Editor's Message

Welcome to DBD. Cybercrime made global headlines in 2025. Attacks on well-known brands and organisations raised public awareness of the severity, frequency and impact of cyber attacks. Ransomware attacks were the highest ever recorded, and 2026 could be worse, as cyber criminals continue to extort their victims, with little chance of being brought to justice. It's a dangerous world out there, so please be extra vigilant and mindful of the risks and threats. Wishing you all the best for the New Year. Thanks again for all your support. Stay safe. :)


“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington D.C.



Monday, 12 January 2026

Data Breaches Digest - Week 3 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 12th January and 18th January 2026.


18th January

Anna’s Archive hit with court order to delete scraped data

Canada’s Market Regulator Hit By 2025 Cyber Breach, Sensitive Investor Records Exposed, 750,000 Affected

China-linked hackers targeted US agencies with Venezuela-themed phishing

Finland’s Biggest Cyber Scandal: Therapy Notes of 33,000 Patients Leaked, ‘Hacker God’ Kivimäki Convicted

How to spot DocuSign email scams and avoid phishing attacks

Malicious QR Codes Surge Fivefold, Emails Turn Into Cyber Traps

Raids In Ukraine And Germany Target Black Basta Ransomware Group, Suspect Traced To Russia

Ransomware: what it is and why it’s your problem

South Korea jails crypto launder ringleader in voice-phishing scheme

WhatsApp Links Used in Sophisticated Gmail Phishing Attack

Who’s Stalking Whom? ICE Uses Social Media and Phone Surveillance System to Track Protesters

17th January

145K exposed after hacker hit of Maine’s largest health systems

$280 Million Crypto Heist: Hacker Drains Hardware Wallet and Swaps Funds to Monero

Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice

Coupang Under Fire After Massive Data Breach Prompts Government Crackdown

Credential-stealing Chrome extensions target enterprise HR platforms

Cyble report 2025: AI, ransomware, and hacktivism shape cyber threats

French Police Cyberattack Exposed: Weak Passwords Led to Data Breach

Grubhub confirms data breach: hackers demand ransom tied to Salesforce attacks

He called himself an ‘untouchable hacker god’. But who was behind the biggest crime Finland has ever known?

JFrog Researchers Uncover RCE Exploit for Existing Redis Database Vulnerability

JPMorgan Chase Issues Data Breach Warning, Says Customers’ Bank Account Numbers and Personal Information Exposed in Third-Party Hack

Malicious GhostPoster browser extensions found with 840,000 installs

Moen luxury faucet-maker claimed by Qilin ransomware

Nearly 9 in 10 phishing scams steal login details: What to do immediately if you fall victim to a phishing attack

Online sellers beware: Urgent PayPal email turns out to be phishing scam

Report Warns of Faster, AI-Driven Cyber Threats, Ransomware And Automation Dominate Global Landscape

Researcher steals cookies from the cookie stealers: here’s what happened next

Top 10 scams to protect yourself from in 2026

Two Ukrainians Suspected in Black Basta Ransomware Attacks

Ukraine-Germany operation targets Black Basta, Russian leader wanted

Up to $5,000 per Person To Be Handed Out Over Massive Data Breach That Exposed Info of 2,501,324 People

Vastaamo hack: My darkest secrets were revealed to the world

16th January

1 in 25 enterprise AI prompts sent to China-based tools, study finds

63% of IT leaders overestimate their chances against hackers

750,000 Impacted by Data Breach at Canadian Investment Watchdog

A new earbud security flaw may expose you to remote eavesdropping - here's how to fix it

Account Compromise Surged 389% in 2025

Agents Aren’t People: What the ServiceNow Vulnerability Reveals About Agentic AI Access Control

AI drives impersonation scams up 1,400%

AI fuels rise in ransomware threats

AI-Powered Attacks, Ransomware, and Hacktivism Redefine the Global Cyber Threat Environment

Amazon Web Services (AWS) dodges massive cyber disaster: every account was in danger

Anchorage Police Department (APD) Investigates Third-Party Cybersecurity Incident, Says No Evidence of Data Compromise

‘Another wake-up call’: experts weigh in on major student data breach

Anthropic Claude Vulnerability Exposes Cowork AI to Data Exfiltration via Prompt Injection

As AI raises the stakes, app modernization and security are becoming inseparable

Attackers claim theft of 183 Million records from major oil company

Black Basta boss makes it onto Interpol's 'Red Notice' list

Can we be certain AI keeps cloud data secure?

Canadian investment regulator confirms hackers hit 750,000 investors

Canadian regulatory body says data breach exposed 750,000 investors

China-Linked APT Exploits Sitecore Zero-Day in Attacks on American Critical Infrastructure

China-linked hackers exploited Sitecore zero-day for initial access

China-linked hackers targeted US agencies with Venezuela-themed phishing

Chinese Spies Exploit Venezuela Crisis to Target US Officials in Phishing Campaign Deploying Backdoor

Chinese-Linked Hackers Target US Officials with Venezuela-Themed Phishing Campaign

Cisco finally fixes AsyncOS zero-day exploited since November

Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393)

Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

Coupang and the Horrible, No Good, Very Bad Data Breach

Coupang begins giving out coupons to data-breach victims

Coupang Faces Crackdown After Massive Data Breach

Cyber Attack at Kyowon Group Disrupts Operations, Exposes Customer Data Risks

Cyber Fraud, Not Ransomware, is Now Businesses’ Top Security Concern

Cyberattack Hits Poland’s Power System, But Blackout Prevented

Cybercrime evolves as AI and geopolitics reshape threat landscape in 2025

Cybercriminals Target Employee Accounts As Cybersecurity Threats Surge In 2025

Dark Web Profile: Orion Ransomware

Data breach at Canada’s Investment Watchdog Canadian Investment Regulatory Organization impacts 750,000 people

DeadLock Ransomware Exploits Polygon Smart Contracts to Evade Takedowns in 2026

DragonForce Ransomware Group Attacks JR Advertising Specialties and NWIMS IT Group

Five Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts

Flock Safety Exposes Live Police Camera Feeds in Data Breach

Force Ouvrière Allegedly Hit by Data Breach Exposing Member Info

Former Conti member, now known as “Devman,” added to Interpol’s wanted list

France fines Iliad Group’s telecom units ₹3,800 crore after data breach

General Motors (GM) prohibited from selling drivers’ driving behavior to credit rating companies

Genesis Ransomware Hits Upper Township and Dedman Gray

German cops add Black Basta boss to EU most-wanted list

Germany and Israel Deepen Cybersecurity Ties With New Security Pact

Google and Mozilla Patch 26 Security Flaws in Chrome 144, Firefox 147

Google Bluetooth flaw puts millions of audio devices at risk

GootLoader Malware Uses 500–1,000 Concatenated ZIP Archives to Evade Detection

Grubhub Breach: Data Theft Confirmed, Extortion Suspected

Grubhub confirms data breach as hackers download internal data and issue extortion threats

Grubhub confirms data breach, faces extortion demands

Grubhub Data Stolen in Confirmed Hack, Questions Remain

Grubhub says hackers stole company data in recent breach - here's what we know

Gulshan Management Services sued over data breach affecting 377K consumers

Hacker steals $282 million crypto from a victim in social-engineering attack

Hackers Breach Eurail’s Internal Network, Steal Customer Data

Hackers now exploiting critical Fortinet FortiSIEM flaw in attacks

How 2 Missing Characters Nearly Compromised Amazon Web Services (AWS)

How a hacking campaign targeted high-profile Gmail and WhatsApp users across the Middle East

How a single click can trick Microsoft Copilot into leaking your personal data

How AI Impacts the Cyber Market and The Future of SIEM

How to Prepare and Respond to Ransomware Attacks

ICE Agent Doxxing Platform was Crippled After Coordinated DDoS Attack

Iran’s Islamic Revolutionary Guard Corps (IRGC) Phishing Campaign Targets Middle East Elites via Gmail, WhatsApp

Isle of Man: Government refers itself to Info Commissioner over election data breach

Jordanian initial access broker pleads guilty to helping target 50 companies

Kensington and Chelsea Council 'turns internet back on' weeks after cyber attack forced it offline

LOTUSLITE Backdoor Targets U.S. Policy Entities Using Venezuela-Themed Spear Phishing

Microsoft Dismantles RedVDS Cybercrime Marketplace Linked to $40 Million in Phishing Fraud

Microsoft Leads Global Phishing Attacks Again as Cybercriminals Target Trusted Brands

Microsoft tops global phishing brand rankings again

Mid Michigan Medical Billing Service Data Breach Affects 28K Patients

Middle East Phishing Blitz: Hackers Breach Ministers, Activists via Gmail and WhatsApp

Middletown restores water billing system following cyber attack

New intelligence is moving faster than enterprise controls

New LinkedIn Phishing Scam Uses Comment Replies to Harvest Log-ins

Operation Endgame: Dutch Police Arrest Alleged AVCheck Operator

PharMerica Pays Over $5.2 Million to Settle Class Action Data Breach Lawsuit

PharMerica settles data breach lawsuit for $5.2 Million

Phishing services drive 389% surge in account breaches

Pixpay Senegal Allegedly Breached - Payment API Data Exposed

Poland avoids blackout as Prime Minister blames Russia-linked attackers for massive cyberattack

Police raid homes of alleged Black Basta hackers, hunt suspected Russian ringleader

Ransomware activity never dies, it multiplies

Ransomware and Supply Chain Attacks Soared in 2025

Ransomware Attacks Increased by 58% in 2025

Ransomware gang Everest claims data breach at Nissan Motor Corporation

RondoDox Botnet Targets HPE OneView Vulnerability in Exploitation Wave

Russell Township Police Email Disruption Halted Communications for Nearly Two Months

StealC hackers hacked as researchers hijack malware control panels

Supreme Court hacker posted stolen government data on Instagram

TamperedChef Malvertising Campaign Drops Malware via Fake PDF Manuals

The number of phishing kits doubled in 2025, bringing stealth, innovation and the same old themes

Two Arrested in Greece for SMS Blaster Phishing Attacks on Mobile Banking

University of Hawaii Cancer Center discloses August 2025 ransomware attack involving research participant data

Vulnerability in Anthropic’s Claude Code Shows Up in Cowork

Warning: cybercriminals are using blockchain smart contracts to evade takedowns

Who’s on the other end? Rented accounts are stress-testing trust in gig platforms

Why Traditional Firewalls Fail Against Today’s High-Volume DDoS Attacks

15th January

1 Million+ customer records stolen from Orange, attackers claim

320K+ exposed in Monroe University hacker attack

750,000 Canadian investors impacted by Canadian Investment Regulatory Organization (CIRO) data breach: What to do if your data is leaked

A ransomware attack disrupted operations at South Korean conglomerate Kyowon

AI turns impersonation scams into a crypto cash machine

AlmaX Cryptocurrency Exchange Data Breach Exposes 50,000 User Records

Amarillo College Panhandle Regional Law Enforcement Academy (PRLEA) Data Breach Exposes Law Enforcement Info

Amazon Web Services (AWS) CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks

Anchorage police department takes servers offline after cyberattack on service provider

Askul’s Shipping Operations Resume After Overcoming Ransomware Disruption

ASUS and T-Link routers affected by WiFi crash flaw, but the issue is fixable

Australia: Concerns domestic violence victims could be left vulnerable after personal data accessed in major Victorian school data breach

Bluspark Unauthenticated API Vulnerability Exposed Sensitive Data, Including Plaintext Passwords

Brazilian Police Arrest 20-Year-Old Hacker After R$6 Million Cryptocurrency Heist

Cambodian No-Show Scam Gang Arrested for 3.8 Billion Won

Central Maine Healthcare data breach impacted over 145,000 patients

Central Maine Healthcare Data Breach Impacts 145,000 Individuals

China-based espionage group targets US government with Venezuela phishing lures

China-linked hackers used Venezuela crisis as lure in US-focused phishing

Chinese hackers targeting ‘high value’ North American critical infrastructure

Chinese-linked hackers target US entities with Venezuelan-themed malware

CISOs flag gaps in third-party risk management

Coupang rolls out data breach vouchers, faces criticism over usage limits

Critical WhisperPair flaw lets hackers track, eavesdrop via Bluetooth audio devices

Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access

Cyber attacks spike amid rising ransomware, GenAI threats

Cybersecurity spending keeps rising, so why is business impact still hard to explain?

Data Breach at Virginia-Based Avosina Healthcare Impacts More Than 40,000

Data Breach on Broadband Provider Brightspeed Exposes 1 Million+ Customers, Hackers Threaten to Cut Home Internet

Data Privacy Teams Face Staffing Shortages and Budget Constraints

DeadLock Ransomware: Smart Contracts for Malicious Purposes

DeadLock Ransomware Exploits Polygon Smart Contracts to Evade Detection

DeadLock ransomware uses blockchain for evasion

DeadLock Ransomware Using Polygon Smart Contracts to Evade Detection

Denver Residents Warned of Email Scam Impersonating City Officials for Phishing Attacks

End may be near for massive botnet controlling over 2 million Android devices

Endesa Reports Cyber Security Incident Affecting Sensitive Customer Information

Estonian banks fail to implement security measures against Smart-ID phishing

Eurail confirms data breach following unauthorised access to customer systems

Eurail customer database hacked

Eurail Data Breach Exposes Passports, Bank Details, Europe’s Travel Infrastructure Faces Fresh Trust Test

European Space Agency Confirms Data Breach After Hackers Auction Stolen Information

Federal Trade Commission bans General Motors (GM) from selling drivers' location data for five years

Firms continue to deal with fall-out from Legal Aid Agency (LAA) cyber attack while others profit, family lawyer says

Flare research reveals nearly half of all cybercriminals use multi-brand combo kits to steal data

France Fines Iliad Group’s Telecom Units ₹3,800 Crore After Data Breach Exposes 24 Million Customers

France’s data protection authority fines Free and Free Mobile €42 million over major customer data breach

French telecoms fined €42 million for major GDPR data breach

Gallagher details widening cyber breach and privacy duties in Australia

Germany turns to Israel for a ‘cyber dome’ amid rising threats

GhostPoster Browser Malware Hid for 5 Years With 840,000 Installs

Global Agencies Release New Guidance to Secure Industrial Networks

Global cyberattacks surged in December, with Brazil seeing a 38% increase

Global ransomware attacks rose 32% in 2025, as manufacturers emerged as top target

Google to pay $8.25 million to settle lawsuit alleging children’s privacy violations

Gootloader now uses 1,000-part ZIP archives for stealthy delivery

Groupe Fondasol Data Breach: Employee Personal Information Leaked

Grubhub confirms hackers stole data in recent security breach

Gym Management Service Data Breach May Expose PII

Hackers Abuse Legitimate Cloud and CDN Platforms to Host Phishing Kits

Hackers Abusing Legitimate Cloud and CDN Platforms to Host Phishing Kits

Hackers could access data of 71,000 patients at Belgian hospitals

Hackers exploit Modular DS WordPress plugin flaw for admin access

Hackers expose Victorian student details in data breach

Hackers Increasingly Shun Encryption in Favour of Pure Data Theft and Extortion

How Anthropic Disrupted a World-First AI Cyber Attack

How Ransomware Gangs Choose Their Victims

How severe will ransomware attacks become in 2026?

How this one-click Copilot attack bypassed security controls - and what Microsoft did about it

How Unusual Was Blaze Credit Union’s Data Breach?

ICE Agent Doxxing Site DDoS-ed Via Russian Servers

In Betterment’s Recent Social Engineering Incident, A Reminder To Be Cyber Prepared

INC Ransom Claims Data Breach of TruStar Holdings and VIST Labs

Instagram denies reports of a data breach

Instagram Users Warned of Phishing Risk

International hacker group exposed with participation of Ukraine, the US and Germany

J Grennan & Sons confirms it was 'victim of cyber attack'

Kan & Krishme Law Firm Hit by Sinobi Ransomware Data Breach

Learniverse Data Breach Exposes User Emails and Occupations

Massive Amounts of Sensitive Data Being Shared with GenAI Tools

Massive breach leaks 45 million French records: demographic, healthcare, and financial data all leaked, here's what we know

Max Messenger data breach claimed by hacker on DarkForums

Microsoft disrupts massive RedVDS cybercrime virtual desktop service

Microsoft hits cybercriminals where it hurts: notorious infrastructure provider disrupted

Microsoft hits global virtual desktop cybercrime phishing platform - 'RedDVS' caused phishing chaos and resulted in millions of losses

Microsoft Legal Action Disrupts RedVDS Cybercrime Infrastructure Used for Online Fraud

Microsoft shuts down RedVDS cybercrime subscription service tied to millions in fraud losses

Microsoft takes down cybercrime subscription service RedVDS

Microsoft taps UK courts to dismantle cybercrime host RedVDS

Mustang Panda exploits US Maduro operation with phishing attack

Mustang Panda Strikes Again: Chinese-Linked Cyberespionage Target U.S. Government

New Android malware ‘deVixor’ adds ransomware capabilities

New CastleLoader Variant Linked to 469 Infections Across Critical Sectors

New PayPal Scam Sends Verified Invoices With Fake Support Numbers

New Sicarii RaaS Operation Attacks Exposed RDP Services and Attempts to Exploit Fortinet Devices

Nordstrom Rack Targeted in Tengu Ransomware Group Data Breach

Palo Alto Fixes GlobalProtect DoS Flaw That Can Crash Firewalls Without Login

Palo Alto Networks warns of DoS bug letting hackers disable firewalls

Pax8 accidentally exposes partner data - 1,800 MSPs have customer info and licensing details exposed

Phishing Attacks Target Account Credentials

Phishing Kits Power a Global, Service-Driven Cybercrime Economy

Phishing-as-a-service kits drive surge in 2025 scams

Police Target Ukrainians and Russian in Ransomware Probe

Privacy budgets set to drop further in 2026, European IT pros warn

Proof-of-Concept (PoC) exploit for critical FortiSIEM vulnerability released (CVE-2025-64155)

QR codes are getting colorful, fancy, and dangerous

Ransomware activity surges to record levels

Ransomware Attacks Surged 58% in 2025

Ransomware by the Numbers: Count of Victims and Groups Surge

Ransomware gangs extort victims by citing compliance violations

Ransomware hackers stole data of cancer patients who participated in University of Hawaii (UoH) studies

Ransomware Recovery Costs Exceed $2 Million for Enterprises

Ransomware Victims and Threat Groups Surge to Record Levels

RedVDS Cybercrime-as-a-Service Disrupted by Germany, Europol, and Microsoft in Coordinated Takedown, Phishing Infrastructure Disabled

Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot

Sensitive data of Eurail, Interrail travelers compromised in data breach

Sicarii Ransomware: A Deceptive New Ransomware-as-a-Service Threat Using Hebrew Iconography

South Korea’s Kyowon Group Hit By Ransomware Attack, Confirms Data Theft

South Korea’s Kyowon investigates ransomware attack as millions of accounts face exposure

Suspicious Wave of Instagram Password Reset Messages Raises Data Breach Concerns, But Meta Says All is Well

This Website Exposed Immigration and Customs Enforcement (ICE) Data - Now, It’s Faced a Cyberattack

Traveler Information Stolen in Eurail Data Breach

UK cyber plan tackles state threats & ransomware

Ukraine, US, Germany Uncover Global Hacker Group

University of Hawaii Cancer Center discloses ransomware attack

Victoria Department of Education data breach exposes student information

Victorian Department of Education Confirms Student Data Breach

Victorian students' personal data exposed in major breach: 'Worst thing that could happen'

What You Need to Know About the New LinkedIn Phishing Scheme

Why is Using AI to Protect Data from Cybercriminals Crucial?

Woman arrested after data breach at Walsall doctors' surgery

Woman bailed as cops probe doctor's surgery data breach

Years-Old Vulnerable Apache Struts 2 Versions See 387K Weekly Downloads

Your Bluetooth headphones may be at risk of being hacked - here's how to stay protected

Your Windows PC needs this patch to ward off nasty bootkit malware - update now

14th January

24-Year-Old Hacker Breaches US Supreme Court Database

45 Million French records leaked after suspected attacker exposed data trove

78 Million Discord files peddled online: Is the data leak real?

AI Agents Are Becoming Privilege Escalation Paths

Australia: Hackers access names, emails of Victorian students in data breach

BodySnatcher flaw lets attackers take over ServiceNow's AI agents

Canada: Securities Regulator Reveals Last Summer’s Data Breach Impacted 750,000 Investors

Central Maine Healthcare data breach exposed information of more than 145,000 people

Central Maine Healthcare Reports Massive Data Breach That Affected Over 100,000 Mainers

Clop Ransomware Targets Korean Air Catering; Teenagers Increasingly Lured by Cybercrime Gangs

Cloud marketplace Pax8 accidentally exposes data on 1,800 MSP partners

Coupang told to remove internal data breach findings amid probe

CrazyHunter Ransomware Escalates With Advanced Intrusion Tactics

Criminal Subscription Service Behind AI-Powered Cyber-Attacks Taken Out By Microsoft

Critical Node.js Vulnerability Can Cause Server Crashes via async_hooks Stack Overflow

Cyber threats, real consequences - rethinking the UK's ransomware strategy

Cyberattack at Kyowon exposes over 9 million user accounts to possible breach

Cyberattack forces Belgian hospital AZ Monica to shut down systems and transfer critical patients

Cyberattack forces Belgian hospital to transfer critical care patients

Cyberattack Hits Belgian Hospital AZ Monica, Ransomware Used

Dark Web Forum Breached, Hackers Exposed

Data breach: FREE MOBILE and FREE fined €42 million

Data breach affects 750,000 investors at Canada’s investment regulator, triggering notifications and investigations

Data Security Incident at Veriff Impacted Total Wireless Customers, MVNO Says

DeadLock Ransomware Uses Polygon Smart Contracts For Proxy Rotation

Despite Best Efforts, Phishing Continues to Set the Hook

Dutch police warn that their IT infrastructure is “outdated and vulnerable”

Eurail passengers taken for a ride as data breach spills passports, bank details

Exploit code public for critical FortiSIEM command injection flaw

Federal agencies ordered to patch Microsoft Desktop Windows Manager bug

Fix or ditch: CISA orders federal agencies to stop using Gogs

Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution

France fines Free Mobile €42 million over 2024 data breach incident

Free Mobile and Free fined $49 million in France after major data theft

French data regulator fines telco subsidiaries $48 million over data breach

Global cyberattacks surge across Latin America and Africa as ransomware activity rises

Hacker Claims Full Breach of Max Messenger, Threatens Public Data Leak

Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware

Hackers Launch Over 91,000 Attacks on AI Systems Using Fake Ollama Servers

Hackers Use Fake PayPal Notices to Steal Credentials, Deploy RMMs

Hackers weaponize LinkedIn comments in new phishing campaign

Horus Solucoes Integradas Breach Exposes Brazilian Municipal Tax Records

How Cybercrime Markets Launder Breach Proceeds and What Security Teams Miss

‘If It Feels Urgent, Shouldn’t You Be More Cautious?’ Phishing Attacks In 2026: New Techniques, Old Mistakes

Impersonation Fraud Drives Record $17 billon in Crypto Losses

India’s new smartphone security proposal: what’s at stake and why it matters

Inside SafePay: Analyzing the New Centralized Ransomware Group

Is your smart home at risk of being hacked?

JobsGO Data Breach Exposes Over 2.3 Million User Records

JPMorgan Discloses Supply Chain Breach at Law Firm That Impacts Over 650 Investors

Kyowon Group Ransomware Attack Sparks Fears of 9.6 Million Data Leak

Kyowon warns ransomware may have exposed personal data of 5.54 million customers

Leaked Data Exposes Thousands of Border Patrol, ICE Agents After Renee Good Shooting

LLMs Supercharge Ransomware Speed, Scale, and Global Reach

Manage My Health data breach: A timeline of what happened, and everything we know so far

ManageMyHealth front door left open for ransomware

Massive data breach allegedly leaks personal details of ICE, Border Patrol agents

Massive Data Breach Allegedly Leaks Personal Information of Border Patrol and ICE Agents

Massive Data Breach Exposes Details of 4,500 ICE and Border Patrol Employees Following Protests Over Fatal Shooting

Microsoft Crushes Cybercrime Subscription Service Behind $40 Million Fraud Spree

Microsoft disrupts RedVDS cybercrime platform behind $40 million in scam losses

Microsoft Fixes Three Zero-Days on Busy Patch Tuesday

Microsoft January 2026 Patch Tuesday: 115 Vulnerabilities Fixed

Microsoft, Law Enforcement Disrupt RedVDS Global Cybercrime Service

Money Mart Data Breach Exposes Customers’ Sensitive Personal Information

Monroe University Data Breach Affects 320k Exposing Social Security Numbers

Monroe University says 2024 data breach affects 320,000 people

Multi-State Information Sharing and Analysis Center (MS-ISAC) Flags High-Risk Security Flaws in Fortinet Products

Mystic Valley Elder Services Agrees to Settle Class Action Data Breach Lawsuit for $520,000

New China Linked VoidLink Linux Malware Targets Major Cloud Providers

New Devixor Malware Combines Banking RAT and Ransomware Targeting Iranian Banks, Crypto Platforms, Payment Services

New powerful Linux malware detected targeting critical systems

Orion Leaks: LockBit’s Shadow in Ransomware Ecosystem

Pakistan WAPDA Allegedly Targeted in Data Breach Exposing 3.3GB

Personal data of thousands of ICE and Border Patrol agents allegedly leaked by informant

Personal information of thousands of Victorian students accessed in targeted cyber attack schools

PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces

Poland says it repelled major cyberattack on power grid, blames Russia

Posillico Inc. Data Breach Affects 9,876 Individuals Exposing Social Security Numbers

Qulliq Energy Corporation (QEC) investigating possible data breach after Iqaluit break-in

Ransomware: Tactical Evolution Fuels Extortion Epidemic

Reprompt attack hijacked Microsoft Copilot sessions for data theft

Researchers Null-Route Over 550 Kimwolf and Aisuru Botnet Command Servers

Researchers Propose Game-Theoretic AI to Guide Cyber Attack and Defense Strategies

Sagolink Data Breach Exposes 12,000 Insurance & Medical Records

South Korea: Data protection agency tells Coupang to stop publishing unconfirmed information about data breach

South Korean giant Kyowon confirms data theft in ransomware attack

Surgeries postponed in two Belgian hospitals due to cyberattack

Target source code for sale on dark web as employees confirm it’s authentic

Target Source Code Leak Confirmed by Employees, Git Server Locked Down

Tennessee Man to Plead Guilty to 2023 US Supreme Court Hacking

Textitute Data Breach Exposes 2.8 Million Marketing and User Records

The Ransomware Paradox: Why Payments Are Soaring as Attacks “Drop”

This WhatsApp Link Can Hand Over Your Account in Seconds

There’s a dangerous new ransomware variant on the block - and cyber experts warn it’s flying under the radar

Threat Actor Teases Source Code for Sale After Hack of Target Systems

Trading Platform Impersionation Scams Explode 1,400% as AI Turns Fraud Into Factory Operation

UK Digital ID Scheme Faces Resistance Over Security Concerns

Understanding Data Breach: Protecting Sensitive Information

University of Hawai’i (UH) Cancer Center Research Data Exposed In Ransomware Attack

University of Phoenix class action claims data breach exposed 3.5M students’ PII

Victorian Department of Education says hackers stole students’ data

VietISO Data Breach Exposes 209,000 Customer Records

VoidLink Cloud-Native Malware Framework Targets Linux Systems via Custom Plugin API

Western cyber agencies warn about threats to industrial operational technology

Your iPhone apps are secretly tracking you - 3 easy ways to take back control now

Your phone is sharing data without your knowledge - how to stop it ASAP

13th January

8 Million Armenian Government Records Allegedly Sold on Hacker Forum, Officials Deny Breach

AI and Cybersecurity Trends That Will Define 2026

AI-Powered Crypto Scams Drive Record $17 Billion Losses in 2025

Android Users Targeted by deVixor Banking Malware with Ransomware Capabilities

Belgian hospital AZ Monica shuts down servers after cyberattack

Belgium: De Casino Sint-Niklaas website’s hacked, data breach unclear

Betterment confirms data breach after social engineering attack

Betterment confirms data breach after wave of crypto scam emails

Betterment confirms data breach, tells customers to beware crypto scam notifications

Betterment Customer Data Exposed in Crypto Scam Hack

Betterment data breach exposes customer information

Betterment Data Breach Exposes Customer Information In 2026

Betterment Data Breach Exposes PII of Customers

BreachForums Data Leak Raises Fresh Questions Over Credibility

Browser-in-the-Browser phishing is on the rise: Here’s how to spot it

Browser-in-the-Browser phishing tactic increasingly used to compromise Facebook credentials

Canadian Investment Regulatory Organization (CIRO) faces potential class action following data breach

Central Maine Healthcare breach exposed data of over 145,000 people

Central Maine Healthcare data breach hits 145,000 patients

Charlotte telecom investigates data breach claims possibly involving 1 Million customers

CISA Flags Actively Exploited Gogs Vulnerability With No Patch

CISA Warns of Active Exploitation of Gogs Vulnerability Enabling Code Execution

Convincing LinkedIn comment-reply tactic used in new phishing

Critical Broadcom Chipset Vulnerability Disrupts Networks on ASUS Routers

Cyber Attack on Clackamas Community College Compromises Sensitive Personal Data

Cyber fraud becomes dominant cybersecurity worry among executives

Cyber Fraud Overtakes Ransomware as Top CEO Concern

Cyber Fraud Takes the Lead: What the Shift Away From Ransomware Signals for Enterprises

Cyberattacks in the age of AI: How to protect yourself in the UAE

Data Breach May Have Hit 1 Million Charlotte, North Carolina, Telecom Users

Dell data breach claimed, but researchers are skeptical

Dell Technologies Allegedly Breached by ShinyHunters and Lapsus$

Department of Homeland Security (DHS) Data Breach: Thousands of Officers’ Details Leaked

deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran

Dutch court convicts hacker who exploited port networks for drug trafficking

Dutch court sentences hacker to 7 years for drug trafficking and extortion

Dutch Hacker Sentenced to Seven Years for Rotterdam & Antwerp Port Cyberattacks

Dutch Port Hacker Sentenced to Prison

Endesa and Energía XXI notify customers of data breach

Enterprise security faces a three-front war: cybercrime, AI misuse, and supply chains

Eurail discloses data breach, unknown number of customers affected

Everest ransomware group claims Nissan breach, demands response

Executives more likely to take phishing bait than junior staff

Four essential tips to ensure you bounce back after a cyber attack

Global Data Breach Costs Fall for the First Time in 5 Years, But We’re Not Out of the Woods Yet

Global Magecart Campaign Targets Six Card Networks

Global Shop Solutions' ANKA Platform Data Breach Affects 537,877 Users

Government statement on 'serious cyber attack' at Nuneaton school

Hacker taunts Symantec, releases pcAnywhere source code, promises others

Hackers claim to have Target source code for sale following recent cyberattack

Hackers Exploit Browser-in-the-Browser Trick to Hijack Facebook Accounts

Hackers Leverage Browser-in-the-browser Tactic to Trick Facebook Users and Steal Logins

Hackers Use Browser-in-the-Browser Technique to Steal Facebook Login Credentials

Hackers’ botnet is exploiting 1234 passwords to steal crypto

ICE Data Breach Hits 4,500 Border Patrol and ICE Staff as Names and Numbers Leak

Inc Ransom Breaches Compact Industries, Harrison Design & More

Instagram Denies Data Breach Despite Users' Password Reset Requests

Is ransomware in decline or just evolving?

Kazu Ransomware Group Breaches MyVete Veterinary Software

Korean Air Data Breach by Clop Ransomware Impacts 30,000 Employees

Kremlin-linked hackers pose as charities to spy on Ukraine’s military

Kubernetes accelerates large-scale phishing operations

Kyowon investigates ransomware data leak to determine if customer information affected

Long-Running Web Skimming Campaign Steals Credit Cards From Online Checkout Pages

Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading Tool

Man to plead guilty to hacking US Supreme Court filing system

Massive cyberattack on Polish power system in December failed, minister says

Microsoft January 2026 Patch Tuesday fixes 3 zero-days, 114 flaws

Microsoft Patch Tuesday January 2026: Actively Exploited Zero Day, 8 High-Risk Flaws

More than 40 countries impacted by North Korea IT worker scams, crypto thefts

Nearly 90% of phishing attacks aim to steal account credentials

New Advanced Linux VoidLink Malware Targets Cloud and container Environments

New Android Banking Malware ‘DeVixor’ Adds Ransomware Capabilities

New Chinese-Made Malware Framework Targets Linux-Based Cloud Environments

New Facebook Phishing Scam Uses Fake Pop‑Ups So Real Even Experts Get Fooled

New investigation reveals top phishing trends in 2025

New Magecart Skimming Network Targets Global Payment Providers on E-commerce Websites, Including Mastercard, American Express

New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack

New VoidLink malware framework targets Linux cloud servers

New Zealand: New health data breach increases scrutiny on private health IT

North Korean Hackers Deploy Malicious QR Codes in Phishing Attacks on US Targets

North Korean hackers using QR codes to bypass smartphone safety features, says South Korea's internet security agency

Oregon Medicaid insurer’s data breach could lead to insurance fraud

Parliament Asks Security Pros to Shape Cyber Security and Resilience Bill

Personal Details of Thousands of Border Patrol and ICE Goons Allegedly Leaked in Huge Data Breach

Phishing scam exploits performance review anxiety to deploy malware

Phishing Scams Exploit Browser-in-the-Browser Attacks to Steal Facebook Passwords

Q4 2025 Malware Trends: Telegram Backdoor, Banking Trojans Surge, Joker Returns to Google Play

QR Phishing Attacks Surge Fivefold in 2025

Recycled data likely behind Instagram breach claims

Reproductive Medicine Associates of Michigan Data Breach Exposes Patient Health Data

Richmond Behavioral Health Authority now faces three class-action suits over data breach

Royal Borough of Kensington and Chelsea (RBKC) investigates cyber-attack as data breach confirmed

Rumpke settles lawsuit over employee data stolen in cyberattack

Scammers are tricking Facebook users with login pop-ups that look real

Security Leaders Discuss FBI Warning: North Korea Exploiting QR Codes

Service Providers Help Pig Butcher Scammers Scale Operations

ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation

SHADOW#REACTOR Campaign Uses Text-Only Staging to Deploy Remcos RAT

Spanish Energy Giant Endesa Notifies Customers of Data Breach Impacting Energía XXI

Spanish energy giant Endesa says it was hit by data breach, customers affected and 20 million files allegedly put up for sale

State-linked Russians go on spear phishing spree

Suspected ransomware attack threatens one of South Korea’s largest companies

Target employees confirm leaked source code is authentic

Target’s Source Code Confirmed Stolen: Why Does This Matter?

Teaching cybersecurity by letting students break things

Tech companies owe the Irish data protection authority over €4 Billion in fines, but hardly anyone pays

Teen hackers recruited through fake job ads

Telegram to Add Warning for Proxy Links After IP Leak Concerns

Tennessee man to plead guilty to hacking Supreme Court’s electronic case filing system

The Kyowon Ransomware Breach and Korea’s Reputation: The Next Economic Risk Isn’t Finance but Trust

The Netherlands: Court tosses appeal by hacker who opened port to coke smugglers with malware

Ukraine's army targeted in new charity-themed malware campaign

University of Hawaiʻi Discloses Breach Impacting Cancer Research Study Participants

What insurers expect from cyber risk in 2026

What Is a DNS Attack? Understanding the Risks and Threats

What makes AI-powered phishing a potent cyber danger?

Why QR Codes Are Education’s New Phishing Blind Spot

Widespread Magecart Campaign Targets Users of All Major Credit Cards

12th January

88.5% of phishing attacks focus on stealing account credentials

2026 Instagram Phishing Scam Targets Users with Fake Reset Emails

AI Makes Old Attacks Faster to Launch, Easier to Scale, and Harder to Detect

Ariel Clinical Services Data Breach Exposes Social Security Numbers & Medical Information

Armenia probes alleged sale of 8 million government records on hacker forum

Attackers claim PayPal credential leak, but researchers doubt the data’s useful

Attackers Targeting LLMs in Widespread Campaign

'Bad actor' hijacks Apex Legends characters in live matches

Been asked to reset your Instagram password? Company denies data breach reports after users bombarded with request emails

BLACKSTORE Data Breach Exposes Over 100k Customer Records

BreachForums Database Leak Turns the Tables on Threat Actors

Browser-in-the-Browser technique rapidly gaining ground as an attack method

Business leaders see AI risks and fraud outpacing ransomware

California Shuts Down Health Data Resales By Unregistered Brokers

Californian privacy regulator fines two marketing firms for selling health information

Canopy Health Confirms Cyberattack, Patients Not Notified for Six Months

CareOregon and Health Share of Oregon Warn of Potential Insurance Fraud After Data Breach

CISA Closes Ten Emergency Directives After Federal Cyber Reviews

CISA orders feds to patch Gogs RCE flaw exploited in zero-day attacks

Clackamas College Data Breach Affects 33,381 Individuals

CrazyHunter ransomware escalates with advanced intrusion tactics, six Taiwan healthcare victims confirmed

Cyber Fraud Overtakes Ransomware as Top Security Threat

Cyber-enabled fraud overtakes ransomware as top global cyber risk

Cyber-fraud overtakes ransomware as business leaders' top cyber-security concern

Data breach at Denton County MHMR Center Exposes Personal Information of over 105,000 people

Deferred University of Hawaii Cancer Center breach disclosure sparks concern

Denton County MHMR Center data breach impacts nearly 109K patients

Devereux Foundation Discloses Data Breach Following Ransomware Attack

Dot Foods Data Breach Affects 6,374 People, Exposing Social Security Numbers

Downtime pushes resilience planning into security operations

Dutch court jails hacker over port cocaine smuggling

Dutch court sentences hacker who used port systems to smuggle cocaine to 7 years

Endesa electric company hacked: Canary Islands customers warned after major data breach

EU’s Chat Control could put government monitoring inside robots

Everest Group Claims Massive Nissan Data Breach, Over 100,000 PayPal Credentials Leaked

Everest Ransomware Claims Breach at Nissan, Says 900GB of Data Stolen

Everest Ransomware Targets Nissan Following ASUS Data Breach

Facebook login thieves now using browser-in-browser trick

Fake Employee Reports Spread Guloader and Remcos RAT Malware

Fintech firm Betterment confirms data breach after hackers send fake crypto scam notification to users

France swaps alleged ransomware operative for imprisoned researcher in Russia

GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials

Gulshan Management Services Hit by Data Breach Affecting Hundreds of Thousands

Hacker gets seven years for breaching Rotterdam and Antwerp ports

Hacking hub BreachForums hit by data breach - 324,000 accounts exposed

Here’s the truth about Instagram Data Breach 2026

Hidden Telegram proxy links can reveal your IP address in one click

How to protect your Instagram account from Phishing attack

Ignore Instagram password reset messages if you didn't request one

Illicit Crypto Activity Hits Record $158 billion in 2025

Instagram Data Breach Exposes 17.5 Million Users’ Emails and Phones

Instagram denied claims of a data breach and assured that it's a bug that has been fixed

Instagram Denies A New Data Breach After Password Reset Emails

Instagram denies breach after many receive emails asking to reset password

Instagram Denies Data Breach After Password Reset Emails, 6.2 Million Accounts Added to Have I Been Pwned (HIBP)

Instagram denies data breach after users receive password reset emails

Instagram Denies Data Breach After Wave of Password Reset Emails

Instagram Denies Data Breach as Password Reset Emails Panic Users

Instagram denies data breach of 17 million users after password reset email wave - here's what to do next

Instagram denies data breach of 17.5 million users email accounts, passwords, phone numbers

Instagram denies data breach reports, says user accounts are secure

Instagram denies data breach, blames reset glitch

Instagram Denies Data Breach, Fixes Unsolicited Password Reset Requests

Instagram Denies Reports of Hacking and Data Breach, Says ‘Accounts Are Secure’

Instagram password reset email: Here's how to safeguard yourself from phishing cyber threats

Instagram Password Reset Emails Trigger Alarm as Company Denies Data Breach

Instagram Phishing Emails Spark Global Cyber Alert

Instagram Refutes Data Breach Claims, Confirms User Accounts Remain Safe

Iran-Linked MuddyWater Deploys Rust-Based RAT in Middle East Phishing Attacks

John Buck Company Data Breach Exposes Social Security Numbers

Kyowon Group Confirms Cyberattack as Multiple Systems Go Offline

Kyowon group investigates ransomware attack amid possible data leak

Kyowon Group Investigates Ransomware Attack, Potential Data Leak

Kyowon Group shuts down internal network after suspected ransomware attack

LPL, Ameriprise, Ashton Thomas Report Data Breaches to Maine Regulators

Manchester United captain Fernandes account hacked after posts calling to remove INEOS spark uproar

Manchester United captain’s X account hacked, club asks fans not to interact

Manchester United forced to release statement after Bruno Fernandes’ X account is hacked

Manchester United to launch review after hackers target Bruno Fernandes

Margaritaville at Sea sued over data breach that allegedly exposed customers’ PII and PHI

Massive 2025 Data Breach Leaks 184 Million Passwords, What It Means and How to Stay Safe

Massive Instagram data breach exposes personal info of over 17 Million users

Max severity Ni8mare flaw impacts nearly 60,000 n8n instances

Meta Calls for Calm Amidst Instagram Password Reset Panic

Meta Denies Instagram Data Breach After Password Reset Emails Alarm Users

Meta denies Instagram data breach claims, says password reset issue is fixed

Meta denies viral claims about data breach affecting 17.5 million Instagram users, but change your password anyway

Meta fixes Instagram password reset flaw, denies data breach

n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens

New Zealand: Another health provider hacked - but took six months to let patients know

New Zealand: News of a second healthcare data breach emerges - six months after the fact

New Zealand: Second health provider, Canopy Health, hit in major cyber attack

“Nissan has 5 days before we leak their data,” attackers threaten

Notorious BreachForums hacking site hit by ‘doomsday’ leak of 324,000 criminal users

Oman Football Association Allegedly Breached in Ransomware Incident

Oregon Department of Environmental Quality (DEQ) data breach leaked thousands of people’s information, but the agency hasn’t told the public

OSSE San Juan Data Breach Exposes Government Utility Records

Petco class action alleges data breach exposed customer information

QR Phishing Attacks Rise Fivefold in Pakistan in Second Half of 2025

Researchers Uncover Service Providers Fueling Industrial-Scale Pig Butchering Fraud

Reset your Instagram Password Email: All you need to know about New Phishing Attack

Russian BlueDelta (Fancy Bear) Uses PDFs to Steal Logins in Just 2 Seconds

'Serious cyber attack' at Nuneaton school latest as impact of hackers revealed

Social Engineering at the Front Desk: A Growing Threat for Hotels

South Korea: Fair Trade Commission (FTC) chief says business suspension of Coupang possible amid data-breach probe

South Korea: Financial firms warn mandatory voice phishing compensation could backfire

Spanish energy giant Endesa discloses data breach affecting customers

Target's development server offline after hackers claim to steal source code

Telegram built-in proxy exposes real IPs using single-click flaw, researchers warn

There was no data breach, Instagram says

Threat actors Allegedly Claim Discord Dataset Containing 78,541,207 Files

Trellix warns of advanced Facebook phishing using browser-in-the-browser attacks

TriZetto class actions claim company failed to protect patient data during data breach

UK Council Cyber Attack Reveals Global Public Sector Risks

United Arab Emirates (UAE) Cyber Council flags risks of AI-powered phishing

University of Hawaii Cancer Center hit by ransomware attack

University of Hawaii Cancer Center Ransomware Attack Exposes Patients’ Social Security Numbers

Weaponized Employee Performance Reports Used to Deliver Guloader Malware

What caused Instagram's password change emails? Company dismisses data breach rumours

What makes AI-powered phishing a potent cyber danger?

Why Passwords Are Failing in the Age of AI

Zenflow Data Breach Exposes Social Security Numbers