43 results
According to DailySecu, the operator of South Korean delivery platform Fly confirmed a personal data leak and apologised, putting suspected leaked records at about 330,000 versus an unverified hacker claim of 47.
According to CyberInsider, French intellectual property software and services firm Questel confirmed a voice phishing attack led to unauthorized access to a Sales SharePoint environment in its Microsoft 365, and some stolen data has been published .
CVERC warned of multiple attacks in China by "Sorry", a ransomware family that emerged in 2026 and mainly targets internet-exposed Linux web servers .
Listed pet retailer Wanda Pet (6968) said on 27 July 2026 that a partner’s information system had been broken into by unknown persons and that some data may have leaked; the company also said it does not connect member data, credit-card numbers or bank-account details to that partner, and has required a security review and patching .
According to The HIPAA Journal, South Carolina nonprofit health system AnMed confirmed on July 26, 2026 a cybersecurity disruption involving malware that took down computers, phones and internet and forced 83 of its 106 facilities to close temporarily .
According to The Independent, Chick-fil-A is notifying customers nationwide that unauthorized parties may have accessed personal and account information after an automated attack on its website and app in June; according to TechRadar, credential stuffing between June 17 and 19 breached thousands of accounts .
CVERC warned it captured Android trojans in China posing as education and training apps, which after installation trick users into granting background-run and accessibility permissions .
According to DSIH, Pulsy, the Grand Est regional e-health operator, was attacked on June 18, 2026, leading to exfiltration of about 5 million rows of patient administrative data including names, sex, birth dates and the national health identifier INS .
According to TechCrunch, market intelligence platform Klue confirmed hackers broke into its systems on June 12 and stole data from some customers, with affected customers including Gong, Jamf, HackerOne, LastPass, Recorded Future, Snyk and Tanium .
According to CyberInsider, data was downloaded without authorization from cardiac monitoring firm iRhythm's third-party-hosted business applications between June 3 and 8, 2026; its June 15 SEC filing says access came through social engineering and an attacker demanded payment on June 9 .
According to The HIPAA Journal, US dental benefits administrator DentaQuest's network was accessed without authorization between May 17 and 20, 2026; the company says at least 15 million people are affected, with names, addresses, SSNs, Medicaid and Medicare numbers and dental or vision health information involved .
China's National Computer Virus Emergency Response Center (CVERC) warned it captured malware named after "internal investigation results", "disciplinary lists" and "layoff compensation", which are new variants of the Silver Fox Windows remote-control trojan .
Instructure said the attacker used a Free-for-Teacher account to submit a support ticket with malicious code that triggered an XSS flaw, obtained an authorization token and gained elevated access in Canvas, taking usernames, email addresses, course names, enrollment information and messages .
ADT said its systems detected unauthorized access to a limited set of customer and prospective customer data on April 20, terminated the intrusion and launched a forensic investigation .
China's National Information Security Vulnerability Sharing Platform (CNVD) warned that multiple AI agent skill packages carry serious risks and can be abused in mainstream agent systems such as OpenClaw to perform unauthorized actions .
According to BleepingComputer, ShinyHunters leaked data from 13.
TEIN, Inc.
Dutch healthcare IT vendor ChipSoft said it detected anomalies on April 7 that proved to be a ransomware attack, and forensics confirmed criminals stole patient personal data, including medical data, from some Dutch customers .
According to BleepingComputer, ShinyHunters published a 6.
DBsense said many marketers reported impersonation calls citing their platform nicknames, and it judged that member nicknames and mobile numbers had very likely leaked through an abnormal route .