Radar

Major cyber attacks witnessed globally.

SOCRadar's continuously updated chronology of high-impact cyber incidents, with threat actor attribution, attack vectors, and industry impact.

Updated weekly 500+ incidents logged Global coverage

2025 attacks (48 incidents).

Company / Country	Industry	Details	Attack Vector	Threat Group
Medtronic	Medical Technology / Healthcare	Attackers allegedly stole over 9 million records and terabytes of corporate data.	Unauthorized corporate IT access	ShinyHunters
ADT	Home Security / Consumer Services	Breach exposed data tied to 5.5 million customers, including contact and identity information.	Vishing / stolen Okta SSO credentials / Salesforce access	ShinyHunters
McGraw Hill	Education / Publishing	Salesforce-related exposure leaked 13.5 million unique emails and over 100GB of data.	Salesforce misconfiguration	ShinyHunters
Drift Protocol	DeFi / Cryptocurrency	Attackers seized governance control and drained approximately $280 million from protocol users.	Social engineering / pre-signed multisig approvals / durable nonce abuse	North Korean actors
KelpDAO / LayerZero	DeFi / Cryptocurrency	Attackers manipulated verifier infrastructure and stole approximately $290 million in rsETH.	Compromised RPC nodes / DDoS / verifier takeover	Lazarus Group / TraderTraitor
Axios	Software / Open Source	Compromised maintainer account enabled malicious npm releases installing remote access malware across platforms.	Fake Teams call / social engineering / credential theft / supply chain compromise	UNC1069
Checkmarx	Application Security / Software	Attackers leaked roughly 96GB of GitHub data after earlier supply chain compromise.	Stolen GitHub credentials / supply chain compromise	TeamPCP / LAPSUS$
Basic-Fit	Fitness / Consumer Services	Internal system breach exposed personal and banking data of approximately one million members.	Internal system compromise	Unknown
Grinex Exchange	Cryptocurrency Exchange	Attackers stole approximately $13.7 million, forcing the exchange to suspend operations.	Unknown	Unknown
Bitcoin Depot	Cryptocurrency / Bitcoin ATM	Stolen credentials enabled theft of approximately $3.6 million in Bitcoin from company wallets.	Stolen settlement account credentials	Unknown
Instructure / Canvas	Education Technology	Canvas breach exposed roughly 275 million records across approximately 9,000 educational institutions.	Free-For-Teacher account abuse / platform access	ShinyHunters
Charter Communications	Telecommunications	Attackers allegedly leaked 42 million records containing customer, support, and employee information.	Vishing / Microsoft Entra credential theft / Salesforce compromise	ShinyHunters
Checkmarx	Application Security / Software	Backdoored Jenkins plugin harvested cloud credentials, GitHub tokens, SSH keys, and API secrets.	Stolen credentials / malicious Jenkins plugin / supply chain compromise	TeamPCP
GitHub	Software Development / Cloud Platform	Poisoned Nx Console extension enabled theft of credentials and cloning of 3,800 repositories.	Malicious VS Code extension / credential theft	TeamPCP
npm / @antv Ecosystem	Software Development / Package Registry	Worm compromised 639 package versions, stealing developer secrets and propagating through maintainer accounts.	Compromised npm maintainer account / malicious packages / supply chain worm	TeamPCP
Fortinet / Global	Network Security / Infrastructure	FortiBleed exposed credentials for 86,644 Fortinet firewalls across 194 countries.	Cracked exposed FortiGate configuration password hashes	Russian-speaking threat group
Oracle PeopleSoft / Higher Education	Enterprise Software / Education	Zero-day campaign compromised over 100 organizations and leaked hundreds of thousands of student records.	CVE-2026-35273 unauthenticated RCE / lateral movement	ShinyHunters / UNC6240
KDDI / Japan	Telecommunications	Third-party software flaw potentially exposed email credentials belonging to 14.22 million ISP accounts.	Third-party software vulnerability	Unknown
DentaQuest	Healthcare / Dental Benefits	Breach exposed 234GB of healthcare enrollment data affecting millions of individuals.	Unauthorized network access	ShinyHunters
Klue / Multiple Cybersecurity Firms	SaaS / Competitive Intelligence	Dormant integration credential enabled OAuth token theft and Salesforce access across multiple customers.	Dormant credential / OAuth token theft / Salesforce compromise	Icarus
Red Hat / npm	Software / Open Source	Miasma-infected packages harvested developer credentials and self-propagated through compromised publishing access.	Compromised GitHub account / CI/CD supply chain compromise	TeamPCP-linked, uncertain
PyPI Research Packages	Software / Package Registry	Hades worm compromised research packages, stealing credentials through persistent Python startup hooks.	Malicious PyPI packages / supply chain worm	Unknown
npm / asteroiddao	Software / Package Registry	IronWorm infected 36 packages, stealing cloud, API, wallet, and developer credentials.	Compromised npm account / malicious packages / supply chain attack	Unknown
Texas Parks and Wildlife / United States	Government / Wildlife Services	Vendor breach exposed identity and contact information belonging to approximately 3.09 million license holders.	Third-party vendor compromise	Unknown
Xsolis	Healthcare Technology	Phishing-driven breach exposed protected health information belonging to approximately 1.4 million individuals.	Phishing	Unknown
Maine Attorney General / United States	Government	Fraudulent VRChat and Discord breach filings forced suspension of the public notification portal.	Fraudulent breach submissions / portal abuse	Unknown
BreachForums	Cybercrime / Underground Forum	Database leak exposed 323,986 users’ emails, IP addresses, usernames, and metadata.	Unknown	Unknown
Trust Wallet	Cryptocurrency / FinTech	Trojanized Chrome extension stole mnemonic phrases, draining $8.5 million from 2,520 wallets.	Supply chain compromise / malicious browser extension	Unknown
Instagram / Meta	Social Media	Alleged scraped dataset exposed approximately 17 million profiles containing identity and contact data.	Alleged API scraping	Unknown
Betterment	Financial Services / FinTech	Social engineering compromise exposed data belonging to approximately 1.4 million Betterment customers.	Phishing / social engineering / third-party platform compromise	ShinyHunters
Okta / Multiple Organizations	Identity and Access Management	Vishing campaign used real-time phishing kits to capture enterprise authentication credentials and sessions.	Vishing / real-time phishing kits	ShinyHunters
SoundCloud	Music Streaming / Technology	Breach exposed 29.8 million accounts, linking email addresses with public profile information.	Unknown	ShinyHunters
Telecom Companies / Cloudflare	Telecommunications / IT Infrastructure	Aisuru botnet launched record 31.4 Tbps DDoS attacks exceeding 200 million RPS.	DDoS / botnet / HTTP and Layer 4 floods	Unknown
Odido	Telecommunications	Breach exposed 6.2 million customers, including financial, identity, and sensitive support data.	Unknown	ShinyHunters
ManoMano	E-commerce	Compromised support environment allegedly exposed data linked to approximately 37.8 million accounts.	Compromised third-party customer service portal	Indra
CarGurus	Automotive Marketplace	Leak exposed 12.4 million records containing personal, contact, and financing-related information.	Unknown	ShinyHunters
France	Government / Financial Administration	Hacker accessed national database containing banking and identity data for 1.2 million accounts.	Stolen official credentials	Unknown
Panera Bread	Food Service / Restaurants	Breach exposed contact information belonging to approximately 5.1 million unique individuals.	Microsoft Entra SSO compromise (claimed)	ShinyHunters
Figure	Financial Services / FinTech	Breach exposed 967,200 unique emails alongside names, birthdates, addresses, and phone numbers.	Unknown	ShinyHunters
Stryker	Medical Technology / Healthcare	Destructive attack wiped over 80,000 corporate devices and disrupted operations across 79 countries.	Microsoft Intune compromise / remote device wiping	Handala
Telus Digital	Business Process Outsourcing	Attackers stole at least 700TB of sensitive client, employee, source code, and support data.	Stolen credentials / cloud account compromise	ShinyHunters
Navia Benefit Solutions	Employee Benefits / Healthcare Administration	API vulnerability exposed personal and health information belonging to approximately 2.7 million individuals.	BOLA API vulnerability	Unknown
Trivy / Checkmarx / Package Ecosystems	Software Development / DevSecOps	Supply chain campaign poisoned trusted releases, packages, workflows, extensions, and developer tooling.	Software supply chain / exposed CI/CD credentials	TeamPCP
Crunchyroll	Entertainment / Streaming	Support system breach allegedly exposed 6.8 million emails and millions of customer tickets.	Third-party employee malware / Okta SSO / Zendesk compromise	Unknown
TriZetto Provider Solutions	Healthcare IT	Year-long portal breach exposed personal and health information of approximately 3.4 million patients.	External web portal compromise	Unknown
University of Hawaii Cancer Center	Education / Healthcare Research	Ransomware attack exposed research and historical identity records affecting approximately 1.24 million individuals.	Ransomware	Unknown
Red Hat	Technology / Open Source§	Consulting GitLab repositories accessed, exposing project documentation across hundreds of organizations	Unauthorized GitLab access	Crimson Collective
Ukraine-focused NGOs & Governments	Humanitarian / Government	ClickFix campaign tricked staff into executing PowerShell, enabling malware installation	Social engineering (ClickFix)	PhantomCaptcha
Multiple MENA Governments	Government / Diplomatic	Phishing campaign deployed Phoenix v4 backdoor for espionage and credential harvesting	Macro-based phishing	MuddyWater
Multiple Organizations	Enterprise Software	Oracle E-Business Suite vulnerability exploited in active ransomware campaigns	Exploited enterprise vulnerability	Clop
Prosper (US)	Fintech / Lending	Internal database breach exposed personal and financial data of 17.6 million accounts	Database intrusion	unknown
Conduent (US)	Government Services / BPO	2024 intrusion disclosed, exposing sensitive personal and health data of 10.5 million people	Network intrusion	unknown
SimonMed Imaging (US)	Healthcare	Ransomware attack stole patient and diagnostic data affecting over 1.2 million individuals	Ransomware	Medusa
BreachForums	Cybercrime Platform§	Law enforcement seized leak site infrastructure tied to ongoing extortion campaigns	Infrastructure takedown	ShinyHunters / Scattered Lapsus$ Hunters
Asahi (Japan)	Food & Beverage	Ransomware disrupted operations and exposed customer and employee data of over 1.5 million	Ransomware	Qilin
Coupang (South Korea)	E-commerce	Long-lived authentication keys abused to access data from 33.7 million accounts	Token signing key abuse	unknown
Gainsight / Salesforce Customers	SaaS / CRM	Compromised OAuth tokens enabled API access across 200+ Salesforce environments	OAuth token abuse	Scattered LAPSUS$ Hunters
Pajemploi (France)	Government / Social Services	Unauthorized system access exposed sensitive personal data of 1.2 million childcare workers	Unauthorized access	unknown
Eurofiber (France)	Telecommunications	Outdated GLPI platform exploited, exposing operational data and customer credentials	SQL injection	ByteToBreach
npm Registry	Software / Open Source	Automated spam campaign published over 150,000 fake packages, polluting supply chain	Abuse of publishing automation	IndonesianFoods
Synnovis (UK)	Healthcare / Pathology	Delayed disclosure of 2024 ransomware breach impacting NHS patient data	Ransomware	Qilin
Balancer	DeFi / Cryptocurrency	Smart contract flaw exploited to drain over $120 million across multiple blockchains	Smart contract vulnerability	unknown
Miljödata (Sweden)	HR / Municipal IT	Centralized HR provider breach exposed personal data of up to 1.5 million individuals	Database compromise	DataCarry
University of Pennsylvania (US)	Education	Compromised SSO account enabled access to donor and internal systems affecting 1.2 million	Credential compromise	unknown
Cloudflare	Internet Infrastructure	Mitigated record 29.7 Tbps UDP DDoS burst lasting 69 seconds	Botnet-based DDoS	AISURU
Marquis Software Solutions (US)	Financial Services Software	Ransomware at vendor exposed downstream bank and credit union customer data	VPN compromise / ransomware	unknown
Multiple Organizations	Software / Web Applications	React2Shell RCE exploited React and Next.js servers, compromising 30+ organizations	Remote code execution	UNC5174
700Credit (US)	Credit & Automotive Services	Compromised third-party API exposed personal data of 5.8 million individuals	Third-party API compromise	unknown
Multiple Websites	Multiple Industries	ClickFix-based campaign tricked users into running PowerShell malware payloads	Social engineering (ClickFix)	ErrTraffic
University of Phoenix (US)	Education	Oracle EBS zero-day campaign exposed data of approximately 3.5 million individuals	Exploited enterprise vulnerability	Cl0p
Unleash Protocol	DeFi / Cryptocurrency	Multisig governance takeover enabled unauthorized smart contract upgrade, stealing $3.9M	Governance control failure	unknown
Trust Wallet	Cryptocurrency	Tampered Chrome extension released via leaked API key caused $7M user losses	Supply chain compromise	unknown
WIRED / Condé Nast (US)	Media	Threat actor leaked 2.3M subscriber records, claimed broader publisher access	Unauthorized database access	Lovely
Allianz Life (US)	Insurance	Supply chain CRM compromise exposed personal and insurance data of 1.4 million customers	Vishing / third-party CRM abuse	ShinyHunters
Qantas (Australia)	Aviation	Third-party contact center breach exposed personal data of approximately 5.7 million customers	Third-party compromise	ShinyHunters
Multiple Companies	Technology / SaaS	Voice phishing exploited Salesforce Data Loader to exfiltrate CRM data across organizations	Voice phishing	ShinyHunters
Amazon AWS	Cloud / AI Development	Malicious code injected into Amazon Q extension via compromised GitHub pull request	Supply chain code injection	unknown
Abacus Market	Dark Web Marketplace	Marketplace vanished amid suspected exit scam after handling hundreds of millions illicit sales	Exit scam	unknown
Clorox (US)	Consumer Goods	Social engineering attack enabled ransomware deployment causing $380 million in damages	Helpdesk social engineering	Scattered Spider
Global Organizations	Government / Enterprise	SharePoint zero-day exploited for RCE and persistence across unpatched servers	Zero-day exploitation	Linen Typhoon, Violet Typhoon, Storm-2603
BigONE	Cryptocurrency Exchange	Hot wallet compromise led to theft of $27 million in crypto assets	Infrastructure compromise	unknown
Co-op (UK)	Retail	Cyberattack exposed names and contact details of all 6.5 million members	Unauthorized internal access	unknown
Marks & Spencer (UK)	Retail	Social engineering led to ransomware deployment and data theft disrupting operations	Helpdesk impersonation	Scattered Spider, DragonForce
Brazil (Six Banks)	Banking / Financial Services	Insider-assisted attack stole over $140 million from multiple banks	Insider credential abuse	unknown
Salesloft / Drift	SaaS / Sales Technology	OAuth token abuse in chatbot integration exposed data across 700+ customer organizations	SaaS supply chain / OAuth abuse	UNC6395
Multiple Countries	Government / Telecom	State-linked espionage leveraged known edge-device flaws to access global networks	Exploited known vulnerabilities§	Salt Typhoon
Colt Technology Services (UK)	Telecommunications	Ransomware attack led to theft and dark web auction of customer-related documents	Ransomware	Warlock
DaVita (US)	Healthcare	Ransomware attack exposed laboratory and patient data of 2.7 million individuals	Ransomware	Interlock
Bouygues Telecom (France)	Telecommunications	Cyberattack exposed personal and subscription data, including IBANs, of 6.4 million customers	Unauthorized database access	unknown
Global Organizations	Enterprise / Network Security	SSLVPN flaw exploited to deploy ransomware after MFA bypass on firewalls	VPN vulnerability exploitation	Akira
TransUnion (US)	Credit Reporting	Third-party application breach exposed personal data of 4.4 million consumers	Third-party application compromise	unknown
Multiple Organizations (Global)	SaaS / CRM	OAuth token abuse via Salesloft Drift enabled theft of 1.5B Salesforce records	SaaS supply chain / OAuth abuse	ShinyHunters
Cloudflare	Internet Infrastructure	Mitigated record-breaking 22.2 Tbps volumetric DDoS attack lasting 40 seconds	Hyper-volumetric DDoS	AISURU
European Mitigation Provider	Internet Infrastructure	Sustained 1.5 Bpps UDP flood from compromised IoT and router botnet	Botnet-based DDoS	unknown
Allianz Life (US)	Insurance	Third-party CRM compromise exposed personal data of nearly 1.5 million customers	Third-party CRM compromise	Scattered Spider
WestJet (Canada)	Aviation¡	Cyberattack exposed personal, passport, and loyalty data of 1.2 million passengers	Social engineering	Scattered Spider
npm Ecosystem	Software / Open Source	Phished maintainer accounts pushed crypto-stealing malware to popular packages	Supply chain phishing	unknown
Sinqia (Brazil)	Fintech / Payments	Compromised vendor credentials used to attempt $130M Pix payment fraud	Vendor credential compromise	unknown
Jaguar Land Rover (UK)	Automotive / Manufacturing	Ransomware attack halted production and exposed internal systems, causing major disruption	Ransomware	Scattered Lapsus$ Hunters
Ascension	Healthcare	Breach via third-party software exposed data of 114,000+ patients	Third-party vulnerability	Clop (suspected)
SK Telecom	Telecommunications	SIM data of 23 million customers compromised	SIM data exposure	unknown
VeriSource	Benefits Administration	4 million individuals' data exposed in year-old breach	Unauthorized access	unknown
Yale New Haven Health	Healthcare	Over 5.5 million patient records accessed in sophisticated breach	unknown	unknown
4chan	Social Media/Forums	Hackers exposed admin tools, staff data, and source code	Long-term infrastructure intrusion	Soyjak.party
Fourlis Group	Retail (IKEA)	€20M in damages from ransomware disrupting IKEA e-commerce	Ransomware	unknown
LSC	Healthcare/Lab	1.6 million patients' PII and health data stolen	Unauthorized access§	unknown
GitHub/SpotBugs	Developer Platforms	GitHub Actions supply chain attack traced to SpotBugs repo	Misconfigured workflow & stolen PAT	unknown
Oracle	Cloud Services	Legacy server breach leaked client credentials, prompted CISA alert	Java exploit on legacy Oracle server	rose87168
Royal Mail Group	Logistics	144GB of internal and customer data leaked via third-party Spectos	Vendor compromise	GHNA
Cetus Protocol	Cryptocurrency / DeFi	Smart contract flaw exploited to drain liquidity pools, stealing $223 million assets	Smart contract vulnerability	unknown
SK Telecom (South Korea)	Telecommunications	Supply chain malware exposed 27 million phone numbers over multi-year period	Supply chain malware	unknown
Coinbase	Cryptocurrency Exchange	Rogue support agents exfiltrated sensitive customer data affecting nearly 70,000 users	Insider threat	unknown
Global (primarily Japan)	Multiple / Phishing	CoGUI phishing kit sent 580 million emails impersonating major global brands	Phishing-as-a-Service	CoGUI
LockBit	Cybercrime / Ransomware	LockBit infrastructure breached, leaking bitcoin addresses, chats, and affiliate credentials	Server-side RCE vulnerability	unknown
United Kingdom Retailers	Retail	Social engineering enabled ransomware attacks disrupting operations and leaking customer data	Social engineering and ransomware	Scattered Spider, DragonForce
Qantas (Australia)	Aviation	Third-party call center breach exposed personal data of up to six million customers	Third-party compromise / social engineering	unknown
Ahold Delhaize (US)	Retail / Grocery	Ransomware attack led to data exposure impacting over 2.2 million individuals	Ransomware	INC Ransom
United States	Government / Critical Infrastructure	Authorities warned of increased Iranian cyber activity targeting critical infrastructure sectors	Credential abuse and vulnerability exploitation	Iran-linked actors
Episource (US)	Healthcare IT	Ransomware attack exposed sensitive healthcare data of 5.4 million individuals	Ransomware	unknown
Cock.li	Email Services	SQL injection flaw in Roundcube exposed data of over one million users	SQL injection vulnerability	unknown
Asana	SaaS / Project Management	AI integration logic flaw caused cross-tenant data exposure across organizations	Application logic flaw	unknown
23andMe	Biotechnology / Genetics	Credential stuffing breach exposed genetic and profile data of 6.9 million users	Credential stuffing	unknown
Zoomcar (India)	Car Sharing / Mobility	Unauthorized system access exposed personal and vehicle data of 8.4 million users	Unauthorized access	unknown
AT&T (US)	Telecommunications	Re-release of 2021 breach data linked decrypted SSNs and birthdates	Data re-leak	ShinyHunters
Coinbase	Cryptocurrency Exchange	Insider abuse at outsourcing partner led to customer data theft and extortion	Insider threat	unknown
Community Health Center (CHC)	Healthcare	Over 1 million patient records exposed, no ransomware involved	Unauthorized network access	unknown
NYBCe	Healthcare	Ransomware disrupted operations at major blood center	Ransomware	unknown
DeepSeek	AI	Faced DDoS, data exposure, and malicious packages on PyPI	DDoS, exposed DB, malware	unknown
Phemex	Cryptocurrency	Lost $69 million in suspected cyber heist	Cyber theft	unknown
TalkTalk	Telecommunications	Hacker claimed theft of 18.8 million customer records via third-party	Third-party supplier breach	unknown
PowerSchool	Education	62 million student records stolen using maintenance tool	Credential abuse	unknown
Cloudflare (ISP client)	Internet Services	Blocked record 5.6 Tbps DDoS attack on East Asia ISP	DDoS	Mirai-variant botnet
Otelier	Hospitality	Breach exposed hotel guest records via compromised credentials	Stolen credentials/malware	unknown
Wolf Haldenstein	Legal	Breach exposed data of 3.4 million individuals	Unauthorized access	unknown
Rostelecom	Telecommunications	Silent Crow leaked customer data from a contractor's system	Third-party compromise	Silent Crow
Lee Enterprises	Media	Ransomware disrupted 75 newspapers; 350 GB of data stolen	Ransomware	Qilin
DISA Global Solutions	Employment	3.3 million records exposed including SSNs and financial data	Unauthorized access	unknown
Orange (Romania)	Telecommunications	600,000 customer records leaked after Jira vulnerability exploitation	Credential abuse & vulnerability	Rey
LANIT	IT/Finance	Breach affected banking software subsidiaries in Russia	unknown	unknown
Bybit	Cryptocurrency	$1.5 billion stolen via Safe{Wallet} exploit and developer compromise	Wallet exploit	Lazarus Group
Salt Typhoon Targets	Telecommunications	Exploited Cisco IOS XE flaws to breach global telecom networks	CVE-2023-20198 & CVE-2023-20273	Salt Typhoon
Zacks	Financial	12 million user records leaked; source code possibly accessed	Active Directory compromise	Jurak
HSHS	Healthcare	882,000 patient records exposed including SSNs and medical data	Unauthorized access	unknown
Oracle Cloud	Cloud Services	Hacker claimed theft of 6 million records affecting 140,000 tenants	CVE-2021-35587 RCE	rose87168
GitHub Actions	Developer Platforms	Supply chain attack leaked CI/CD secrets across 4,000 organizations	Compromised GitHub Actions	unknown
WEMIX	Blockchain/Gaming	8.65 million tokens stolen after authentication key exposure	Stolen authentication keys	unknown
X (Twitter)	Social Media	Global outages caused by large-scale distributed denial-of-service	DDoS	Dark Storm Team
NTT Communications	Telecommunications	Corporate client data of 18,000 entities potentially leaked	Unauthorized internal access	unknown
Multiple (Global)	Consumer & Enterprise	Nearly one million devices infected via malvertising malware campaign	Malvertising malware chain	Storm-0408
Tata Technologies	Engineering/IT	1.4 TB of corporate and employee data leaked after ransomware attack	Ransomware data exfiltration	Hunters International
Interbank (Peru)	Finance	3 million customers’ sensitive data exposed, including credit card details	API credentials compromise	kzoldyck
Free ISP (France)	Telecommunications	19 million subscribers’ data breached; IBANs, names, and contact details exposed	Internal system breach	Unknown
Change Healthcare (US)	Healthcare	100 million patient records exposed via ransomware attack	Ransomware	BlackCat (ALPHV), RansomHub
Cisco DevHub (US)	Technology	Sensitive data accessed, including API tokens and SRCs; breach lasted 12 days	Unauthorized DevHub access	IntelBroker
Game Freak (Japan)	Gaming	2,606 employees’ data and Pokémon source code compromised	Server breach	Unknown
Casio (Japan)	Manufacturing	Employee, customer, and partner data breached in ransomware attack	Ransomware	Underground Ransomware
Internet Archive (US)	Nonprofit	31 million users' data and API keys compromised; followed by DDoS attacks	GitLab config file exposure	Breach Actor Unknown, DDoS by BlackMeta
LEGO (Denmark)	Consumer Goods	Website breach used to display scam ad for fake cryptocurrency “LEGO Coin”	Website compromise	Unknown
American Water (US)	Water Utilities	Cyberattack disrupted systems and customer service; preventive disconnections made	Unknown	Unknown
FBCS (US)	Financial Services	4.2 million individuals' data breached, including sensitive data from Comcast and Truist customers	Ransomware	Unknown
Multiple Cloudflare Customers (Global)	Various, including Finance, Internet, and Telecom	Record-breaking 3.8 Tbps DDoS attack targeting financial and telecom sectors	DDoS using ASUS router exploit	Unknown
T-Mobile (US)	Telecommunications	Targeted by Salt Typhoon in telecom breach campaign, no data loss.	Unauthorized Access	Salt Typhoon
Blue Yonder (Global)	Supply Chain	Termite ransomware disrupted services, leaked 680GB sensitive data.	Ransomware	Termite
Finastra (Global)	Financial Software	Breach of SFTP platform exposed 400GB data, including client records.	Credential Compromise	abyss0
Aléo Santé (France)	Healthcare	Breach exposed 758K patient records via stolen MediBoard credentials.	Credential Compromise	nears
DemandScience (US)	Software Development	Stolen 122M business records leaked on BreachForums.	Misconfigured System	KryptonZambie
Hot Topic (US)	Retail	Breach exposed data from 54M accounts via stealer malware.	Malware Infection	Satanic
Amazon, HSBC & Other (Global)	Various Sectors	MOVEit vulnerability leaks exposed sensitive employee data.	Data Leak	Nam3L3ss
Halliburton (US)	Energy	RansomHub attack caused $35M in damages, delayed projects.	Ransomware	RansomHub
Nokia (Global)	Telecommunications	Third-party breach leaked source code from insecure SonarQube server.	Supply Chain	IntelBroker
U.S. Treasury (US)	Government	Exploited BeyondTrust vulnerabilities; impacted OFAC systems.	Zero-Day Vulnerabilities	Silk Typhoon
DMM (Japan)	Cryptocurrency	$308M stolen via phishing and malicious scripts.	Social Engineering	TraderTraitor
ESA Shop (EU)	Online Retail	Malicious script exposed payment details via fake Stripe page.	Third-Party Compromise	Unknown
Chrome Extensions (Global)	Software	Phishing attack compromised 36 Chrome extensions, including Cyberhaven's, affecting 2.6M users.	OAuth Phishing	Unknown
Ascension (US)	Healthcare	Black Basta ransomware stole data of 5.6M patients and employees.	Malware/Ransomware	Black Basta
U.S. Telecoms (US)	Telecommunications	Salt Typhoon resumed operations, targeting major telecom firms like AT&T, Verizon, T-Mobile, Lumen Technologies.	Exploited Network Vulnerabilities	Salt Typhoon
Texas Tech University (US)	Education/Healthcare	Ransomware breach exposed 1.4M records, disrupting health systems.	Ransomware	Interlock
ConnectOnCall (US)	Healthcare	Data breach exposed 914K patient records at Phreesia subsidiary.	Credential Compromise	Unknown
Cleo Software (Global)	Various	Cl0P ransomware exploited RCE flaws in Cleo products, affecting 66 firms.	Ransomware	Cl0P
HealthEquity (US)	Healthcare/Finance	4.3 million individuals' health and personal data exposed via a partner's compromised credentials	Credential compromise	Unknown
MediSecure (Australia)	Healthcare	12.9 million Australians' personal data stolen in ransomware attack	Ransomware	Unknown
WazirX (India)	Cryptocurrency	$230 million stolen by exploiting a discrepancy in Safe Multisig wallet on Ethereum	Exploitation of vulnerability	Unknown
Rite Aid (US)	Retail/Pharmacy	2.2 million people's data compromised in ransomware attack; 10 GB of customer information stolen	Ransomware	RansomHub
AT&T (US)	Telecommunications	Phone records of 110 million customers breached; data copied from a third-party cloud platform	Cloud platform compromise	ShinyHunters
Evolve Bank & Trust (US)	Finance	7.6 million individuals' data compromised in LockBit ransomware attack	Ransomware	LockBit
Neiman Marcus (US)	Retail	Data of high-profile individuals leaked by ShinyHunters; threatened further celebrity data leaks	Data theft	ShinyHunters
Twilio Authy (US)	Technology	33 million phone numbers exposed due to unsecured API endpoint	API vulnerability	ShinyHunters
Prudential Financial (US)	Finance	2.5 million individuals' data breached by BlackCat ransomware gang	Ransomware	BlackCat (ALPHV)
Park'N Fly (Canada)	Airport Services	Data breach exposed 1M customers' contact details.	Unknown	RansomHub
Young Consulting (US)	Software	BlackSuit ransomware exposed data of nearly 1M customers.	Ransomware	BlackSuit
Patelco Credit Union (US)	Financial Services	Ransomware breach exposed data of 726K individuals.	Ransomware	RansomHub
Halliburton (US)	Energy	RansomHub attack shut down key systems, disrupting operations.	Ransomware	RansomHub
Toyota (Global)	Automotive	240GB of data stolen from a third-party, no direct system breach.	Supply Chain	ZeroSevenGroup
National Public Data (US)	Data Services	Breach exposed millions of SSNs and personal data.	Hacking	Unknown
Progress Software (US)	Software	Investigation is concluded; MOVEit Transfer vulnerability affected 95M+ individuals globally.	SQL Injection	Clop
Keytronic (US)	Manufacturing	Black Basta ransomware disrupted operations, leaked 530GB data.	Ransomware	Black Basta
BingX (Singapore)	Cryptocurrency	$44 million stolen due to hacker access to hot wallet.	Network access to hot wallet	Unknown
Transport for London (UK)	Transport	30,000 employees' data exposed; required password resets.	Unknown	Unknown
Indodax (Indonesia)	Cryptocurrency	$22 million stolen in breach impacting withdrawal system.	Withdrawal system compromise	Unknown
Fortinet (US)	Technology	440GB of Sharepoint server data stolen; unauthorized access to shared file drive.	Cloud-based Sharepoint breach	"Fortibitch"
Slim CD (US)	Finance	1.7 million individuals' credit card data exposed over 10-month breach period.	https://www.scworld.com/news/electronic-payment-firm-slim-cd-notifies-17m-customers-of-data-breach	Unknown
Medicare MOVEit (US)	Healthcare	3.1 million Medicare recipients' data compromised in MOVEit breach.	Software vulnerability	Clop
Penpie (Singapore)	Cryptocurrency	$27 million worth of Ethereum stolen through reentrancy protection vulnerability.	Vulnerability exploit	Unknown
VK (Russia)	Social Media	Data of 390 million users leaked via third-party breach.	Third-party data breach	"HikkI-Chan"
UAE Government, UAE	Government	Hackers demand $8.9 million ransom for data breach.	unknown	The Five Families
FBCS, USA	Debt Collection	Data breach affecting 1.9 million people.	Unauthorized network activity	unknown
Dell, USA	Technology	Sale of 49 million customer records on hacking forum.	unknown	unknown
Various, Ukraine	Critical Infrastructure	Sandworm targets 20 critical infrastructure organizations.	Exploiting weak cybersecurity practices	Sandworm (APT44)
PandaBuy, Global	E-commerce	Breach exposes over a million customer records.	Vulnerability exploitation	CyberNiggers (Sanggiero, IntelBroker)
DMM Bitcoin, Japan	Cryptocurrency	$308 million stolen in Bitcoin heist.	Unauthorized access to wallet	Unknown
Snowflake, USA	Cloud Services	Data breach affecting high-profile clients.	Compromised machine with malware	Whitewarlock, Sp1d3r, ShinyHunters
Internet Archive, USA	Digital Library	3-day DDoS attack disrupted services.	DDoS attack	SN_Blackmeta
Sav-Rx, USA	Prescription Management	Data breach exposed 2.8 million customers' data.	Unauthorized access	Unknown
Coinbase, USA	Cryptocurrency Exchange	$37 million stolen through phishing scam.	Phishing site/Impersonation	Chirag Tomar
Cencora, USA	Pharmaceutical Services	Data breach exposed patient data of major firms.	Unauthorized access to systems	Unknown
WebTPA, USA	Healthcare Administration	Data breach affected 2.5 million individuals.	Suspicious network activity	Unknown
Nissan North America, USA	Automotive	Data breach exposed 53,000 employees' information.	Ransomware attack	Unknown
Newsquest Media Group, UK	Media	Newspaper websites defaced by alleged Russian hackers.	Defacement	Unknown
TeamViewer, Germany	Software	Data breach detected in internal corporate IT environment.	Espionage	APT29/CozyBear
Polyfill, China	Technology	Supply chain attack impacted over 100,000 websites.	Malicious code injection	Funnull
UwU Lend	Cryptocurrency	Theft of nearly $20 million in Ethereum (ETH).	Exploit	Unknown
The New York Times, UK	Media	Personal information of freelance contributors leaked on 4Chan.	Credential exploitation	Unknown
PandaBuy, China	E-commerce	Threat actor offered 17 million user records for sale.	Data leak	Sanggiero/CyberNiggers
London Hospitals, UK	Healthcare	Ransomware attack disrupted operations at multiple hospitals.	Ransomware	Qilin
Indonesia's National Data Center, Indonesia	Government	Ransomware attack affected over 200 government agencies.	Ransomware	Brain Cipher
Perry Johnson & Associates/USA	Healthcare	Data breach impacted Concentra Health Services and 4M patients due to hack targeting PJ&A.	Unknown	Unknown
Lush/UK	Cosmetics	Akira claimed theft of 110GB data from Lush.	Ransomware	Akira
Trello/USA	Technology	Threat actor posted a Trello database containing 15M+ entries on a hacker forum.	Data leak	Unknown
loanDepot/USA	Financial Services	Cyberattack compromised personal data of 16.6M loanDepot customers.	Ransomware	Unknown
VF Corp./USA	Apparel	Ransomware attack compromised data of 35.5M customers.	Ransomware	ALPHV/BlackCat
Hathway/India	Internet Service	Data breach targeting Hathway exposed data of millions of users.	Vulnerability exploit	dawnofdevil
U.S. Securities and Exchange Commission (SEC)/USA	Financial Regulatory	SEC's Twitter account was compromised, leading to a Bitcoin price surge.	SIM swapping	Unknown
Cross Switch	Online Payments	IntelBroker breached Cross Switch, exposing personal details of 3.6M users.	Unknown	IntelBroker
Change Healthcare / United States	Healthcare Technology	BlackCat/ALPHV ransomware attack exposed 6TB of healthcare data.	Ransomware	BlackCat/ALPHV
Los Angeles International Airport / United States	Aviation	IntelBroker breached LAX database, compromising 2.5M private plane owners’ records.	Vulnerability exploit	IntelBroker
Medical Management Resource Group (MMRG) / United States	Healthcare	Data breach affected 2.4M patients’ records, including PII, via network server hack.	Network Server Hack	Unknown
FixedFloat	Cryptocurrency Exchange	$26M crypto stolen in hack; suspected wallet drainer attack.	Wallet drainer attack	Unknown
Schneider Electric	Energy and Automation	Cactus ransomware group breached Sustainability Business division; 1.5TB data stolen.	Ransomware	Cactus Ransomware
Integris Health / United States	Healthcare	Extortion emails threaten sale of 2.4M patients’ data; breach discovered November 2023.	Unauthorized Access	Unknown
PlayDapp	Cryptocurrency	1.79B PLA tokens stolen, valued at $290.4M; similar to Lazarus Group’s operations.	Minting	Unknown or Lazarus Group
Romanian Hospitals	Healthcare	Phobos ransomware paralyzes 100 hospitals; 3.5 bitcoin demanded for decryption.	Ransomware	Backmydata Ransomware
Viamedis / France	Healthcare Services	Phishing attack compromises data of 20M insured individuals; banking info not affected.	Phishing	Unknown
AT&T/USA	Telecommunications	Data breach affecting 73 million customers leaked by Shiny Hunters, confirmed by "MajorNelson".	Data Breach/Leak	Shiny Hunters, MajorNelson
Hot Topic/USA	Retail	Data breach via credential stuffing attacks in November 2023.	Credential Stuffing	Unknown
UnitedHealth Group/USA	Healthcare	Cyberattack on Change Healthcare unit exposes sensitive data; targeted payment systems.	Data Breach	RansomHub
NHS Scotland/UK	Healthcare	Ransomware threat actors threatened to release 3TB of stolen data.	Data Breach	INC Ransom
Viber	Technology	Pro-Palestinian group claimed to have stolen 740GB of data from Viber.	Unknown	Handala Hack
France Travail/France	Employment	Data breach affected 43 million job seekers.	Data Breach	Unknown
GEPF (Government Employees Pension Fund)/South Africa	Finance	LockBit ransomware attack disrupted operations, pension payments.	Ransomware	LockBit
CISA (Cybersecurity and Infrastructure Security Agency)/USA	Government	Attackers exploited Ivanti vulnerabilities in CISA attack.	Vulnerability exploit	Unknown
American Express/USA	Finance	Third-party data breach of American Express exposed credit card information.	Third-party data breach	Unknown
ICMR/India	Healthcare	815M Indian citizens’ COVID-19 test data for sale on dark web.	Unknown	Unknown
LastPass/USA	Cybersecurity	$4.4M crypto theft from 80 wallets due to 2022 LastPass breach.	Data breach	Unknown
Cloudflare	Cybersecurity	Mitigated HTTP DDoS exploiting HTTP/2 Rapid Reset Vulnerability.	Vulnerability exploit	Unknown
Airbnb	Hospitality	1.2M users’ data listed for sale on dark web by threat actor.	Unknown	Sheriff
US Claims Solutions/USA	Insurance	Knight ransomware exfiltrated 600GB data; ransom demand issued.	Ransomware	Knight
23andMe/USA	Genetics	4.1M genetic profiles leaked; allegedly from credential stuffing.	Credential stuffing	Golem
CDW Corporation/USA	Technology	Data leaked after LockBit’s $80M ransom demand went unmet.	Ransomware/data breach	LockBit
QSI Banking	Finance	BlackCat ransomware stole 5TB SQL data.	Ransomware	BlackCat
Facebook	Social Media	Official page hacked; demanded release of ex-Pakistani PM.	Unknown	Unknown
Royal.uk/United Kingdom	Government	DDoS attack on Royal.uk website; claimed by Russian group.	DDoS	Killnet
Südwestfalen IT/Germany	Government	Ransomware disrupted 70+ German municipalities.	Ransomware	Unknown
Henry Schein Healthcare/USA	Healthcare	BlackCat ransomware attacked Henry Schein twice; data leaked.	Ransomware	BlackCat
LinkedIn	Social Media	USDoD hacker leaked personal details of 35M LinkedIn users.	Web scraping	USDoD
Perry Johnson & Associates (PJ&A)/USA	Healthcare	PJ&A faced major data breach; close to 9M patients affected.	Unknown	Unknown
OpenAI	Artificial Intelligence	OpenAI targeted in DDoS attacks by Anonymous Sudan.	DDoS	Anonymous Sudan
McLaren Health Care/USA	Healthcare	McLaren Health Care data breach exposed 2.2M individuals.	Unknown	ALPHV/BlackCat
Poloniex	Cryptocurrency	Poloniex lost over $100M to hackers, offered bounty for return.	Unknown	Unknown
Truepill/USA	Healthcare	Truepill data breach impacted 2.36M patients.	Unknown	Unknown
Welltok/USA	Healthcare	Welltok data breach affected 8.5M patients.	Vulnerability Exploit	Unknown
KyberSwap	Cryptocurrency	Cyberattack on KyberSwap resulted in $54.7M crypto theft.	Exploitative swaps	Unknown
Okta/USA	Cybersecurity	Okta security breach impacted all users of Customer Support System.	Unknown	Unknown
Dollar Tree/USA	Retail	Dollar Tree breached, nearly 2M individuals affected.	Third-party breach	Unknown
Ongoing Operations/USA	IT Services	A ransomware attack disrupted services for 60+ US credit unions.	Vulnerability exploit	Unknown
Tipalti/USA	FinTech	A ransomware attack compromised 265GB of sensitive data.	Ransomware	ALPHV/BlackCat
Kyivstar/Ukraine	Telecom	Cyberattack disrupted services for half of Ukraine’s mobile users.	DDoS	KillNet
Russian Tax Service/Russia	Government	GUR claimed cyberattack on Russian tax service, affecting 2,300+ servers.	Malware	Ukraine’s defense intelligence directorate (GUR)
Delta Dental/USA	Healthcare	MOVEit data breach at Delta Dental exposed data of 7M patients.	Vulnerability exploit	Cl0p Ransomware
Mr. Cooper/USAMr. Cooper/USA	Mortgage Servicer	Cyberattack targeting Mr. Cooper exposed personal info of 14.7M individuals.	Unauthorized access	Unknown
Comcast Cable/USA	Telecommunications	Xfinity customer data was compromised in Citrix server breach.	Citrix server breach	Unknown
ESO Solutions/USA	Healthcare	Ransomware attack targeting ESO Solutions led to supply-chain compromise, affecting 2.7M patients.	Ransomware	Unknown
LoanCare/USA	Financial Services	Data breach affected over 1.3M individuals amid real estate transaction disruptions.	Ransomware	ALPHV/Blackcat
BAZAN Group/Israel	Energy, Oil	The cyberattack caused website disruptions and exposed SCADA systems.	Vulnerability Exploit	Cyber Avengers
Activision/USA	Video Games	Modern Warfare 2 (MW2) servers were taken offline due to a worm.	Malware	Unknown
NATO COI	Political/Defense	ATO’s Communities of Interest (COI) Cooperation Portal was allegedly hacked.	Data Theft	SiegedSec
Alphapo	Cryptocurrency	Over $60 million was drained from hot wallets in cryptocurrencies.	Wallet Exploit	Lazarus
CoinsPaid	Cryptocurrency	CoinsPaid reported a $37.2 million cyber attack.	Malware	Lazarus
Ministry of Health and Population/Egypt	Government Agency	Threat actor claimed to have acquired 2 million data records.	Unknown	Unknown
Tampa General Hospital/USA	Healthcare	Security breach compromised patient data of up to 1.2 million patients.	Network Breach	Unknown
HCA Healthcare/USA	Healthcare	Potential theft of 11 million patients’ data offered for sale on a cybercrime forum.	Data Breach	Unknown
Directorate General of Immigration/Indonesia	Government Agency	Hacktivist offered personal information of 35 million Indonesian passport holders on the dark web.	Data Leak	Bjorka
Multichain	Cryptocurrency	Cyberattack led to theft of over $125 million in cryptocurrency.	Fraudulent Transactions	Unknown
Nickelodeon	Entertainment	Nickelodeon confirmed the leak of 500GB of files.	Unauthorized Access	Unknown
Poly Network	Cryptocurrency	The attackers made off with approximately $42 billion worth of cryptocurrency.	Fraudulent Transactions	Unknown
Microsoft	Technology	Anonymous Sudan claimed to hack Microsoft, but Microsoft denied legitimacy of the data.	Data Theft	Anonymous Sudan
Exactly Protocol	Cryptocurrency	The company acknowledged the theft of $7.3 million worth of ETH.	Unknown	Unknown
Duolingo/Global	Online Education	A data breach has exposed the private details of 2.6 million Duolingo users.	Data Scraping	Unknown
Discord.io	Software	Data breach of the third-party app affected 760K Discord users.	Unknown	Akhirah
IBM	Technology	IBM’s MOVEit hack led to at least 4M individuals’ health data being compromised.	Vulnerability Exploit	Clop Ransomware
Fukushima Power Plant/Japan	Energy	21 websites linked to the power plant was attacked in operation “Tango Down.”	DDoS	EUTNAIOA/Anonymous Italia Collective
Colorado Department of Higher Education (CDHE)/USA	Education	CDHE revealed a major data breach following a ransomware attack in June.	Ransomware	Unknown
Mom’s Meals/USA	Food and Beverage/Healthcare	Data breach impacted a total of 1,237,681 individuals.	Ransomware	Unknown
Multiple Banks/Italy	Financial	NoName has claimed cyberattacks on Italian banks, businesses, and government agencies.	DDoS	NoName057(16)
Salesforce	Software	Attackers leveraged a Salesforce feature to gain control of @salesforce[.]com addresses.	Vulnerability Exploit	Unknown
Motel One/Germany	Hospitality	A total of 24,449,137 files, roughly equivalent to 6TB of data was stolen.	Ransomware	BlackCat (ALPHV)
McLaren HealthCare/USA	Healthcare	The attack resulted in network outages at 14 facilities.	Ransomware	BlackCat (ALPHV)
Leonardo/Russia	Aviation	Russian flight booking system Leonardo was attacked, which affected several carriers (Rossiya Airlines, Pobeda, and Aeroflot).	DDoS	IT Army
Johnson Controls/Global	Technology	The attack encrypted various company devices and 27TB of corporate data was stolen.	Ransomware	Dark Angels Team
Sony	Technology	Threat actors claimed to have successfully breached Sony’s systems.	Ransomware/Data Leak	RansomedVC/MajorNelson
Mixin Network	Cryptocurrency	Hackers pilfered $200 million in assets by targeting a cloud service provider.	Third-party	Unknown
MGM Resorts	Entertainment/Hospitality	The attack resulted in disruptions across more than 30 hotels and casinos worldwide.	Social Engineering	Scattered Spider
Airbus/Global	Aviation	Hacker exposed sensitive data from 3,200 Airbus vendors.	Account Breach	USDoD
CoinEx	Cryptocurrency	Large amounts were transferred to an address with no prior history.	Fraudulent Transactions	Unknown
Stake.com	Entertainment	Hackers stole more than $40 million in cryptocurrency.	Fraudulent Transactions	Unknown
3CX / Global	Telecommunications	A supply chain attack led to another, it started by a malware infected package on Trading Technologies’ website.	Supply Chain Attack	UNC4736
American Bar Association / Global	Legal	A hacker obtained older credentials of 1.4 million members from ABA’s network.	Unauthorized Access	Unknown
Hundred Finance / Global	Cryptocurrency	DeFi protocol Hundred Finance hacked, loses $7M in assets.	Flash Loan Attack	Unknown
Bitrue / Global	Cryptocurrency	Bitrue hot wallet exploit resulted in $23M theft.	Wallet Exploit	Unknown
Hyundai / France, Italia	Automotive	Hackers gained access to information of French and Italian Hyundai customers who booked test drives.	Unauthorized Access	Unknown
Yum! Brands / UK	Foodservice	The company reported data breach and temporarily shut down 300 restaurants in the UK.	Ransomware	Unknown
Yellow Pages Group / Global	Media	The publisher’s confidential documents were leaked.	Ransomware	Black Basta Ransomware
Skolkovo Foundation / Russia	Technology	Ukrainian hacktivists gained access to certain information systems, including the organization’s file-hosting service on physical servers.	Unauthorized Access	SUDO RM-RF
RaidForums	Forum	The administrator of Exposed leaked the RaidForums database for nearly 479,000 members’ information.	Unknown	Impotent
Jimbos Protocol	Cryptocurrency	Due to exploitation of a liquidity conversion vulnerability, 4,000 ETH ($7.5 million) was lost.	Vulnerability Exploit	Unknown
MCNA Dental	Healthcare Insurance	Company discovered and reported a data breach that affected nearly 9 million patients.	Unauthorized Access	LockBit
Luxottica / Global	Retail	Hackers exposed the personal information of over 70 million customers.	Ransomware	Unknown
Bank Syariah Indonesia (BSI) / Indonesia	Finance	LockBit released 1.5 terabytes of personal and financial data obtained from BSI.	Ransomware	LockBit
PharMerica / USA	Healthcare Retail	PharMerica encountered a significant data breach impacting 5.8 million patients.	Unauthorized Access	Money Message
Discord / Global	Communication	Discord has revealed a data breach resulting from the compromise of a third-party customer service agent’s account.	Third-Party Data Breach	Unknown
Fullerton India / India	Finance	LockBit has released 600 gigabytes of critical data stolen from Fullerton India.	Ransomware	LockBit
Brightline / USA	Healthcare	Brightline confirmed a data breach due to vulnerable GoAnywhere MFT service, 783,606 individuals’ PHI was stolen.	Vulnerability Exploit	Clop
Level Finance	Cryptocurrency	Hackers exploited a smart contract vulnerability in Level Finance, stealing 214,000 LVL tokens.	Vulnerability Exploit	Unknown
HWL Ebsworth	Legal	BlackCat ransomware hacked HWL Ebsworth and stole 4TB of company data.	Ransomware	BlackCat (ALPHV)
TSMC / Taiwan	Semiconductor Manufacture	Demanding a $70 million ransom, LockBit threatens to leak alleged data unless TSMC pays.	Ransomware	National Hazard Agency (LockBit)
Shell / Global	Energy	Clop ransomware targeted Shell in MOVEit attacks.	Ransomware	Clop
Fort Worth Government / USA	Public	Hackers stole 180GB data from the website of Fort Worth.	Data Breach	SiegedSec
CalPERS / USA	Public	Data breach affected approximately 769K retired California employees and beneficiaries.	Ransomware	Clop
University of Manchester / UK	Education	Threat actors claim to have stolen 7 TB of data during the attack.	Ransomware	Unknown
Onix Group / USA	Real Estate	Attackers accessed 319,500 patients’ and employees’ information during a ransomware attack.	Ransomware	Unknown
DBSA / Southern Africa	Finance	Attackers accessed 319,500 patients’ and employees’ information during a ransomware attack.	Ransomware	Akira
Zacks Investment Research	Investment	Zacks experienced another data breach, impacting 8.8 million customers.	Data Breach	Unknown
Intellihartx / USA	Healthcare Revenue Management	Intellihartx notified 490K individuals of data compromise in GoAnywhere zero-day attack.	Ransomware	Clop
Atomic Wallet	Cryptocurrency	Atomic Wallet was hacked, stolen crypto value exceeds $35M.	Unknown	Unknown
Enzo Biochem / USA	Biotechnology	PHI of 2.5 million individuals in the US was stolen in a cyber attack.	Ransomware	Unknown
T-Mobile / Global	Telecommunication	A threat actor used a T-Mobile API to gain access to 37 million active customer accounts’ personal information.	Unauthorized Access	Unknown
Deezer / Global	Music Streaming	Threat actors leaked 250M+ Deezer users’ information.	Third Party	Unknown
Zacks Investment Research	Investment	Hackers broke into the Zacks Investment Research business and obtained access to 820,000 customers’ private and sensitive information.	Unauthorized Access	Unknown
Cellebrite / Israel	Digital Intelligence	Threat actors stole 1.7TB of data, including Cellebrite’s software and other documentation.	Unauthorized Access	Unknown
RailYatri / India	Travel	31 million entries of the Indian train ticket platform were leaked on a hacker forum.	Misconfiguration	Unknown
Regal Medical Group / Southern California	Healthcare	PII and PHI of over 3 million patients were stolen in the ransomware attack.	Ransomware	Unknown
AT&T / Global	Telecommunications	AT&T has announced that approximately 9 million customers were affected by a data breach.	Third-Party Breach	Unknown
Akamai / Asia-Pacific (APAC)	Unknown	Akamai mitigated a DDoS attack that peaked at 900.1 Gbps and 158.2 million PPS.	DDoS	Unknown
Euler Finance / Global	Cryptocurrency	Euler Finance crypto lending platform was hacked for $197 million in crypto.	Flash Loan Attack	Jacob
Independent Living Systems / USA	Healthcare	ILS reported a data breach that affected 4.2 million individuals.	Unauthorized Access	Unknown
Latitude Financial / Australia	Finance	Data breach of Latitude Financial resulted in theft of 14 million customer records.	Unauthorized Access (Employee Credentials)	Unknown
TMX Finance / USA	Finance	TMX Finance and its subsidiaries suffered a breach affecting nearly 5 million customers.	Unauthorized Access	Unknown
MyDeal / Australia	Retail	Woolworths’ MyDeal subsidiary reported a data breach impacting 2.2 million customers. The hacker was attempting to sell the stolen information on a hacker forum	Unauthorized Access	Undetermined
Bundeskriminalamt (BKA) / Germany	Finance	The Bundeskriminalamt (BKA) of Germany detained a person (age 24) and two alleged collaborators after they were suspected of stealing €4,000,000 from online users through phishing attacks.	Phishing	Unknown
Kingfisher / UK	Retail	The LockBit ransomware organization claimed the theft of 1.4 TB of Kingfisher’s data, including the personal information of its workers and clients.	Ransomware	LockBit
Medibank / Australia	Healthcare	The unidentified hackers claim to have 200 gigabytes of data from Medibank, an Australian private health insurer with about 3.9 million clients in a nation of about 25 million.	Ransomware	Undetermined
Aarti Drugs / India	Healthcare	The BianLian ransomware organization exposed Aarti Drugs’ private information on a dark web forum.	Ransomware	BianLian
Wynncraft Minecraft Server	Video Games	Cloudflare announced that it has successfully stopped a 2.5 Tbps distributed denial-of-service (DDoS) attack by a Mirai botnet, targeted at the Wynncraft Minecraft server.	DDoS	Mirai Botnet
Concorsi Sanitari Integral / Barcelona	Healthcare	RansomExx ransomware gang leaked a 52-gigabyte file on the dark web, which contained information stolen from the Consorci Sanitari Integral.	Ransomware	RansomExx
Tata Power / India	Power Industry	A leading power-producing company in India, Tata Power, has confirmed becoming the victim of a cyberattack.	Ransomware	Hive
Whoosh / Russia	Transportation	The Russian scooter rental service Whoosh has reported a data breach after hackers started to sell a database containing the personal information of 7.2 million users on a hacking forum.	Data Leak	Undetermined
Banks and Telecommunication Services / Africa	Finance, Telecommunication	A threat group known as OPERA1ER has used hacking tools to steal at least $11 million from African banks and telecommunications service providers.	Network Breach	OPERA1ER
Medibank / Australia	Healthcare	About 9.7 million customers’ private information, as well as those of some of their authorized representatives, were accessed. Medibank refused to pay ransom.	Ransomware	REvil
AirAsia / Malaysia	Airline	Daixin ransomware group leaked sample data from Malaysian airline AirAsia. They allegedly gained access to the information of the company’s employees and 5 million passengers.	Ransomware	Daixin
Deribit	Cryptocurrency	Deribit exchange reported that its hot wallet had been compromised. After suffering a $28 million hot wallet hack, the exchange stopped accepting withdrawals.	Unauthorized Access	Unknown
Continental / Germany	Tire Manufacture	LockBit ransomware gang hacked Continental, stealing approximately 40TB of data. The data is said to have been listed for sale after Continental refused to pay the ransom.	Ransomware	LockBit
The Indian Railways / India	Transportation	The Indian Railways experienced a data breach on December 27 that resulted in the theft of the personal information of about 30 million people. The data was listed for sale on the dark web.	Unauthorized Acces	Shadohacker
BTC.com	Cryptocurrency	The biggest cryptocurrency mining pool, BTC.com, reported being the target of a cyberattack that stole digital assets worth about $3 million.	Undetermined	Unknown
Twitter	Social Media	A threat actor shared 400 million Twitter user records on a dark web forum tracked by SOCRadar in December.	Vulnerability Exploit	Unknown
Okta / USA	Software	Private GitHub repositories of Okta were compromised, resulting in the theft of source code.	Unauthorized Access	Unknown
Gemini	Cryptocurrency	Personal information of 5.7 million Gemini cryptocurrency exchange customers was compromised after an unnamed third-party was victimized by an unauthorized threat actor.	Third-Party Data Breach	Unknown
Centers for Medicare and Medicaid Services of HHS / Global	Healthcare	254,000 beneficiaries were informed that their data had been compromised due to a ransomware attack on a third-party vendor.	Ransomware	Unknown
Shields Health Care Group / U.S.A.	Healthcare	Shields Health Care Group suffered a cyber crisis that affected the personal data of nearly 2 million patients.	Unauthorized access	Undetermined
University of Pisa / Italy	Education	The criminals issued a ransom note for Saturday’s attack, giving the university administration until June 16 to pay $4.5 million.	Unauthorized access	Blackcat
Akamai / Eastern Europe	Unknown	On September 12, Akamai stopped a distributed denial-of-service attack that set a new record with 704.8 Mpps traffic per minute.	DDoS	Unknown
Wintermute	Cryptocurrency	Hackers stole $162 million from the DeFi section of Wintermute’s platform by exploiting a bug in Profanity	Vulnerability Exploit	Unknown
Rockstar Games	Video Games	Rockstar Games was subject to a network breach. GTA 5 and 6 source code and assets, and GTA 6 testing videos were claimed to be stolen.	Unauthorized access	TeaPot
Uber / U.S.A.	Transportation	Uber’s internal IT system was breached and the hacker gained access to critical company data as well as vulnerability reports from HackerOne.	Unauthorized access	TeaPot
European Union Citizens/ Ukraine	Healthcare	Hacker gang responsible for data theft of 30 million people sold the accounts on the dark web for UAH 14 million.	Malware infection	Unknown
Military and Police Organizations / Central America	Military	Hacking gang released 10TB of military emails and information in Chile, Mexico, El Salvador, Columbia and Peru.	Undetermined	Guacamaya
Indian Citizens / Republic of India	Finance	Chinese scammers allegedly stole $529 million from Indian citizens by exploiting instant lending apps, employment offers, and fake cryptocurrency trading schemes.	Phishing	Unknown
Twitch / Global	Live Streaming Service	On hacker forums, a torrent link to a 125GB archive containing data allegedly stolen from roughly 6,000 internal Twitch Git repositories is shared	Misconfigured server	Undetermined
JVCKenwood / Japan, Global	Electronics	The ransomware group claimed to have stolen 1.7 TB of data	Unauthorized access	Conti
MyRepublic / Singapore, New Zealand, and Australia	Telecommunication/ISP	Personal information data of 80K mobile subscribers are exposed	Access through a third-party data storage platform	Unknown
Yandex / Russia	Technology Solutions and Search Engine Provider	DDoS attacks with 21.8 million requests per second (world record so far)	DDoS attack	Mēris Botnet
Fortinet / USA	Cybersecurity Solution Provider	500 Fortinet VPN credentials are leaked	Ransomware	Groove
Bangkok Airways / Thailand	Airline	6TB data stolen by using credentials leaked from breached Accenture systems	Ransomware	LockBit 2.0
Neiman Marcus / USA	Luxury Retail	Neiman Marcus sent notices of a data breach (online account credentials) to 4.3 million customers. The data breach started in May 2020 until it was discovered in September 2021	Undetermined	Undetermined
Microsoft Exchange Autodiscover Bug / Global	IT	A bug in the Microsoft Exchange Autodiscover leaked around 100,000 credentials for Windows domains worldwide	N/A	Guardicore’s AVP of Security Research discovered the bug
Colonial Pipeline / USA	Oil	Affected its computerised equipment managing the pipeline, disrupting the fuel supply to most of the US East Coast for days	Ransomware	DarkSide
CNA / USA	Finance	Majority of policyholder data impacted	Ransomware	Phoenix Locker
Brenntag / Germany	Chemical distribution	Stolen 150 GB of data	Ransomware	DarkSide
LinkedIn / USA	Social Media	500 M accounts leaked	Data Breach	Unknown
Facebook / USA	Social Media	Impacted 533 Million Users	Data Breach	Unknown
University of California Schools / USA	Education	Copied and transferred UC files by exploiting a vulnerability in Accellion’s file transfer service	Ransomware	Unknown
Washington DC Police Department / USA	Government	Leak of 250 GB data that includes the PII of confidential informants, persons of interests, and employees	Ransomware	Babuk
The Scripps Health / USA	Health	Stolen all patient records (a half-million patients per year through 2,600 affiliated physicians)	Ransomware	Ryuk
The Health Service Executive (HSE) / Ireland	Government	Stolen 700 GB of data	Ransomware	ContiLocker
JBS Foods / Brazil	Food	Unknown	Ransomware	REvil
McDonalds	Fast food	Exposed all U.S. business information, customer data in South Korea and Taiwan	Data Breach	Unknown
Channel Nine / Australia	Television/Broadcasting	Broadcasting and publishing systems were rendered unable	Cyber espionage	Unknown
Harris Federation / UK	Education	Temporarily disabled the devices and email systems, resulting in over 37,000 students being unable to access their coursework	Ransomware	Unknown
CNA Financial / USA	Insurance		Ransomware	Evil Corp.
Kia Motors / South Korea	Automobile	Apps, phone services, payment systems, owner’s portal and internal sites are impacted	Ransomware	DoppelPaymer
Bonobos / USA	Retail	70 GB SQL database leaked	Data Breach	Data Breach
Bangkok Airways / Thailand	Airline	6 TB data stolen by using credentials leaked from breached Accenture systems	Ransomware	LockBit 2.0
Florida Water System / USA	Supply Chain	Attempted to Poison Water Supply in Florida	Data Breach	Unknown
Microsoft’s Exchange Server / USA	Software	Expose millions of users worldwide	Zero-day exploits	Unknown
Bombardier / Canada	Aerospace	Confidential data of customers, suppliers and employees compromised	Data Breach	Unknown
Acer / Taiwan	Electronics	Acer Suffered the Highest Ransom Demand in History of $50 Million	Ransomware	REvil
University of the Highlands and Islands (UHI) / UK	Education	Caused disruption to services	Unknown	Unknown
Sierra Wireless / Multinational	Electronics	Internal operations disrupted	Ransomware	Unknowns
Accellion / China	Supply Chain	Customer data being stolen or compromised	Zero-day exploits	FIN11

How incidents are tracked and verified.

Every entry in this chronology is sourced through a layered intelligence pipeline combining open-source monitoring, SOCRadar CTI analyst review, and cross-validation against regulatory disclosures.

Monitor.

We track hacker forums, Telegram leak channels, ransomware extortion sites, and regulatory disclosures.

→

Attribute.

SOCRadar CTI analysts cross-reference TTPs and infrastructure to attribute attacks to known groups.

→

Publish.

Verified incidents are added to the public chronology within 24 hours of confirmation.

Regulatory Filings Extortion Portals Hacker Forums Telegram Threat Reports Vendor Advisories

Attributions reflect the prevailing consensus from open and SOCRadar-internal sources at publication time. Entries may be updated as investigations progress.

Stay ahead of the next major incident.

Get the SOCRadar weekly briefing with new attacks, threat actor TTP changes, and industry spotlight.

Subscribe to Weekly Briefing →