American Addiction Centers
SSNs and health data stolen from Salesforce
View incident → Indexed 2 weeks, 4 days ago
2026 Data Breaches Year-to-Date (3047 indexed)
Hitachi High-Tech
Industrial and tech data exfiltrated by CoinbaseCartel
View incident → Indexed 2 weeks, 4 days ago
Portable Intelligence Canada
BlackNevas breach confirmed Aug 14
View incident → Indexed 2 weeks, 4 days ago
Cambria Law Firm
INC_RANSOM exfiltrated confidential client data
View incident → Indexed 2 weeks, 4 days ago
Exposed Credential Elasticsearch DB
24B stolen credentials exposed publicly
View incident → Indexed 2 weeks, 4 days ago
Hinman Straub
US law and government relations firm breached by Storm
View incident → Indexed 2 weeks, 4 days ago
Cambria Law Firm Canada
INC_RANSOM ransomware, firm data exfiltrated
View incident → Indexed 2 weeks, 4 days ago
Compunnel IT Services
INC_RANSOM ransomware hit US IT firm
View incident → Indexed 2 weeks, 4 days ago
Cybersecurity teams should be responsible for risk oversight, rather than for executing
Cybersecurity teams should be responsible for risk oversight, rather than for executing every corrective action. Assigning security teams the tasks of finding, prioritizing, assigning, implementing, tracking and validati
Records held in Salesforce and ServiceNow systems are under attack leaving user data
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those perpetrated by the extortion group ShinyHunters, Reco
The Rust-based macOS infostealer harvests users’ passwords, keychain information,
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared fir
AmnesiaStealer contains novel functions, including the attackers gaining remote control
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
Polish Heat-and-Power Plant
Breached via private APN; facility supplies heat to ~50,000 residents
Over 95% of the affected companies were exposed before the malicious LiteLLM packages
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published. The post Trivy, Not LiteLLM Behind the 2,500 Org Compromise appeared first on SecurityWeek.
Snowflake Breach Guilty Plea
165 orgs compromised, billions of records stolen
View incident → Indexed 2 weeks, 4 days ago
A former data analyst contractor for Brightly Software has been sentenced to two years
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme. [...]
Akira ransomware affiliates were seen using a new technique to evade endpoint detection
Akira ransomware affiliates were seen using a new technique to evade endpoint detection and response (EDR), where they rebooted a compromised Windows system into Safe Mode with Networking enabled. According to Huntres
U.S. Federal Government Agencies
Thousands of civil servants' passwords exposed, including White House-linked credentials
AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords,
AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords, cookies and data while giving attackers live control of the browser. Jamf Threat Labs researchers disclosed AmnesiaStealer, a new multi-st
LiteLLM AI Supply Chain
2500 orgs and 434K CI/CD pipelines exposed
View incident → Indexed 2 weeks, 4 days ago
100K+ police officer records leaked
100K+ police officer records leaked
View incident → Indexed 2 weeks, 4 days ago
Clover Health
Data breach disclosed in securities filing; type and scope of exposed data not yet determined