Skip to content

Security incidents.

Follow the events behind the headlines.
Source evidence, reported impact, and what is still unknown.

Subscribe to feed

68 incidents

Source coverage
INCIDENT / ORGANIZATIONSTATUSPUBLISHED

Ingram Micro

Ingram Micro ransomware attack

The California-based technology distributor said its ability to process orders was disrupted for days and personal data belonging to more than 42,000 people was stolen, according to data breach notices filed with state regulators.

Cybersecurity Dive
RansomwareData breach
Reported

Oracle Health

Oracle Health Data Breach

The personal and medical information of nearly 20 million people was compromised in a cyberattack on Oracle Health’s legacy Cerner systems early last year, according to a report from the Texas attorney general cited by Bloomberg.

SecurityWeek
Data breach
Reported

Aeroflot

Aeroflot cyberattack

The Cyber Partisans and Silent Crow claimed responsibility for a disruptive cyberattack on Aeroflot, Russia's flagship airline, which forced the carrier to cancel more than 100 flights and affected roughly 20,000 passengers.

The Record
Unauthorized accessData breach
Reported

Capcom

Capcom Data Breach

Capcom, the gaming giant behind Resident Evil, Street Fighter and Monster Hunter, has warned that players’ personal information may have been compromised following a data breach.

Infosecurity Magazine
Data breach
Reported

Binance

Binance hack

About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history.

Help Net Security
Unauthorized accessData breachRansomware
Reported

U.S. Department of Homeland Security

Homeland Security sends takedown notices

Homeland Security filed a takedown notice via a security vendor called ZeroFox, which has authority to act on the department’s behalf until 2028 to seek the removal of data from the internet.

TechCrunch
Data breachUnauthorized access
Reported

Polymarket · DebugBear

Polymarket Hack

Polymarket halted trading on its international platform on October 29 after users reported unauthorized withdrawals.

SecurityWeek
Unauthorized accessData breach
Reported

Meta

Meta GitHub repositories breach

Hackers gained access to Meta's GitHub repositories using an employee's stolen credentials, exposing the personal information of approximately 1,500 people, mostly Meta employees in the US.

SecurityWeek
Unauthorized accessData breach
Reported

Binance

Binance Hack

Binance, the world’s largest cryptocurrency exchange, has been hit by the biggest crypto heist ever recorded, with blockchain intelligence firms attributing the attack to North Korean state-sponsored hackers.

SecurityWeek
Unauthorized accessData breachRansomware
Reported

Rosstat

Rosstat cyberattack

An alliance of Belarusian and pro-Ukrainian hackers claimed to have taken out Russia's federal statistics agency, Rosstat, and stolen vast amounts of sensitive government data in a cyberattack over the weekend.

The Record
Unauthorized accessData breach
Reported

Bluesky

Bluesky blocks links to leaked DHS employee data

Bluesky is blocking its users from accessing a nonprofit’s website that hosts the leaked dataset of Homeland Security employee data.

TechCrunch
Data breachUnauthorized access
Reported

U.S. Department of Homeland Security

Homeland Security data breach

A hacker obtained over 40,000 user account records from Homeland Security’s login system, including the names and contact information of employees and agents working for its various agencies like Customs and Border Protection (CBP) and Immigration and Customs Enforcement (ICE).

TechCrunch
Data breachUnauthorized access
Reported

Arizona Court System

Arizona Court System Breach

A cyberattack on Arizona’s court system gave hackers access to the sensitive information of more than 1.3 million people.

The Record
Unauthorized accessData breach
Reported

University of Copenhagen

University of Copenhagen cyberattack

The University of Copenhagen (UCPH) has ruled out a second cyberattack, saying the activity that led it to shut down several administrative systems on Monday is tied to the breach it disclosed last week, which exposed personal data belonging to some 525,000 people.

Help Net Security
Data breachUnauthorized access
Reported

OpenAI

Australia government health statistics portal breach

Australia said last month that an [OpenAI autonomous agent](https://www.reuters.com/world/asia-pacific/australia-pm-albanese-says-openai-breached-medicare-sydney-morning-herald-2026-09-23/) breached a government health statistics portal in June, marking one of the first known instances of an AI agent hacking a government system.

Reuters
Unauthorized access
Reported

Hugging Face

Hugging Face breach

a breach at Hugging Face

DataBreachToday
Data breach
Reported

Sony Network Communications

Sony So-net data breach

Hackers have stolen the personal information of current and former So-net and Plala internet subscribers in Japan, Sony Network Communications announced on October 27. Nearly 2.6 million records were impacted.

SecurityWeek
Data breach
Reported

Boston Children's Health Physicians · Xtium

2024 hacking incident at Boston Children's Health Physicians

A pediatric practice in New York and Connecticut and one of its former IT services vendors will collectively pay those two states financial penalties of $2.7 million for a 2024 hacking incident that affected nearly 900,000 people.

BankInfoSecurity
Data breachUnauthorized access
Reported

Clover Health Investments

Clover Health Investments data breach

Healthcare organization Clover Health Investments was hacked in early July, resulting in the theft of personally identifiable information (PII) and protected health information (PHI) of 138,677 people.

SecurityWeek
Data breach
Reported

Data Cymru · Ogi Networks Limited (ONL)

Ransomware Attack on Data Cymru

A ransomware attack on Data Cymru, a Welsh government-funded organization, compromised the personal details of thousands of children and their families. The attack occurred in November 2024, and an investigation by the UK's Information Commissioner's Office (ICO) revealed that the attackers gained initial access to Data Cymru's network via a compromised test account protected by the password 'Password1'.

Infosecurity Magazine
RansomwareData breach
Reported

BTCPay Server

BTCPay Server hot wallet crypto thefts

The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining “hot wallets” on instances running older versions.

BleepingComputer
Unauthorized accessData breachRansomware
Reported

Fallon Ambulance

2023 hack of Fallon Ambulance

A hacking incident that occurred from February to April 2023 during an archiving process, affecting 911,757 people, including 750,116 Massachusetts residents.

BankInfoSecurity
Unauthorized accessData breach
Reported

Sony Interactive Entertainment

PSN users report hijacked accounts

Reports spread on X from PlayStation Network (PSN) users who say their accounts were hijacked and unknown child accounts were added to their family groups without permission.

Help Net Security
Unauthorized access
Reported

Sony Network Communications

Data breach at Sony-owned internet provider

Attackers broke into the So-net member database and made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users.

Help Net Security
Data breach
Reported

CrowdStrike · Shinhan Bank · KB Kookmin Bank

South Korea bank hacks

The suspect behind recent cyberattacks at South Korean banks was likely a ​China-based 26-year-old who used a Chinese-developed AI agent and Anthropic's Claude Code, US cybersecurity company CrowdStrike said.

Reuters
Unauthorized accessData breach
Reported

Advantest

Advantest ransomware attack

Japanese chip testing giant Advantest is informing individuals that hackers stole personal information in the ransomware attack disclosed in February 2026.

SecurityWeek
RansomwareData breach
Reported

AngMar Management Services

AngMar Management Services data breach

Healthcare organization AngMar Management Services identified suspicious activity on its systems in mid-July and confirmed in early September that hackers stole patient PII and PHI of 126,196 individuals.

SecurityWeek
Data breach
Reported

iRhythm

iRhythm data breach

A data breach at iRhythm affected at least 360,000 people.

SecurityWeek
Data breach
Reported

Coupang

Coupang data breach

E-commerce firm Coupang said on Thursday it has filed two administrative lawsuits against 620 billion won ($462.75 million) in fines imposed by South Korea's government over a data breach.

Reuters
Data breach
Reported

Frontline Education

Frontline Education Breach

A third-party breach at Frontline Education, a software provider for the US education sector, has resulted in the theft of Social Security numbers and other employee data.

Infosecurity Magazine
Data breachUnauthorized access
Reported

Coverage reflects published reporting, not every incident. Confirmation applies to the event; individual details may still change.