Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 12th January and 18th January 2026.18th January
Anna’s Archive hit with court order to delete scraped data
Canada’s Market Regulator Hit By 2025 Cyber Breach, Sensitive Investor Records Exposed, 750,000 Affected
China-linked hackers targeted US agencies with Venezuela-themed phishing
Finland’s Biggest Cyber Scandal: Therapy Notes of 33,000 Patients Leaked, ‘Hacker God’ Kivimäki Convicted
How to spot DocuSign email scams and avoid phishing attacks
Malicious QR Codes Surge Fivefold, Emails Turn Into Cyber Traps
Raids In Ukraine And Germany Target Black Basta Ransomware Group, Suspect Traced To Russia
Ransomware: what it is and why it’s your problem
South Korea jails crypto launder ringleader in voice-phishing scheme
WhatsApp Links Used in Sophisticated Gmail Phishing Attack
Who’s Stalking Whom? ICE Uses Social Media and Phone Surveillance System to Track Protesters
17th January
145K exposed after hacker hit of Maine’s largest health systems
$280 Million Crypto Heist: Hacker Drains Hardware Wallet and Swaps Funds to Monero
Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice
Coupang Under Fire After Massive Data Breach Prompts Government Crackdown
Credential-stealing Chrome extensions target enterprise HR platforms
Cyble report 2025: AI, ransomware, and hacktivism shape cyber threats
French Police Cyberattack Exposed: Weak Passwords Led to Data Breach
Grubhub confirms data breach: hackers demand ransom tied to Salesforce attacks
He called himself an ‘untouchable hacker god’. But who was behind the biggest crime Finland has ever known?
JFrog Researchers Uncover RCE Exploit for Existing Redis Database Vulnerability
JPMorgan Chase Issues Data Breach Warning, Says Customers’ Bank Account Numbers and Personal Information Exposed in Third-Party Hack
Malicious GhostPoster browser extensions found with 840,000 installs
Moen luxury faucet-maker claimed by Qilin ransomware
Nearly 9 in 10 phishing scams steal login details: What to do immediately if you fall victim to a phishing attack
Online sellers beware: Urgent PayPal email turns out to be phishing scam
Report Warns of Faster, AI-Driven Cyber Threats, Ransomware And Automation Dominate Global Landscape
Researcher steals cookies from the cookie stealers: here’s what happened next
Top 10 scams to protect yourself from in 2026
Two Ukrainians Suspected in Black Basta Ransomware Attacks
Ukraine-Germany operation targets Black Basta, Russian leader wanted
Up to $5,000 per Person To Be Handed Out Over Massive Data Breach That Exposed Info of 2,501,324 People
Vastaamo hack: My darkest secrets were revealed to the world
16th January
1 in 25 enterprise AI prompts sent to China-based tools, study finds
63% of IT leaders overestimate their chances against hackers
750,000 Impacted by Data Breach at Canadian Investment Watchdog
A new earbud security flaw may expose you to remote eavesdropping - here's how to fix it
Account Compromise Surged 389% in 2025
Agents Aren’t People: What the ServiceNow Vulnerability Reveals About Agentic AI Access Control
AI drives impersonation scams up 1,400%
AI fuels rise in ransomware threats
AI-Powered Attacks, Ransomware, and Hacktivism Redefine the Global Cyber Threat Environment
Amazon Web Services (AWS) dodges massive cyber disaster: every account was in danger
Anchorage Police Department (APD) Investigates Third-Party Cybersecurity Incident, Says No Evidence of Data Compromise
‘Another wake-up call’: experts weigh in on major student data breach
Anthropic Claude Vulnerability Exposes Cowork AI to Data Exfiltration via Prompt Injection
As AI raises the stakes, app modernization and security are becoming inseparable
Attackers claim theft of 183 Million records from major oil company
Black Basta boss makes it onto Interpol's 'Red Notice' list
Can we be certain AI keeps cloud data secure?
Canadian investment regulator confirms hackers hit 750,000 investors
Canadian regulatory body says data breach exposed 750,000 investors
China-Linked APT Exploits Sitecore Zero-Day in Attacks on American Critical Infrastructure
China-linked hackers exploited Sitecore zero-day for initial access
China-linked hackers targeted US agencies with Venezuela-themed phishing
Chinese Spies Exploit Venezuela Crisis to Target US Officials in Phishing Campaign Deploying Backdoor
Chinese-Linked Hackers Target US Officials with Venezuela-Themed Phishing Campaign
Cisco finally fixes AsyncOS zero-day exploited since November
Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393)
Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways
Coupang and the Horrible, No Good, Very Bad Data Breach
Coupang begins giving out coupons to data-breach victims
Coupang Faces Crackdown After Massive Data Breach
Cyber Attack at Kyowon Group Disrupts Operations, Exposes Customer Data Risks
Cyber Fraud, Not Ransomware, is Now Businesses’ Top Security Concern
Cyberattack Hits Poland’s Power System, But Blackout Prevented
Cybercrime evolves as AI and geopolitics reshape threat landscape in 2025
Cybercriminals Target Employee Accounts As Cybersecurity Threats Surge In 2025
Dark Web Profile: Orion Ransomware
Data breach at Canada’s Investment Watchdog Canadian Investment Regulatory Organization impacts 750,000 people
DeadLock Ransomware Exploits Polygon Smart Contracts to Evade Takedowns in 2026
DragonForce Ransomware Group Attacks JR Advertising Specialties and NWIMS IT Group
Five Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts
Flock Safety Exposes Live Police Camera Feeds in Data Breach
Force Ouvrière Allegedly Hit by Data Breach Exposing Member Info
Former Conti member, now known as “Devman,” added to Interpol’s wanted list
France fines Iliad Group’s telecom units ₹3,800 crore after data breach
General Motors (GM) prohibited from selling drivers’ driving behavior to credit rating companies
Genesis Ransomware Hits Upper Township and Dedman Gray
German cops add Black Basta boss to EU most-wanted list
Germany and Israel Deepen Cybersecurity Ties With New Security Pact
Google and Mozilla Patch 26 Security Flaws in Chrome 144, Firefox 147
Google Bluetooth flaw puts millions of audio devices at risk
GootLoader Malware Uses 500–1,000 Concatenated ZIP Archives to Evade Detection
Grubhub Breach: Data Theft Confirmed, Extortion Suspected
Grubhub confirms data breach as hackers download internal data and issue extortion threats
Grubhub confirms data breach, faces extortion demands
Grubhub Data Stolen in Confirmed Hack, Questions Remain
Grubhub says hackers stole company data in recent breach - here's what we know
Gulshan Management Services sued over data breach affecting 377K consumers
Hacker steals $282 million crypto from a victim in social-engineering attack
Hackers Breach Eurail’s Internal Network, Steal Customer Data
Hackers now exploiting critical Fortinet FortiSIEM flaw in attacks
How 2 Missing Characters Nearly Compromised Amazon Web Services (AWS)
How a hacking campaign targeted high-profile Gmail and WhatsApp users across the Middle East
How a single click can trick Microsoft Copilot into leaking your personal data
How AI Impacts the Cyber Market and The Future of SIEM
How to Prepare and Respond to Ransomware Attacks
ICE Agent Doxxing Platform was Crippled After Coordinated DDoS Attack
Iran’s Islamic Revolutionary Guard Corps (IRGC) Phishing Campaign Targets Middle East Elites via Gmail, WhatsApp
Isle of Man: Government refers itself to Info Commissioner over election data breach
Jordanian initial access broker pleads guilty to helping target 50 companies
Kensington and Chelsea Council 'turns internet back on' weeks after cyber attack forced it offline
LOTUSLITE Backdoor Targets U.S. Policy Entities Using Venezuela-Themed Spear Phishing
Microsoft Dismantles RedVDS Cybercrime Marketplace Linked to $40 Million in Phishing Fraud
Microsoft Leads Global Phishing Attacks Again as Cybercriminals Target Trusted Brands
Microsoft tops global phishing brand rankings again
Mid Michigan Medical Billing Service Data Breach Affects 28K Patients
Middle East Phishing Blitz: Hackers Breach Ministers, Activists via Gmail and WhatsApp
Middletown restores water billing system following cyber attack
New intelligence is moving faster than enterprise controls
New LinkedIn Phishing Scam Uses Comment Replies to Harvest Log-ins
Operation Endgame: Dutch Police Arrest Alleged AVCheck Operator
PharMerica Pays Over $5.2 Million to Settle Class Action Data Breach Lawsuit
PharMerica settles data breach lawsuit for $5.2 Million
Phishing services drive 389% surge in account breaches
Pixpay Senegal Allegedly Breached - Payment API Data Exposed
Poland avoids blackout as Prime Minister blames Russia-linked attackers for massive cyberattack
Police raid homes of alleged Black Basta hackers, hunt suspected Russian ringleader
Ransomware activity never dies, it multiplies
Ransomware and Supply Chain Attacks Soared in 2025
Ransomware Attacks Increased by 58% in 2025
Ransomware gang Everest claims data breach at Nissan Motor Corporation
RondoDox Botnet Targets HPE OneView Vulnerability in Exploitation Wave
Russell Township Police Email Disruption Halted Communications for Nearly Two Months
StealC hackers hacked as researchers hijack malware control panels
Supreme Court hacker posted stolen government data on Instagram
TamperedChef Malvertising Campaign Drops Malware via Fake PDF Manuals
The number of phishing kits doubled in 2025, bringing stealth, innovation and the same old themes
Two Arrested in Greece for SMS Blaster Phishing Attacks on Mobile Banking
University of Hawaii Cancer Center discloses August 2025 ransomware attack involving research participant data
Vulnerability in Anthropic’s Claude Code Shows Up in Cowork
Warning: cybercriminals are using blockchain smart contracts to evade takedowns
Who’s on the other end? Rented accounts are stress-testing trust in gig platforms
Why Traditional Firewalls Fail Against Today’s High-Volume DDoS Attacks
15th January
1 Million+ customer records stolen from Orange, attackers claim
320K+ exposed in Monroe University hacker attack
750,000 Canadian investors impacted by Canadian Investment Regulatory Organization (CIRO) data breach: What to do if your data is leaked
A ransomware attack disrupted operations at South Korean conglomerate Kyowon
AI turns impersonation scams into a crypto cash machine
AlmaX Cryptocurrency Exchange Data Breach Exposes 50,000 User Records
Amarillo College Panhandle Regional Law Enforcement Academy (PRLEA) Data Breach Exposes Law Enforcement Info
Amazon Web Services (AWS) CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks
Anchorage police department takes servers offline after cyberattack on service provider
Askul’s Shipping Operations Resume After Overcoming Ransomware Disruption
ASUS and T-Link routers affected by WiFi crash flaw, but the issue is fixable
Australia: Concerns domestic violence victims could be left vulnerable after personal data accessed in major Victorian school data breach
Bluspark Unauthenticated API Vulnerability Exposed Sensitive Data, Including Plaintext Passwords
Brazilian Police Arrest 20-Year-Old Hacker After R$6 Million Cryptocurrency Heist
Cambodian No-Show Scam Gang Arrested for 3.8 Billion Won
Central Maine Healthcare data breach impacted over 145,000 patients
Central Maine Healthcare Data Breach Impacts 145,000 Individuals
China-based espionage group targets US government with Venezuela phishing lures
China-linked hackers used Venezuela crisis as lure in US-focused phishing
Chinese hackers targeting ‘high value’ North American critical infrastructure
Chinese-linked hackers target US entities with Venezuelan-themed malware
CISOs flag gaps in third-party risk management
Coupang rolls out data breach vouchers, faces criticism over usage limits
Critical WhisperPair flaw lets hackers track, eavesdrop via Bluetooth audio devices
Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access
Cyber attacks spike amid rising ransomware, GenAI threats
Cybersecurity spending keeps rising, so why is business impact still hard to explain?
Data Breach at Virginia-Based Avosina Healthcare Impacts More Than 40,000
Data Breach on Broadband Provider Brightspeed Exposes 1 Million+ Customers, Hackers Threaten to Cut Home Internet
Data Privacy Teams Face Staffing Shortages and Budget Constraints
DeadLock Ransomware: Smart Contracts for Malicious Purposes
DeadLock Ransomware Exploits Polygon Smart Contracts to Evade Detection
DeadLock ransomware uses blockchain for evasion
DeadLock Ransomware Using Polygon Smart Contracts to Evade Detection
Denver Residents Warned of Email Scam Impersonating City Officials for Phishing Attacks
End may be near for massive botnet controlling over 2 million Android devices
Endesa Reports Cyber Security Incident Affecting Sensitive Customer Information
Estonian banks fail to implement security measures against Smart-ID phishing
Eurail confirms data breach following unauthorised access to customer systems
Eurail customer database hacked
Eurail Data Breach Exposes Passports, Bank Details, Europe’s Travel Infrastructure Faces Fresh Trust Test
European Space Agency Confirms Data Breach After Hackers Auction Stolen Information
Federal Trade Commission bans General Motors (GM) from selling drivers' location data for five years
Firms continue to deal with fall-out from Legal Aid Agency (LAA) cyber attack while others profit, family lawyer says
Flare research reveals nearly half of all cybercriminals use multi-brand combo kits to steal data
France Fines Iliad Group’s Telecom Units ₹3,800 Crore After Data Breach Exposes 24 Million Customers
France’s data protection authority fines Free and Free Mobile €42 million over major customer data breach
French telecoms fined €42 million for major GDPR data breach
Gallagher details widening cyber breach and privacy duties in Australia
Germany turns to Israel for a ‘cyber dome’ amid rising threats
GhostPoster Browser Malware Hid for 5 Years With 840,000 Installs
Global Agencies Release New Guidance to Secure Industrial Networks
Global cyberattacks surged in December, with Brazil seeing a 38% increase
Global ransomware attacks rose 32% in 2025, as manufacturers emerged as top target
Google to pay $8.25 million to settle lawsuit alleging children’s privacy violations
Gootloader now uses 1,000-part ZIP archives for stealthy delivery
Groupe Fondasol Data Breach: Employee Personal Information Leaked
Grubhub confirms hackers stole data in recent security breach
Gym Management Service Data Breach May Expose PII
Hackers Abuse Legitimate Cloud and CDN Platforms to Host Phishing Kits
Hackers Abusing Legitimate Cloud and CDN Platforms to Host Phishing Kits
Hackers could access data of 71,000 patients at Belgian hospitals
Hackers exploit Modular DS WordPress plugin flaw for admin access
Hackers expose Victorian student details in data breach
Hackers Increasingly Shun Encryption in Favour of Pure Data Theft and Extortion
How Anthropic Disrupted a World-First AI Cyber Attack
How Ransomware Gangs Choose Their Victims
How severe will ransomware attacks become in 2026?
How this one-click Copilot attack bypassed security controls - and what Microsoft did about it
How Unusual Was Blaze Credit Union’s Data Breach?
ICE Agent Doxxing Site DDoS-ed Via Russian Servers
In Betterment’s Recent Social Engineering Incident, A Reminder To Be Cyber Prepared
INC Ransom Claims Data Breach of TruStar Holdings and VIST Labs
Instagram denies reports of a data breach
Instagram Users Warned of Phishing Risk
International hacker group exposed with participation of Ukraine, the US and Germany
J Grennan & Sons confirms it was 'victim of cyber attack'
Kan & Krishme Law Firm Hit by Sinobi Ransomware Data Breach
Learniverse Data Breach Exposes User Emails and Occupations
Massive Amounts of Sensitive Data Being Shared with GenAI Tools
Massive breach leaks 45 million French records: demographic, healthcare, and financial data all leaked, here's what we know
Max Messenger data breach claimed by hacker on DarkForums
Microsoft disrupts massive RedVDS cybercrime virtual desktop service
Microsoft hits cybercriminals where it hurts: notorious infrastructure provider disrupted
Microsoft hits global virtual desktop cybercrime phishing platform - 'RedDVS' caused phishing chaos and resulted in millions of losses
Microsoft Legal Action Disrupts RedVDS Cybercrime Infrastructure Used for Online Fraud
Microsoft shuts down RedVDS cybercrime subscription service tied to millions in fraud losses
Microsoft takes down cybercrime subscription service RedVDS
Microsoft taps UK courts to dismantle cybercrime host RedVDS
Mustang Panda exploits US Maduro operation with phishing attack
Mustang Panda Strikes Again: Chinese-Linked Cyberespionage Target U.S. Government
New Android malware ‘deVixor’ adds ransomware capabilities
New CastleLoader Variant Linked to 469 Infections Across Critical Sectors
New PayPal Scam Sends Verified Invoices With Fake Support Numbers
New Sicarii RaaS Operation Attacks Exposed RDP Services and Attempts to Exploit Fortinet Devices
Nordstrom Rack Targeted in Tengu Ransomware Group Data Breach
Palo Alto Fixes GlobalProtect DoS Flaw That Can Crash Firewalls Without Login
Palo Alto Networks warns of DoS bug letting hackers disable firewalls
Pax8 accidentally exposes partner data - 1,800 MSPs have customer info and licensing details exposed
Phishing Attacks Target Account Credentials
Phishing Kits Power a Global, Service-Driven Cybercrime Economy
Phishing-as-a-service kits drive surge in 2025 scams
Police Target Ukrainians and Russian in Ransomware Probe
Privacy budgets set to drop further in 2026, European IT pros warn
Proof-of-Concept (PoC) exploit for critical FortiSIEM vulnerability released (CVE-2025-64155)
QR codes are getting colorful, fancy, and dangerous
Ransomware activity surges to record levels
Ransomware Attacks Surged 58% in 2025
Ransomware by the Numbers: Count of Victims and Groups Surge
Ransomware gangs extort victims by citing compliance violations
Ransomware hackers stole data of cancer patients who participated in University of Hawaii (UoH) studies
Ransomware Recovery Costs Exceed $2 Million for Enterprises
Ransomware Victims and Threat Groups Surge to Record Levels
RedVDS Cybercrime-as-a-Service Disrupted by Germany, Europol, and Microsoft in Coordinated Takedown, Phishing Infrastructure Disabled
Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot
Sensitive data of Eurail, Interrail travelers compromised in data breach
Sicarii Ransomware: A Deceptive New Ransomware-as-a-Service Threat Using Hebrew Iconography
South Korea’s Kyowon Group Hit By Ransomware Attack, Confirms Data Theft
South Korea’s Kyowon investigates ransomware attack as millions of accounts face exposure
Suspicious Wave of Instagram Password Reset Messages Raises Data Breach Concerns, But Meta Says All is Well
This Website Exposed Immigration and Customs Enforcement (ICE) Data - Now, It’s Faced a Cyberattack
Traveler Information Stolen in Eurail Data Breach
UK cyber plan tackles state threats & ransomware
Ukraine, US, Germany Uncover Global Hacker Group
University of Hawaii Cancer Center discloses ransomware attack
Victoria Department of Education data breach exposes student information
Victorian Department of Education Confirms Student Data Breach
Victorian students' personal data exposed in major breach: 'Worst thing that could happen'
What You Need to Know About the New LinkedIn Phishing Scheme
Why is Using AI to Protect Data from Cybercriminals Crucial?
Woman arrested after data breach at Walsall doctors' surgery
Woman bailed as cops probe doctor's surgery data breach
Years-Old Vulnerable Apache Struts 2 Versions See 387K Weekly Downloads
Your Bluetooth headphones may be at risk of being hacked - here's how to stay protected
Your Windows PC needs this patch to ward off nasty bootkit malware - update now
14th January
24-Year-Old Hacker Breaches US Supreme Court Database
45 Million French records leaked after suspected attacker exposed data trove
78 Million Discord files peddled online: Is the data leak real?
AI Agents Are Becoming Privilege Escalation Paths
Australia: Hackers access names, emails of Victorian students in data breach
BodySnatcher flaw lets attackers take over ServiceNow's AI agents
Canada: Securities Regulator Reveals Last Summer’s Data Breach Impacted 750,000 Investors
Central Maine Healthcare data breach exposed information of more than 145,000 people
Central Maine Healthcare Reports Massive Data Breach That Affected Over 100,000 Mainers
Clop Ransomware Targets Korean Air Catering; Teenagers Increasingly Lured by Cybercrime Gangs
Cloud marketplace Pax8 accidentally exposes data on 1,800 MSP partners
Coupang told to remove internal data breach findings amid probe
CrazyHunter Ransomware Escalates With Advanced Intrusion Tactics
Criminal Subscription Service Behind AI-Powered Cyber-Attacks Taken Out By Microsoft
Critical Node.js Vulnerability Can Cause Server Crashes via async_hooks Stack Overflow
Cyber threats, real consequences - rethinking the UK's ransomware strategy
Cyberattack at Kyowon exposes over 9 million user accounts to possible breach
Cyberattack forces Belgian hospital AZ Monica to shut down systems and transfer critical patients
Cyberattack forces Belgian hospital to transfer critical care patients
Cyberattack Hits Belgian Hospital AZ Monica, Ransomware Used
Dark Web Forum Breached, Hackers Exposed
Data breach: FREE MOBILE and FREE fined €42 million
Data breach affects 750,000 investors at Canada’s investment regulator, triggering notifications and investigations
Data Security Incident at Veriff Impacted Total Wireless Customers, MVNO Says
DeadLock Ransomware Uses Polygon Smart Contracts For Proxy Rotation
Despite Best Efforts, Phishing Continues to Set the Hook
Dutch police warn that their IT infrastructure is “outdated and vulnerable”
Eurail passengers taken for a ride as data breach spills passports, bank details
Exploit code public for critical FortiSIEM command injection flaw
Federal agencies ordered to patch Microsoft Desktop Windows Manager bug
Fix or ditch: CISA orders federal agencies to stop using Gogs
Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution
France fines Free Mobile €42 million over 2024 data breach incident
Free Mobile and Free fined $49 million in France after major data theft
French data regulator fines telco subsidiaries $48 million over data breach
Global cyberattacks surge across Latin America and Africa as ransomware activity rises
Hacker Claims Full Breach of Max Messenger, Threatens Public Data Leak
Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy Malware
Hackers Launch Over 91,000 Attacks on AI Systems Using Fake Ollama Servers
Hackers Use Fake PayPal Notices to Steal Credentials, Deploy RMMs
Hackers weaponize LinkedIn comments in new phishing campaign
Horus Solucoes Integradas Breach Exposes Brazilian Municipal Tax Records
How Cybercrime Markets Launder Breach Proceeds and What Security Teams Miss
‘If It Feels Urgent, Shouldn’t You Be More Cautious?’ Phishing Attacks In 2026: New Techniques, Old Mistakes
Impersonation Fraud Drives Record $17 billon in Crypto Losses
India’s new smartphone security proposal: what’s at stake and why it matters
Inside SafePay: Analyzing the New Centralized Ransomware Group
Is your smart home at risk of being hacked?
JobsGO Data Breach Exposes Over 2.3 Million User Records
JPMorgan Discloses Supply Chain Breach at Law Firm That Impacts Over 650 Investors
Kyowon Group Ransomware Attack Sparks Fears of 9.6 Million Data Leak
Kyowon warns ransomware may have exposed personal data of 5.54 million customers
Leaked Data Exposes Thousands of Border Patrol, ICE Agents After Renee Good Shooting
LLMs Supercharge Ransomware Speed, Scale, and Global Reach
Manage My Health data breach: A timeline of what happened, and everything we know so far
ManageMyHealth front door left open for ransomware
Massive data breach allegedly leaks personal details of ICE, Border Patrol agents
Massive Data Breach Allegedly Leaks Personal Information of Border Patrol and ICE Agents
Massive Data Breach Exposes Details of 4,500 ICE and Border Patrol Employees Following Protests Over Fatal Shooting
Microsoft Crushes Cybercrime Subscription Service Behind $40 Million Fraud Spree
Microsoft disrupts RedVDS cybercrime platform behind $40 million in scam losses
Microsoft Fixes Three Zero-Days on Busy Patch Tuesday
Microsoft January 2026 Patch Tuesday: 115 Vulnerabilities Fixed
Microsoft, Law Enforcement Disrupt RedVDS Global Cybercrime Service
Money Mart Data Breach Exposes Customers’ Sensitive Personal Information
Monroe University Data Breach Affects 320k Exposing Social Security Numbers
Monroe University says 2024 data breach affects 320,000 people
Multi-State Information Sharing and Analysis Center (MS-ISAC) Flags High-Risk Security Flaws in Fortinet Products
Mystic Valley Elder Services Agrees to Settle Class Action Data Breach Lawsuit for $520,000
New China Linked VoidLink Linux Malware Targets Major Cloud Providers
New Devixor Malware Combines Banking RAT and Ransomware Targeting Iranian Banks, Crypto Platforms, Payment Services
New powerful Linux malware detected targeting critical systems
Orion Leaks: LockBit’s Shadow in Ransomware Ecosystem
Pakistan WAPDA Allegedly Targeted in Data Breach Exposing 3.3GB
Personal data of thousands of ICE and Border Patrol agents allegedly leaked by informant
Personal information of thousands of Victorian students accessed in targeted cyber attack schools
PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces
Poland says it repelled major cyberattack on power grid, blames Russia
Posillico Inc. Data Breach Affects 9,876 Individuals Exposing Social Security Numbers
Qulliq Energy Corporation (QEC) investigating possible data breach after Iqaluit break-in
Ransomware: Tactical Evolution Fuels Extortion Epidemic
Reprompt attack hijacked Microsoft Copilot sessions for data theft
Researchers Null-Route Over 550 Kimwolf and Aisuru Botnet Command Servers
Researchers Propose Game-Theoretic AI to Guide Cyber Attack and Defense Strategies
Sagolink Data Breach Exposes 12,000 Insurance & Medical Records
South Korea: Data protection agency tells Coupang to stop publishing unconfirmed information about data breach
South Korean giant Kyowon confirms data theft in ransomware attack
Surgeries postponed in two Belgian hospitals due to cyberattack
Target source code for sale on dark web as employees confirm it’s authentic
Target Source Code Leak Confirmed by Employees, Git Server Locked Down
Tennessee Man to Plead Guilty to 2023 US Supreme Court Hacking
Textitute Data Breach Exposes 2.8 Million Marketing and User Records
The Ransomware Paradox: Why Payments Are Soaring as Attacks “Drop”
This WhatsApp Link Can Hand Over Your Account in Seconds
There’s a dangerous new ransomware variant on the block - and cyber experts warn it’s flying under the radar
Threat Actor Teases Source Code for Sale After Hack of Target Systems
Trading Platform Impersionation Scams Explode 1,400% as AI Turns Fraud Into Factory Operation
UK Digital ID Scheme Faces Resistance Over Security Concerns
Understanding Data Breach: Protecting Sensitive Information
University of Hawai’i (UH) Cancer Center Research Data Exposed In Ransomware Attack
University of Phoenix class action claims data breach exposed 3.5M students’ PII
Victorian Department of Education says hackers stole students’ data
VietISO Data Breach Exposes 209,000 Customer Records
VoidLink Cloud-Native Malware Framework Targets Linux Systems via Custom Plugin API
Western cyber agencies warn about threats to industrial operational technology
Your iPhone apps are secretly tracking you - 3 easy ways to take back control now
Your phone is sharing data without your knowledge - how to stop it ASAP
13th January
8 Million Armenian Government Records Allegedly Sold on Hacker Forum, Officials Deny Breach
AI and Cybersecurity Trends That Will Define 2026
AI-Powered Crypto Scams Drive Record $17 Billion Losses in 2025
Android Users Targeted by deVixor Banking Malware with Ransomware Capabilities
Belgian hospital AZ Monica shuts down servers after cyberattack
Belgium: De Casino Sint-Niklaas website’s hacked, data breach unclear
Betterment confirms data breach after social engineering attack
Betterment confirms data breach after wave of crypto scam emails
Betterment confirms data breach, tells customers to beware crypto scam notifications
Betterment Customer Data Exposed in Crypto Scam Hack
Betterment data breach exposes customer information
Betterment Data Breach Exposes Customer Information In 2026
Betterment Data Breach Exposes PII of Customers
BreachForums Data Leak Raises Fresh Questions Over Credibility
Browser-in-the-Browser phishing is on the rise: Here’s how to spot it
Browser-in-the-Browser phishing tactic increasingly used to compromise Facebook credentials
Canadian Investment Regulatory Organization (CIRO) faces potential class action following data breach
Central Maine Healthcare breach exposed data of over 145,000 people
Central Maine Healthcare data breach hits 145,000 patients
Charlotte telecom investigates data breach claims possibly involving 1 Million customers
CISA Flags Actively Exploited Gogs Vulnerability With No Patch
CISA Warns of Active Exploitation of Gogs Vulnerability Enabling Code Execution
Convincing LinkedIn comment-reply tactic used in new phishing
Critical Broadcom Chipset Vulnerability Disrupts Networks on ASUS Routers
Cyber Attack on Clackamas Community College Compromises Sensitive Personal Data
Cyber fraud becomes dominant cybersecurity worry among executives
Cyber Fraud Overtakes Ransomware as Top CEO Concern
Cyber Fraud Takes the Lead: What the Shift Away From Ransomware Signals for Enterprises
Cyberattacks in the age of AI: How to protect yourself in the UAE
Data Breach May Have Hit 1 Million Charlotte, North Carolina, Telecom Users
Dell data breach claimed, but researchers are skeptical
Dell Technologies Allegedly Breached by ShinyHunters and Lapsus$
Department of Homeland Security (DHS) Data Breach: Thousands of Officers’ Details Leaked
deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran
Dutch court convicts hacker who exploited port networks for drug trafficking
Dutch court sentences hacker to 7 years for drug trafficking and extortion
Dutch Hacker Sentenced to Seven Years for Rotterdam & Antwerp Port Cyberattacks
Dutch Port Hacker Sentenced to Prison
Endesa and EnergÃa XXI notify customers of data breach
Enterprise security faces a three-front war: cybercrime, AI misuse, and supply chains
Eurail discloses data breach, unknown number of customers affected
Everest ransomware group claims Nissan breach, demands response
Executives more likely to take phishing bait than junior staff
Four essential tips to ensure you bounce back after a cyber attack
Global Data Breach Costs Fall for the First Time in 5 Years, But We’re Not Out of the Woods Yet
Global Magecart Campaign Targets Six Card Networks
Global Shop Solutions' ANKA Platform Data Breach Affects 537,877 Users
Government statement on 'serious cyber attack' at Nuneaton school
Hacker taunts Symantec, releases pcAnywhere source code, promises others
Hackers claim to have Target source code for sale following recent cyberattack
Hackers Exploit Browser-in-the-Browser Trick to Hijack Facebook Accounts
Hackers Leverage Browser-in-the-browser Tactic to Trick Facebook Users and Steal Logins
Hackers Use Browser-in-the-Browser Technique to Steal Facebook Login Credentials
Hackers’ botnet is exploiting 1234 passwords to steal crypto
ICE Data Breach Hits 4,500 Border Patrol and ICE Staff as Names and Numbers Leak
Inc Ransom Breaches Compact Industries, Harrison Design & More
Instagram Denies Data Breach Despite Users' Password Reset Requests
Is ransomware in decline or just evolving?
Kazu Ransomware Group Breaches MyVete Veterinary Software
Korean Air Data Breach by Clop Ransomware Impacts 30,000 Employees
Kremlin-linked hackers pose as charities to spy on Ukraine’s military
Kubernetes accelerates large-scale phishing operations
Kyowon investigates ransomware data leak to determine if customer information affected
Long-Running Web Skimming Campaign Steals Credit Cards From Online Checkout Pages
Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading Tool
Man to plead guilty to hacking US Supreme Court filing system
Massive cyberattack on Polish power system in December failed, minister says
Microsoft January 2026 Patch Tuesday fixes 3 zero-days, 114 flaws
Microsoft Patch Tuesday January 2026: Actively Exploited Zero Day, 8 High-Risk Flaws
More than 40 countries impacted by North Korea IT worker scams, crypto thefts
Nearly 90% of phishing attacks aim to steal account credentials
New Advanced Linux VoidLink Malware Targets Cloud and container Environments
New Android Banking Malware ‘DeVixor’ Adds Ransomware Capabilities
New Chinese-Made Malware Framework Targets Linux-Based Cloud Environments
New Facebook Phishing Scam Uses Fake Pop‑Ups So Real Even Experts Get Fooled
New investigation reveals top phishing trends in 2025
New Magecart Skimming Network Targets Global Payment Providers on E-commerce Websites, Including Mastercard, American Express
New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack
New VoidLink malware framework targets Linux cloud servers
New Zealand: New health data breach increases scrutiny on private health IT
North Korean Hackers Deploy Malicious QR Codes in Phishing Attacks on US Targets
North Korean hackers using QR codes to bypass smartphone safety features, says South Korea's internet security agency
Oregon Medicaid insurer’s data breach could lead to insurance fraud
Parliament Asks Security Pros to Shape Cyber Security and Resilience Bill
Personal Details of Thousands of Border Patrol and ICE Goons Allegedly Leaked in Huge Data Breach
Phishing scam exploits performance review anxiety to deploy malware
Phishing Scams Exploit Browser-in-the-Browser Attacks to Steal Facebook Passwords
Q4 2025 Malware Trends: Telegram Backdoor, Banking Trojans Surge, Joker Returns to Google Play
QR Phishing Attacks Surge Fivefold in 2025
Recycled data likely behind Instagram breach claims
Reproductive Medicine Associates of Michigan Data Breach Exposes Patient Health Data
Richmond Behavioral Health Authority now faces three class-action suits over data breach
Royal Borough of Kensington and Chelsea (RBKC) investigates cyber-attack as data breach confirmed
Rumpke settles lawsuit over employee data stolen in cyberattack
Scammers are tricking Facebook users with login pop-ups that look real
Security Leaders Discuss FBI Warning: North Korea Exploiting QR Codes
Service Providers Help Pig Butcher Scammers Scale Operations
ServiceNow Patches Critical AI Platform Flaw Allowing Unauthenticated User Impersonation
SHADOW#REACTOR Campaign Uses Text-Only Staging to Deploy Remcos RAT
Spanish Energy Giant Endesa Notifies Customers of Data Breach Impacting EnergÃa XXI
Spanish energy giant Endesa says it was hit by data breach, customers affected and 20 million files allegedly put up for sale
State-linked Russians go on spear phishing spree
Suspected ransomware attack threatens one of South Korea’s largest companies
Target employees confirm leaked source code is authentic
Target’s Source Code Confirmed Stolen: Why Does This Matter?
Teaching cybersecurity by letting students break things
Tech companies owe the Irish data protection authority over €4 Billion in fines, but hardly anyone pays
Teen hackers recruited through fake job ads
Telegram to Add Warning for Proxy Links After IP Leak Concerns
Tennessee man to plead guilty to hacking Supreme Court’s electronic case filing system
The Kyowon Ransomware Breach and Korea’s Reputation: The Next Economic Risk Isn’t Finance but Trust
The Netherlands: Court tosses appeal by hacker who opened port to coke smugglers with malware
Ukraine's army targeted in new charity-themed malware campaign
University of Hawaiʻi Discloses Breach Impacting Cancer Research Study Participants
What insurers expect from cyber risk in 2026
What Is a DNS Attack? Understanding the Risks and Threats
What makes AI-powered phishing a potent cyber danger?
Why QR Codes Are Education’s New Phishing Blind Spot
Widespread Magecart Campaign Targets Users of All Major Credit Cards
12th January
88.5% of phishing attacks focus on stealing account credentials
2026 Instagram Phishing Scam Targets Users with Fake Reset Emails
AI Makes Old Attacks Faster to Launch, Easier to Scale, and Harder to Detect
Ariel Clinical Services Data Breach Exposes Social Security Numbers & Medical Information
Armenia probes alleged sale of 8 million government records on hacker forum
Attackers claim PayPal credential leak, but researchers doubt the data’s useful
Attackers Targeting LLMs in Widespread Campaign
'Bad actor' hijacks Apex Legends characters in live matches
Been asked to reset your Instagram password? Company denies data breach reports after users bombarded with request emails
BLACKSTORE Data Breach Exposes Over 100k Customer Records
BreachForums Database Leak Turns the Tables on Threat Actors
Browser-in-the-Browser technique rapidly gaining ground as an attack method
Business leaders see AI risks and fraud outpacing ransomware
California Shuts Down Health Data Resales By Unregistered Brokers
Californian privacy regulator fines two marketing firms for selling health information
Canopy Health Confirms Cyberattack, Patients Not Notified for Six Months
CareOregon and Health Share of Oregon Warn of Potential Insurance Fraud After Data Breach
CISA Closes Ten Emergency Directives After Federal Cyber Reviews
CISA orders feds to patch Gogs RCE flaw exploited in zero-day attacks
Clackamas College Data Breach Affects 33,381 Individuals
CrazyHunter ransomware escalates with advanced intrusion tactics, six Taiwan healthcare victims confirmed
Cyber Fraud Overtakes Ransomware as Top Security Threat
Cyber-enabled fraud overtakes ransomware as top global cyber risk
Cyber-fraud overtakes ransomware as business leaders' top cyber-security concern
Data breach at Denton County MHMR Center Exposes Personal Information of over 105,000 people
Deferred University of Hawaii Cancer Center breach disclosure sparks concern
Denton County MHMR Center data breach impacts nearly 109K patients
Devereux Foundation Discloses Data Breach Following Ransomware Attack
Dot Foods Data Breach Affects 6,374 People, Exposing Social Security Numbers
Downtime pushes resilience planning into security operations
Dutch court jails hacker over port cocaine smuggling
Dutch court sentences hacker who used port systems to smuggle cocaine to 7 years
Endesa electric company hacked: Canary Islands customers warned after major data breach
EU’s Chat Control could put government monitoring inside robots
Everest Group Claims Massive Nissan Data Breach, Over 100,000 PayPal Credentials Leaked
Everest Ransomware Claims Breach at Nissan, Says 900GB of Data Stolen
Everest Ransomware Targets Nissan Following ASUS Data Breach
Facebook login thieves now using browser-in-browser trick
Fake Employee Reports Spread Guloader and Remcos RAT Malware
Fintech firm Betterment confirms data breach after hackers send fake crypto scam notification to users
France swaps alleged ransomware operative for imprisoned researcher in Russia
GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials
Gulshan Management Services Hit by Data Breach Affecting Hundreds of Thousands
Hacker gets seven years for breaching Rotterdam and Antwerp ports
Hacking hub BreachForums hit by data breach - 324,000 accounts exposed
Here’s the truth about Instagram Data Breach 2026
Hidden Telegram proxy links can reveal your IP address in one click
How to protect your Instagram account from Phishing attack
Ignore Instagram password reset messages if you didn't request one
Illicit Crypto Activity Hits Record $158 billion in 2025
Instagram Data Breach Exposes 17.5 Million Users’ Emails and Phones
Instagram denied claims of a data breach and assured that it's a bug that has been fixed
Instagram Denies A New Data Breach After Password Reset Emails
Instagram denies breach after many receive emails asking to reset password
Instagram Denies Data Breach After Password Reset Emails, 6.2 Million Accounts Added to Have I Been Pwned (HIBP)
Instagram denies data breach after users receive password reset emails
Instagram Denies Data Breach After Wave of Password Reset Emails
Instagram Denies Data Breach as Password Reset Emails Panic Users
Instagram denies data breach of 17 million users after password reset email wave - here's what to do next
Instagram denies data breach of 17.5 million users email accounts, passwords, phone numbers
Instagram denies data breach reports, says user accounts are secure
Instagram denies data breach, blames reset glitch
Instagram Denies Data Breach, Fixes Unsolicited Password Reset Requests
Instagram Denies Reports of Hacking and Data Breach, Says ‘Accounts Are Secure’
Instagram password reset email: Here's how to safeguard yourself from phishing cyber threats
Instagram Password Reset Emails Trigger Alarm as Company Denies Data Breach
Instagram Phishing Emails Spark Global Cyber Alert
Instagram Refutes Data Breach Claims, Confirms User Accounts Remain Safe
Iran-Linked MuddyWater Deploys Rust-Based RAT in Middle East Phishing Attacks
John Buck Company Data Breach Exposes Social Security Numbers
Kyowon Group Confirms Cyberattack as Multiple Systems Go Offline
Kyowon group investigates ransomware attack amid possible data leak
Kyowon Group Investigates Ransomware Attack, Potential Data Leak
Kyowon Group shuts down internal network after suspected ransomware attack
LPL, Ameriprise, Ashton Thomas Report Data Breaches to Maine Regulators
Manchester United captain Fernandes account hacked after posts calling to remove INEOS spark uproar
Manchester United captain’s X account hacked, club asks fans not to interact
Manchester United forced to release statement after Bruno Fernandes’ X account is hacked
Manchester United to launch review after hackers target Bruno Fernandes
Margaritaville at Sea sued over data breach that allegedly exposed customers’ PII and PHI
Massive 2025 Data Breach Leaks 184 Million Passwords, What It Means and How to Stay Safe
Massive Instagram data breach exposes personal info of over 17 Million users
Max severity Ni8mare flaw impacts nearly 60,000 n8n instances
Meta Calls for Calm Amidst Instagram Password Reset Panic
Meta Denies Instagram Data Breach After Password Reset Emails Alarm Users
Meta denies Instagram data breach claims, says password reset issue is fixed
Meta denies viral claims about data breach affecting 17.5 million Instagram users, but change your password anyway
Meta fixes Instagram password reset flaw, denies data breach
n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens
New Zealand: Another health provider hacked - but took six months to let patients know
New Zealand: News of a second healthcare data breach emerges - six months after the fact
New Zealand: Second health provider, Canopy Health, hit in major cyber attack
“Nissan has 5 days before we leak their data,” attackers threaten
Notorious BreachForums hacking site hit by ‘doomsday’ leak of 324,000 criminal users
Oman Football Association Allegedly Breached in Ransomware Incident
Oregon Department of Environmental Quality (DEQ) data breach leaked thousands of people’s information, but the agency hasn’t told the public
OSSE San Juan Data Breach Exposes Government Utility Records
Petco class action alleges data breach exposed customer information
QR Phishing Attacks Rise Fivefold in Pakistan in Second Half of 2025
Researchers Uncover Service Providers Fueling Industrial-Scale Pig Butchering Fraud
Reset your Instagram Password Email: All you need to know about New Phishing Attack
Russian BlueDelta (Fancy Bear) Uses PDFs to Steal Logins in Just 2 Seconds
'Serious cyber attack' at Nuneaton school latest as impact of hackers revealed
Social Engineering at the Front Desk: A Growing Threat for Hotels
South Korea: Fair Trade Commission (FTC) chief says business suspension of Coupang possible amid data-breach probe
South Korea: Financial firms warn mandatory voice phishing compensation could backfire
Spanish energy giant Endesa discloses data breach affecting customers
Target's development server offline after hackers claim to steal source code
Telegram built-in proxy exposes real IPs using single-click flaw, researchers warn
There was no data breach, Instagram says
Threat actors Allegedly Claim Discord Dataset Containing 78,541,207 Files
Trellix warns of advanced Facebook phishing using browser-in-the-browser attacks
TriZetto class actions claim company failed to protect patient data during data breach
UK Council Cyber Attack Reveals Global Public Sector Risks
United Arab Emirates (UAE) Cyber Council flags risks of AI-powered phishing
University of Hawaii Cancer Center hit by ransomware attack
University of Hawaii Cancer Center Ransomware Attack Exposes Patients’ Social Security Numbers
Weaponized Employee Performance Reports Used to Deliver Guloader Malware
What caused Instagram's password change emails? Company dismisses data breach rumours
What makes AI-powered phishing a potent cyber danger?
Why Passwords Are Failing in the Age of AI
Zenflow Data Breach Exposes Social Security Numbers
Welcome to DBD. Cybercrime made global headlines in 2025. Attacks on well-known brands and organisations raised public awareness of the severity, frequency and impact of cyber attacks. Ransomware attacks were the highest ever recorded, and 2026 could be worse, as cyber criminals continue to extort their victims, with little chance of being brought to justice. It's a dangerous world out there, so please be extra vigilant and mindful of the risks and threats. Wishing you all the best for the New Year. Thanks again for all your support. Stay safe. :)