Sawafi Suffers Ransomware Attack by The Gentlemen Group

The Gentlemen ransomware group claims to have breached Sawafi, a Saudi company that provides drilling, completions, and production services including eco-friendly electric submersible pumps. The group has posted a countdown timer set to trigger in about 103 hours, threatening to publish exfiltrated corporate data unless extortion demands are met. #TheGentlemen #Sawafi…

Read More
Taxes Software Argentina Data Breach Leaks 440 Company Databases

Taxes Software Argentina, a Buenos Aires-based tax management software provider, has reportedly been compromised, exposing internal infrastructure and sensitive data for 440 client companies. The threat actor claims to have exploited a misconfigured Nginx server and an exposed Laravel storage directory to leak a 4.7 GB database dump containing AFIP certificates…

Read More
Advantest Cyberattack Under Ransomware Investigation

An initial access broker using the handle Big-Bro listed an auction claiming to sell domain administrator access to an unidentified Peruvian logistics and business services company with estimated revenue of about $10 million. The listing identifies a compromised Fortinet VPN appliance as the access vector and shows an auction starting at…

Read More
Wonder Rates Data Breach Exposes Sensitive Mortgage Data

Threat actor Fulcrumsec claims to have breached California mortgage broker Wonder Rates, Inc., exfiltrating the company’s production, development, and staging environments after finding an unsecured cloud storage environment. The leaked data reportedly contains full financial identities and sensitive PII for an estimated 3,000–7,000 U.S. families, along with proprietary lender integrations, source…

Read More
IFL Group Suffers Data Breach by Anubis Ransomware Group

The Anubis Ransomware Group claims to have breached IFL Group, a Michigan-based cargo airline that handles domestic and international transport, on-demand charters, and organ procurement logistics. The attackers say the leaked material mainly involves the airline’s internal operations and network infrastructure, including aircraft technical condition, inspection reports, expert evaluations, error/anomaly reports,…

Read More
Beeja Meditation Data Breach Exposes Customer PII and Payments

Beeja Meditation, a UK-based meditation and wellness platform, was allegedly compromised after a live GoCardless API token was leaked, granting unauthorized read-only access to internal customer and financial records. The February 17, 2026 breach reportedly exposed full names, email and full UK residential addresses, language preferences, bank mandate details (including active,…

Read More
Mobi UZ Data Breach: Complete Corporate Network Compromise

Mobi UZ (UMS), a major Uzbek telecom operator, reportedly suffered a full compromise of its local corporate network affecting roughly 280 Active Directory-joined machines and granting attackers administrative control over critical systems such as SMS gateways, Veeam replication servers, mail systems, billing services, MYID facial recognition, and on-premises Minio S3 repositories….

Read More