Keystone confirmed an attacker stole the key that verifies its hardware wallets are genuine, exposing 25,964 buyer records and forcing it to destroy 18,835 devices.
The University of Copenhagen confirmed hackers accessed a test environment holding names, CPR numbers and contact details of about 525,000 people, plus 20,000 ID card...
A cyberattack on UNM Health Sciences Center forced ambulance diversions, canceled clinic appointments and sent staff home as an extortion group claims data theft.
ENGIE confirmed attackers stole French customers' contact details, contract numbers and meter IDs after breaching a tool its sales partners use.
A threat actor claims to have leaked internal databases and wiki documents from Tipping Point UK and Pull The Plug UK, though the breach remains...
Australia's ASD says it accessed an Amadey malware backend and disconnected the criminal controller from about 180,000 infected computers worldwide, including machines in Australia.
Sansec says a single operator has planted scanner-evading JavaScript loaders in 953 mostly Magento stores since July 2025, often after PolyShell and SessionReaper attacks.
MIRAE ASSET Life confirmed attackers stole customer personal and credit data, as KB Kookmin Bank raised its breach total to 2,210 victims in Korea's financial...
PingCAP confirmed an attacker used stolen credentials to copy source code and customer business data from TiDB Cloud systems, while FulcrumSec claims it took 10.6...
GMO Internet confirmed attackers breached its Desktop Cloud service and used stolen trading credentials for unauthorized trades, and says it will not pay the extortion...
Railway confirmed an attacker escalated privileges in its build system and decrypted customer environment variables while hunting for AI API keys, potentially exposing about 100,000...
Capcom confirmed an unauthorized party accessed its CAPCOM ID service, exposing 11.7 million account records and hijacking 196 accounts, with 19 Japanese store customers' data...
LiteLLM confirmed attackers hijacked its release pipeline to push a credential-stealing 1.107.0 package to PyPI and Docker using a leaked, unrevoked master key.
Tools and intelligence from BreachNews.
