Cyber Attack & Data Breach

DZI Obsto Zastrakhovane informed customers about a possible leak of personal data that may have exposed names, national identification numbers, and contact details. The insurer said insurance policies were not affected, but it warned clients to stay alert for suspicious calls or emails, following earlier incidents in Bulgaria’s insurance sector at Uniqa and Eurohold/Euroins. #DZI #ObstoZastrakhovane #Uniqa #Eurohold #Euroins

Wolfenbüttel District was affected by a cyberattack targeting its online appointment booking system, which runs on the Tevis platform operated by Kommunix. The incident forced the service offline for appointments on 31 August and 1 September and raised concerns about a possible exposure of citizens’ personal data. #WolfenbuettelDistrict #Kommunix #Tevis

The Córdoba Departmental Revenue Directorate suffered a cyberattack that temporarily disrupted the tax payment portal, prompting authorities to activate emergency protocols and begin a technical investigation. At this time, it has not been confirmed whether taxpayer data was exposed or whether the incident involved ransomware. #RentasDepartamentalesdeCordoba #Cordoba

Orient Blackswan, a publishing house based in Hyderabad, was hit by a ransomware attack that disrupted its IT infrastructure and encrypted critical business data. The attackers demanded Rs 20 million to restore access, and the affected systems were isolated to prevent further spread. #OrientBlackswan #Hyderabad

McKesson said it was hit by a cyberattack attributed to ShinyHunters, which led to data theft from a third-party application and affected customer information, including oncology and surgery units. The company has notified regulators and customers, while intermittent service degradation continues to be reported. #McKesson #ShinyHunters

A single unpatched JetBrains TeamCity server on api.cadence.jetbrains.com was exploited through CVE-2026-63077, giving attackers access to Cadence cloud infrastructure, backups, and sensitive developer secrets. The breach exposed AWS IAM credentials, S3 buckets, and potentially source code, repository tokens, package registry keys, SSH keys, and signing keys, forcing immediate credential revocation and…

T&K TOKA confirmed a ransomware attack and unauthorized access to parts of its systems, causing the suspension of some business operations. The company is working with police to investigate the intrusion and potential data exposure, while the attacker identity and full impact remain unknown. #T&KTOKA

Compucase detected a cybersecurity incident on August 30, 2026, affecting a limited part of its computer network, and immediately isolated the impacted systems while bringing in external experts. Current assessments indicate that no personal or confidential data was leaked and the company’s operations remain unaffected. #Compucase

The University of Barcelona (UB) is investigating a recently detected cyberattack affecting some of its systems and is working with Catalonia’s cybersecurity authorities and CSUC to determine the scope of the incident. The university says no data has been affected so far, while it has implemented containment, monitoring, credential renewal, and temporary service interruptions. #UniversityofBarcelona #CSUC #CataloniaCybersecurityAgency

Sanko Techno announced that its Vietnamese subsidiary, Sanko Fastem, was affected by a cybersecurity incident. The company is investigating the impact on its manufacturing operations and related systems. #SankoTechno #SankoFastem

The City of Tarnos was hit by a ransomware attack targeting its Zimbra email service, with Mayor Marc Mabillet confirming both the intrusion and a ransom demand. Authorities have suspended the server and are investigating the incident with ALPI, while the possible theft of personal and sensitive data remains under review. #VilledeTarnos #Zimbra #Alpi #MarcMabillet

Winona County paid $128,539.57 to resolve a ransomware attack detected on Jan. 22 after engaging forensic experts, law enforcement, and its insurance carrier. Officials are now investigating a separate ransomware incident from April and reviewing affected data to determine whether residents’ personal information was exposed. #WinonaCounty

The City of Norcross identified a ransomware incident that occurred on August 1, 2026, and affected certain computer systems. The City engaged cybersecurity professionals and law enforcement, and while most services remain operational, some disruptions may continue as restoration efforts and security improvements progress. #CityofNorcross

Hit Group’s casinos in Slovenia were hit by a cyberattack, forcing the closure of six gaming venues in Nova Gorica and across the country. The cause, scope, and possible impact on customer records remain under investigation. #HitGroup #NovaGorica

The Komandor supermarket chain confirmed it was hit by a cyberattack that disrupted its systems, including card payments and the Chestny Znak system. Specialists quickly worked to contain the attack and restore IT infrastructure, bringing self-checkouts and electronic payments back online in most stores by noon the previous day. #Komandor #ChestnyZnak

AI is more likely to improve the efficiency of ransomware operations than to create fully autonomous cybercrime, because profit and business models drive criminal behavior more than technology. The clearest near-term risk is AI helping groups like BlackBasta, FulcrumSec, Cl0p, and LockBit better exploit and monetize stolen data through extortion, negotiation, and secondary markets such as Leak Bazaar. #BlackBasta #FulcrumSec #Cl0p #LockBit #LeakBazaar

A cybercrime forum post alleges that Mercor was breached and that 4 terabytes of sensitive data, including user logs, AI prompts, credentials, and source code, were stolen. The claim remains unverified, but the sample data appears credible and raises concerns about exposure tied to Mercor’s partnerships with OpenAI, Google, Meta, and…

A forum user posting as slvsh3r claims to have shared a Roomer Travel customer database with more than 200,000 records, including names, usernames, email addresses, verification flags, currency preferences, and referral codes. The sample appears limited and unverified, with no passwords shown and several optional fields left empty, though it may…

TeamSystem, a business software provider, confirmed a major intrusion into its online accounting systems that led to the theft of customers’ personal data, including IBANs and identity details. Although user passwords were not compromised, the stolen information could be used to make phishing and payment fraud attempts more convincing. #TeamSystem

The Commission de la construction du Québec (CCQ) has been paralyzed since Monday following a cyberattack, prompting the organization to bring in external experts to assess the damage. While the CCQ has not yet confirmed whether any data was compromised, it says protecting personal information remains a priority and emergency services are still available. #CommissionDeLaConstructionDuQuébec #CCQ