems encrypted in ransomware-style breach

Inotiv discloses ransomware attack disrupting business operations

Inotiv, a big pharma research corp fined $35M for animal cruelty last year, is hit by ransomware

iOS security features you should use to protect your privacy

Korean financial sector enhances cybersecurity amid ransomware attacks and penalties

Major Belgian telecom firm says cyberattack compromised data on 850,000 accounts

Major Data Breach Hits Australia’s Second-Largest Internet Provider

Major password managers can leak logins in clickjacking attacks

McDonald's not lovin' it when hacker exposes nuggets of rotten security

Millions at risk after Turkey’s top finance apps spill sensitive data

Mule Operators in Middle East, Turkey and Africa (META) Adopt Advanced Fraud Schemes

Navigating cyber-security trade-offs

New DripDropper Malware Exploits Linux Flaw Then Patches It Lock Rivals Out

New Salty 2FA Phishing-as-a-Service (PhaaS) Platform Targets Microsoft 365 Users to Steal Login Credentials

North Korea Uses GitHub in Diplomat Cyber Attacks as IT Worker Scheme Hits 320+ Firms

Optus Sued by Australian Privacy Regulator Over 2022 Data Breach

Orange Belgium hit by cyberattack

Oregon Man Charged in Global “Rapper Bot” DDoS-For-Hire Scheme

Password crisis in healthcare: Meeting and exceeding HIPAA requirements

Patient Data Lost in Ransomware Attack on EHR Vendor

Pharma giant Inotiv hit by ransomware attack, says operations were affected

Pharmaceutical Company Inotiv Confirms Ransomware Attack

Pharmaceutical firm Inotiv discloses ransomware attack. Qilin group claims responsibility for the hack

Pharmaceutical firm Inotiv investigating ransomware attack that disrupted operations

Phishing campaigns now target Telegram infrastructure

Phishing Campaigns Target Telegram Infrastructure

Phishing the Top Tool Behind Rising Ransomware Attacks

Pro-Houthi hacker who attacked thousands of websites from UK home is jailed

Radiant Capital hacker turns $53 Million heist stash into $94.6 Million after timing ETH trades

Radiology Associates of Richmond hit with wave of lawsuits after data breach

Ransomware attack impacts Inotiv operations

Ransomware Attacks in Japan Surge by 1.4 Times, Signaling a Significant Increase in Cyber Threats

Ransomware Attacks on Japan Surge by 40% in Recent Spike

Ransomware Disrupts Inotiv Operations

Ransomware group deploys deceptive ChatGPT desktop app to create backdoor

“Rapper Bot” malware seized, alleged developer identified and charged

Record high ransomware incidence reported

Rise in Phishing Attacks Driven by Generative AI Misuse

Russian investment platform confirms cyberattack by pro-Ukraine hackers

Sensitive AML/KYC Database of 6 Million Allegedly Exposed in Acuris Risk Intelligence Breach

Serial Hacker Jailed for Hacking and Defacing Organizations’ Websites

Serial Hacker Sentenced for Defacing and Hacking Organizational Websites

Side of Fries With That Bug? Hacker Finds Flaws in McDonald's Staff, Partner Hubs

Solana-Scan campaign aims at Russian crypto developers

Surge in phishing attacks as cybercriminals exploit URLs & QR codes

The AI security crisis no one is preparing for

The Allianz Life data breach just took a huge turn for the worse

The iiNet data breach, and what it means for Australian businesses

The Rising Threat of AI-Powered Phishing and Social Engineering

Third-Party Software Suppliers: A Supply Chain Cyber Risk?

This Hacker Turned Stolen $53M into $103M, Now Buying ETH Again

Thousands of Belgians have their personal data hacked in cyber attack

Threat Actors Exploit GenAI Platforms to Craft Sophisticated and Realistic Phishing Attacks

Threat Actors Leverage GenAI Platforms to Create Realistic Phishing Content

TPG Telecom probes cyber breach impacting iiNet customer data

TRM Launches Industry-Wide Platform to Fight Crypto Crimes

Types of Penetration Testing: Which One Does Your Business Need?

UK Cannabis Clinic Investigating As Patients Affected By Major Data Breach

UK colleges hit by phishing incident

UK Retreats on Apple Encryption Backdoor Demand Following US Pressure

Uzbekistan Airlines Allegedly Breached – Massive Cache of Passenger and Employee Data for Sale

Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware

Warlock Ransomware Hitting Victims Globally Through SharePoint ToolShell Exploit

Website Defacement and Cybercrime – Hacker Sentenced to Prison for Digital Attacks on Multiple Organizations

Weymouth & Kingston Maurward College phishing attack probe

What to do if your company has a data breach

Why CISOs in business services must close the edge security gap

Workday Discloses Data Breach Following CRM-Targeted Social Engineering Attack

Workday, Salesforce & A New Era of Third-Party Cyberattacks

19th August

1.1 Million Users Data Exposed in Massive Allianz Life Data Breach

$2.8 Million Crypto Seizure from Ransomware Operator That Targeted Healthcare

85% of Organizations Approach Cybersecurity Reactively

96% of Manufacturers Plan to Invest in Cybersecurity Platforms

96,000 UK Police Bodycam Videos Lost After Data Transfer Mishap

280,000 customers' emails, phone numbers exposed in cyber attack on iiNet, TPG says

Algeria’s National Postal Service AlgĂ©rie Poste, Allegedly Breached – User Data Leaked Online

Allianz Life Data Breach Affected 1.1 Million Records, Attributed to ShinyHunters Salesforce Social Engineering

Allianz Life Data Breach Affects 1.1 Million Customers

Allianz Life Data Breach Exposes Data of Over 1 Million Clients

Allianz Life Data Breach Exposes Personal Data of 1.1 Million Customers

Allianz Life security breach impacted 1.1 million customers

Android Malware Exploits Fake Energy Subsidy Promises in India to Steal Financial Data

Android VPN apps used by millions are covertly connected AND insecure

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems

Arnold Oil Data Breach Affects 866 People

Attacker “Patches” Vulnerability Post Exploitation to Lock Out Competition

Attackers use GenAI to create even harder-to-detect phishing threats

Australia’s 2nd largest internet provider suffers data breach

Australia’s TPG Telecom confirms cyber incident in iiNet system

Australian ISP iiNet confirms data breach impacting more than 200k customers

Australian ISP iiNet Suffers Breach of 280,000+ Records

Austrian HR Software Giant Infoniqa Allegedly Breached by Warlock Ransomware Group

Benworth Capital Data Breach Exposes PII of Many

Bragg Hacked But Claims No Personal Information Affected

Brokerage Clients Targeted in ‘Ramp and Dump’ Scam – Mobile Phishing Surge

Business Council of New York State says nearly 50,000 had data leaked in February cyberattack

Canadian Financial Regulator Hacked, Exposing Personal Data from Member Organizations

ChatGPT Impersonator – PipeMagic Malware Leverages Windows Flaw to Unleash Ransomware

Chilean Energy Giant Lipigas Targeted in Alleged Data Breach

Citizen Lab Reports Hidden VPN Networks Sharing Ownership and Security Flaws

City of Lubbock restores websites after finding 'potentially malicious code' on computer

ClickFix Phishing Attacks Surge Nearly 400% in Just One Year

Clinical Diagnostics Pays Ransom After Hackers Steal 300GB of Data

Consumers have never been more exposed to cyber threats: peak body responds to iiNet data breach

Criminal Hackers Exploit Cisco Safe Links for Phishing Attacks

Crypto24 ransomware blends legitimate tools with custom malware to strike manufacturing, other sectors

Cyber attack exposes details of thousands of internet provider iiNet's customers

Cyber Essentials: The 5 Cost-Effective Security Controls Everyone Needs

‘Cyber gangs’ are targeting small businesses, too: How to protect yourself

Cyberattack Exposes 280,000 iiNet Customers

Data breach at Allianz Life reportedly impacts 1.1 million customers

Data Security Incident at Colt Leads to Extended Disruptions of Key Services

Data Security Incident Hits Bragg’s Internal IT Infrastructure

DaVita Ransomware Attack Puts Nearly 1 Million Patients at Risk

Department of Justice (DOJ) Seizes $2.8 Million in Crypto From Zeppelin Ransomware Operators

Department of Justice (DoJ) Seizes $2.8 Million In Crypto Tied To Zeppelin Ransomware

Do you click on text message links? Here are 4.2 million reasons not to

Drug development company Inotiv reports ransomware attack to Securities Exchange Commission (SEC)

Ed Tech Company That Provides Telehealth to L.A. Students Experiences Data Breach

Elastic rejects claims of a zero-day RCE flaw in Defend EDR

Fake Gmail Security Alerts Prompt Users to Reset Passwords via Email and Phone

Fake "I’m not a robot" CAPTCHAs might cost you your bitcoin

FBI seizes $2.8M from suspect responsible for Zeppelin ransomware attacks

February ransomware attacks hit record high as ThreatDown reports 25% annual surge

Flaw in Too-Trusting Lenovo Chatbot Could Have Let Hackers In

Google issues red alert as new cyber attack targets Gmail users using AI with ‘indirect prompt injections’

Hack at Allianz Life impacts 1.1 million customers, breach notification site says

Hacker Claims to Sell 15.8 Million PayPal Logins in Massive Data Dump

Hackers Exploit Cisco Secure Links to Evade Link Scanners and Bypass Network Filters

Hackers steal medical data of nearly half a million people in Netherlands

Hacktivism drives surge in ransomware attacks in Q2 2025

Huge internet provider hacked: 280,000 customers exposed

iiNet data breach exposes details of 280,000 customers in cyberattack

iiNet data breach exposes information of more than 280,000 customers

iiNet Hit by Major Data Breach – Details of 280,000 Customers Allegedly Compromised

India police arrest 18 in credit card fraud tied to TP data breach

Indonesian Web Development Firm WaitWhatWeb Suffers Alleged Data Breach

Inside the Australian Dark Web: What Hackers Are Selling About Your Business Right Now

Intel data breach: AI & Cybersecurity risks can result in huge financial and reputational loss

Intel data breach: employee data could be accessed via API

Iranian Job Portal Allegedly Breached – 3.67 Million Records for Sale

Legitimate Chrome VPN Extension Turns to Browser Spyware

Lockbit Linux ESXi Ransomware Variant Evasion Techniques, File Encryption Process Uncovered

Massive Allianz Life data breach details reportedly revealed

Massive Allianz Life data breach impacts 1.1 million people

Massive Intel data exposure: hacker harvests 270K employee data, gets a “thanks” for disclosure

Mastering AI Powered Phishing: How to Stay Ahead and Secure in 2025

Municipality of Miraflores, Peru Allegedly Breached Again

Nearly half of Americans still reuse passwords despite phishing risks

Network Access to South Korean Maritime Giant HMM Allegedly for Sale

New Android Attack Targets Indian Users with Free Electricity Subsidy to Install Malware

New Blue Locker Ransomware Attacking Oil & Gas Sector in Pakistan

New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code

New HTTP/2 DoS Vulnerability Prompts Vendor and Project Fixes

New York Business Council discloses data breach affecting 47,000 people

NoName targets Ukraine in spate of DDoS attacks before Trump-Zelensky meeting

North Korea-linked hackers target embassies in Seoul in new espionage campaign

Okta open-sources catalog of Auth0 rules for threat detection

Pena Briones McDaniel Breach Exposes 34GB of Data

Pharma firm Inotiv says ransomware attack impacted operations

Phishing campaign uses fake Microsoft apps to bypass Multi-Factor Authentication (MFA)

PipeMagic Malware Imitates ChatGPT App to Exploit Windows Vulnerability and Deploy Ransomware

Police Scotland urged to act after nearly 1,400 data breaches in three years

Proofpoint warns FIDO authentication can be bypassed by downgrade

Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

Public Exploit Released for Critical SAP NetWeaver Flaw

PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks

PyPI now blocks domain resurrection attacks used for hijacking accounts

Ransomware Attacks Surge 25% Year-over-Year as New Report from ThreatDown Reveals Alarming Global Expansion and Evolving Tactics

Ransomware attacks surge in South Korea, targeting YES24 and financial firms

Ransomware Disrupts Inotiv, Threatens Exposure of Drug Research

Researcher downloaded the data of all 270,000 Intel employees from an internal business card website - massive data breach dubbed 'Intel Outside' didn't qualify for bug bounty

Russian hackers target Polish hydropower plant again

Saudi Arabian Tech Company DIGO Suffers Alleged Data Breach

Scattered Spider Adapts Tactics Tied to Ransomware Groups and Industry-Wide Cyber Attacks

Serial Hacker Behind High-Profile Website Defacements Jailed for 20 Months

Singapore issues critical alert on Dire Wolf ransomware targeting global tech and manufacturing firms

Som Mobilitat Suffers Alleged Data Breach – 4,000+ Clients Info For Sale

South Yorkshire Police Deletes 96,000 Pieces of Digital Evidence

Stolen Employee Credentials Leads to Data Leak of 280,000 iiNet Customers

Systems online again after cyber-attack hit City of Lubbock

The cybersecurity myths companies can’t seem to shake

This Clever Phishing Scheme Makes Fake Websites Look Legit

TPG Telecom Cyber Incident Exposes Thousands of Customers’ Data Through iiNet Breach in Australia

U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback

UK ‘agrees to drop’ demand over Apple iCloud encryption, US intelligence head claims

UK backs down in Apple privacy row, US says

UK Has Dropped Apple Backdoor Request, US Spy Chief Says

Unmasking the Secrets of Lockbit’s Linux ESXi Ransomware – Evasion Tactics and File Encryption Revealed

US spy chief says UK has dropped its Apple backdoor demand

WhatsApp Has Taken Out 6.8 Million Scam Accounts in 2025

Workday Confirms Data Breach After Social-Engineering Attack on Third‑Party CRM

Workday confirms data breach amid wave of Salesforce-linked cyberattacks

Workday Hit by Social Engineering Attack, Third-Party Data Exposed

Workday reports data breach, customer data safe

Workday Reports Major Data Breach After Hackers Access Third-Party Vendor Platform

Workday suffers data breach

Yorkshire hacker jailed for cyberattacks on governments and businesses worldwide

18th August

25% of security leaders replaced after ransomware attack

43% of Australian ransomware victims pay criminals to recover their data

Academic Urology & Urogynecology of Arizona Data Breach Exposes Sensitive Personal Info

Accounting Firm Pays Feds $175K for HIPAA Ransomware Breach

After Ransomware Attacks, Microsoft Teams to Block Malicious Files

AI arms race fuels pharma fraud, ransomware, social scams

Air France and KLM breach tied to hacker group

Allianz Life data breach affects 1.1 million customers

Allianz Life Data Breach Exposes 1.1 Million Customers’ Personal Info

Almost 16 Million PayPal Credentials Leak Claim Sparks Security Concerns

Australian Consumer Watchdog Moves to Empower Encryption Upgrade for Card Payments

Blue Locker Ransomware Launches Targeted Attacks on the Oil and Gas Sector in Pakistan

Bragg Confirms Cyber Attack – Hackers Accessed Internal IT Systems

Bragg Gaming Group Confirms Cyberattack, Says No Customer Data Impacted

Bragg Gaming Group seeks to allay fears over data breach incident

Bridging the AI model governance gap: Key findings for CISOs

C-Suite Lessons From Joe Sullivan And The Uber Data Breach

Canada: House of Commons hit by data breach

Canada’s House of Commons Hit by Data Breach Exploiting Recent Microsoft Vulnerability

Casino gaming company Bragg says hackers accessed ‘internal computer environment’

Chinese APT Group Targets Web Hosting Services in Taiwan

ClickFix phishing links increased nearly 400% in 12 months, report says

Colt Customers Face Prolonged Outages After Major Cyber Incident

Colt forced to take services offline following apparent cyberattack

Colt in ransomware breach of Sharepoint servers

Colt struggles to get services up and running after ransomware attack

Colt Technology Services Hit by Ongoing Cyberattack, Services Disrupted

Colt Telecom investigating WarLock ransomware claims

Critical flaw plagues Lenovo AI chatbot: attackers can run malicious code and steal cookies

Cryptomining group Kinsing expands operations to Russia, researchers warn

Cybercriminals Get Smarter: Gen Digital’s Q2 2025 Threat Report Reveals Rise in AI-Driven Scams and Attacks

Cybercriminals hit Workday database, similar to attacks on Google and Cisco

Data breach alert: Workday confirms personal data stolen; hackers could access names, emails, and phone numbers

Data Breach at American National Bank & Trust Exposes Personal Information of Over 50,000 Individuals

Data Breach Exposed 3,700 Individuals, Including Afghan Troops, British Civil Servants

Department of Justice (DoJ) seized $2.8M in crypto from Ianis Antropenko, indicted in Texas and tied to the defunct Zeppelin ransomware

Department of Justice (DOJ) Seizes $2.8M Crypto from Alleged Zeppelin Ransomware Operator

Department of Justice (DOJ) Seizes $2.8M in Crypto from Zeppelin Ransomware Group

Department of Justice (DOJ) Seizes $2.8 Million, Indicts Alleged Zeppelin Ransomware Operator

Dutch lab paid off cybercriminals, but full-scale data leak looms

ERMAC Android malware source code leak exposes banking trojan infrastructure

Everything we know about the Workday data breach so far

Extremist hacker who defaced websites and stole data imprisoned

Fake ChatGPT Desktop App Delivering PipeMagic Backdoor, Microsoft

Fake Copyright Notices Drop New Noodlophile Stealer Variant

Ghana Postal Service Allegedly Breached – Database and System Access for Sale

Gmail Voicemail Phishing Scam Uses Malicious CAPTCHA on Fake Websites to Steal User Credentials

Gunra Ransomware Allegedly Breaches Seoul Guarantee Insurance and Seguros América

Hacker Offers to Sell 15.8 Million Plain-Text PayPal Credentials On Dark Web Forum

Hackers breach HR firm Workday - is it the latest Salesforce CRM attack victim?

Hacker who stole data from millions of Facebook accounts jailed for 20 months

Hackers threatening to leak more data stolen from Dutch laboratory

Hacktivists Breach North Korean Hackers Kimsuky and Expose Their Secrets Online

Health Plans Inc. Data Breach Exposes SSN in Massachusetts

How security teams are putting AI to work right now

HR Giant Workday Discloses Data Breach After Hackers Compromise Third-Party CRM

HR giant Workday discloses data breach amid Salesforce attacks

HR Giant Workday Got Hacked

HR giant Workday notifies customers of data breach after Salesforce cyberattack

HR giant Workday says hackers stole personal data in recent breach

HR Tech Giant Workday Suffers Data Breach via Third-Party Integration

Human resources firm Workday disclosed a data breach

IBM 2025 Cost of Data Breach Report Centers on Mounting AI “Security Debt”

International cyber attack is affecting hundreds of websites worldwide and in Israel

Iran 'hunting down British spies' on 'kill list' leaked to Taliban in Ministry of Defence (MoD) data breach

Israel: Identity of 'Ashkelon hacker' revealed after 8 years as extradition fight unfolds

Justice Department Seizes Over $2.8 Million in Cryptocurrency Linked to Ransomware Scheme

KawaLocker Ransomware Emerges in New Attack

Kirkpatrick Partners LLC Allegedly Suffers Data Breach – Exposing Information of 36,556 Users

Korean firms YES24, SGI, Welcome Finance endure ransomware attacks and data breaches

Lessons From a Major Cyber Attack on a City Government

Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks

Malicious URLs and phishing scams remain a constant threat for businesses - here's what can be done

Malicious URLs overtake email attachments as the biggest malware threat

Man Jailed for 20 Months After Compromising Millions of Accounts

Manpower Data Breach Hits 144K, Workday Confirms 3rd-Party CRM Hack

Manufacturing remains prime ransomware target in Q2 as new groups, state-aligned actors reshape industrial threat landscape

Medusa Ransomware Group Allegedly Breaches Florarte and Expert E-commerce GmbH

Microsoft launches investigation to see whether Israel is using Azure cloud service for mass surveillance

Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware

Millions of dollars in cryptocurrency has been confiscated as the Department of Justice (DoJ) cracks down on an infamous ransomware operator

Ministry of Defence (MoD) contractor data breach exposes thousands more Afghan nationals

Modular ‘PipeMagic’ backdoor used to deploy ransomware

Morocco’s Social Security Fund (CNSS) Allegedly Breached Again

Mower County, Minnesota, Notifies Residents After Cyber Attack

NATO Allegedly Breached – 15 Million Sensitive Military and Strategic Records Leaked Online

Nebraska man gets 1 year in prison for $3.5M cryptojacking scheme

Noodlophile infostealer is hiding behind fake copyright and PI infringement notices

Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures

Noodlophile Stealer Hides Behind Bogus Copyright Complaints

Orange Cyberattack Claimed by Warlock Hacking Group, Data Sample Leaked

Otter’s sneaky tool allegedly listens to users' meetings to train its AI models

Over $2.8M nabbed from suspected Zeppelin ransomware operator

Over 800 N-able servers left unpatched against critical flaws

Panera agrees to $2.5M settlement in data breach class action

PayPal breach exposed nearly 16 Million login credentials, hackers claim

Personal Info Leaked in South Carolina School Data Breach

Popular npm Package Compromised in Phishing Attack

Qilin dominates ransomware landscape amid rising attacks

Ransomware gang masking PipeMagic backdoor as ChatGPT desktop app

Ransomware is on the rise: Global cybercrime hits new highs

Rotherham hacker who stole millions of people's data jailed

Russian Furniture Retailer Mvvdemebel.ru Allegedly Breached – Full Customer Database Leaked Online

Safepay Ransomware Allegedly Breaches Godby Hearth & Home, Bateman Groundworks, TransElectric, Listgrove, and Alberta Industrial Controls

Serial hacker who defaced official websites is sentenced

Singapore Police Warn of YouTrip Phishing Scams Following S$16,000 in Losses

SMEs Need Robust Security Infrastructure to Support the National Ransomware Payment Ban

Someone's poking the bear with infostealers targeting Russian crypto developers

Spain’s Seguros Bilbao Allegedly Breached – 842,000 Citizens’ Data Leaked

Stop Blaming the User: One Weak Password Shouldn’t Kill a Company

Survey Reveals Top Challenges of Implementing Identity Security

Thailand police arrest SMS blasting scammers allegedly hired by Chinese boss

'Their Goal Is to Trick Employees': One of the Largest Job Application Software Companies in the U.S. Was Hacked, Exposing Personal Data

Thousands of Hotel Guests in Italy Targeted in Major Data Theft, Officials Confirm

Threat Actor Claims to Sell 15.8 Million Plain-Text PayPal Credentials

U.S. Law Enforcement Seizes INR 232 Crore in Cryptocurrency from Ransomware Suspect

UK sentences “serial hacker” of 3,000 sites to 20 months in prison

UK telco Colt suffers major ransomware attack claimed by Warlock gang

UK telecoms firm takes systems offline after cyber attack

US Seizes $2.8 Million From Zeppelin Ransomware Operator

USB Malware Campaign Spreads Cryptominer Worldwide

WarLock claims responsibility for Colt cyberattack, 1M documents for sale

WarLock Ransomware Attack Cripples Colt Services, Data for Sale

WarLock Ransomware group Claims Breach at Colt Telecom and Hitachi

Weak alerting and slipping prevention raise risk levels for CISOs

Welcome Financial Group lending unit suffers ransomware attack, internal documents exposed

Welcome Financial Group unit hit by ransomware attack

Workday Breached as Ransomware Group Seeks Salesforce Data

Workday Confirms Data Breach After Hackers Pose as Company Staff in Phone Calls to Steal Customer Contact Information

Workday Confirms Data Breach Following Social Engineering Attack

Workday Confirms Data Breach Tied to Salesforce Attacks

Workday Confirms Data Breach via CRM

Workday confirms data breach, contact info exposed by third party

Workday Confirms Third-Party Data Breach Exposing User Information

Workday CRM platform hit by hackers, suspected link to Salesforce attackers

Workday Data Breach: HR Giant Hit by Social Engineering Attack

Workday Data Breach Bears Signs of Widespread Salesforce Hack

Workday Data Breach Exposes HR Records via Third-Party CRM Hack

Workday hit by social engineering data breach targeting its CRM platform

Workday Latest Company Hit by Third-Party CRM Platform Breach

Workday Reveals CRM Breach

Workday Staff Fall to Social Engineering; Hackers Access Third-Party CRM Platform

XenoRAT malware campaign hits multiple embassies in South Korea

Posted by at
Labels:

Thursday, 14 August 2025

Ransomware Operator Claims - Week 32 2025

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 4th August and 10th August 2025, kindly assisted by our partners.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Posted by at
Labels:

Monday, 11 August 2025

Data Breaches Digest - Week 33 2025

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 11th August and 17th August 2025.


17th August

Air France and KLM breach tied to hacker group

ClickFix, the new phishing technique that turns the user into an accomplice in the attack

Colt Technology faces multi-day outage after WarLock ransomware attack

Europol’s ₹42 Lakhs Reward Signals Global Alarm Over Qilin Ransomware

“Indirect prompt injections” is a potentially potent type of cyber attack

Isle of Man: Phishing warning issued to Isle of Man Etsy sellers

Nearly a million patients hit by DaVita dialysis ransomware attack

Phishing Campaign Targets Marketing Professionals with Fake Netflix Job Offers

Phishing scam alert: Fake Department of Motor Vehicles (DMV) texts threatening license suspension target New Yorkers

Professional hacker who cracks passwords in minutes offers tips for stronger security

Ransomware Allegations Surface As Colt Outages Continue

Shaping A Future-Proof Cybersecurity Strategy in The Era of Normalized Ransomware

Social engineering becomes strategic threat as Operational Technology (OT) sector faces phishing, deepfakes, and AI deception risks

The new phishing: How to spot email scams in 2025

U.S. seizes $2.8 million in crypto from Zeppelin ransomware operator

US Authorities Seize $2.8M in Crypto from Ransomware Operator

US Department of Justice (DOJ) seizes $2.8 million in cryptocurrency from alleged ransomware mastermind

Warning: Watch Out for This Japanese Character in Your Booking.com Email

'Yemen Cyber Army' hacker who defaced Israeli, US websites sentenced in UK

16th August

7 cybersecurity habits everyone should adopt

At least S$16,000 lost to phishing scams involving YouTrip e-wallets in two months in Singapore

Backups Are Useless If You Can’t Recover: Why Ransomware Resilience Demands a Rethink

Berkshire Health Systems patients notified of data breach

CPAP Medical Data Breach Impacts 90,133 Individuals: SSNs Exposed

Cyber-attack on Ministry of Defence-linked contractor exposes data of Afghans in resettlement scheme

Cyberattacks coming to a city near you: The most vulnerable US metro areas ranked

Data Breach at Jet Centre Hits Afghans and UK Personnel

Data Breach Exposes Personal Information of Thousands of Afghans Resettled in the UK

‘Deeply embarrassing’: Afghan veterans hit by second UK data breach

ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure

‘Extremist hacker’ jailed for crippling websites and stealing personal data in US

Feds Crack Down on Ransomware Operator, Confiscate $2.8M in Crypto

Former Afghan Interpreter’s UK Relocation Offer Revoked Amid Data Breach Fallout

Google confirms data stolen in breach by known hacker group

Google deploys Gemini AI to combat ad fraud with 40% reduction

Massive data breach exposes thousands of Afghans settled in the UK, British troops

Minnesota National Guard cyber team finishes mission helping City of St. Paul after ransomware attack

New Gmail Phishing Attack With Weaponized Login Flow Steals Credentials

North Korean hackers switch to ransomware in major cyber campaign

O2 hired a hacker to uncover people's passwords, and it took just 3 minutes to break into accounts

Researcher to release exploit for full auth bypass on FortiWeb

Rotherham computer hacker who claimed international victims jailed

Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware

Scammers Compromised by Own Malware, Expose $4.67M Operation

Second Afghan data breach creates new headache for Government after thousands 'had personal details exposed'

“Serial Hacker” Sentenced to 20 Months in UK Prison

Serial hacker who defaced official websites is sentenced

Smirking Yorkshire serial hacker jailed for defacing US websites

Thai drivers for Chinese-led mobile phishing gang arrested

The new scams that know you by name

Thousands more Afghans affected by second data breach, ministers say

Thousands of Afghans, troops and civil servants may be victims of new data breach

US authorities raid ransomware operator, seize $2.8M in crypto

Watch out for this clever phishing scam that hooks you

When “I’m Not a Robot” Becomes “I’m Stealing Your Data”: Phishing Pages Disguised as CAPTCHAs

Zizzl LLC Data Breach Affects One in Massachusetts

15th August

2025 Mobile Phishing Surges 40% for Stock Account Hijacks and Scams

Afghans resettled in UK hit by new data breach

AI Deepfakes and Signature Theft Drive New Wave of Phishing in UAE

Allianz Life Data Breach Exposes 2.8 Million Customer and Partner Records

Analysis Sees Limited End User Ability to Accurately Identify Phishing Attacks

Another devious antivirus killer tool has been found - so make sure you're protected

At least $16,000 lost to phishing scams involving YouTrip e-wallets in two months in Singapore

Authorized Push Payment Fraud a National Security Risk to UK, Report Finds

BFC Solutions Data Breach Affects 8,371 Individuals

‘Blue Locker’ Ransomware Targeting Oil & Gas Sector in Pakistan

Booking.com customers learn the hard way that Unicode is tricky

Booking.com Phishing Scam Exploits Unicode to Mimic URLs and Steal Data

Booking.com phishing scam uses secret characters to trick victims - last-minute holiday hunters beware

Canada's House of Commons report data breach

Caught in the cyber crosshairs: A candy manufacturer’s 2025 ransomware ordeal

Change Healthcare data breach impacts 192.7 Million individuals

Cisco Discloses Critical RCE Flaw in Firewall Management Software

Cisco patches critical security hole in Firewall Management Center - act now

Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution

Cisco warns of max severity flaw in Firewall Management Center

Clinical Diagnostics reportedly paid ransom after cyberattack

Colt Telecom attack claimed by WarLock ransomware, data up for sale

Colt Telecommunications Struggles in Wake of Cyber Incident

Connecticut credit union discloses data breach

Court upholds Federal Communications Commission (FCC) data breach reporting rules on telecom sector

Credential Theft and Data Exfiltration Lead Modern Ransomware Threats

Crypto24 ransomware attacks disable EDR with custom and legitimate tools

Cyber insurance market shows early signs of maturity

Cybercriminals Hijack Brokerage Accounts with Phishing Kits for Stock Scams

Dark Web Sales of Government Email Addresses from the US and More Expose Global Risks

Data Breaches Announced by Langdon & Company; Michigan Medicine

Department of Justice (DOJ) Seizes $2.8 Million in Crypto Tied to Global Ransomware Operation

Department of Justice (DOJ) Seizes $2.8 Million in Cryptocurrency Linked to Zeppelin Ransomware

Department of Justice (DOJ) Targets Suspected Zeppelin Ransomware Operator, Seizes Millions in Crypto

Department of Justice (DOJ) Unseals Warrants Authorizing Seizure of $2.8 Million in Cryptocurrency Linked to Ransomware Scheme

Employees race to build custom AI apps despite security risks

Everything we know so far about the Canadian House of Commons data breach

Fake Netflix job offers targeting job seekers

Federal appeals court approves Federal Communications Commission's data breach rules

Five AI-driven tactics driving a shift in phishing attacks

Former Afghan interpreter exposed in huge Ministry of Defence (MoD) data breach has UK relocation revoked

French Cosmetics Giant Peggy Sage Allegedly Hit by Datacarry Ransomware Group

From phishing to deepfakes: How Banking, Financial Services and Insurance (BFSI) institutions are building digital immunity

Google AI email summaries can be hacked to hide phishing attacks

Google confirms data stolen in breach by known hacker group

Hacker Who Drained $53,000,000 From DeFi Project Hits 93.5% Gain on Loot Amid Ethereum Rally

Hackers try to steal your Facebook login info in new Netflix phishing campaign

Indian Institute of Technology Roorkee (IIT Roorkee) data breach: A wake-up call for higher education institutions

Interpol’s 3,459 cyber threat detections in Nigeria

Investigators believe Russia at least partially responsible for US court records hack

Iowa: Officials cite escalation in cyber attacks on state government, issue alert

Ireland: Trinity News Becomes Victim to Cyber Attack

It only took one too many! Phishing scam impersonating Booking.com using homoglyphics

Justice Department Announces Seizure of Over $2.8 Million in Cryptocurrency, Cash, and other Assets

Karndean International LLC Allegedly Breached by Crypto24 Ransom Group

LockBit hackers targeting Africa, warns Interpol

Major Turkish Crypto Exchange BtcTurk Allegedly Hacked for Nearly $50 Million

Majority of Organizations Ship Vulnerable Code, Study Finds

Malicious URLs overtake attachments as top email threat

ManpowerGroup ransomware attack leaked customer data, staffing firm says

Maselli Misure S.p.A. Allegedly Targeted by Sarcoma Ransomware Group

Ministers spent £2.4m fighting to keep huge Afghan data breach a secret

Miracle Ear Data Breach Affects Thousands

Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme

Mower County says HIPAA data was accessed during ransomware attack

My family may be killed if deported, says son of Afghan caught in UK data breach

Nearly a million patients hit by DaVita dialysis ransomware attack

Netflix Job Scams Exploit Jobseekers Through Phishing, Steal Facebook Credentials

New Clever Phishing Attack Uses Japanese Character “ă‚“” to Mimic Forward Slash “/”

New Crypto24 Ransomware Attacks Bypass EDR

Nigeria: Cyber Attack Hits Customs Platform, Disrupts Clearance Operations

North Korean hacker group accused of espionage in Seoul, with Chinese help

North Korean hacker's Google search history exposed as sleuths infiltrate top-secret documents

Norway Blames Pro-Russian Group for Hack of Water Dam

Operational Technology (OT) Disruptions Could Cost $330B Globally

Operational Technology (OT) Networks Targeted in Vulnerability Exploitation

Optima Tax Relief Data Breach Affects SSNs and financial info

Over 190 million hit in UnitedHealth data breach - confirmed largest in history

Pakistan's Oil and Gas Sector Hit by Blue Locker Ransomware

Pediatric Dentist Notifies Patients of Data Breach

Phishing Campaign Exploits Japanese Character “ă‚“” to Imitate Forward Slash

Phishing evolves with AI and stealth: Kaspersky highlights biometric and signature risks

Plex Urges Users to Immediately Patch Critical Vulnerability in Media Server

Plex warns users to patch security vulnerability immediately

Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator

PROVAIL Discloses 2023 Data Breach that Exposed Social Security Numbers

Qilin Ransomware Group Allegedly Breaches Morgenstern AG, MARMA Polskie Folie, and Fort Smith School District

Qilin Remains Top Ransomware Group as Attacks Rise

Ransomware Actors Blending Legitimate Tools with Custom Malware to Evade Detection

Ransomware Groups Deploy BYOVD for Kernel EDR Killers

Ransomware victims are refusing to play ball with hackers – just 17% of enterprises have paid up so far in 2025, marking an all-time low

Real-Time Credential Theft Powers Fake Netflix Job Offer Phishing Campaign

Researchers uncover fake Netflix recruiter scheme targeting Facebook accounts

Scammers turn to ‘ghost-tapping’ retail fraud to launder funds

Senior living company reports data breach ‘fully contained’

SFA Engineering Allegedly Hit by Ransomware Attack – 2.3TB of Data Leaked

Son of Afghan man named in data breach says family face death or deportation

Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools

TeaOnHer data breach exposes driver’s licences, emails and private messages from app users

Telecom company Colt hit by cyber attack

Texan Authorities Seize $2.8M in Crypto from Alleged Ransomware Operator

The Netherlands: Privacy watchdog Autoriteit Persoonsgegevens (AP) to start probe into clinic data breach

Threat Actor Profile: Interlock Ransomware

Threat Actors Personalize Phishing Attacks With Advanced Tactics for Malware Delivery

U.S. Justice Department Seizes $2,870,000+ in Crypto, Cash and a Luxury Car From Man Allegedly Running Ransomware Scheme

U.S. Sanctions Garantex and Grinex Over $100M in Ransomware-Linked Illicit Crypto Transactions

U.S. Treasury Renew Sanctions on Russian Crypto Exchange Garantex and Its Successor Grinex for Ransomware Facilitation

UK telecom firm Colt suffers massive ransomware attack

UK telecom provider Colt says outages were due to cyber incident

United Domestic Workers of America (UDW) Data Breach Affects Two Montana Residents

UnitedHealthcare Data Breach: Over 192 Million People Impacted

Up to 3,700 Afghans, troops and civil servants may be data-breach victims

Up to 3,700 Afghans, troops and civil servants may be victims of another data breach

US & Allies Seize BlackSuit Ransomware Servers and $1M in Crypto

US and Five Global Partners Release First Unified Operational Technology (OT) Security Taxonomy

US authorities to seize $2.8M in crypto from alleged ransomware operator

US Department of Justice (DOJ) seizes $2.8M+ crypto from ransomware operation

US sanctions Grinex crypto-exchange, successor to Garantex

Vendor that provides telehealth services for Los Angeles Unified School District (LAUSD) students reports data breach

Warlock claims ransomware attack on network services firm Colt

Western Montana Clinic patients told of data breach compromising personal information

WestJet Confirms Customer Data Breach Exposing Sensitive Personal Information

WestJet confirms cyber breach exposed sensitive details of customers

Zeppelin Ransomware: Department of Justice (DOJ) seized $2.8M Crypto

Zero Trust + AI: Privacy in the Age of Agentic AI

14th August

46% of Enterprise Passwords Can Be Cracked

49% of Americans Hide AI Use from Employers

A New Phishing Scam Targets FTX Creditors Ahead of the September 30th Payout

AI Supercharges Phishing - Cybercriminals Upgrade Tactics with Smarter Tools

AI-Driven Phishing Scams Surge 21.5% in the Middle East

AI-powered tactics are transforming phishing attacks

Akira Ransomware Group Allegedly Breaches US Law Firm Rusin Law

Australian sustainable energy giant denies ransomware claims

Average ransom payment doubles in a single quarter

Beware the rise of ‘vishing’ as a cyber threat in APAC

Booking.com phishing campaign uses sneaky 'ă‚“' character to trick you

Borghese Contemporary Hotel Allegedly Breached - 7,600 Guest Passports and IDs for Sale

Bouygues Allegedly Hit by Data Breach Affecting 6 Million Customers

Brute-force attacks hammer Fortinet devices worldwide

BTCTurk exchange suffers $48M exploit

Campaigners Slam Expansion of Police Facial Recognition Schemes in UK

Canada: House of Commons hit by cyberattack from 'threat actor'

Canada’s House of Commons investigating data breach after cyberattack

Canadian House of Commons hacked, Microsoft vulnerability exploited

Charon ransomware employs APT tactics, DLL sideloading to target Middle East public sector, aviation sector

Children's Health Ireland (CHI) being investigated over data breach at Tallaght University Hospital

Children's Health Ireland (CHI) face investigation over data breach of health records at Tallaght Hospital

Chip Makers See A 6X Surge in Cyberattacks and $1B in Ransomware Losses

CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog

CISA Warns of Active Exploits in N-able N-central, Urges Upgrade to 2025.3.1

CISA warns of N-able N-central flaws exploited in zero-day attacks

Clinical Diagnostics paid ransom to solve recent data breach, sources claim

Close to 200 million impacted in United Health hack, US health department reports

Commonwealth Business Bank (CBB Bank) Data Breach Exposes Names, January-February 2025

Court backs Federal Communications Commission’s new data breach reporting rules for telecoms

Critical internet flaw discovered: hackers can crash websites with ease

Crypto24 ransomware hits large orgs with custom EDR evasion tool

Cyber Insurance Market Set for Dramatic Growth as AI Fuels 202% Spike in Phishing Attacks

Data Breach at American Staffing Company Exposed Sensitive Information of Nearly 150,000 Individuals

Data breach at Tallaght facility leads to inquiry into Children's Health Ireland

Don’t fall for this bank phishing scam trick

Downgrade Attack Allows Phishing Kits to Bypass FIDO

Dubai Pharmacy College for Girls Allegedly Hit by Data Breach

During Deadly Floods, Central Texas Hit with Online Scams

Enterprising adversaries: Escalating cyber threats in the Indo-Pacific

Ether rally turns Radiant Capital exploit into $103M windfall for hacker

FBI Shares Tips to Spot Fake Lawyer Schemes Targeting Crypto Scam Victims

FireWood Malware Targets Linux Systems for Command Execution and Data Theft

Flaw in Older Version of Android Rooting Tool KernelSU Allows Full Device Takeover

For $40, you can buy stolen police and government email accounts

Fortinet Warns Exploit Code Available for Critical Vulnerability

From Banking Darling to $1B Fraud Magnet: Inside the Zelle Lawsuit 2025

Gemini AI Vulnerable to Calendar-Based Hack: What is Google’s Mitigation Approach?

Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses

Hacked Law Enforcement and Government Email Accounts Sold on Dark Web for $40

Hacker attack from Russia threatens dam in Norway

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon's Reach to Linux and macOS

Hackers reportedly compromise Canadian House of Commons through Microsoft vulnerability

HashFlare Ponzi Scheme: Founders Convicted in $577M Crypto Fraud

Home Office Phishing Scam Target UK Visa Sponsorship System

Hotels in Italy suffer a potentially massive breach

KernelSU v0.5.7 Flaw Lets Android Apps Gain Root Access

LockBit 4.0 panel breach shows internal disorder

Malvertising Campaign Deploys Modular PowerShell Malware PS1Bot

Manpower data breach impacted 144,180 individuals

Microsoft patches more than 100 Windows security flaws - update your PC now

Mimecast raises alarm over phishing threat

Mystery surrounds claims to Legal Aid Agency (LAA) hack as ransom deadline comes and goes

Nelnet Data Breach Exposes 2.5M Student Loan Borrowers, Sparks Reforms

Netflix Job Phishing Scam Steals Facebook Login Data

New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits

New HTTP/2 'MadeYouReset' Vulnerability Enables Large-Scale DoS Attacks

New Malvertising Attack Spreads Crypto Stealing PS1Bot Malware

New York sues Zelle, says security lapses led to 'rampant' consumer fraud

Nigeria: Customs Agents Count Losses as Cyber Attack Halts Port Operations

Nigeria: Cyber attack hits Customs, disrupts cargo clearance

Nike USA Allegedly Compromised – Initial Network Access Offered for $5,000

North Korea Attacks South Koreans With Ransomware

Norway Blames Pro-Russian Hackers for Dam Cyberattack

Norway police believe pro-Russian hackers were behind April dam sabotage

Norway spy chief blames Russian hackers for hijacking dam

Over $300 million in cybercrime crypto seized in anti-fraud effort

Phishing method tricks users into skipping FIDO authentication

Pincong Website Allegedly Breached – User Data for Sale Online

Pro-Russian hackers blamed for water dam sabotage in Norway

Proposed ransom ban raises underwriting pressure on cyber insurers

Qilin Ransomware Allegedly Breaches The Paul Wilkinson Law Firm and Flavor & Fragrance Specialties

Qilin Ransomware Dominates July with Over 70 Claimed Victims

Qilin Ransomware Leads The Attack Landscape With 70+ Claimed Victims in July

Radiant Capital Hacker Doubles Stolen Funds With 93.5% Gain in Ether (ETH)

Radiant capital hacker flips looted $53M for 94% profit, here’s how they did it

Radiant Capital Hacker Turns $53M Theft into $102M Crypto Fortune

Ransom payments surge to USD $1.13 million as data theft rises

Ransomware breaks record: social engineering raises ransoms to $1.13 million

Ransomware crews don't care about your endpoint security – they've already killed it

Ransomware Group Interlock Claims Massive Data Theft from City of St. Paul

Rising Phishing Attacks Use Personalized Emails to Spread Malware

Russia curbs WhatsApp, Telegram calls to counter cybercrime

Sinobi Ransomware Group Allegedly Breaches ECM Consultants, TELACU College, One Way Solutions, J. Derenzo Co., and Comprehensive Pain Centers

South Africa: 2024 hack aftermath hits national lab’s annual targets

Splunk Publishes Defender’s Guide to Spot ESXi Ransomware Early

Splunk Publishes Detection Guide to Spot ESXi Ransomware Activity Early

Starto Entertainment fans targeted by social media phishing scam

Telegram banning rash of channels found extorting and doxxing users

Tens of thousands of Italian hotel guests may be hit by cyber heist

This infamous people search site is back after leaking 3 billion records - how to remove your data from it ASAP

Treasury crushes crypto exchange washing $100M dirty money

Turkish crypto exchange BTCTurk warns of security incident after $49 million leaves platform

U.S. Authorities Confiscate Servers and $1.09M in Crypto Tied to Blacksuit Ransomware

UK Businesses Improving at Spotting Scams, but Cyber Weaknesses Remain

UK government is expanding Live Facial Recognition technology

UK immigration system targeted by hackers - dangerous new phishing campaign hits Sponsorship Management System

US Sanctions Crypto Exchange Tied to Russian Ransomware

US updates sanctions on Russian cryptocurrency exchange Garantex

Vulnerabilities in MSP-friendly RMM solution exploited in the wild (CVE-2025-8875, CVE-2025-8876)

13th August

24 Million websites vulnerable to complete takeover due to backend reliance on flawed HTTP/1.1

28,000 Exchange Servers Remain Unpatched

Adobe Patch Tuesday Fixes Over 60 Vulnerabilities Across 13 Products

Air France-KLM Group Confirms Data Breach From a Third-Party Customer Service System

Akira and Lynx Ransomware Surge: A Wake-Up Call for MSPs and Their Clients

Alarm raised over 'high-severity' vulnerabilities in Matrix messaging protocol

BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new group

BlackSuit Ransomware Group Hit by US Seizure of $1 Million in Crypto

BlackSuit ransomware payment recovered in takedown operation

Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics

Charon Ransomware targets Middle East with APT attack methods

CISOs face a complex tangle of tools, threats, and AI uncertainty

City of Hamilton says no personal info shared following another data breach

Connex Credit Union data breach affects 172,000 customers

Croatian research institute confirms ransomware attack via ToolShell vulnerabilities

‘Curly COMrades’ APT Hackers Target Critical Organizations Across Multiple Countries

Cyber attack on U.S. drug rehab service exposes sensitive patient information

Cyber security firm uncovers phishing campaign targeting UK immigration system

Cybersecurity Maturity Model Certification (CMMC) Compliance: Far More Than Just an IT Issue

Cyble reveals US primary target with 223 ransomware victims amid rising attacks on critical infrastructure

Data breach: Russian link suspected in US federal court hack; sensitive information compromised in yearlong violation

Data breach hits cervical cancer screening programme

Data exfiltration pushes ransomware payouts past USD $1 million

Data leak at Mexico’s power giant threatens to leave the entire country in the dark

Deepfake AI Trading Scams Target Global Investors

Donors data safe, site back online after Crawford Gives cyber attack

Dutch Cancer Screening Service Suffers Massive Data Breach

Dutch lab paid millions in ransom, but some data appeared online

Dutch Minister and parliamentarian's details in laboratory leak

Efimer Trojan Steals Crypto, Hacks WordPress Sites via Torrents and Phishing

Embargo Ransomware Group Tied to $34M in Ransom Profits

Emerging AI-Driven Phishing Trends Reshape Cybercrime Tactics

Erlang/OTP SSH Vulnerability Sees Spike in Exploitation Attempts

Estonians behind $577 million cryptomining fraud sentenced to 16 months

Ethical hacker demonstrates startling ease of accessing passwords online

Ethical hacker exposes 10 most used passwords - and it's not good news for Brits

Expert hacker demonstrates how quickly passwords can be found online

Fake Minecraft Installer Spreads NjRat Spyware to Steal Data

Fortinet Issues Emergency Patch for Actively Exploited Critical FortiSIEM Bug

Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code

Fortinet warns about FortiSIEM vulnerability with in-the-wild exploit code (CVE-2025-25256)

Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild

FTX Creditor Data Leak Raises Phishing Alert

GitHub Copilot RCE Vulnerability via Prompt Injection Enables Full System Compromise

Global Operational Technology (OT) cyber risk could top $329 billion, new report warns

Google hit by AI-driven Cyber attack

Google Is the Latest Company Hit by Salesforce Hack as ShinyHunters Escalates To Launching Data Breach Site

Google issues hacker warning to billions of users

Hack of North Korean Spy’s Computer Exposes 8.9 GB of Espionage Operations

Hacker 'lurked' for 3 years in Vietnam Airlines' computer system

Hacker reveals the top 10 riskiest passwords Brits should never use

Hackers breach North Korean spy hacker's PC, leak rare intel on secretive group

Hackers leak 2.8 Million sensitive records from Allianz Life in Salesforce data breach

Heartland Alliance Agrees to Data Breach Settlement

Hollywood A-listers impacted by Venice Biennale cyber attack

How Was Pakistan Targeted Online? Report Reveals Five Years of Hacker Tactics You Must Know

How we found TeaOnHer spilling users’ driver’s licenses in less than 10 minutes

Indian Online Pharmacy Zeelab Allegedly Breached – Data of 4 Million Users for Sale

Interlock Ransomware Gang Allegedly Breaches Box Elder County and Epperson Law Group

Israel Railways Allegedly Targeted by Threat Actor Selling High-Privilege System Access

Malaysia sees rise in ransomware as firms urged to shift culture

Malicious npm Package Lures Job Seekers and Exfiltrates Sensitive Data

Manpower data breach impacts over 140,000

Marks & Spencer Restores Click-and-Collect Service Months After Data Breach

Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day Among 111 Total New Flaws

Microsoft Exchange Server Flaws Allow Network-Based Spoofing and Data Tampering

Microsoft fixes “BadSuccessor” Kerberos vulnerability (CVE-2025-53779)

Microsoft Fixes Over 100 CVEs on August Patch Tuesday

Microsoft Office Vulnerabilities Allow Attackers to Execute Remote Code

Microsoft Teams CVE-2025-53783 Vulnerability Could Allow Remote Code Execution

Microsoft’s Patch Tuesday: 100+ Updates Including Azure OpenAI Service, Memory Corruption Flaw

Minnesota City of St. Paul Continues Ransomware Response

Monero security in question as Qubic claims 51% hashrate control

Most cyber attack brokers sell admin access from USD $500

National Public Data is back after 2023 data breach

New Brute-Force Campaign Hits Fortinet SSL VPN in Coordinated Attack

New Charon Ransomware Uses DLL Sideloading and Anti-EDR Tactics in Targeted Attacks

New ‘Curly’ threat actor found targeting sensitive organizations in Georgia, Moldova

New downgrade attack can bypass FIDO auth in Microsoft Entra ID

New Phishing Campaign Targets UK Visa Sponsor Licence Holders

New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

New trends in phishing and scams: how AI and social media are changing the game

New York lawsuit against Zelle creator alleges features allowed $1 billion in thefts

New Zealand: Church-linked phishing emails in Pacific languages have high success rates

New Zealand: Prolific 'Darcula' messaging scammers who have hit thousands of Kiwis and users worldwide exposed

North Korean hacker group exposed in suspected data breach

North Korean hacker exposes South Korean government collaborations with China

Norway blames Russian hackers for dam cyberattack in Bremanger

Pandora cyber attack highlights growing threat to ecommerce

Pennsylvania attorney general says cyberattack knocked phone, email systems offline

Pennsylvania attorney general's email, site down after cyberattack

Phishing campaign targets UK migrant sponsor system

Phishing fraudsters impersonate Home Office to breach UK visa sponsor accounts

Professional hacker takes less than three minutes to find someone's password online

Qilin Ransomware Allegedly Breaches Venture Credit Union, Haeger & Schmidt Logistics, Assisted Living Pharmacy, SYNCADD, Northern Construction, and Belle Vernon Schools

Ransom Payments Fall to Record Low in UK

Ransomware crew spills Saint Paul's 43GB of secrets after city refuses to cough up cash

Ransomware Empire Falls: Feds Strip BlackSuit Of $1 Million In Crypto

Ransomware losing its grip? Only 17% of UK businesses are paying the ransom

Ransomware Payments Decline, Orgs Have Better Recovery Processes

Rising Cyberattacks Cost Semiconductor Industry $1B in Ransomware Losses

Royal Enfield targeted in major ransomware attack, hackers claim full system compromise

Russia Reportedly Behind Attack on U.S. Courts Electronic Filing System

Russian Southern Military District Allegedly Breached – Sensitive Data on Servicemen Leaked Online

Six Months On: Manpower Confirms Data Breach After RansomHub’s December–January Access

Spike in Fortinet VPN brute-force attacks raises zero-day concerns

St. Paul’s Mayor Confirms Interlock Data Leak

Staffing Company Manpower Discloses Large-Scale Data Breach

Trinidad and Tobago: Venture Credit Union announces recovery from ransomware attack

U.S. and allies smash ‘BlackSuit’ ransomware: 4 servers, 9 domains, $1M seized

U.S. seizes servers and $1.09m in crypto linked to BlackSuit ransomware gang

Unclear if passengers from Fort St. John affected by WestJet data breach

US Authorities Seize $1m from BlackSuit Ransomware Group

US takes down sites, seizes $1M from crypto ransomware gang BlackSuit

VexTrio Hackers Use Fake CAPTCHAs and Malicious Apps on Google Play & App Store to Target Users

Virgin Media O2 ‘ethical hacker’ reveals passwords in 3 minutes

Virgin Media O2 hires Ethical Hacker to uncover people’s passwords in just 3 minutes

Warning for FTX Creditors: Phishing Scam Hits Ahead of $1.9B Payouts

Web DDoS and App Exploitation Attacks Surge in First Half of 2025

WestJet Confirms Passenger Data Breach in June 2025 Cyberattack

Why mobile devices are now the weakest link in cybersecurity – Phones, phishing & your business

Windows Remote Desktop Services Flaw Allows Network-Based Denial-of-Service Attacks

WinRAR Zero-Day Exploited by Russian-Linked Hackers RomCom and Paper Werewolf

Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws

12th August

1,500 Jenkins Servers Vulnerable to Command Injection via Git Parameter Plugin

7,000 Citrix NetScaler Devices Still Vulnerable to CVE-2025-5777 and CVE-2025-6543

29,000 Servers Remain Unpatched Against Microsoft Exchange Flaw

A New Security Threat to Public Clouds From Old Vulnerabilities

Air France-KLM hit by hacker attack

Akira ransomware exploits SonicWall SSL VPNs globally

Allianz Life US data breach will be damaging to life and health insurance sector

And Now, LLMs Don’t Need Human Intervention to Plan and Executive Large, Complex Attacks

Another Major Data Breach Exposes Dangers of Online Digital ID Verification

APT groups are getting personal, and CISOs should be concerned

APT-Style Attacks Exploit CVE-2025-6543 in Dutch Critical Organizations

Australian regulator sues telecom giant Optus over massive 2022 data breach

Average ransom payment doubles: over a million

Belgium: Religious orders fall victim to phishing fraudsters

BlackSuit ransomware crew loses servers, domains, and $1m in global shakedown

BlackSuit Ransomware Servers Attacking U.S. Critical Infrastructure Seized by Law Enforcement Seizes

BlackSuit ransomware takedown nabs 4 servers, 9 domains, and $1 million in crypto

BlackSuit Ransomware’s Infrastructure Dismantled; Crypto Worth $1M Seized

BreachForums Seized and Turned into Honeypot by Law Enforcement

BreachForums Takeover Allegedly Orchestrated by Law Enforcement, ShinyHunters Say

Charon Ransomware Emerges With APT-Style Tactics

Cisco.com Data Leaked in a Third-Party CRM System Voice Phishing Breach

Click & collect available again at Marks & Spencer, months after cyber attack

ClickFix PowerShell Attack Chain Leverages Email Invite Lures, Spoofed MS Teams Login Pages

Columbia University Cyber Attack Compromised SSNs, Other Data

Connex Credit Union Data Breach Affects 172,000 Members

Cost of public sector data breaches on the rise

Crawford Gives targeted in cyber attack, reports intermittent outages

Created a passkey? Hackers can bypass it using a simple downgrade attack

Crypto Wallet Scam: How a $3M Phishing Attack Exposes the Risks of DeFi Wallets

Cumbria Police pays £17,000 following 250+ data breaches

Curly COMrades cyberspies hit government organizations with custom malware

Cyber attack Hits U.S. Judiciary, Compromises Sensitive Court Data

Cybercrime Groups ShinyHunters, Scattered Spider Join Forces in Extortion Attacks on Businesses

Cybercriminals Exploit Low-Cost Initial Access Broker Market

DarkBit Hackers Attacking VMware ESXi Servers to Deploy Ransomware and Encrypt VMDK Files

DarkBit Hackers Target VMware ESXi Servers to Deploy Ransomware and Encrypt VMDK Files

DarkBit Hackers Target VMware ESXi, Encrypt VMDK Files in Ransomware Blitz

DarkBit ransomware encryptors decrypted

Data breach exposes over 485,000 cervical cancer screening participants after hack at external laboratory

Data breach impacts Connex Credit Union

DBM Global Data Breach Affects 20,104 Individuals

Defending Digital Trust: Fighting Brand Impersonation in the Wild

Department of Justice (DOJ) Seizes $1M Crypto from BlackSuit Ransomware in Operation Checkmate

Docker Hub still hosts dozens of Linux images with the XZ backdoor

Don’t take the bait: Phishing, vishing and smishing scams on the rise

Dutch lab reported data breach in cervical cancer test only a month later

Dutch National Cyber Security Centre (NCSC-NL) Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543 in Critical Sectors

Fake TikTok shops linked to malware campaign targeting cryptocurrency

FBI, Ghana Authorities Bust $100 Million Romance Scam in Major International Extradition

Feds take down BlackSuit ransomware gang, seize $1M in crypto

Financial Services Could Be Next in Line for ShinyHunters

Fortinet SSL VPN Targeted by Hackers from 780 Unique IP Addresses

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager

French Luxury Giant Chanel Hit by Salesforce Third-Party Data Breach

Global Data Breaches and Cyber Attacks in July 2025

Global Law Enforcement Triumph: BlackSuit Ransomware Empire Crumbles Under $1M Crypto Seizure & Domain Takedown in US-Led Cyber Sting

Google’s Salesforce instance hit in ShinyHunters cyber attack

GPT-5 Safeguards Bypassed Using Storytelling-Driven Jailbreak

Hacker Alleges Russian Government Role in Kaseya Cyber-Attack

Hackers breach and expose a major North Korean spying operation

Hackers Expose Dealers As A Weak Link In Connected Car Chain

Hackers leak Allianz Life data stolen in Salesforce attacks

Hackers post some St. Paul files online after city refuses to pay ransom

Hackers Raid Dutch Lab, Stealing Data on 500,000 Patients

Hacking Group Steals $34,200,000 Mostly From American Entities, Including Healthcare Firms, Businesses and More

Here's how the sophisticated ransomware group Embargo operates and extorts victims

Home Office Phishing Scam Targets UK Immigration Sponsors

Hong Kong: Privacy Commissioner for Personal Data (PCPD) opens probe into Dior data breach impacting 1 million consumers

Hospitals targeted in Embargo ransomware attacks

How Ransomware Works and Why It’s More Dangerous Than Ever

Immigration and Customs Enforcement (ICE), Allies Dismantle BlackSuit Ransomware Network in Global Takedown

Interlock claims cyberattack on St. Paul, employees forced to scrub data

Interlock Ransomware Group Allegedly Breaches City of St. Paul – Leaking 43 GB of Data

Interlock Ransomware Group Leaks 43GB of Data in City of St. Paul Cyberattack

Ivanti Connect Secure, Policy Secure, and ZTA Flaws Allow Attackers to Launch DoS Attacks

Keys Pathology Associates Data Breach Affects At Least 20,000

Kimsuky APT Hackers Exposed in Alleged Breach Revealing Phishing Tools and Operational Data

Langdon & Company Data Breach Affects 46,061 Individuals

Law Enforcement Seizes BlackSuit Ransomware Servers Targeting U.S. Critical Infrastructure

Leaked Credentials Become Top Cause of Data Breaches in 2025

Lee & Associates Allegedly Hit by Major Data Leak – Confidential Files Exposed

Major data breach at US credit union sees 172,000 customers at risk - here's how to stay safe

Manpower discloses data breach affecting nearly 145,000 people

Manpower franchise discloses data theft after RansomHub posts alleged stolen data

Manpower of Lansing Data Breach Affects 144,189 People: SSNs Exposed

Marks & Spencer restores click and collect 4 months after cyber attack

Marks & Spencer’s online shop now fully operational after cyberattack

Microsoft August 2025 Patch Tuesday fixes one zero-day, 107 flaws

Military, commercial aircraft supplier allegedly targeted by Play ransomware

Minnesota capital purportedly hacked by Interlock gang

MMA Transfers Allegedly Hit by D4rk4rmy Ransomware Attack – 74GB of Data Leaked

Motorcycle Giant Royal Enfield Allegedly Hit by Ransomware Attack

MSPs beware – these two ransomware groups are ramping up attacks and have claimed hundreds of victims

Netscaler vulnerability was exploited as zero-day for nearly two months (CVE-2025-6543)

New Bring Your Own Vulnerable Driver (BYOVD) Attack Can Evade Microsoft Defender and Install Ransomware – How to Protect Yourself

New Charon ransomware targets Middle East public sector, aviation firms

New 'Curly COMrades' APT Using NGEN COM Hijacking in Georgia, Moldova Attacks

New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises

North Korean hacking group Kimsuky hit by data breach, internal tools and stolen data leaked

North Korean Kimsuky Hackers Data Breach – Insiders Published the Data Online

North Korean Kimsuky Hackers Hit by Data Breach, Insiders Leak Files Online

North Korean Kimsuky Hackers Suffer Data Breach as Insiders Leak Information Online

Notorious North Korean hacking group Kimsuky gets hacked itself - revealing some of its deepest secrets

Over 3,000 NetScaler devices left unpatched against CitrixBleed 2 bug

Over 29,000 Unpatched Microsoft Exchange Servers Leaving Networks at Risk

Over 170,000 people impacted in Connex Credit Union data breach

Pacific Healthworks breach claimed by Everest ransomware

Pacific HealthWorks Data Breach: 1.4 Million Patient Records Exposed

Pacific HealthWorks ransomware attack, files leaked from 50 partner medical practices

Patch Tuesday: Microsoft Fixes 107 Vulnerabilities, Including 13 RCE Flaws

Patch Tuesday August 2025: 9 High-Risk Vulnerabilities Fixed by Microsoft

Play Ransomware Group Allegedly Breaches Rite Track, Travancore Analytics, Bluewater Yacht Sales, and The Scharine Group

PoisonSeed Phishing Kit Bypasses MFA to Acquire Credentials from Individuals and Organizations

PoisonSeed Phishing Kit Bypasses MFA to Steal Credentials from Users and Organizations

Qilin Ransomware Group Allegedly Breaches Burmann and EMPUR Produktions GmbH

Radiant Capital hacker offloads Ethereum, bags $13.2 Million in DAI

Ransomware Landscape July 2025: Qilin Stays on Top as New Threats Emerge

Ransomware payouts hit new high in Q2 2025, driven by social engineering and data theft

Researchers Detail Script-Masking Tactics That Bypass Defenses

Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks

Rhysida Ransomware Allegedly Breaches US Printer Trans-Tex

Royal Enfield Allegedly Hit by Ransomware Attack – Data Encrypted and Backups Erased

Royal Enfield Reportedly Targeted in Ransomware Attack, Data Encrypted

Royal Enfield Reportedly Targeted in Ransomware Attack, Hackers Claim Data Encryption

Russia said to be behind US Federal Court systems hack

Russian APT28's LameHug, a Pilot for Future AI Cyber-Attacks

Russian government hackers said to be behind US federal court filing system hack

Russian-Linked Curly COMrades Deploy MucorAgent Malware in Europe

Saint Paul cyberattack linked to Interlock ransomware gang

SAP Security Patch Day Fixes 15 Flaws, Including 3 Injection Vulnerabilities

Scattered Spider’s New Telegram Channel Names Targeted Organizations

Seasons Living Data Breach Affects Personal Information

Second ransomware attack in two months disrupts South Korean ticketing giant

Securing The Human Layer: Modernising Workforce Authentication

ShinyHunters Claims BreachForums Seized by Law Enforcement, Now a Honeypot

SonicWall VPN Cyberattack Linked to Known Access Control Vulnerability

Tea app data breach exposes thousands of user photos

Tesla Optimus robot preorders go live for $250 deposit – but it's all a sophisticated scam

The Google-Salesforce Customer Data Breach: What Really Happened?

The Ultimate Battle: Enterprise Browsers vs. Secure Browser Extensions

Think like a hacker; plan like a lawyer

Three cyber safety tips for executives working while travelling

Traffic to GenAI Websites Increases by 50%, and Cyberattacks Grow With It

Two Russian cybercrime groups exploit WinRAR zero-day for weeks

U.S. Allies Seize $1 Million in Bitcoin, Servers from Russian Ransomware Gang

U.S. Immigration Disrupts BlackSuit Ransomware Group

U.S. seizes $1 Million from Russian ransomware gang

UK work visa sponsors are target of phishing campaign

US dismantles Russian ransomware network, seizes $1 million in bitcoin

US government seizes $1 million from major Russian ransomware gang in a rare win for the good guys

US Government Seizes $1M From Russian BlackSuit Ransomware

US government seizes $1 million in crypto from BlackSuit ransomware gang

US reveals it seized $1 million worth of Bitcoin from Russian BlackSuit ransomware gang

Vistra Group Allegedly Breached – Sensitive Offshore Client Data Surfaces on Dark Web

WestJet confirms passport details stolen in cyber attack

What are the Biggest Cybersecurity Nightmares Your Business Might Face in 2025?

Why DNS threats should be on every CISO’s radar in 2025

WinRAR zero-day was exploited by two threat actors (CVE-2025-8088)

YES24 Faces Criticism Over Repeated Ransomware Attacks and Lapses in Security Response

Your antivirus is under attack from new "killer" tool - here's what we know

11th August

1.4 million customers exposed in Allianz life insurance data breach - what to do now

$34 million in crypto payments traced to Embargo ransomware group

29,000 IPs still unpatched as CISA’s deadline nears: US and Germany most affected

172,000 Connex members affected by data breach

Aave User Incurs $343K Loss in Phishing Scam

Air France and KLM confirm data breach, urge vigilance amid security incident

At least 73% of U.S. adults have fallen for online scams. How you can avoid the latest con

Australia: Information Commissioner sues Optus over 2022 data breach

Australia: Students and staff locked out after security breach at major university

Australian and New Zealand (ANZ) firms face rising repeat ransomware attacks & executive threats

BadCam Attack Turns Trusted Linux Webcams into Stealthy USB Weapons

Belgium: Man Arrested for Phishing Nuns in Antwerp. 7+ Belgian Monasteries Targeted

BERT Ransomware

BlackCat With a New Name? TRM Labs Says the Ransomware Group May Have Rebranded to Embargo

BlackSuit Ransomware Takes an Infrastructure Hit From Law Enforcement

Boeing, US Navy supplier Jamco Aerospace claimed in ransomware attack

Breaches are up, budgets are too, so why isn’t healthcare safer?

Carmaker Portal Flaw Could Let Hackers Unlock Cars, Steal Data

CastleLoader Malware Hits 400+ Devices via Cloudflare-Themed ClickFix Phishing Attack

CastleLoader Malware Infected Over 400+ Devices Using Cloudflare-Themed ClickFix Phishing Attack

Cencora & The Lash Group Settle Data Breach Litigation for $40 Million

'Chairmen' of $100 million scam operation extradited to US

Change Healthcare Data Breach Exposed Personal Information of Over 192 Million People

Columbia University data breach affected 870,000 students, applicants

Connex Credit Union Breach Exposes 172,000 Members’ Data

Connex Credit Union data breach impacts 172,000 members

Connex Credit Union Data Breach Impacts 172,000 People

Coordinated Disruption Actions Against BlackSuit (Royal) Ransomware Operations

Credential theft has surged 160% in 2025

Crypto-stealing GreedyBear just became even greedier

CVE-2025-8355 & CVE-2025-8356: Xerox Issues Urgent Fixes for Server-Side Request Forgery (SSRF) and Remote Code Execution (RCE) Bugs

Data breach at Dutch medical laboratory much larger than expected

Department of Homeland Security (DHS), global partners dismantle BlackSuit ransomware network after 450 US victims; servers and assets seized

Department of Justice (DOJ), international partners take down BlackSuit group’s infrastructure

Department of Justice (DOJ) announces disruption of BlackSuit ransomware group

Details emerge on WinRAR zero-day attacks that infected PCs with malware

Dior data breach exposes personal details of nearly 1 million Honk Kong customers

Disable Your SonicWall VPN: Threat Actors May Be Exploiting This Vulnerability

Efimer Trojan targets users via phishing

Eight Countries Face EU Action Over NIS2 Deadline Failings

Embargo Ransomware Gang Amasses $34.2m in Attack Proceeds

Embargo ransomware group accumulates $34.2 million in cryptocurrency

Experts warn against PDF as bait for phishing emails

Fragmented Security Leave Companies Open to Ransomware

From legacy to SaaS: Why complexity is the enemy of enterprise security

Genea data breach under investigation by class action law firm

Ghanaian Nationals Extradited for Roles in $100M Romance and Wire Fraud Ring

Ghanaian Nationals Extradited to US Over $100M, BEC, Romance Scams

Global Eyewear Giant Marcolin Allegedly Breached

Gloucestershire Police Force faces £15,000 bill for blunders

Google clarifies data breach: business contacts of potential Ads customers affected

Google confirms Salesforce data breach targeting prospective ads customers

Google-Salesforce Data Breach: Google Ads Customer Data Exposed

GPT-5 demonstrates “shockingly low” safety: researchers jailbreak it in under 24 hours

Hacker Exposes Flaw In Automaker's Portal That Could Let Thieves Unlock Cars Remotely

Hacker Reveals New Authentication Bypass in Active Directory and Entra ID Environments

Hackers breach cancer screening data of almost 500,000 women

Hackers Leak 9GB of Data from Alleged North Korean Hacker’s Computer

Hackers post stolen St. Paul data online as efforts to reset city employee passwords surge forward

Here’s why you shouldn’t tell your phone passcode at a repair shop

How ShinyHunters Hacking Group Stole Customer Data from Salesforce

Howard Financial & Associates Allegedly Hit by INC Ransomware

Immigration and Customs Enforcement (ICE) takes down BlackSuit ransomware operation

India: Hacker booked for fake donation page on state Department of Industries website

India Data Breach Cost Hits Record High of INR 220 Million

Indonesian Logistics Giant JNE Allegedly Breached – 81 Million Records for Sale

Italian Tech Integrator Alascom Allegedly Hit by Rhysida Ransomware

Kaspersky uncovers Efimer trojan targeting organizations through phishing emails

Koch Eye Associates Data Breach: Patient Data Stolen

Leaked credentials surge 160% as 2025 sees record-breaking data breach

Magellan Financial Group investigating ransomware claims

Major supplier of military and commercial aircraft allegedly hit by Play ransomware

Marks & Spencer (M&S) click and collect returns 15 weeks after cyber attack

Marks & Spencer (M&S) finally gets click-and-collect up and running again

Marks & Spencer restores click & collect following cyber attack

Marks & Spencer restores click and collect orders after hack

Marks & Spencer (M&S) Restores Click-and-Collect Service After Cyber-attack

Massive Columbia University data breach affects nearly 900,000 past and present students - here's what was leaked, and how to stay safe

MedicareCompareUSA Data Breach Affects 922 in Washington

MedusaLocker ransomware group is looking for pentesters

Moldova: Cyber attack on government infrastructure

Most Singapore firms confident, but panic after a data breach

MuddyWater’s DarkBit ransomware cracked for free data recovery

Multiple payloads distributed by CastleBot Malware-as-a-Service (MaaS) platform

New Data Reveals July’s Worst Ransomware Groups and Attack Surges

New Ransomware Group Embargo Launders $34M in Crypto from US Hospital Attacks Since April

New TETRA Radio Encryption Flaws Expose Law Enforcement Communications

New WinRAR Zero-Day Exploited by RomCom Hackers

New Zero-Day in WinRAR Abused by RomCom

North Korean Group ScarCruft Expands From Spying to Ransomware Attacks

North Korean Kimsuky hackers exposed in alleged data breach

Notorious cybercrime group’s ‘critical infrastructure’ dismantled by ICE, Canada, other countries

Nova Recovery Center Data Breach Affects Thousands

One in three Indian ransomware victims hit repeatedly

Oracle Health Data Breach Affects 13,633 Patients

Over 29,000 Exchange servers unpatched against high-severity flaw

Over 30,000 Indian Institute of Technology Roorkee (IIT Roorkee) records leaked online in a major privacy lapse

Pakistan: 39 government departments alerted to ransomware risks, warned of potential data loss, operational disruptions

Pakistan: National Cyber Emergency Response Team (NCERT) issues ‘Blue Locker’ ransomware advisory

Patient PII and PHI Allegedly Leaked Following Ransomware Attack on California Surgeon Louis Tieu DDS MD

Pentesting is now central to CISO strategy

Phishing Leads Legal Industry Threats as Half of Law Firms Lack Immutable Backups

Play ransomware admits Jamco Aerospace hack

Qilin Ransomware Claims Formacompany & Co. Real Names Leak, Accuses the Offshore Company of Money Laundering

Ransomware attacks up by 41 percent globally

Ransomware gang claims attack on St. Paul city government

Report Reveals Tool Overload Driving Fatigue and Missed Threats in MSPs

Researchers Spot Surge in Erlang/OTP SSH RCE Exploits, 70% Target Operational Technology (OT) Firewalls

Romance scam suspects extradited from Ghana, charged with more than $100 million in thefts

Russian 'RomCom' Hackers Exploit WinRAR Flaw Via Phishing Emails

Salesforce Breach Hits Google Ads Clients, Hackers Demand Ransom

Salesforce-Related Data Breach Affecting Multiple Companies

Scammers Are Targeting Facebook Users With This Phishing Scheme

Semperis 2025 Ransomware Study Reveals Relentless Cyberattacks on Australian and New Zealand Organisations

Sensitive Data of Columbia University Students and Staff Compromised in Major Breach

South Korea: Top online bookstore suffers another ransomware attack

St. Paul cyberattack: Organization takes credit for ransomware attack on city, releases some data

St. Paul races to restore systems after ransomware attack forces massive data reset

St. Paul, Minnesota, Breach Confirmed as Ransomware Attack

Study Shows Users Respond to Phishing Differently based on Device Used

The Best Ways To Prevent A Cyber Attack In 2025

The Netherlands: Citrix Netscaler flaw CVE-2025-6543 exploited to breach organizations

The Rise of Native Phishing: Microsoft 365 Apps Abused in Attacks

The University of Western Australia cyber-attack: A wake-up call for university cyber-security

This “BlueLocker” Ransomware Attack is On the Rise in Pakistan

Two groups exploit WinRAR flaws in separate cyber-espionage campaigns

UK data breach put 100,000 Afghans at risk, court told

UK Red Teamers “Deeply Skeptical” of AI

UK Warns That Sharing Shoplifters' Photos May Violate GDPR

UK watchdog says don’t post photos of shoplifters, due to privacy rules

Ulster County employee information impacted by consultant data breach

University of Western Australia Hit by Major Data Breach, Staff and Student Passwords Compromised

University of Western Australia staff, students ‘locked out’ of accounts after passwords compromised by data breach

University of Western Australia suffers major data breach, staff and students locked out

US Federal Judiciary beefs up security after cyberattack

US government seized $1M from Russian ransomware gang

Western Australia university forces students to change passcodes following cyber attack

WEYHRO Ransomware Group Allegedly Breaches Chemtron RiverBend and Community Services of Missouri

Why Ransomware Attacks Are Decreasing in 2025

Why Your Bus Could Be a Hacker’s Next Target? Research Warns Public Buses Can be Controlled via Web

Win-DDoS: Attackers can turn public domain controllers into DDoS agents

WinRAR 0-Day in Phishing Attacks to Deploy RomCom Malware

WinRAR zero-day exploited by RomCom hackers in targeted attacks

WinRAR Zero-Day Under Active Exploitation – Update to Latest Version Immediately

WinRAR Zero-Day Vulnerability Allegedly Exploited by Russian Hackers to Target Governments

World Leaks ransomware gang claims hack of defence contractor L3Harris

YES24 suffers ransomware attack, initiates service recovery measures

YES24 suffers second ransomware attack, causing website outage in two months

Posted by at
Labels:
Subscribe to: Posts (Atom)