Category: Data Breaches
-
The Sakura Internet hack may have affected as many as 1,360,563 customer accounts after attackers accessed a sales management system that stored contract and membership information. The Japanese cloud and data-centre provider said the figure remains preliminary. Its investigation is still underway, and the final number of affected accounts has not yet been confirmed. Sakura…
-
The CareCloud data breach has affected more than 3.7 million people, according to a filing with the US Department of Health and Human Services. CareCloud provides electronic health records, medical billing, practice-management and revenue-cycle services to healthcare organisations. The company first disclosed the security incident in March after an attacker accessed part of its CareCloud…
-
The alleged BMW motorcycle data leak involves hundreds of dealership and vehicle documents that the Xpl0itrs ransomware group claims to have stolen and published online. Researchers who reviewed the shared material found that some files were already publicly available, while several broader claims remain unverified. BMW motorcycle data leak includes dealership documents Xpl0itrs listed BMW…
-
A data extortion group claims it stole more than 27 million records from 13 organisations through publicly exposed Microsoft Power Pages portals. Researchers at Fortra say the incident does not appear to involve a vulnerability in Microsoft Dynamics 365. Instead, the available evidence points to Power Pages sites that may have granted anonymous visitors access…
-
Pokémon Center is notifying customers in the United Kingdom and Germany about a data breach involving logistics provider CEVA Logistics. The incident may have exposed personal and order information, while some affected Pokémon Center orders have been delayed or cancelled. The breach did not expose payment card details, according to Pokémon Center. However, customers have…
-
Philips and General Electric are investigating claims that the Clop ransomware group stole data from their systems. Philips says it contained an attempted compromise involving an internal server, while GE is still assessing the potential issue. Clop has listed both companies alongside Shell on its leak site, claiming the organisations were affected in attacks targeting…
-
A French tax agency breach may have exposed personal information belonging to 678,000 people. France’s General Directorate of Public Finances, known as DGFiP, confirmed that attackers accessed its systems in late June and early July 2026. The agency said the intruders could view and extract information from affected people. However, investigators have not yet confirmed…
-
A Sogang University data breach has exposed personal information belonging to nearly 180,000 students, alumni and staff. The Seoul university said unidentified attackers accessed its systems from overseas and leaked data linked to its integrated login service. The compromised information includes names, user ID numbers, affiliations, email addresses, mobile phone numbers and encrypted login passwords.…
-
A SafePal data breach has exposed order information belonging to approximately 39,798 customers. The cryptocurrency hardware wallet provider says attackers exploited a flaw in its order-tracking system and stole personal data linked to purchases made between March 2025 and April 2026. A threat actor now claims to be selling the stolen data on a cybercrime…
-
Shell is investigating a potential cyber incident after the Clop ransomware group claimed it stole 89GB of data from the energy giant. The alleged Shell data theft forms part of a wider campaign targeting internet-exposed PTC Windchill and FlexPLM systems. Clop has listed dozens of organisations on its data leak site and claims to have…