M1 confirmed a contained October 30 data breach exposing customer names, NRIC/FIN numbers, dates of birth, and contact details; cards and account access unaffected.
Doctor Anywhere confirmed a malicious cyber incident with unauthorized access. Affected-user emails list names, ID and passport numbers, and bank account details; clinical records were...
Queens Public Library says a ransomware attack knocked out its website, Wi-Fi, computers, checkout machines and app across all 66 New York City branches.
Norway's aid agency Norad says attackers abused 27 accounts on its grants portal and may have reached names and emails for all 20,614 registered users.
France's national blood service EFS says a cyberattack on a refrigeration vendor pushed cold room settings to extreme temperatures at 3 sites, without losing any...
DigiCert says a server migration left an internal business system exposed, letting an unauthorized account read archived customer contact details and some identity documents.
Quebec regional airline Air Creebec says attackers exfiltrated administrative files holding current and former employee and passenger data, while its flights and operations were unaffected.
Crédit Mutuel Arkéa says attackers used a service provider's platform to send fraudulent transfers from the bank's own account, with roughly €118 million reportedly lost.
Burnaby School District confirmed a ransomware attack after unauthorized access on September 21, 2026. Personal information was stolen, and Qilin has allegedly claimed a data...
Sekoia says APT29 used compromised sites, lookalike domains and a hijacked Plerdy analytics script to hit Ukrainian and Western targets with patched iOS and Android...
DreamHost confirmed an attacker exploited its web File Manager to steal FTP and SFTP passwords and some webmail sessions between August and October 23, 2026.
Muji operator Ryohin Keikaku says about 1.09 million Muji Card records, including full numbers of 345,000 valid credit cards and birth dates, may have been...
mSecure maker mSeven says an unauthorized actor took an encrypted copy of a customer database and urges users to change passwords, 2FA and passkeys.
Tools and intelligence from BreachNews.
