Editor's Message

Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and PRiSM celebrated it's third anniversary. Both projects have made a huge impact on my life and I'd like to thank each and everyone of you who have supported me, with special thanks to those individuals and communities who have helped me build up my knowledge on cybercrime and ransomware over the years. Thanks again for all your continued support. Stay safe. :)


“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington D.C.
0
Data-Leaking Ransomware Attacks Tracked This Month
0
Data-Leaking Ransomware Attacks Tracked This Year



Monday, 31 August 2026

Data Breaches Digest - Week 36 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 31st August and 6th September 2026.


📅 31st August

85% of Education Ransomware Starts with Stolen Identities

'128 Billion Won Fine' GS Retail Apologizes for Data Breach, Vows to Strengthen Security System

AI agent in Cursor linked to ransomware breaches at 7 companies

AI AppSec tools agree on just 5% of security findings

Anthropic Warns Commodity Infostealers Are Hijacking Claude Sessions to Drain Paid Usage

AshSqlite Vulnerability (CVE-2026-77846) Exposes Hidden JSON Fields

Australian app developer DigiGround investigating ransomware claims

Blind Eagle-Linked Loader Uses GitHub, VBScript, PowerShell and InstallUtil to Deploy AsyncRAT

CareCloud data breach affects more than 3.75 million people

CarGurus Data Breach Exposes 12.5 Million Accounts; Here's What Hackers Got

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

Court upholds firing of Korea Food Research Institute (KFRI) executive for crypto mining and data breach in Korea

Darksiders Publisher THQ Nordic Named on DireWolf Ransomware Leak Site

Data Breach & Blind Spots: The Cyber Risk for Supply Chains

Department of Justice (DoJ) Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims

Free Cloudflare DNS Tweak Blocks Malware and Phishing Across Home Networks

Free Router DNS Tweak Blocks Malware and Phishing Across Home Networks

GS Retail fined 12.8 billion won over data breach affecting 1.66 million users

Guernsey: Doctor's appointment phone call led to data breach

Hackers demand €2 million from Berlin, threaten data leak

Hackers Steal Identity, Vehicle Data from Latvia’s Road Traffic Safety Directorate

Hackers’ Own Malware Infection Exposes Their RATs, Phishing Kits and Attack Infrastructure

Human Rights Writers Association of Nigeria (HURIWA) faults police, National Data Protection Commission (NDPC) over delay in probe of alleged National Institute for Policy and Strategic Studies (NIPSS) data breach involving naval officer

India: Hyderabad publisher hit by ransomware, €20m ransom sought

Infostealer Malware Steals Claude Session Cookies to Hijack Accounts and Bypass 2FA

Law Society of Scotland issues fraud alert after phishing email

Nigeria: Rights Group Decries Delay In Probe Of Alleged Data Breach By National Institute for Policy and Strategic Studies (NIPSS)

Nigerians extradited to US for sextortion, deaths of two teens

OpenAI Warns Astra AI Could Develop Zero-Day Exploits and Launch Autonomous Cyberattacks

Rhysida Ransomware puts Berlin Government Data up for sale for 30 BTC

Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails

Simple Router DNS Tweak Blocks Malware and Phishing Across All Connected Devices

Steam leak that exposed a decade of game history wasn’t even a hack

TerminalFix Attack Uses Fake Cloudflare CAPTCHA to Deploy Reverse Tunnel Into Corporate Networks

What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree

Wippy Data Breach Exposes 736 Users' Height, Blood Type; South Korea Fines nRiZE ₩118 Million

Your Money and Data Are at Risk as Phishing Attacks Rise