A newly registered account alleges a Spencer's database leak involving customer credentials, loyalty PINs and transaction records. The claim remains unverified, with no company confirmation.
Mirae Asset Securities confirmed separate attacks exposing about 3,800 customers’ account numbers and information on 35,255 staff, including some encrypted passwords. Affected services were disconnected.
M1 confirmed a contained October 30 data breach exposing customer names, NRIC/FIN numbers, dates of birth, and contact details; cards and account access unaffected.
Doctor Anywhere confirmed a malicious cyber incident with unauthorized access. Affected-user emails list names, ID and passport numbers, and bank account details; clinical records were...
Queens Public Library says a ransomware attack knocked out its website, Wi-Fi, computers, checkout machines and app across all 66 New York City branches.
Norway's aid agency Norad says attackers abused 27 accounts on its grants portal and may have reached names and emails for all 20,614 registered users.
France's national blood service EFS says a cyberattack on a refrigeration vendor pushed cold room settings to extreme temperatures at 3 sites, without losing any...
DigiCert says a server migration left an internal business system exposed, letting an unauthorized account read archived customer contact details and some identity documents.
Quebec regional airline Air Creebec says attackers exfiltrated administrative files holding current and former employee and passenger data, while its flights and operations were unaffected.
Crédit Mutuel Arkéa says attackers used a service provider's platform to send fraudulent transfers from the bank's own account, with roughly €118 million reportedly lost.
Burnaby School District confirmed a ransomware attack after unauthorized access on September 21, 2026. Personal information was stolen, and Qilin has allegedly claimed a data...
Sekoia says APT29 used compromised sites, lookalike domains and a hijacked Plerdy analytics script to hit Ukrainian and Western targets with patched iOS and Android...
DreamHost confirmed an attacker exploited its web File Manager to steal FTP and SFTP passwords and some webmail sessions between August and October 23, 2026.
Tools and intelligence from BreachNews.
