Pages

Monday, 30 June 2025

Data Breaches Digest - Week 27 2025

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 30th June and 6th July 2025.


1st July

Ahold Delhaize data breach exposes personal information of over 2.2 million individuals

AI drives 80 percent of phishing with USD $112 million lost in India

Australian ransomware payments drop drastically year on year

Blind Eagle Hackers Leverage Open-Source RATs and Ciphers to Evade Static Detection

British hacker “IntelBroker” charged in U.S. for multimillion-dollar global data theft scheme

Canada orders Hikvision to shut down operations over national security concerns

Canadian government orders Hikvision to cease all activities

Chrome Zero-Day CVE-2025-6554 Under Active Attack - Google Issues Security Update

Crypto Hack Losses in First Half of 2025 Exceed 2024 Total

Crypto-Procrastination: Preparing for a Quantum Secure Economy, Today

Cyber-Attack Targets International Criminal Court

Department of Government Efficiency (DOGE) spoofed in new phishing campaign

Department of Justice (DOJ) announces arrest, indictments in North Korean IT worker scheme

Did Verizon Have A Data Breach? Here’s What We Know

Don’t Act in Isolation: Transforming Malware Intelligence in the AI Era

Drug cartel hacker tracked FBI official’s phone to kill informants, US says

During NATO summit, International Criminal Court hit with cyber attack

Estes Forwarding investigates data breach after Qilin ransomware claim

Food Lion workers, families among 2.2M victims of latest corporate data breach

GenAI is everywhere, but security policies haven’t caught up

Google fixes fourth actively exploited Chrome zero-day of 2025

Google patches actively exploited Chrome (CVE‑2025‑6554)

Hacker enlisted to help Mexican cartel track, kill FBI informants

Hacker who boldly broke into computer systems to promote his cybersecurity business pleads guilty

Hackers breached Norwegian dam’s control system for hours

Hackers Build Malware That Tries to Reprogram AI Security Tools

Hackers claim they snatched city budgets and plans from a North Carolina town

Hackers tighten grip as ransomware epidemic hits South Africa hard

Here’s how North Korean “IT workers” tricked their crypto employers

How cybercriminals are weaponizing AI and what CISOs should do about it

Humac listed on ransomware gang’s leak site amid alleged data breach

International Criminal Court hit by cyber attack

International Criminal Court hit with cyber attack during NATO summit

International Criminal Court hit with "sophisticated" cyberattack

International Criminal Court (ICC) says ‘targeted’ and ‘sophisticated’ cyber attack has been contained

International Criminal Court targeted by new ‘sophisticated’ attack

International Criminal Court targeted in cyber attack

Iran-linked hackers resurface, threaten to release more stolen Trump emails

Iran-linked hackers threaten to release Trump aides' emails

Kenya Facing Rise in Cyberthreats from Bank Fraud, Sextortion, and Ransomware

Kimsuky hackers attempt psychological cyber attack on U.S. security officials

Kyivstar Cyber Attack: A Deep Dive Into Cyber Warfare in Ukraine

Marks and Spencer boss says operations set to be up and running by August following cyber attack

Massive Ahold Delhaize data breach sees 2.2 million people's data exposed in ransomware attacks against major US food retailer

Ransomware attack hits Swiss government data

Ransomware Detection Best Practices: How to Catch Attacks Before Data is Lost

Ransomware Strike on Swiss Health Foundation Exposes Government Data

Resident hits out after receiving scam text following Glasgow council cyber attack

Sarcoma ransomware hits Radix: data from Swiss federal agencies stolen, 1.3 TB published on the dark web

Scam centers are spreading, and so is the human cost

Scam Centers Expand Global Footprint with Trafficked Victims

Scammers Use Microsoft 365 Direct Send to Spoof Emails Targeting US Firms

‘Sophisticated’ cyber attack contained, says International Criminal Court

Spanish Company Housfy Breached, Hackers Announce Selling Access to Admin, VPN, Database

Spanish police arrest five over $542 million crypto investment scheme

Swiss government confirms cyber attack on health foundation

Swiss government data published following supply chain attack – here’s what we know about the culprits

‘Targeted, sophisticated’ cyber attack hits International Criminal Court (ICC)

Tehran-linked bot army targeted Americans during war with Israel, Diaspora Ministry says

Telkom Phishing Incident: Employee Account Compromised, Now Resolved

The golden cybersecurity rule South African businesses are flouting

Top Ransomware Groups June 2025: Qilin Reclaims Top Spot

U.S. Arrests Facilitator in North Korean IT Worker Scheme; Seizes 29 Domains and Raids 21 Laptop Farms

UK IT worker jailed for revenge cyber-attack that cost employer £200,000

US Department of Justice (DoJ) and Microsoft Target North Korean IT Workers

US under cyber 'attack'? Iran-linked hackers threaten to release Trump aides' emails; CISA issues stern warning

Watch out for this crafty iPhone phishing scam

Why this Cyber Attack on a Norwegian Dam should have you Paying Attention

WiFi routers now tracking motion: Xfinity’s new feature sparks privacy concerns

Worst of cyber attack impact to be over by August, says Marks & Spencer (M&S) boss

30th June

61 Million Records Listed for Sale Online, Allegedly Belong to Verizon

70% of new hires click on phishing links within the first 3 months of employment - here's how to stay safe

A DNS Examination of the Phishing Campaign Targeting Japanese Brokerage Firms

Aflac Suffers an Apparent Scattered Spider Cyber Attack, Exposing Extensive Sensitive Information

Ahold Delhaize Confirms Data Breach of 2.2M amid INC Ransomware Claims

Ahold Delhaize data breach affected over 2.2 Million individuals

Ahold Delhaize Data Breach Affects Over 2 Million People

Ahold Delhaize Data Breach Exposes Personal Information of 2.2 Million Shoppers

Ahold Delhaize Data Breach Impacts 2.2 Million People

Ahold Delhaize USA Confirms Data Breach Affected 2.2 Million People

AI is aiding sextortion schemes

Alleged Verizon data breach sees 61M customer records offered for sale

Android 16 will flag fake cell towers and warn users of potential spying threats

Another Billing Software Vendor Hacked by Ransomware

Apple ID, credit card details targeted by CapCut phishing

Are we securing AI like the rest of the cloud?

Asheville Eye Associates Faces Fallout From Cyber Attack

Austrian Crypto Giant Bitpanda Allegedly Breached – 5.4 Million User Data for Sale

Authorities crush cryptocurrency investment fraud ring

Bajaj Finserv Allegedly Breached – Sensitive Customer and Employee Data For Sale Online

Blind Eagle Uses Proton66 Hosting for Phishing, RAT Deployment on Colombian Banks

BreachForums revival rumored as French police nab ShinyHunters

Canada Bans Chinese CCTV Vendor Hikvision Over National Security Concerns

Canada suspends Hikvision operations over national security concerns

Cartel hacker used an FBI agent’s phone to hunt informants

Chaos Ransomware Hits Optima Tax Relief, Leaks 69GB of Sensitive Data

CitrixBleed 2 might be actively exploited (CVE-2025-5777)

ClickFix fake error surges, spreads ransomware and other malware

Colombian Cybercrime Group Blind Eagle May be Connected to Russian Hosting Service Proton66

Covenant hospitals 'running normally' again following May cyber attack

Cybercriminals steal health data posing as fraud investigators

Data breach at healthcare services firm Episource affects 5.4M

Data Breach May Have Exposed Health Records of 200,000 Ontarians, Investigation Underway

December data breach at Nth degree affects 40,000 people

'Disgruntled' British IT worker jailed for hacking employer after being suspended

Disgruntled employee takes revenge with cyberattack

Department of Justice (DOJ) raids 29 ‘laptop farms’ in crackdown on North Korean IT worker scheme

DragonForce Ransomware Empowers Affiliates with Modular Toolkit to Create Custom Ransomware Payloads

DragonForce Ransomware Equips Affiliates with Modular Toolkit for Crafting Custom Payloads

El Chapo Hacker Infiltrated FBI, Helping Silence Witnesses

El Chapo's Mexican Drug Cartel FBI Rats Hit-List - How Brutal Mob Launched Hack Attack Plan to Trace and Wipe Out Government Snitches

European Construction Giant Eiffage Allegedly Hit by Major Data Breach

Europol Dismantles $540 Million Cryptocurrency Fraud Network, Arrests Five Suspects

Europol helps disrupt $540 million crypto investment fraud ring

FBI Data Security Breach in Mexico Led to Murders of Drug Informants

FBI warns about fraudsters posing as health insurers

FBI warns infamous cybercriminal group 'Scattered Spider' is targeting US airlines

FBI; CMS Issue Warning About Fraud and Phishing Attempts on Healthcare Orgs

Food Retailer Ahold Delhaize Discloses Data Breach Impacting 2.2 Million

Fraudsters behind €460 million crypto scam arrested in Spain

Germany asks Google, Apple to remove DeepSeek AI from app stores

Glasgow City Council Warns of Parking Fine Scam

Glasgow City Issues Alert Over Parking Fine Scam During Ongoing Cyber Attack

Got a Brother printer? It could have a critical security flaw - how to check and what to do next

H1 2025 Crypto Losses Outpace 2024; CertiK Counts 344 Onchain Heists, $187M Recovered

Hacked Iranian crypto exchange Nobitex returns, exploit linked to spying

Hacker for El Chapo helped boss hunt and kill FBI informants

Hacker group targeting US airlines, FBI says

Hacker pleads guilty to breaching company networks to pitch his own services

Health Care and Rehabilitation Services of Southeastern Vermont Data Breach

Healthcare Hacker Facing Extradition to US and Up to 50 Years in Jail

Hikvision Canada ordered to cease operations over security risks

Hired Hacker Assists Drug Cartel in Finding, Killing FBI Sources

How 2 Ransomware Attacks on 2 Hospitals Led to 2 Deaths in Europe

Hungryroot Allegedly Breached – Over 1.1 Million User Data for Sale

India: Government strengthens cybercrime crackdown as cases surge nationwide

Integrated Oncology Network Reports Data Breach Affecting cCARE Patients

International Criminal Court contains ’sophisticated’ cyber attack

International Criminal Court hit with "sophisticated" cyberattack

International Taskforce Dismantles €460m Crypto Fraud Network

Iran-linked hackers may target US firms and critical infrastructure, US government warns

Iranian Cyber Threats Persist Despite Ceasefire, US Intelligence Warns

IT Worker Jailed After Revenge Attack on Employer

Kenya Detects Over 2.5 Billion Cyber Threats in Three Months

Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To Non-Human Identity (NHI) Inventories

Lockton flags rising ransomware risks for Australian businesses

Los Angeles LGBT Center Allegedly Hit by Data Breach

Major Ukrainian Investment Firm Dragon Capital Allegedly Breached

Marketing Firm Tenacious Marketing USA Allegedly Breached – 414,000 Records for Sale

Massive data breach at Hannaford parent company affects over 95,000 Mainers

Median Ransom Now $1M, But 53% Paid Less Than Asked

Mexican cartel hackers used FBI agent’s phone and public cameras to track down and kill informants

Mexican drug cartel hacker spied on FBI official’s phone to track and kill informants, report says

Microsoft Defender for Office 365 now blocks email bombing attacks

Millions of Android, iPhone Users Could Be Sending Data to China

More than 25% of UK businesses hit by cyber-attack in last year, report finds

Myrtue Medical Center investigates major cyberattack linked to "Worldleaks" threat group

New Iranian phishing attacks take aim at Israeli tech experts

New Report Reveals Exploited Vulnerabilities as Leading Cause of Ransomware Attacks on Organizations

New Report Unveils Most of The Ransomware Attacks Targeting Organizations Via Exploited Vulnerabilities

New statutory instrument for Legal Aid Agency following cyber attack

Nigeria ranks 3rd in Africa for ransomware threats

Nigeria ranks third in Africa for ransomware threat detections in 2024

Nordic’s largest Apple Premium partner breached, hackers claim

Norwegian Dam Valve Forced Open for Hours in Cyberattack

Notorious cartel hired hacker to use surveillance cameras, phone data to track and kill FBI informants, U.S. says

Notorious Hacker “IntelBroker” Charged in $25 Million Global Cybercrime Spree

Over 1,200 Citrix servers unpatched against critical auth bypass flaw

Owner Of Several Iowa Newspapers To Settle Lawsuit Over Data Breach

Pakistan’s National Citizen Database Allegedly Breached – 602 Million Records Leaked Online

Peoples Bank Data Breach Affects Personal and Financial Information

Popular TikTok video editor used in phishing scam – here’s how to stay safe

RansomHub Ransomware Attacking RDP Servers Using Mimikatz and Advanced IP Scanner Tools

RansomHub Ransomware Deployment Linked to Remote Desktop Protocol Password Spray Attack

Ransomware payment ban and businesses

Ransomware pressures and higher stakes for public sector risk management

Ransomware victims still paying, Sophos finds

Remcos RAT spread via hijacked school, small business accounts

Scania Confirms Data Breach that Leaked Insurance Claim Documents

Scattered Spider Actively Targeting Airlines, FBI Warns

Scattered Spider Attacking Tech Companies Using Phishing Frameworks Like Evilginx and Social Engineering Methods

Scattered Spider Hacking Spree Continues With Airline Sector Attacks

Scattered Spider Targets Tech Companies with Phishing Frameworks like Evilginx and Social Engineering Tactics

Sinaloa Cartel hired hacker to use surveillance cameras, phone data to track and kill FBI informants

Southwood Financial Data Breach Affects Borrowers

SquareX Reveals that Employees are No Longer the Weakest Link, Browser AI Agents Are

Supermarket giant admits 2.2 million people could be hit by worrying data breach - what to do if you're affected

Swiss nonprofit health organization breached by Sarcoma ransomware group

Switzerland says government data stolen in ransomware attack

Syrian IPTV Provider Allegedly Breached

Teen hacking group behind Marks & Spencer (M&S) cyber attack finds new target

The Scattered Spider hacker group has a new industry in its crosshairs

Third-party breaches double, creating ripple effects across industries

U.S. Agencies Warn of Rising Iranian Cyberattacks on Defense, Operational Technology (OT) Networks, and Critical Infrastructure

U.S. warns of Iranian cyber threats on critical infrastructure

Unibail-Rodamco-Westfield Corporate Database Allegedly Leaked

US defense firms must ‘remain vigilant’ against Iranian cyber activity, agencies warn

US government takes down major North Korean ‘remote IT workers’ operation

Verizon users should be on their guard after post from hacker

Why 95% of phishing attacks go unreported in healthcare

Zurich non-profit hit by ransomware, Swiss federal data at risk