A threat actor is selling an alleged Jobe Sports database containing 130,337 customer records, with sample data timestamped as recently as Sept. 30.
Fortinet says attackers are actively exploiting a critical FortiMail zero-day that allows unauthenticated arbitrary file writes, prompting an urgent CISA deadline.
ShinyHunters has resurfaced on new dark web infrastructure with fresh O'Reilly Automotive and DexCom extortion claims following increased FBI pressure.
South Africa's air traffic operator is investigating ransomware-linked malware discovered in an operational technology environment supporting aviation weather services.
DC health officials disclosed that hidden personal information in public reports potentially exposed data belonging to 399,086 Medicaid and Healthcare Alliance beneficiaries.
The FBI reportedly told employees that personal information, including Social Security numbers and home addresses, was stolen in the recent ShinyHunters cyberattack.
A Pentagon personnel data breach exposed unencrypted Social Security numbers and military information after unauthorized users accessed a vulnerable DMDC server for months.
Arizona’s court system confirmed hackers copied personal information belonging to many residents, including confidential address data associated with some protective orders.
A threat actor is selling 17,869 records allegedly stolen from Sea2D3D, including phone numbers, account balances, usernames and betting activity.
Astrana Health confirmed attackers impersonated personnel and spoofed its corporate phone number before accessing systems and acquiring private or confidential information.
A threat actor claims it obtained 6.5 million GOLO Shopify customer records through compromised API credentials and is now offering the alleged database for sale.
The FBI is investigating unauthorized activity affecting FBIJobs.gov after ShinyHunters claimed it breached bureau systems through a previously unknown Oracle PeopleSoft vulnerability.
ShinyHunters claims it stole sensitive data from Fresenius Medical Care and is threatening to publish the information after a September 25 deadline.
Tools and intelligence from BreachNews.
