Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 20th July and 26th July 2026.21st July
79% of ransomware attacks now originate from compromised identities
79% of Ransomware Attacks Start with Compromised Identities
A New Ransomware Threat Actor Emerges Every Week
AgentBaiting: Fake AI Skills Trick Claude Code, Gemini, and ChatGPT Into Spreading Malware
AI agents are still logging in as humans
AI agents tricked into recommending malicious GitHub repositories
AI music generator Suno breach affects 55 Million users, per Have I Been Pwned
AI-generated reports push GNOME to shorten its disclosure window
Akamai Warns of Fraudulent AI Agent Activity Aimed at E-Commerce Sites
ApolloMD Agrees to Pay $4.02 Million to Settle Data Breach Lawsuit
Asia-Pacific cyber threats rise on AI & geopolitics
Australia: GO2 Health medical clinic in Brisbane waited almost three months to alert patients it was hacked
Australia: New South Wales (NSW) accounting and advisory firm allegedly hit by SafePay ransomware
AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
Coca-Cola Fairlife hack claimed by Anubis ransomware
Coca-Cola Fairlife ransomware attack halts production as cyber threats to operations grow
Craneware Confirms Data Theft After Cyberattack, Investigations Underway
Craneware Exposes Significant Data Theft in Monday Data Breach
Critical Palo Alto VPN bug now exploited by Qilin ransomware gang
Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public Proof-of-Concept (PoC)
Critical wp2shell WordPress flaws exploited to install webshells
Cyberattack Halts Coca-Cola’s Fairlife Productions
Ernst & Young breach exposes client tax data - find out if you're at risk and what to do next
Estée Lauder Confirms Data Breach: SSNs, Passport Numbers, and Health Data Exposed via Oracle EBS Exploit
Estée Lauder Confirms Cyberattack Affecting Personal Information
Estée Lauder discloses data breach tied to Oracle EBS vulnerability
Fake FBI agents target people who already got scammed
Fake FBI Agents Use Internet Crime Complaint Center (IC3) Complaints to Target Scam Victims
Fake Troubleshooting Prompts Trick Online Banking Users in Spain and Portugal into Installing Trojans
FBI Warns of Deepfake Videos Impersonating Internet Crime Complaint Center (IC3) Leadership
Global car rental service data leak exposes thousands of drivers
Got an email from X about a suspicious login? It can be a phishing scam
Government ransomware attacks rose 13% globally to 187 incidents in first half of 2026, with The Gentleman most active
Hacked! Ernst & Young informs clients of third-party data breach
Hackers Already Exploiting Newly Patched WordPress Flaws, Researchers Warn
Hackers Exploit Palo Alto PAN-OS Flaw to Deploy Qilin Ransomware
Hackers Exploiting Palo Alto’s PAN-OS Vulnerability to Deploy Qilin Ransomware
Healthcare Software Provider Craneware Announces Data Breach
Here’s How A Hacker Allowed Google’s AI To Do 89% of the Crime
How AI and ransomware are reshaping cybersecurity
How ransom attacks on small businesses open doors to larger organisations
Hugging Face confirms data breach by AI agent: Why it has sparked a debate on cyber guardrails
JADEPUFFER Deploys ENCFORGE Ransomware Built to Destroy AI Models and Training Data
JadePuffer returns with ransomware built to target AI models and infrastructure
Kentucky part of multi-state 23andMe data breach settlement
Kenya probes hack of president's website after bitcoin ransom demand
Major US hospitals partner Craneware confirms data breach
Makeup giant Estée Lauder says hackers accessed Social Security numbers
Malaysia: Telco identifies suspect in data breach as Malaysian Communications and Multimedia Commission (MCMC) demands full report
New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack
New Zealand: Ministry apologises after data breach affects 276 student records
Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs
Paidwork Data Breach Exposes 23.3 Million Accounts, Banking Data and bcrypt Password Hashes
PhishByte warns Essential Eight misses phishing risk
PR3TACK preemptive framework maps threats before attackers use them
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
Ransomware detections among Indian SMBs rise in Q1 2026
Received a ‘KrisFlyer Anniversary Draw’ e-mail? It could be a phishing scam, Singapore Airlines warns
Research says JadePuffer Ransomware wipes off data on AI Model Infrastructure
Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros
Reynella East College updates parents, carers following June data breach
Russian Hacker Turns Jailbroken Claude Into Pentest Platform
Scammers Are Impersonating Internet Crime Complaint Center (IC3) Using Fake Profiles and AI-Generated Videos, FBI Updates Warning
Singapore Airlines warns against phishing scam in 'KrisFlyer Anniversary Draw' emails
SonicWall SMA zero-days were exploited weeks before disclosure
South Korea: Seoul Notifies 4.62 Million of Ttareungyi Data Breach, Offers Free Passes
South Korea: Seoul to compensate 4 million bike-sharing users after data breach
South Korea Confirms Cyberattack on Diplomatic Academy, Data of 6,000 Diplomats at Risk
Spain fines 23andMe nearly $3 million for cybersecurity failings enabling 2023 hack
Suno Data Breach: 55 Million Emails and Stripe Records Exposed
UK government scraps plans for digital ID cards after millions of Brits opposed
US Hospital Finance Software Provider Craneware Reports Data Theft
'Was this you?': Scammers using phishing techniques to hijack X accounts
Windows LegacyHive zero-day flaw gets free, unofficial patches
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning
Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
20th July
23andMe Pays $18 Million to Settle Multistate Data Breach Lawsuit
271 million Uber Eats and Starbucks records surface on hacker forum: Should you be worried?
AI agents just doubled inside the enterprise. Confidence rose faster than control did
An AI agent breached Hugging Face before an AI defender caught it: What users should do next
Attackers Combo Up Evasion Tactics for BEC Phishing
Australia: Crypto scam losses of $1.47 million in five days sparks Queensland police alert to new phishing threat
Centers Laboratory Discloses Data Breach Affecting 542K Individuals
Chinese police repatriate key suspect in phishing and Trojan virus case from Vietnam
Clover Health hit with data breach
Clover Health reveals data breach in SEC filing
Coca-Cola Company’s Fairlife targeted in ransomware attack
Coca-Cola’s Fairlife halts U.S. production after ransomware attack
Community College of Beaver County (CCBC) Data Breach Exposes Social Security Numbers and More
Craneware confirms data breach after cyberattack
Craneware Confirms Data Breach, Employee Records Among Exposed Data
Craneware reveals cyber attack with employee and customer data stolen
Critical ServiceNow code execution flaw now exploited in attacks
Cruciferra Crypter Uses Process Ghosting to Evade Detection
CVE-2026-42533 Exposes Critical Pre-Auth nginx RCE Flaw
Cyber Attack Against Major Milk Producer Could Lead To A Milk Shortage
Cyberattack hits Coca-Cola's $4 billion dairy brand, suspends US production
Cyberattack pauses Fairlife’s production, working to learn about impact on Webster plant
Data breach hits well-known AI company: ‘Sorry for any disruption’
DocuSign Phishing Kit Delivers RMM Tools to Windows and macOS
Don’t run into these ‘Gentlemen’. More on this Ransomware gang
Ecopetrol confirms ransomware attempt, data stolen from 3,300 accounts
Edinburgh-based healthcare firm 'hit with cyber attack' as hackers steal data
Ernst & Young Data Breach Affects Personal, Financial Information
Ernst & Young data breach exposes personal and financial information of tax clients
Ernst & Young reveals data breach following hack on support system
Estée Lauder discloses data breach via Oracle E-Business flaw
Experts Advise iPhone Users to Turn Off AirPlay to Prevent Hacker Threats via Public Wi-Fi
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
Fairlife Ransomware Attack Hits Production Systems, U.S. Operations Suspended
Fairlife shortage looms after ransomware hits Coca-Cola plants
Fairlife stops US milk production after ransomware attack
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Family Partnerships Data Breach Exposes SSNs and Financial Account Information
FBI Arrests Florida Man in $220,000 Steam Crypto Theft Case
Free Archive Program 7-Zip Can Be Hacked With a Malicious File
‘Frustrated and stressed’: Thousands impacted by cyber attack at Calgary university
Governments Weigh Ransomware Payment Bans as Hackers Grow Bolder
Hacker stole from Steam users for years, got caught because he ordered food online
Hacker wipes European country’s entire land registry database, paralyzing real-estate market
Hacker wipes Romania's entire land registry database
Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk
Hackers Are Hiding Invisible Text in Phishing Emails to Fool AI Security Tools
Hackers steal $23.7 million in crypto from Ostium in off-chain attack
Hackers stole ‘significant’ amount of data from tech firm relied on by thousands of US hospitals and pharmacies
Hackers were inside South Korea's diplomat training system for 9 months
Health tech firm Craneware admits “significant volume” of customer and employee data exposed in cyber attack
Health tech firm Craneware says customer and staff data stolen in cyber attack
Healthcare phishing breach exposes SSNs, medical records for 15 months
Healthcare ransomware attacks up 14% in first half of 2026
Heart Care Centers of Illinois Data Breach Compromises PHI and PII
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel
How receding Ransomware payments are reshaping the Economics of Cyber Extortion
Hugging Face: We Used AI to Catch the First Confirmed AI Agent Breach of a Major AI Platform
Hugging Face breach reveals why defenders need their own AI models on standby
Hugging Face breached by autonomous AI agent
Hugging Face confirms breach affected internal datasets and credentials, urges users to take action
Hugging Face Confirms Data Breach Caused by Autonomous AI Agent
Hugging Face Hacked in Autonomous AI Attack
Hugging Face Says Autonomous AI Agent System Breached Production Infrastructure
Hugging Face says it resorted to a Chinese AI model to battle a fully autonomous cyberattack because U.S. model guardrails stymied its defense
Hugging Face warns an autonomous AI agent hacked its network
Identity-based attacks overtake software flaws as leading ransomware entry point
India: Data breach exposes documents tied to Kudankulam nuclear plant expansion
India says allegedly leaked nuclear plant files pose no safety risk
Information Commissioner Notified After Data Breach Concerns At Former West Sussex County Council Buildings
Italy fines WINDTRE €1.7 million over security flaws behind two data breaches
Jadepuffer: Agentic attack evolves to destroy AI models
JadePuffer agentic attacks now target AI model data with ransomware
JadePuffer Returns With Ransomware Designed to Wipe AI Models
Kenya restores presidential website after cyber attack
Kenya’s Presidential Website Hit by Cyber Incident, Government Says No Data Was Stolen
Kentucky included in settlement with 23andMe following 2023 data breach
LG Monitors Spotted Installing Adware-Like App on Windows PCs
Little Flower Data Breach Exposes Health Information and SSNs
Minnesota Health Insurance Network Data Breach Exposes PHI and PII
Mythos Didn't Break Your Security Program. Your Exposure Window Could
New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction
New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications
New HollowGraph malware uses Microsoft Graph for stealthy C2 comms
New X phishing scam uses fake login alerts to steal your account
Oak Hill Data Breach Exposes SSNs and Medical Information
One threat that infiltrated the ANC, Anglo American, Mediclinic, South African Airways, and Pick n Pay
Paidwork breach exposes sensitive data of 23 million user
Paidwork Data Breach Exposes 23 Million User Records, Have I Been Pwned (HIBP) Says
Plugging an LG monitor into a Windows computer installs a potentially unwanted program
Police Chiefs Cite Transport for London (TfL) Hack in Push for Cybercrime Risk Orders
Qantas goes unpunished for staggering data breach
Ransomware attack disrupts fairlife’s US production
Ransomware attack forces Coca-Cola to suspend US production at dairy unit
Ransomware attacks hit SMBs harder than ever as cybercrime gang rivalry heats up
Ransomware detections on Indian SMBs is on the rise
Researchers Build WordPress Exploit Using OpenAI's GPT
Resource Center of Dallas Data Breach Affects At Least 9k Individuals: SSNs Exposed
Romania races to restore land registry after cyberattack disrupts property market
Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine
Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
Sefas Innovation Data Breach Impacts Banks: Personal and Financial Info Exposed
ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875)
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
Software provider to more than 2,000 US hospitals says hackers stole employee and customer data
SonicWall SMA1000 flaws exploited as zero-days to push custom malware
South African industrial giant that makes chemicals targeted by one of the world’s most notorious ransomware groups
South Carolina will receive $280,000 in 23andMe settlement after data breach
Thailand: Base-education hacker arrested in Phuket
The Gentlemen deploys new malware to take control of systems before encryption
The New Cyber Frontier: Ransomware Surges as AI Deepfakes Expose Corporate Vulnerabilities
The Odyssey piracy scams surface hours after its theatrical debut
The Rise of Calendar Phishing
The Windows 10 hangover is becoming a security problem
Threat Actors Allegedly Listed Starbucks Data on Hacker Forums
U.S. court seizes $8.37 million in crypto from ransomware negotiator accused of aiding hackers
U.S. Prosecutors Charge Russian Trio in Cybercrimes Causing More Than $62 Million in Losses
United Arab Emirates: Dubai Police Warns Against Online Scams Promising Work and Visit Visas
Unpatched SharkNinja flaw turns vacuum cleaner into a spy, reveals house maps, WiFi passwords
Why Security companies can’t create an invincible Vaccine against Ransomware
WordPress Critical RCE Security Flaw a Threat to Millions of Websites
WordPress urges immediate update: hackers are gaining full control with a critical exploit
World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
wp2shell: The Unauthenticated WordPress Exploit That Needs No Login, No Plugins, Just a Vulnerable Core
X users are being hit by fake login alerts: the phishing emails look real
Zero-Day Hack Exposes South Korean Diplomatic Academy to Massive Data Breach
Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 6th July and 12th July 2026, kindly assisted by our partners.
