Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 29th December 2025 and 4th January 2026.4th January
2025 Sees Sharp Drop in Crypto Phishing Losses, Report Finds
Aurora College suspends classes over cyber attack
Bitfinex hacker Ilya Lichtenstein thanks Trump for early release under First Step Act
Crypto Phishing Losses Plunge 83% in 2025, but Wallet Threats Persist
Dubai Police warns about fake work visa scams
Hacker offers alleged utility engineering data for 6.5 BTC after Pickett US breach
Hackers drastically shorten deadline for Manage My Health to pay ransom
Healthcare Data Breach Statistics
Major Data Breach at University of Phoenix - Personal Details of Over 35 lakh People Exposed
Neighbourly users' private information up for sale on dark web after a breach
Potential Data Breach at Pickett USA Exposes Critical Energy Infrastructure
Tens of Thousands Leave Korea Telecom (KT) After Data Breach Prompts Fee Waivers
Wallet Drainer Phishing Losses Fall to $84 Million in 2025, Down 83%
3rd January
Associated Radiologists of the Finger Lakes Data Breach Exposes Patient Information
Bitfinex hacker Ilya Lichtenstein credits Trump for early release from prison
California residents can use new tool to demand brokers delete their personal data
Covenant Health data breach impacted 478,000+ people
Crypto phishing losses drop by 83%
Data breach impacting up to 100K South Carolinians, South Carolina Department of Consumer Affairs (SCDCA) says
From Billion-Dollar Heist to Early Freedom: The Bitfinex Hacker's Surprising Release
Hackers claim to hack Resecurity, firm says it was a honeypot
Handala hackers claim to have hacked former Member of Knesset (MK) Ayelet Shaked's phone, share pictures, videos online
Health care data breach affects 600,000 patients, Illinois agency says
Iranian hacker group Handala breaches phone of former Israeli justice minister
Libya's internet provider LTT targeted by DDoS attacks
Malware targeting personal data hits food delivery services
ManageMyHealth Data Breach: What It Means for Whānau and Health Data Security in Aotearoa
New Zealand: Health data breach raises concerns for Porirua patients
Norfolk council cyber attack fears spark risk level rise
Resecurity Says ShinyHunters Fell for Honeypot After Breach Claim
They Stole Bitcoin at $600 and Walked Free When It Hit $90,000
Trust Wallet says browser extension compromise related to Sha1-Hulud incident led to $8.5 million theft
University of Phoenix data breach hits 3.5 Million people
2nd January
2.2 Million Chrome, Firefox, Edge users impacted by meeting-stealing malware
10,000+ Fortinet Firewalls Still Exposed to 5-year Old MFA Bypass Vulnerability
Agentic AI Security Is Complicated, and the Hyper-Scalers Know It
AI-generated food scams are the new takeout nightmare
Allegedly stolen ASUS data completely exposed by Everest ransomware
Ameriprise Data Breach Exposes SSNs & Financial Details
Andover Eye Associates Data Breach Impacts Hundreds
APT42-linked infrastructure leveraged in Israel-targeted spear-phishing attack
Aultman Health System Data Breach Exposes Sensitive Personal & Health Information Including Social Security Numbers
Austin Associates Data Breach Leaks SSNs & Financial Info
Billion-dollar Bitcoin hacker Ilya Lichtenstein thanks Trump for early prison release
Bitfinex Hacker Walks Free: $10 Billion Crypto Heist Ends in Early Release
Cardano Users Warned of Possible Phishing Attempt Posing as ‘Eternl Desktop’ Update
Careto Hacker Group is Back After 10 Years of Silence with New Attack Tactics
Careto Hacker Group Resurfaces After a Decade, Unleashing New Attack Techniques
Careto Hacker Group Returns After a Decade of Silence with New Attack Tactics
China’s New Cybersecurity Law Is Here - And It Changes Everything for Businesses
Cognizant faces class-action lawsuits after TriZetto data breach
Cognizant Faces Multiple U.S. Class-Action Lawsuits Following TriZetto Data Breach
Cognizant Faces Multiple US Class-Action Lawsuits After TriZetto Data Breach
Cognizant hit with multiple US class-action lawsuits after TriZetto data breach
Cognizant Hit With Multiple US Class-Action Lawsuits Following TriZetto Data Breach
Covenant Health data breach after ransomware attack impacted over 478,000 people
Covenant Health Data Breach Impacts 478,000 Individuals
Covenant Health data breach impacts nearly 480,000 patients
Covenant Health says May data breach impacted nearly 478,000 patients
Cryptocurrency theft attacks traced to 2022 LastPass breach
Cyber Risk In 2026: How Geopolitics, Supply Chains and Shadow AI Will Test Resilience
Cyber-attack crashes Aurora College’s return to school for coming week
Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign
Cybersecurity experts face 20 years in prison following ransomware campaign
Cybersecurity Pros Plead Guilty in Ransomware Case
Data breach compromises New Zealand’s ManageMyHealth portal
Data breach exposes users of major patient portal ManageMyHealth
Enerparc AG Allegedly Breached: Solar Project Data Leaked
ErrTraffic ClickFix Tool Industrializes Social Engineering Malware, Delivers Fake Website Glitches
European Space Agency confirms data breach impacted external servers
False sense of security: Inside New Zealand’s under-reported cyber war
Former Coupang Employee Dumped MacBook in River to Hide Data Breach Evidence
G5 Enterprises Data Breach Exposes Social Security Numbers
GlassWorm Malware Evolves to Target macOS Systems with Hardware Wallet Trojans
Google Tasks Feature Exploited in New Sophisticated Phishing Campaign
Hacker Claims 200GB Data Theft From European Space Agency - Here’s What We Know
Hacker Gets Hacked After Leaving Stolen Funds Exposed On-Chain
Hackers Abuse Google Tasks Notifications in Sophisticated Phishing Attacks
Hackers Abusing Google Tasks Notification for Sophisticated Phishing Attack
Health care data breach affects 600,000 patients, Illinois agency says
Hospitals are drowning in threats they can’t triage
How Legacy Active Directory Creates Ransomware Risks for Hospitals
Inside the Cyber Extortion Boom: Phishing Gangs and Crime-as-a-Service Trends
Kaspersky reveals the journey of stolen data after phishing attacks
La Poste and La Banque Postale Hit by Cyberattack, Online Services Disrupted
Libya Telecommunications Company announces its systems were subjected to a cyber attack
LockBit Ransomware Takedown Hero to Receive Prestigious Award from King of Britain
ManageMyHealth data breach: More than 108k users potentially affected
Nearly 480,000 impacted by Covenant Health data breach
Nearly 500,000 patients hit in massive healthcare data breach - everything you need to know
Neighbourly taken down after claims of data breach
Neighbourly website offline after suspected data breach
New York-based fashion maker claimed by Russia-linked hackers
New Zealand: GPs worried by lack of information on ManageMyHealth data breach
New Zealand: ManageMyHealth data breach concerning, but no clinical impact
Over 10K Fortinet firewalls exposed to actively exploited 2FA bypass
Over 108,000 South Carolina residents had Social Security numbers compromised in data breach
Owner of Lewiston hospital vastly underestimated scope of May data breach
Pakistan-linked hackers target Indian government, universities in new spying campaign
Phishing campaign abuses Google Cloud Application to impersonate legitimate Google emails
Pickett USA Data Breach Exposes Critical Infrastructure Data
Potential Wallet Phishing Campaign Targets Cardano Users via ‘Eternl Desktop’ Announcement
Private health records surface on dark web after Manage My Health hack
Qilin Ransomware Group Attack Hits Sugawara Laboratories and CSV Group
Ransomware volumes dip, but attack methods evolve sharply
Scattered Spider attacks cost UK retailers hundreds of millions
Sedgwick confirms cyber incident affecting its major federal contractor subsidiary
SINBON Electronics Hit by DragonForce Ransomware Attack
Suspected Phishing Campaign Targets Cardano Users Through Fake “Eternl Desktop” Announcement
Texas Pete hot sauce-maker claimed by Play ransomware gang
This holiday season, a new malware comes a-calling
Threat Actor Allegedly Claims Breach of Tokyo FM Broadcasting Systems
“Tinder for Nazis” hit by 100GB data leak, thousands of users exposed
Tokyo FM Data Breach: Hacker Claims Over 3 Million Records Stolen
Transparent Tribe Launches New RAT Attacks Against Indian Government and Academia
TriZetto Data Breach Triggers Class-Action Lawsuits Against Cognizant
Trust Wallet links $8.5 million crypto theft to Shai-Hulud NPM attack
Two U.S. Cyber Experts Plead Guilty, Alleged Collaboration With Notorious Ransomware Gang
Two U.S. cybersecurity professionals plead guilty in BlackCat/Alphv ransomware case
Two US Cybersecurity Pros Plead Guilty Over Ransomware Attacks
UK honors cyber sleuth who helped takedown LockBit ransomware cartel
US cybersecurity experts plead guilty to attacking US companies with ransomware
US lifts sanctions on three linked to Predator spyware
Warren County fell for $3.3M phishing scheme despite warnings from vendor
Wavlink routers and other IoT devices hit by React2Shell attacks
When cyber criminals start calling themselves names like 'Impact Solutions,' it’s time to worry
1st January
10 New Ransomware Groups of 2025 - And What to Expect Next in 2026
Aflac Discloses Full Scope of Data Breach - 22.65 Million People Impacted
Another cyber attack takes down France's online postal services
Coupang Data Breach Puts 33.7 Million Users at Risk
Coupang offers $1 billion compensation for data breach victims
Covenant Health reports expanded data breach affecting 284,000 Mainers
Hacker Breaches European Space Agency (ESA) Servers, Steals 200GB of Sensitive Space Data
Healthcare Firm Handing $2,000,000+ To Customers After Data Breach Exposes ‘Highly Confidential’ Information of 512,000 People
Humans at the Center of AI Security
Infosecurity's Top 10 Cybersecurity Stories of 2025
ManageMyHealth reveals scope of data breach
New GlassWorm malware wave targets Macs with trojanized crypto wallets
New Zealand: More than 120,000 Kiwis’ health data breached
New Zealand: Neighbourly informed of potential data breach
Ransomware Without Encryption: Why Pure Exfiltration Attacks Are Surging - and Why They’re So Hard to Catch
RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers
Sensitive data 'likely taken' in Westminster council cyber attack
Sentinel Security & Atlantic Coast Life Insurance Companies Data Breach
The biggest cybersecurity and cyberattack stories of 2025
The Evolving Cybersecurity Challenge for Critical Infrastructure
Two U.S. CyberSecurity Pros Plead Guilty for Working as ALPHV/BlackCat Affiliates
Up to 126,000 ManageMyHealth users believed to be affected by cyber data breach
We all play a part in cyber-vigilance
What cybersecurity experts predicted for 2025 - and what actually happened
31st December
2 US Cybersecurity Experts Guilty of Extortion Scheme for ALPHV Ransomware
700Credit data breach impacts 5.8 Million individuals
2025 was a breakout year for zero-day exploits
30,000 Korean Air Employee Records Stolen as Cl0p Leaks Data Online
Abri Credit Union Data Breach Exposes Social Security Numbers
Akira Ransomware Attack Exposes Data Of 7,600 At MetroWest Community Federal Credit Union
AllerVie Health Patients Affected by Ransomware Attack
American cybersecurity pros guilty of ALPHV/BlackCat ransomware attacks
Apache StreamPipes Flaw Lets Anyone Become Admin
Appalachian Community Federal Ransomware Exposes Social Security Numbers
APT36 Targets Indian Government Systems Using Malicious Windows LNK Files
Atlantic Coast Life Insurance Data Breach Exposes Policyholders' SSNs & Medical Information
ChatGPT & DeepSeek Users Targeted in Massive Chrome Extension Data Breach
Chinese state hackers plant malware inside Windows
Coinbase support agent arrested in India for aiding hackers in data breach
Coupang Data Breach Prompts $1.17 Billion Payout and Shareholder Lawsuit
Crypto Malware Hacker Extradited to Korea for $1.18M Theft
Cybercrime Economics: AI’s Impact and How to Shift Defenses
Cybercrime Outpaces Online Security
Cybersecurity Experts Fall from Grace Amid Ransomware Scandal
Cybersecurity pros admit to moonlighting as ransomware scum
Cybersecurity Pros Turned Culprits in Ransomware Scandal
DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide
Disney will pay $10 million to settle children's data privacy lawsuit
Energy Capital Credit Union Breach Exposes Members' Social Security Numbers
ESET Warns Of First Known AI-Powered Ransomware That Learns From Each Victim System
European Space Agency Confirms Breach After Hacker Offers to Sell Data
European Space Agency Confirms Breach of External Servers Containing ‘Unclassified’ Information
European Space Agency (ESA) Confirms Data Breach Impacting Space Operations
European Space Agency Confirms New Data Breach; Classified Info May Have Been Stolen
European Space Agency (ESA) disclosed a data breach, hackers breached external servers
European Space Agency (ESA) Hit by Cyber Attack: Over 200GB of Data Stolen
European Space Agency investigates breach after hacker claims 200GB data theft
Everest Ransomware Leaks 1TB of Stolen ASUS Data
Former Sygnia and DigitalMint Cybersecurity Pros Plead Guilty to Orchestrating ALPHV (BlackCat) Ransomware Attacks
From Black Hole to Black Box: Forensics and Investigation Is the New Cyber Frontline
Hacker Claims European Space Agency Breach, Selling 200GB of Data
Hacker Targets European Space Agency, Claims Massive Data Theft
Hackers drain $3.9M from Unleash Protocol after multisig hijack
Hawaii: Phishing threat masquerading as Hawaiʻi departments
Hawaii: State warns of phishing campaign targeting Hawaii government websites
Hawaii officials warn of phishing scheme that impersonates state websites
Hawaii warns residents about phishing using fake government sites
IBM warns of critical API Connect auth bypass vulnerability
IBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass
Ka-ching! Legit browser extensions are now pilfering your private AI chats
Knownsec Data Breach: A Trove of Espionage Tradecraft with an Insider Narrative
Leidos QTC Health First Rehabilitation Resources Data Breach Exposes Social Security Numbers
ManageMyHealth data breach: Patients warned after unauthorised access
Massive Breach at University of Phoenix Due to the Oracle EBS Exploit, Korean Air Confirms Breach Claimed by CL0P
Microsoft Makes Teams ‘Secure by Default’ Starting January 2026
New Zealand: GPs worried by lack of information on ManageMyHealth data breach
Qilin Ransomware Attacks TaLachaim, Quasar and Z-Tronix
Ransomware attacks act as crystallized cyber threats for National Economic Stability
Ransomware Attacks on the Rise: US Professionals Turn to Cybercrime
Ransomware’s new playbook is chaos
Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry
Romania’s Oltenia Energy Complex reports a serious ransomware breach
RondoDox botnet exploits React2Shell flaw to breach Next.js servers
Security coverage is falling behind the way attackers behave
Security experts themselves carried out ransomware attacks
Sentinel Security Life Insurance Company Data Breach Exposes Social Security Numbers
Shai-Hulud Supply Chain Attack Drained $8.5 Million from Trust Wallet Users
Silver Fox Uses Tax-Themed Phishing To Spread ValleyRAT Malware Campaign Into India
Singapore Cyber Security Agency (CSA) Warns of Critical SmarterMail Flaw Enabling Unauthenticated Remote Code Execution
Soft Market, Hard Choices: The State of Cyber Insurance
Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack
Two Americans Plead Guilty in BlackCat Ransomware Scheme Targeting U.S. Victims
Two cybersecurity guys plead guilty to being hackers all along
Two U.S. Cybersecurity Professionals Plead Guilty to Acting as ALPHV/BlackCat Affiliates
Two U.S. Cybersecurity Professionals Plead Guilty to Working as ALPHV/BlackCat Affiliates
Two US cyber experts plead guilty to cooperating with notorious ransomware gang
U.S. Treasury Lifts Sanctions on Executives Previously Linked to the Intellexa Company and Predator Spyware
U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware
US cyber experts plead guilty to ransomware extortion plot
US cybersecurity experts plead guilty to orchestrating ALPHV ransomware attacks
US cybersecurity professionals plead guilty to Blackcat ransomware attacks
Warren County falls victim to $3.3M phishing scheme
Warren County loses $3 million to phishing scam
Warren County lost $3.3 million to fraudulent phishing scheme, officials say
Warren County Treasurer's Office mistakenly sends $3.3M in phishing scam
What consumers expect from data security
30th December
2 Cyber Pros Admit to Being BlackCat Ransomware Affiliates
80 Hospitals May Have Been Affected by the Oracle Health Data Breach
700Credit breach puts 5.8 million Social Security numbers at risk in alarming third-party failure
Aflac Reveals Just How Big Its Data Breach Really Was
AI Phishing, Supply Chains, and $3.5B Lost - Crypto’s Brutal 2025
AI-assisted phishing kit sets sights on Microsoft Outlook user credentials
Artemis Healthcare Falls Victim to Ransomware Attack
As MongoBleed exploitation escalates, 95% of systems remain unpatched
Associated Radiologists of the Finger Lakes, P.C. notifies patients of system data breach
At least 73% of U.S. adults have fallen for online scams. How you can avoid the latest con
Austin Legal Brawl: Oracle Swamped By Data Breach Class Action Fight
BioNet-Asia Targeted in Gentlemen Ransomware Attack
Cambodian Voice Phishing Gang Arrested in 1.93 Billion Won SpaceX Scam
Chinese APT Silver Fox Targets India with ValleyRAT Tax Phishing Scam
CISA orders feds to patch MongoBleed flaw exploited in attacks
Clop Ransomware Group Linked to 3.5 million University of Phoenix Breach
Coinbase CEO Brian Armstrong thanks Hyderabad Police for arresting former agent linked to $400 million cyber attack; shares online post
Coupang Faces Backlash Over $1.1 Billion Data Breach Payout in Vouchers
Coupang faces backlash over voucher compensation after data breach
Coupang to pay $1.17 billion after data breach hits 34 million users
Coupang to Pay $1.17 Billion in Vouchers After 33.7 Million User Data Breach
Coupang to pay almost $1.2 billion in compensation for data breach
Crypto phishing losses plunge 83% in 2025
CSA Tax & Advisory hack claimed by Lynx ransomware
Cyber Security Agency of Singapore (CSA) Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
Cybersecurity Pros Turned Culprits in Ransomware Scandal
Denton MHMR Center Data Breach Exposes Sensitive Info 108,967 Individuals
EmEditor Homepage Download Button Served Malware for 4 Days
European Space Agency confirms breach of "external servers"
European Space Agency (ESA) confirms data breach
European Space Agency (ESA) confirms limited data breach
European Space Agency (ESA) Says Data Breach Was Limited to Servers with Unclassified Documents
Ex-Cybersecurity Pros Plead Guilty to $3M BlackCat Ransomware Scheme
Executives say cybersecurity has outgrown the IT department
Former Coinbase Support Agent Arrested in India Over Insider Data Breach
Former US cybersecurity professionals plead guilty to BlackCat/ALPHV attacks
France: CNIL Fines NEXPUBLICA FRANCE €1.7 Million for GDPR Security Failures
French software company Nexpublica fined for failings leading to data breach
Gentlemen ransomware compromises Romanian energy producer
Georgia And Texas Cyber Experts Admit To Ransomware Plot In Florida Court
Got an AI agent on your computer? Assume a breach, security researcher warns
Hacker allegedly claims a major WIRED data breach affecting 2.3 million
Hacker Arrested in KMSAuto Clipper Malware Campaign Targeting Cryptocurrency
Hacker Disposes of Coupang Data Breach Laptop in River, initiating $1.2 Billion as compensation
Hackers rang in the New Year by looting French universities
HoneyMyte (aka Mustang Panda) Deploys ToneShell Backdoor in New Attacks
How AI Enhances Phishing Threats - And Protects Against Them
How the UK Retail Sector Responded to the Scattered Spider Hack Wave
How To Protect Yourself From Cyber Attacks In The New Year: 10 Essential Tips
Korean Air Data Compromised in Oracle EBS Hack
KT Telco Femtocell Flaws Exposed Customers to Fraud, South Korean Police Arrested Five Individuals
Latest Oracle EBS Victims Include Korean Air, University of Phoenix
Lessons Learned from Top 10 Ransomware Incidents in 2025
Lithuanian hacker used KMSAuto malware to steal millions in cryptocurrency
MacOS developers targeted with crypto-stealing worms on Open VSX
ManageMyHealth Data Breach: Kazu Group Claims Ransomware Attack
Marquis Software Ransomware Attack Impacts Financial Institutions, Artisans’ Bank and VeraBank Confirm Data Exposure
Massive Aflac breach exposed millions of SSNs and other data
MetroWest Community Federal Credit Union Data Breach Impacts 7,573
Microsoft typosquatting scam swaps letters to steal logins
MongoBleed Vulnerability Exploited: Update MongoDB Now to Prevent Data Breach
More sophisticated Shai Hulud malware emerges
Murray Irrigation Limited (MIL) discovers data breach
Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor
New ErrTraffic service enables ClickFix attacks via fake browser glitches
New ‘GhostPairing’ Technique Enables Undetected WhatsApp Access
New Liberty Hospital; New York Blood Center; Memorial Blood Centers Settle Data Breach Lawsuits
New Shai-Hulud 3.0 variant discovered, closing out 2025 with a malware bang
New Spear-Phishing Attack Targeting Security Individuals in Israel Region
New Spear-Phishing Attack Targeting Security Individuals in the Israel Region
Nip In The Bud: The Split-Second Choices Of A Ransomware Crisis
Non-human identities push identity security into uncharted territory
Online Scams in Singapore: Fake Buyers Steal Over $622,000 Through Phishing Links
Over 22 million impacted by June data breach, Aflac says
Over 22 Million Records Exposed in Aflac Insurance Data Breach
Over two dozen illicit npm packages power targeted spear-phishing campaign
Pacific Railway Enterprises Data Breach Exposes SSNs & Financial Info
Pearlman Aesthetic Surgery Data Breach Affects 11,764 Patients
Phishing Campaign Spoofs India’s Income Tax to Target Businesses
Prevent Ransomware Attacks From Ruining Your New Year
Radio signals could give attackers a foothold inside air-gapped devices
Ransomware responders plead guilty to using ALPHV in attacks on US organizations
Record ransomware hits UK firms, causes billions in damage
Russia-Linked Hackers Escalate Attacks on US Taxpayers in 2025
Russian criminals suspected of being behind LastPass crypto thefts
Salvation Army allegedly breached by Interlock ransomware
Security teams debate how much to trust AI
Silver Fox Targets India with Tax-Themed Phishing Lures
Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware
Some parent, student information exposed in Prince William Schools data breach
South Korea: Government rebuts Coupang, says data breach far broader than claimed
St. Anthony Regional Hospital Data Breach Exposes PII & PHI
The 2025 npm worm that shook the software supply chain
These Chrome extensions read your ChatGPT and DeepSeek chats
Top 5 Banking Data Breaches of 2025
Treasury removes sanctions for three executives tied to spyware maker Intellexa
Trusted Google Services Abused in New Phishing Scam
Two Americans Admit to ALPHV BlackCat Ransomware Attacks on U.S. Victims
Two cybersecurity employees plead guilty to carrying out ransomware attacks
Two Security Experts Plead Guilty in BlackCat Ransomware Case
U.S. cybersecurity experts plead guilty for ransomware attacks, face 20 years in prison each - group demanded up to $10 million from each victim
US cybersecurity experts plead guilty to BlackCat ransomware attacks
What is an attack vector?
Widely Used Malicious Extensions Steal ChatGPT, DeepSeek Conversations
Zoom Stealer browser extensions harvest corporate meeting intelligence
29th December
1.6 Million+ Salvation Army transactions exposed, hackers claim
2.3 Million WIRED users exposed, hacker threatens release of 40 Million more records
2.5 Million+ Malicious Request From Hackers Attacking Adobe ColdFusion Servers
22 Million Affected by Aflac Data Breach
22.6 million hit in massive Aflac data breach with IDs, SSNs, healthcare info and more exposed - what to do now
27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials
27 Malicious npm Packages Used in Phishing Attacks on Healthcare, Industrial Sectors
700Credit data breach exposes SSNs of 5.8 Million consumers
A hacker threw his Macbook into the river trying to avoid being caught. Of course, they caught him
Accused Coupang Data Thief Threw Laptop into the River, Founder Apologizes for Recent Data Breach
Aflac Data Breach by Scattered Spider Exposes 22.6 Million Records
Aflac Data Breach Exposes 22 Million People in Major Cyber Breach
After Asiana, Even Korean Air... Employee Names and Account Numbers Exposed
After robbing Amazon of Korea, the attacker threw his MacBook into the river
AI powered Cyber Attack hits Chinese TikTok rival Kuaishou
AI-Powered Phishing Kit Targets Microsoft Users for Credential Theft
Artemis Healthcare Data Breach Exposes Sensitive Patient Info
As tax filing approaches, hackers target US taxpayers
Automation forces a reset in security strategy
Binance-backed Trust Wallet hit by $7 Million hack, experts warn users
Browser-in-the-Browser Phishing Attack: How to Protect Yourself
Chinese state hackers use rootkit to hide ToneShell malware activity
Christmas gift: method to exploit MongoBleed vulnerability leaking MongoDB secrets showcased on web
Chrysler allegedly compromised by Everest ransomware gang
CISOs are managing risk in survival mode
Coinbase Breach Fallout: Former Support Agent Arrested in India
Coinbase Data Breach Fallout Reaches India as Insider Arrested
Coinbase’s $400 Million Nightmare: Insider Arrested Following Massive Data Breach
Coupang Allocates €850 Million in Vouchers for Data Breach Victims
Coupang Announces $1.18B Voucher Payout After Data Breach Hits 33M Users
Coupang Breach Suspect Tried to Hide Evidence by Throwing Laptop in River
Coupang data breach triggers $1.1 Billion compensation and political scrutiny
Coupang Faces U.S. Investor Lawsuit Over Data Breach Affecting Nearly 34 Million Customers
Coupang offers US$1 billion compensation for data breach victims
Coupang offers 50,000 won voucher but effectively gives customers 10,000 won
Coupang offers 50,000 won vouchers to 33.7 million customers after data breach
Coupang offers compensation to 33.7 million users over data breach
Coupang recovers smashed laptop that alleged data leaker threw into river
Coupang to Issue $1.17 Billion in Vouchers Over Data Breach
Coupang to Pay $1.1 Billion in Compensation to Users After Data Breach
Coupang to split $1.17 billion among 33.7 million data breach victims
Coupang unveils $1.17 billion compensation plan over data breach
Coupang Unveils Nearly 1.69 Trillion Won Compensation Plan Over Data Breach
Coupang’s W1.7 trillion payout plan fails to quell public anger
Coupang's Billion-Dollar Response to Data Breach
Coupang's compensation plan derided as 'bait'
Critical 0day flaw Exposes 70k XSpeeder Devices as Vendor Ignores Alert
Critical ‘MongoBleed’ Flaw Exploited in the Wild to Leak Database Secrets
Cyber attacks: 2025 the ‘tipping point’ as Jaguar Land Rover (JLR) and Marks & Spencer (M&S) incidents highlight risks
Data Breach Affects Patients of Multiple Fyzical Therapy & Balance Centers
Data breach at Korean Air leaks 30,000 employee records
Data theft alert: insurer Aflac notifying millions of clients
Dataset containing data from Wired circulating on hacker forums
Dozens of Chrome Extensions Hacked, Exposing Millions of Users to Data Theft
EazyTick Data Breach Exposes Over 20,000 User Records
Elford, Inc. Construction Data Breach: Project Files Leaked Online
Ericher Data Breach: Customs and Logistics Firm Sensitive Data Exposed
Farfetch owner Coupang announces compensation payout after data breach hits nearly 34 Million customers
Farfetch owner offers $1 billion in vouchers for those affected by data breach
Five Key Flaws Exploited in 2025's Major Software Supply Chain Incidents
Former Coinbase support agent arrested for helping hackers
Former Coinbase support agent arrested in India over major data breach as legal and security pressures mount
Fortinet warns of 5-year-old FortiOS 2FA bypass still exploited in attacks
French software company fined $2 million for cyber failings leading to data breach
From the Boardroom to the SOC: Why Some Organizations Recover Quickly from Ransomware While Others Stall
Greater St. Louis Oral & Maxillofacial Surgery Data Breach
GrubHub exploited in crypto scam via holiday promotion
Guernsey data breach ruling upheld over legal papers left outside
Hacker arrested for KMSAuto malware campaign with 2.8 million downloads
Hacker Claims Theft of 40 Million Condé Nast Records After Wired Data Leak
Hacker Dumped MacBook in River in Attempt to Destroy Digital Evidence
Hacker Dumped MacBook into River in Attempt to Destroy Digital Evidence
Hacker ‘Lovely’ Breaches Condé Nast, Leaks 2.3M Wired Subscriber Records
Hacker Threw MacBook in River to Erase Evidence in Coupang Data Breach
HoneyMyte APT Campaign Uses Kernel-Mode Rootkit to Deploy ToneShell
How to Spot the Most Common Crypto Phishing Scams
Income Tax Phishing Campaigns Linked to Silver Fox Hackers Target Indian Organizations
Indian train driver loses $29,000 in “digital arrest” scam
Insurance Giant Aflac Confirms 22.65 Million Individuals Affected by June Cyberattack
IoT Device Vulnerabilities in Smart Pet Feeders: Petlibro Exposes Pet, User and Employee Details
Kaspersky detected a fivefold surge in QR code phishing attacks in the second half of 2025
Korean Air data breach exposes data of thousands of employees
Korean Air discloses data breach after the hack of its catering and duty-free supplier
Korean Air employee data breach exposes 30,000 records after cyberattack
Korean Air employees' personal info leaked after supplier hit by hacking attack
Kumpulan Prasarana Rakyat Johor (KPRJ) Data Breach: 180GB Leaked
LLMs are automating the human part of romance scams
Mens Den Men Data Breach Exposes User Database and Emails
MongoDB Flaw Allows Unauthenticated Memory Access, Immediate Patching Required
MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide
More Tallahassee Memorial HealthCare (TMH) patient data involved in 2025 data breach, hospital says
Murfreesboro 559K Data Breach Settlement Reached in Tennessee Class Action
Murfreesboro Medical Clinic Settles Lawsuit Over 559K-record Data Breach
New AI-Assisted Phishing Kit Targets Microsoft Users to Steal Login Credentials
New Google-Themed Phishing Wave Hits Over 3,000 Global Organisations
New Phishing Kit with AI-assisted Development Attacking Microsoft Users to Steal Logins
New ransomware methods emerge: ClickFix & group alliances
New York Attorney General Fines Capital Region Orthopedic Practice $500K for 2023 Data Breach
Nura Clinics Data Breach Affects 5,207 Patients
Over 22 million were impacted by data breach in June, Aflac says
Phishing scam targets India’s drivers in large-scale e-Challan cyberattack
Rainbow Six Siege Betrayal: Five Hacker Groups and Bribed Ubisoft Staff Spark $339 Trillion Crisis
Rainbow Six Siege players given billions of credits in Ubisoft hack
Ransomware group claims to steal 650GB of Inha University data
Romania’s Oltenia Energy Complex suffers major ransomware attack
Romanian energy provider hit by Gentlemen ransomware attack
Shai-Hulud Returns with ‘Golden Path’ Malware in Latest NPM Supply Chain Attack
Silver Fox Hackers Attacking Indian Entities with Income Tax Phishing Lures
Silver Fox Hackers Target Indian Entities Using Income Tax Phishing Lures
SIM Box Scam: A Hidden Phishing Network Powered by Thousands of SIM Cards
Singapore: At least $622,000 lost to phishing scams since November
South Korea’s e-commerce platform Coupang to pay over $1.1B to customers over user data breach
Southern Oregon Neurosurgical and Spine Associates Data Breach
St. John’s Riverside Hospital Data Breach Affects 2,238
The biggest corporate security blunders of 2025
The Evolution of Ransomware Entry Points: Why the Perimeter Isn’t the Perimeter Anymore
Threat Actors Exploiting Critical ‘MongoBleed’ MongoDB Flaw
Top 10 Cyber Law Enforcement Operations of 2025
Top Ransomware Attacks of 2025: Major incidents, impacts & rising Cyber Threats Globally
Top US Accounting Firm Sax Discloses 2024 Data Breach Impacting 220,000
Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors
Trust Wallet says 2,596 wallets drained in $7 million crypto theft attack
Two more banks notifying thousands of victims about Marquis Software ransomware attack
Ubisoft Denies Data Breach Claims After Rainbow Six Siege Currency Hack
Ubisoft Shuts Down Rainbow Six Siege After MongoDB Exploit Hits Players
Ubisoft Takes Down Rainbow Six Siege After a Hacker Plays Santa and Gives Away Billions of In-Game Currency and Items
US, Australia say ‘MongoBleed’ bug being exploited
Why Peak Shopping Seasons Are Now Peak Cyber Risk Periods
‘Why should we pay these criminals?’: the hidden world of ransomware negotiations
WIRED Database Leak Exposes Millions And Hacker Threatens 40 Million More
Yet another phishing campaign impersonates trusted Google services - here's what we know
You’ve been targeted by government spyware. Now what?
Welcome to DBD. Cybercrime made global headlines in 2025. Attacks on well-known brands and organisations raised public awareness of the severity, frequency and impact of cyber attacks. Ransomware attacks were the highest ever recorded, and 2026 could be worse, as cyber criminals continue to extort their victims, with little chance of being brought to justice. It's a dangerous world out there, so please be extra vigilant and mindful of the risks and threats. Wishing you all the best for the New Year. Thanks again for all your support. Stay safe. :)