This week
This week.
Incidents reported in the last 90 days, with the way in as the source states it and what we check for it. Each item has its own page, and the source is cited there.
- 16 Oct 2026 · Hong KongAOMEI Backupper usersHow they got in, as reported: a supplier or vendor that was compromised first.
- 16 Oct 2026 · JapanBurger King JapanThe source does not state how they got in.
- 16 Oct 2026 · United StatesAmerican Collection Medical AgencyThe source does not state how they got in.
- 16 Oct 2026 · United StatesMid Florida Dermatology & Plastic SurgeryThe source does not state how they got in.
- 16 Oct 2026 · JapanBK JapanThe source does not state how they got in.
- 16 Oct 2026 · JapanAl Jazeera Media NetworkHow they got in, as reported: a supplier or vendor that was compromised first.
- 16 Oct 2026 · United StatesAnne Arundel CountyThe source does not state how they got in.
- 15 Oct 2026 · United StatesBAE SystemsThe source does not state how they got in.
- 15 Oct 2026 · United StatesAl JazeeraThe source does not state how they got in.
- 15 Oct 2026 · United StatesDentaQuestThe source does not state how they got in.
- 15 Oct 2026 · United StatesCenterPoint EnergyThe source does not state how they got in.
- 14 Oct 2026 · United StatesOver 70 US companiesThe source does not state how they got in.
- 14 Oct 2026 · JapanHealthcare and financial organisations globallyHow they got in, as reported: email made to look like it came from a trusted sender.
- 14 Oct 2026 · United StatesA Volexity customerHow they got in, as reported: a known flaw in software the victim ran.
- 14 Oct 2026 · ChinaHospitals and healthcare organizationsHow they got in, as reported: email made to look like it came from a trusted sender.
- 14 Oct 2026 · United StatesOrganizations across 150 countriesHow they got in, as reported: email made to look like it came from a trusted sender.
- 14 Oct 2026 · United StatesLedger customersHow they got in, as reported: a supplier or vendor that was compromised first.
- 14 Oct 2026 · United StatesRussian-speaking victims in BrooklynHow they got in, as reported: a domain made to look like the real one.
- 14 Oct 2026 · United StatesTwin Cities Pain ClinicHow they got in, as reported: email made to look like it came from a trusted sender.
- 13 Oct 2026 · United StatesDozens of US companiesThe source does not state how they got in.
- 13 Oct 2026 · United StatesMetaHow they got in, as reported: stolen or reused passwords.
- 13 Oct 2026 · United KingdomTFG LondonThe source does not state how they got in.
- 13 Oct 2026 · United StatesRoseland Community Hospital AssociationThe source does not state how they got in.
- 13 Oct 2026 · FranceSupermarkets across EuropeHow they got in, as reported: a known flaw in software the victim ran.
- 12 Oct 2026 · United StatesEtairos HealthThe source does not state how they got in.
- 12 Oct 2026 · United StatesSecure Healthcare Information ManagementThe source does not state how they got in.
- 12 Oct 2026 · United StatesUS government websitesHow they got in, as reported: a known flaw in software the victim ran.
- 10 Oct 2026 · South KoreaSouth Korean banksHow they got in, as reported: automated AI tools that work through many organizations at once.
- 10 Oct 2026 · United StatesWhite & CaseThe source does not state how they got in.
- 10 Oct 2026 · United StatesA Somerset County industrial firmThe source does not state how they got in.
- 9 Oct 2026 · United StatesU.S. government agenciesHow they got in, as reported: automated AI tools that work through many organizations at once.
- 9 Oct 2026 · United StatesBacon County Health ServicesThe source does not state how they got in.
- 9 Oct 2026 · United StatesValley Oaks HealthThe source does not state how they got in.
- 9 Oct 2026 · United StatesDomino'sHow they got in, as reported: stolen or reused passwords.
- 9 Oct 2026 · United StatesU.S. critical infrastructureThe source does not state how they got in.
- 9 Oct 2026 · United StatesUS and foreign critical infrastructureHow they got in, as reported: email made to look like it came from a trusted sender.
- 8 Oct 2026 · JapanPark24The source does not state how they got in.
- 8 Oct 2026 · ChinaSouth Carolina power companyHow they got in, as reported: a known flaw in software the victim ran.
- 8 Oct 2026 · United StatesLaboratory Services CooperativeThe source does not state how they got in.
- 8 Oct 2026 · United StatesCasper Orthopedic AssociatesThe source does not state how they got in.
- 8 Oct 2026 · South KoreaUranium FinanceHow they got in, as reported: a known flaw in software the victim ran.
- 8 Oct 2026 · United StatesUS critical infrastructureHow they got in, as reported: a known flaw in software the victim ran.
- 8 Oct 2026 · United StatesThousands of US organizationsHow they got in, as reported: a known flaw in software the victim ran.
- 8 Oct 2026 · South KoreaSouth Korean financial firmsHow they got in, as reported: a known flaw in software the victim ran.
- 8 Oct 2026 · RussiaOrganizations using Fortinet devicesHow they got in, as reported: stolen or reused passwords.
- 8 Oct 2026 · United StatesOracle HealthHow they got in, as reported: stolen or reused passwords.
- 8 Oct 2026 · United StatesClients of MonsterCloudThe source does not state how they got in.
- 7 Oct 2026 · NetherlandsJeppesen ForeFlightThe source does not state how they got in.
- 7 Oct 2026 · JapanAdvantestThe source does not state how they got in.
- 7 Oct 2026 · United StatesSouthern CompanyThe source does not state how they got in.
- 7 Oct 2026 · South KoreaAdvantest CorporationThe source does not state how they got in.
- 7 Oct 2026 · South KoreaSpotifyThe source does not state how they got in.
- 7 Oct 2026 · South KoreaExposed AI server operatorsHow they got in, as reported: a system left reachable from the internet.
- 7 Oct 2026 · South KoreaGoogleHow they got in, as reported: a supplier or vendor that was compromised first.
- 7 Oct 2026 · South KoreaFortinet FortiGate firewall ownersHow they got in, as reported: stolen or reused passwords.
- 7 Oct 2026 · South KoreaMonsterCloud customersThe source does not state how they got in.
- 7 Oct 2026 · United StatesArizona court systemHow they got in, as reported: email made to look like it came from a trusted sender.
- 7 Oct 2026 · United StatesThousands of US entitiesThe source does not state how they got in.
- 6 Oct 2026 · United StatesArizona's court systemThe source does not state how they got in.
- 6 Oct 2026 · GermanyWikimedia FoundationHow they got in, as reported: automated AI tools that work through many organizations at once.
- 5 Oct 2026 · United StatesWindRose Health NetworkHow they got in, as reported: a supplier or vendor that was compromised first.
- 5 Oct 2026 · United StatesUniversity of Illinois Chicago (College of Medicine)The source does not state how they got in.
- 3 Oct 2026 · DenmarkTechnical University of DenmarkHow they got in, as reported: stolen or reused passwords.
- 2 Oct 2026 · CanadaKingston PoliceHow they got in, as reported: stolen or reused passwords.
- 2 Oct 2026 · United StatesUniversities and private organizations in USThe source does not state how they got in.
- 2 Oct 2026 · United StatesUS think tanks and universitiesHow they got in, as reported: email made to look like it came from a trusted sender.
- 2 Oct 2026 · United StatesU.S. financial institutionsThe source does not state how they got in.
- 2 Oct 2026 · United StatesFrontline EducationHow they got in, as reported: a supplier or vendor that was compromised first.
- 2 Oct 2026 · United StatesVicksburg, MississippiThe source does not state how they got in.
- 2 Oct 2026 · United StatesAngMar Management ServicesThe source does not state how they got in.
- 2 Oct 2026 · United StatesA US universityHow they got in, as reported: a known flaw in software the victim ran.
- 2 Oct 2026MicrosoftThe source does not state how they got in.
- 1 Oct 2026 · United StatesUS law firmsThe source does not state how they got in.
- 1 Oct 2026 · CanadaArchives Canada / Canadian government websitesHow they got in, as reported: automated AI tools that work through many organizations at once.
- 1 Oct 2026 · CanadaLibrary and Archives CanadaHow they got in, as reported: automated AI tools that work through many organizations at once.
- 1 Oct 2026 · CanadaUS and Canadian government websitesHow they got in, as reported: a known flaw in software the victim ran.
- 1 Oct 2026 · United StatesCPAP Medical Supplies and ServicesThe source does not state how they got in.
- 1 Oct 2026 · United StatesSaber HealthcareThe source does not state how they got in.
- 1 Oct 2026 · United StatesVictims across the US and Puerto RicoHow they got in, as reported: a known flaw in software the victim ran.