Cyber Attack & Data Breach

Sensitive2025 is allegedly selling a database stolen from Loja Negócios Digital, a Brazilian online store, with about 20,000 records said to include customer, order, billing, and account data. The claim is unverified, but the exposed information could enable identity theft, phishing, and account takeover. #LojaNegóciosDigital #Sensitive2025 #WooCommerce…

A threat actor known as doommageddon claims to have breached Hospital Di Camp in Campo Grande, Brazil, and released the first wave of stolen patient ECG data. The alleged leak is being staged in three parts and may later include PHI, PII, and full hospital databases, but the claim remains unverified….

Ernst & Young is notifying customers after a third-party support ticket system used by its IT personnel was compromised, exposing documents that may have contained client tax information. The company says it detected suspicious activity in April, removed unauthorized access, and is offering affected clients 24 months of identity monitoring and restoration through Experian. #ErnstYoung #Experian

Abbott is investigating a cybersecurity incident involving unauthorized access to a limited number of internal systems within its Cancer Diagnostics division. The company says the incident did not affect business operations, product availability, manufacturing, laboratories, or any other Abbott activities or sites. #Abbott

A threat actor known as iProfessor claims to have breached NEBBIA and is leaking 32,340 order-related documents, with nearly 285,662 additional records threatened. The alleged data includes customer names, addresses, phone numbers, emails, and order details, but the claim remains unverified. #NEBBIA #iProfessor #Slovakia…

Fairlife, a Coca-Cola subsidiary, suspended U.S. production after a cyberattack disrupted multiple production lines and the supply chain. The company isolated the affected infrastructure, activated backup production processes, and is working to restore full operations while strengthening its security measures. #Fairlife #CocaCola

A threat actor known as ChimeraZ claims to have leaked a database from the French Firefighters Federation’s pompiers.fr membership platform, covering 124,807 people in CSV and JSON format. The alleged data includes names, roles, email addresses, phone numbers, login identifiers, and parent or guardian contacts, but the claim remains unverified. #ChimeraZ…

The Coca-Cola Company reported that fairlife, LLC detected unauthorized access to part of its systems, including production-related systems, in connection with a ransomware event. The company activated its response protocols, notified law enforcement, and suspended U.S. production operations at fairlife while stating that product quality and safety were not impacted. #TheCocaColaCompany #fairlife

Greene County, Georgia took its government network offline after discovering a cybersecurity incident on July 9 that disrupted payment processing and services across tax, court, and administrative offices. Officials said cybersecurity specialists are rebuilding systems, with no evidence yet of data viewing or deletion and no impact to the 911 communications system. #GreeneCounty #GreeneCountyGeorgia

Solid Advance Co., Ltd. reported that some of its internal systems were infected by malware after unauthorized external access, prompting emergency measures such as network disconnection and the suspension of certain cloud-hosted business services. The company is investigating a potential data leak, has found no confirmed victims among AllGather CRM users, and noted that Ailock claimed responsibility for the cyberattack on July 15. #SolidAdvance #AllGatherCRM #Ailock

TruStage, based in Madison, Wisconsin, shut down its network after a cybersecurity incident that disrupted some insurance services offered through partner credit unions. The company has brought in external experts to contain and investigate the incident, but the cause, impact scope, and whether any data was compromised remain unconfirmed. #TruStage #Madison #Wisconsin #creditunions

Romania’s Ministry of Investments and European Projects (MIPE) was hit by a cyber incident that initially sparked rumors of a deleted PNRR project database, but officials later confirmed that was not the case. The issue specifically affects the “Achiziții Beneficiari Privați” application, which is currently unavailable while MIPE works with SRI, STS, and DNSC to investigate and restore services. #MIPE #AchizițiiBeneficiariPrivați #SRI #STS #DNSC

Symantec Threat Hunter Team uncovered a previously unseen Rust-based ransomware family called Spirals, used in a double extortion attack against an IT services company in South Asia in June 2026. The attackers moved quickly through IIS web shell access, credential dumping, lateral movement, and multi-stage deployment tools before encrypting files and threatening to leak stolen data. #Spirals #SymantecThreatHunterTeam #IIS #PsExec #CloudflareTunnel

Partnered Health discovered on 23 June 2026 that a malicious actor accessed and took personal information, including health information, from some clinics in its network. The company has reported the incident to Australian authorities, obtained an interim injunction to stop the data being used or published, and is notifying impacted patients while the investigation continues. #PartneredHealth #AustralianCyberSecurityCentre #OfficeoftheAustralianInformationCommissioner #SupremeCourtofNewSouthWales

ANCPI, Romania’s land registry agency, was reportedly listed for sale after an alleged breach involving cadastre records and source code. The post claims a ransomware incident caused an IT shutdown and attributes the activity to bytetobreach. #ANCPI #Romania #bytetobreach…

A cyberattack hit Greenfield Communications on Sunday, disrupting internet service for customers in Rancho Murieta and parts of Sacramento County until Tuesday afternoon. The incident affected the community’s connectivity for nearly two days before service was restored. #GreenfieldCommunications #RanchoMurieta #SacramentoCounty

An unauthorized access incident at Nichirei caused a system outage that disrupted logistics and affected around 5,000 customer companies, including KFC, Aeon, and Kura Sushi. The incident led to delivery delays and frozen-food shortages, while Nichirei has not confirmed any personal data exfiltration at this stage. #Nichirei #KFC #Aeon #KuraSushi #NichireiLogGroup

Hachioji Gakuen announced that it suffered a cyberattack involving unauthorized access and ransomware on some of its servers, prompting an emergency response with police, external experts, and lawyers. The school’s main contact email is currently unavailable, and authorities have not yet confirmed whether any data was exfiltrated. #HachiojiGakuen #HachiojiPolice

The National Agency for Cadastre and Land Registration (ANCPI) reported a cyberattack that caused the largest technical disruption in the institution’s history, leaving all IT systems, including the e-Terra application, out of service since July 14. ANCPI said the managed data remains secure and uncompromised while investigations continue into the nature and perpetrators of the attack. #ANCPI #eTerra

SpaceXAI has faced backlash after reports that Grok Build CLI uploaded entire Git repositories, including private code and unredacted secrets, to a Google Cloud bucket without clear user consent. The company says privacy settings can disable sharing and may delete previously uploaded data, but it has not explained the scope, retention,…