France's national blood service EFS says a cyberattack on a refrigeration vendor pushed cold room settings to extreme temperatures at 3 sites, without losing any...
DigiCert says a server migration left an internal business system exposed, letting an unauthorized account read archived customer contact details and some identity documents.
Quebec regional airline Air Creebec says attackers exfiltrated administrative files holding current and former employee and passenger data, while its flights and operations were unaffected.
Crédit Mutuel Arkéa says attackers used a service provider's platform to send fraudulent transfers from the bank's own account, with roughly €118 million reportedly lost.
Burnaby School District confirmed a ransomware attack after unauthorized access on September 21, 2026. Personal information was stolen, and Qilin has allegedly claimed a data...
Sekoia says APT29 used compromised sites, lookalike domains and a hijacked Plerdy analytics script to hit Ukrainian and Western targets with patched iOS and Android...
DreamHost confirmed an attacker exploited its web File Manager to steal FTP and SFTP passwords and some webmail sessions between August and October 23, 2026.
Muji operator Ryohin Keikaku says about 1.09 million Muji Card records, including full numbers of 345,000 valid credit cards and birth dates, may have been...
mSecure maker mSeven says an unauthorized actor took an encrypted copy of a customer database and urges users to change passwords, 2FA and passkeys.
Attackers hijacked OpsShield's cPGuard update channel, pushing a fake update that stole root SSH keys and password hashes from about 2,950 hosting servers.
WorkOS confirmed an attacker accessed an internal sales tool holding CRM contacts, account histories and customer conversation excerpts, using an AI-assisted offensive framework.
Bitdefender says a 3AM ransomware affiliate likely used an AI agent in a loop to steal credentials, build domain trusts and encrypt 37 machines at...
Chainstack confirmed an attacker reached its development and production environments via a third-party component, exposing customer names, emails, password hashes and possibly node credentials.
Tools and intelligence from BreachNews.
