Editor's Message

Welcome to DBD. On March 8th, DBD celebrated it's 5th anniversary and PRiSM celebrated it's 2nd anniversary. Little did I know when I started both of these ventures just how much an impact they would have on my life and I'd like to thank each and everyone of you who have supported me over the years, with a special thanks to those individuals who have kindly shared their knowledge with me, and continue to do so. Thanks again for your support. Stay safe. :)


“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington DC



Monday, 16 June 2025

Data Breaches Digest - Week 25 2025

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 16th June and 22nd June 2025.


16th June

8.4 million people affected by data breach at Indian car share company Zoomcar

147,116 Americans Hit by Massive Data Breach - Firm Says Unknown Attacker May Have Exposed Names, Addresses, Social Security Numbers and More

Advanced wiper module added to Anubis RaaS payload

AI-Powered Phishing: The Future Of Digital Fraud

Almarai, Leading Saudi Food Giant, Allegedly Hit by Massive Data Breach

An attempt to save on a crypto hardware wallet cost millions

Anubis Ransomware Adds File-Wiping Capability

Anubis Ransomware Encrypts and Wipes Files, Making Recovery Impossible Even After Payment

Anubis Ransomware Introduces Irreversible File Destruction Feature

Anubis Ransomware Packs a Wiper to Permanently Delete Files

Anubis Ransomware With Wipe Mode That Permanently Erases File With No Recovery Option

APTiran Allegedly Hits Israeli Critical Infrastructure with Ransomware

As grocery shortages persist, United Natural Foods (UNFI) says it’s recovering from cyberattack

Asheville Eye Associates Says 147,000 Impacted by Data Breach

BERT Ransomware Escalates Attacks on Linux Machines with Weaponized ELF Files

BERT Ransomware Upgrades to Attacks Linux Machines Using Weaponized ELF Files

Bipartisan bill aims to create CISA-HHS liaison for hospital cyberattacks

Canadian Airline WestJet Suffers Cyberattack, Halts App and Web Services

Car-sharing giant Zoomcar says hacker accessed personal data of 8.4 million users

Chinese phishing network exploits Japanese credit card data through social media recruitment

Cyber-cover and the decision to take your business offline

CYFIRMA flags intensifying ransomware risk to healthcare sector led by US for-profit firms

Dutch police identify 126 suspects on Cracked.io, one of them was an 11-year-old

Episource Ransomware Attack Affects Multiple Healthcare Customers

Erie Insurance sued over claims that customer data was exposed in 'ransomware' attack

Even paying victims lose their data with Anubis ransomware

Fog Ransomware Group Uses Unconventional Toolset, New Research Finds

French Hospital Hôpital Privé de la Miotte Allegedly Breached, Data of Over 100K Patients for Sale

GrayAlpha Hacker Group Weaponizes Browser Updates to Deploy PowerNet Loader and NetSupport RAT

GrayAlpha Hackers Group Exploits Browser Updates to Deploy PowerNet Loader and NetSupport RAT

Hackers Break Into Car Sharing App, 8.4 Million Users Affected

Hackers claim 64 million leaked T-Mobile records, but it denies breach - here's what customers need to know

Hackers claim attack on Scania, website down for maintenance

Hackers impersonating US government compromise email account of prominent Russia researcher

Hackers Leak Data of 10,000 VirtualMacOSX Customers in Alleged Breach

Hacktivists Strike Within Minutes of Israel Missile Attacks on Iran Nuclear Sites

Keyless Entry Vulnerability (CVE-2025-6029) Threatens KIA Vehicles in Ecuador, Researcher Reports

Kraken: Your worst crypto nightmare isn’t a hacker, it’s you

Major Israeli Energy Companies Delkol and Delek Allegedly Breached by Handala Hacker Group

Massive data breach at Adecco sparks major fraud trial in France involving 72,000 victims

Moser Engineering and SPG Construction Allegedly Targeted by Qilin Ransomware

Names, phone numbers and...: Zoomcar says hacker accessed personal data of 8.4 million users

North Korean APT Hackers Target Ukrainian Government Agencies to Steal Login Credentials

Over a Third of Grafana Instances Exposed to XSS Flaw

Phishing In Crypto: How To Stay Secure While Trading Online

Phishing Test For Companies: Why Every Business Needs Realistic Simulations To Combat Social Engineering

Proofpoint pitches human-centric cyber defence against AI-generated phishing

PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments

Radford City, Virginia, Schools Hit by Cyber Attack

Ransomware group uses virtual machine as invisibility cloak

Report Links Los Pollos and RichAds to Malware Traffic Operations

Sensata Technologies discloses data breach due to ransomware

SinoTrack GPS vulnerabilities may allow attackers to track, control vehicles

SK Telecom restarts eSIM subscriptions after data breach

SK Telecom to resume eSIM subscriptions after data breach pause

SK Telecom to resume new eSIM-based subscriptions starting Monday following data breach

TBN Israel Allegedly Hacked by Handala Hacking Group

Tenable Fixes Three High-Severity Flaws in Vulnerability Scanner Nessus

Texas Department of Transportation (TxDOT) Data Breach Exposes Nearly 300,000 Crash Reports

The data sovereignty challenge in Europe

The Growing Cyber Risks from AI - and How Organizations Can Fight Back

These Crypto-Phishing Apps on Google Play Store Will Steal Your Earnings

This New Ransomware Can Irrevocably Destroy Your Files - Backup Now

This new ransomware could be deadly for your most precious files - here's how to stay protected

Threat Actors Target Victims with HijackLoader and DeerStealer

U.S. Seizes $7.74M in Crypto Tied to North Korea's Global Fake IT Worker Network

Victoria’s Secret critical systems restored following cyber attack

Victoria’s Secret recovers from cyber attack, restores all critical systems

Virtual kidnapping scams prey on our worst fears

Washington Post Hacked - Multiple Journalists’ Email Accounts Compromised

Washington Post hit with cyberattack

Washington Post investigating cyber attack on journalists, report says

Washington Post Journalists’ Microsoft Email Accounts Hacked

Washington Post's email system hacked, journalists' accounts compromised

WestJet Investigates Cyber-Attack Impacting Customers

WestJet probes cybersecurity incident affecting internal systems and mobile app

What Australia’s new ransomware payment reporting regime means for partners

Whole Foods supplier making progress on restoration after cyberattack left shelves empty

Why banks’ tech-first approach leaves governance gaps

YES24 apologizes for ransomware attack and plans customer compensation

YES24 co-CEOs apologize, pledge compensation over ransomware attack

YES24 faces security incident causing website and app outage

YES24 restores core services and announces compensation plan after ransomware attack

Zoomcar Data Breach Exposes Sensitive Details of 8.4 Million Users

Zoomcar discloses security breach impacting 8.4 million users

Zoomcar reveals major data breach exposing personal data of 8.4 million users