Editor's Message

Welcome to DBD. On March 8th, DBD celebrated it's 5th anniversary and PRiSM celebrated it's 2nd anniversary. Little did I know when I started both of these ventures just how much an impact they would have on my life and I'd like to thank each and everyone of you who have supported me over the years, with a special thanks to those individuals who have kindly shared their knowledge with me, and continue to do so. Thanks again for your support. Stay safe. :)


“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington DC



Monday, 4 August 2025

Data Breaches Digest - Week 32 2025

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 4th August and 10th August 2025.


4th August

17% of Nigerian Computer Users Affected by Cyber Crime in 2025

75% of UK business leaders are willing to risk criminal penalties to pay ransoms

75% of UK businesses would break a ransomware payment ban, says research

A New Email Scam Is Shockingly Realistic, Here's Everything You Need To Know About Protecting Yourself

A shortcut to malware: cyber pros warn of hackers dropping backdoors via LNK files

AI Helps Cut South Africa’s Data Breach Costs by 17% in 2025

AI-enabled cybersecurity lowers South African data breach costs

Allianz Life hit with class action after major July data breach

Antalya Veterinary Doctors Association Allegedly Breached

Average global data breach cost now $4.44 million

Bitdefender Warns Users to Update Dahua Cameras Over Critical Flaws

Cloud Intrusions Skyrocket in 2025

CloudFlare Warns Of Alarming Link-Wrapping Exploit To Steal Microsoft 365 Logins

Companies Go Bankrupt Due to Ransomware! Einhaus Group Shuts Down, Serving as a Warning to Everyone

Cybercriminals Exploit Proofpoint Tools in 2025 Phishing Campaign

D4rk4rmy Ransomware Allegedly Breaches Casino de Monte-Carlo and Big Rock Resort

Data Breaches in the US Impacted Over 165 Million in H1 2025

Dell Technologies Allegedly Hit by Massive 1.3 TB Data Breach

Department of Justice (DOJ) report says Sinaloa cartel hacker tracked FBI official, used surveillance to find informants

FBI uncovers rising phone scams tricking Americans into installing apps that steal financial data

French Telecom Orange Disclosed Suffering A Cyberattack

German phone repair business collapses following 2023 ransomware attack

Hacked Crimean servers reveal information about abducted children, Ukraine says

Hacker claims breach of Nokia internal network, leaks data of over 94,000 employees

Hacker Group Exposes Use of Rotten Ingredients by Israeli Food Giant

Hacker hits CrediX for $200K after $2.64M flash loan exploit on Sonic chain

Hacker infighting exposes Qilin ransomware affiliate panel

Hackers Bypass Microsoft’s 2FA in New Phishing Campaign

Hackers leak Aeroflot CEO data after cyber attack forces flight cancellations

Highlands Oncology data breach exposes information of over 110,000 individuals

How a hacker pulled off the largest Bitcoin hack in 2020, now worth $14 billion

IBM Highlights AI Security Issues in 2025 Data Breach Report

Inside Storm-2603: The Ransomware Operator Behind ToolShell’s Shadow

Interlock Ransomware Employs ClickFix Technique to Run Malicious Commands on Windows Machines

Interlock Ransomware Uses ClickFix Exploit to Execute Malicious Commands on Windows

Iranian Government Portal Allegedly Breached

KELA Reveals Over 3,600 Ransomware Victims and 2.67 Million Infostealer Infections in the First Half of 2025

Kimsuky APT Continues Targeting South Korea with Official-Looking Phishing Lures

LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code

Local Government Cybersecurity: Why Municipal Systems Need Extra Protection

Lynx Ransomware Allegedly Breaches Clean Energy Firm Frontline Bioenergy

Maine Healthcare Company Suffers Major Data Breach

Malaysia: Hacker claims massive data theft from ministries, government agencies

Man-in-the-Middle Attack Prevention Guide

Microsoft and Google Among Most Affected as Zero Day Exploits Jump 46%

More ransomware spotted being deployed against vulnerable SharePoint servers

Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons

Mozilla Issues Warning on Phishing Campaign Targeting Add-on Developer Accounts

Mozilla warns Firefox extension developers of active phishing campaign

Mozilla warns of phishing attacks targeting add-on developers

Mozilla Warns of Phishing Attacks Targeting Add-on Developers Accounts

Mozilla warns of phishing targeting add-on developers

Multi-Job Hustles Expose Workers to Higher Cybersecurity Risks

New Data Breach Notification Requirements in Oklahoma

New Phishing campaign hides malicious links in Proofpoint and Intermedia link wrappers

New 'Plague' PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft

Non-Human Identities (NHIs) Continue to Outpace Human Identities and Bump Up Security Risk

North Korean spies posing as remote workers have infiltrated hundreds of companies, says CrowdStrike

Novel attack framework leveraged by Storm-2603 threat operation

Ohio sets new cybersecurity rules for local governments, including public approval of ransomware payments

Operational Technology (OT) cyber security at the target of ransomware. How one mistake leads to production paralysis

Passenger Rail Agency of South Africa (PRASA) data breach results in defamation lawsuit

Pi-hole Data Breach Exposes Donor Emails Through WordPress Plugin Flaw

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

Pro-Ukrainian hackers claim cyberattack on Aeroflot, leak CEO’s flight data

Qilin Ransomware Group Allegedly Breaches US Industrial Supplier Aggressive Air Compressor & Co

Ransomware Attack on Highlands Oncology Exposes Data of Over 113,000 Patients

Ransomware attacks: The evolving extortion threat to US financial institutions

Ransomware gangs join attacks targeting Microsoft SharePoint servers

Ransomware group targets SharePoint zero-day

Ransomware Is Targeting Nonprofits: Why Risk a Disaster When Protection Is Affordable?

Rise in personal data breach reports on the Isle of Man amid increased awareness efforts

Scattered Spider Intensifies Cyber Onslaught with New Tactics and Ransomware Deployment

ShadowSyndicate Infrastructure Used by Multiple Ransomware Groups Including Cl0p, LockBit and RansomHub

SharePoint zero-days harnessed for ransomware deployment

Singapore leads world in ransomware-linked regulatory threats

SonicWall firewalls targeted in ransomware attacks, possibly via zero-day

SonicWall VPNs are being targeted by a new zero-day in ransomware attacks

SonicWall VPNs Targeted in Akira Ransomware Surge Using Suspected Zero-Day Exploits

South African Broadcasting Corporation (SABC) And eMedia Experience Massive Cyber Attack

St. Paul extends emergency amid cyberattack: experts plead caution

Tax authority of Curacao expects to be back in business today after ransomware attack

Tea App Remains a Lifeline for Women Despite Data Breach Controversy

Tea App Temporarily Disables Messaging System After Major Data Breach

The Qantas data breach: Lessons in third-party risk

The Ransomware Nightmare Gets Worse: “We Know Where Your Kids Live.” The New Frontier of Cybercrime

The surprising truth about identity security confidence

The Wild West of Shadow IT

Uncovered historic Bitcoin (BTC) heist might be behind shutdown of bitcoin mining pool

Uptick in Akira Ransomware Actors Targeting SonicWall VPNs

US becomes ransomware capital of the world as attacks rise by almost 150 percent

Vietnamese Hackers Use PXA Stealer, Hit 4,000 IPs and Steal 200,000 Passwords Globally

Web-Based AI Usage Surge Shifts Global Internet Traffic Patterns