securityincident.net | Real-Time Incident Status & Milestone Timeline Index https://securityincident.net/ A neutral, high-signal index tracking real-time status and verified milestone timelines for cybersecurity incidents across the open web, powered by open weights correlation and community PR editing. en-us Thu, 08 Oct 2026 02:45:39 GMT https://www.rssboard.org/rss-specification securityincident.net static generator [DEVELOPING] Arizona Supreme Court — A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen data as of Monday. https://securityincident.net/incidents/2026-09-arizona-supreme-court.html https://securityincident.net/incidents/2026-09-arizona-supreme-court.html Tue, 29 Sep 2026 12:27:00 GMT Status: DEVELOPING
Target Domain: azcourts.gov
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 46% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 2
First Seen: 2026-09-29
Last Updated: 2026-10-07

A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen data as of Monday.

Milestone Timeline

  • 2026-09-29 12:27 UTC [INDEPENDENT VERIFICATION]: Arizona Supreme Court says hackers stole residents’ personal data (The Record by Recorded Future Report)
  • 2026-10-07 01:32 UTC [INDEPENDENT VERIFICATION]: Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System (SecurityWeek Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative developing threat-intel [CONFIRMED] Snowflake — A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provide... https://securityincident.net/incidents/2026-08-snowflake.html https://securityincident.net/incidents/2026-08-snowflake.html Thu, 06 Aug 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: snowflake.com
Threat Actor: UNC5537
Open Weights Confidence: 85% (CONFIRMED BY TARGET)
Corroborated Source Domains: 2
First Seen: 2026-08-06
Last Updated: 2026-10-06

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provide...

Milestone Timeline

  • 2026-08-06 17:00 UTC [INDEPENDENT VERIFICATION]: Canadian Man Pleads Guilty in Snowflake Extortions (Krebs on Security Report)
  • 2026-10-06 16:33 UTC [CONFIRMED BY TARGET]: ASOS confirms data breach after “HACKED” in-app notifications (BleepingComputer Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED investigative developing threat-intel confirmed [CONFIRMED] Citrix Systems (Cloud Software Group) — Cloud Software Group and federal regulators issued emergency disclosures for two actively exploited critical zero-day vulnerabilities in Citrix NetScaler ADC and Gateway (CVE-2026-88771 and CVE-2026-88772, CVSS 9.5), enabling unauthenticated remote code execution and webshell deployment across 50,000+ exposed enterprise appliances worldwide. https://securityincident.net/incidents/2026-09-citrix.html https://securityincident.net/incidents/2026-09-citrix.html Sun, 27 Sep 2026 12:00:00 GMT Status: CONFIRMED
Target Domain: citrix.com
Threat Actor: State-Sponsored Advanced Persistent Threat (APT)
Open Weights Confidence: 100% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 7
First Seen: 2026-09-27
Last Updated: 2026-10-06

Cloud Software Group and federal regulators issued emergency disclosures for two actively exploited critical zero-day vulnerabilities in Citrix NetScaler ADC and Gateway (CVE-2026-88771 and CVE-2026-88772, CVSS 9.5), enabling unauthenticated remote code execution and webshell deployment across 50,000+ exposed enterprise appliances worldwide.

Milestone Timeline

  • 2026-09-27 12:00 UTC [CONFIRMED BY REGULATOR]: Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway (CISA Cybersecurity Advisories Report)
  • 2026-09-29 18:37 UTC [INDEPENDENT VERIFICATION]: Hackers exploit Citrix NetScaler zero-day to deploy web shells (BleepingComputer Report)
  • 2026-09-28 07:21 UTC [INDEPENDENT VERIFICATION]: CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally (The Hacker News Report)
  • 2026-09-27 07:47 UTC [INDEPENDENT VERIFICATION]: Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation (The Hacker News Report)
  • 2026-09-29 14:19 UTC [INDEPENDENT VERIFICATION]: Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers (Dark Reading Report)
  • 2026-09-28 12:00 UTC [CONFIRMED BY REGULATOR]: Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway (NCSC UK Cyber Alerts Report)
  • 2026-09-29 13:53 UTC [CONFIRMED BY REGULATOR]: Citrix Patches Actively Exploited NetScaler ADC & NetScaler Gateway Vulnerabilities (HIPAA Journal Healthcare Breaches Report)
  • 2026-09-27 12:00 UTC [CONFIRMED BY REGULATOR]: CISA Adds Two Known Exploited Vulnerabilities to Catalog (CISA Cybersecurity Advisories Report)
  • 2026-10-01 11:55 UTC [INDEPENDENT VERIFICATION]: Suspected State Hackers Exploited Citrix NetScaler for Weeks. 50,000 Devices May Still Be Exposed. (DataBreaches.net Report)
  • 2026-10-02 16:56 UTC [INDEPENDENT VERIFICATION]: Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response (Dark Reading Report)
  • 2026-10-04 12:00 UTC [CONFIRMED BY REGULATOR]: CISA Adds One Known Exploited Vulnerability to Catalog (CISA Cybersecurity Advisories Report)
  • 2026-10-05 06:40 UTC [INDEPENDENT VERIFICATION]: New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline (The Hacker News Report)
  • 2026-10-06 10:26 UTC [CONFIRMED BY REGULATOR]: Citrix Patches Third Actively Exploited NetScaler Zero Day (HIPAA Journal Healthcare Breaches Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory cisa-kev zero-day infrastructure enterprise-software developing threat-intel [ACKNOWLEDGED] Federal Bureau of Investigation (FBI) — Joseph Cox reports: The hackers behind the massive FBI breach told 404 Media on Monday they do not intend to publish the data. The breach, in which the hackers stole personal information on “all FBI employees and applicants” including physical add... https://securityincident.net/incidents/2026-09-fbi.html https://securityincident.net/incidents/2026-09-fbi.html Tue, 29 Sep 2026 12:48:00 GMT Status: ACKNOWLEDGED
Target Domain: fbi.gov
Threat Actor: Cyber Extortion Collective
Open Weights Confidence: 80% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 5
First Seen: 2026-09-29
Last Updated: 2026-10-06

Joseph Cox reports: The hackers behind the massive FBI breach told 404 Media on Monday they do not intend to publish the data. The breach, in which the hackers stole personal information on “all FBI employees and applicants” including physical add...

Milestone Timeline

  • 2026-09-29 12:48 UTC [INDEPENDENT VERIFICATION]: FBI Hackers Say They Won’t Publish Massive Trove of FBI Employee Data (DataBreaches.net Report)
  • 2026-09-29 20:09 UTC [INDEPENDENT VERIFICATION]: FBI tells ShinyHunters members to turn themselves in after recent arrest (BleepingComputer Report)
  • 2026-10-02 14:06 UTC [INDEPENDENT VERIFICATION]: Mississippi mayor says ransomware incident led city to shut down systems (The Record by Recorded Future Report)
  • 2026-10-06 15:23 UTC [INDEPENDENT VERIFICATION]: FBI Blames Contractor’s Missed Patch for ShinyHunters Breach (DataBreaches.net Report)
  • 2026-10-05 12:30 UTC [INDEPENDENT VERIFICATION]: Hackers Breached Propulsion System of U.S.-Bound Oil Tanker (DataBreaches.net Report)
  • 2026-10-06 14:15 UTC [INDEPENDENT VERIFICATION]: FBI Blames Contractor's Missed Patch for ShinyHunters Breach (SecurityWeek Report)
  • 2026-10-06 06:56 UTC [INDEPENDENT VERIFICATION]: FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach (The Hacker News Report)
  • 2026-10-04 07:22 UTC [INDEPENDENT VERIFICATION]: ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members (The Hacker News Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> ACKNOWLEDGED investigative emerging threat-intel developing acknowledged [EMERGING] Agri Industrial — Agri Industrial was listed on the Everest ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-agri-industrial.html https://securityincident.net/incidents/2026-10-agri-industrial.html Tue, 06 Oct 2026 16:17:00 GMT Status: EMERGING
Target Domain: agriindustrial.com
Threat Actor: Everest
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Agri Industrial was listed on the Everest ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim everest emerging [DEVELOPING] Atlassian — Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...] https://securityincident.net/incidents/2026-10-atlassian.html https://securityincident.net/incidents/2026-10-atlassian.html Tue, 06 Oct 2026 17:34:00 GMT Status: DEVELOPING
Target Domain: atlassian.com
Open Weights Confidence: 35% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...]

Milestone Timeline

  • 2026-10-06 17:34 UTC [INDEPENDENT VERIFICATION]: Atlassian warns of critical file-access flaw in Jira, Confluence (BleepingComputer Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING threat-intel developing [EMERGING] B-accountants — B-accountants was listed on the Everest ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-b-accountants.html https://securityincident.net/incidents/2026-10-b-accountants.html Tue, 06 Oct 2026 16:17:00 GMT Status: EMERGING
Target Domain: baccountants.com
Threat Actor: Everest
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

B-accountants was listed on the Everest ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim everest emerging [EMERGING] Beni Suef Technological University – BTU — Beni Suef Technological University – BTU was listed on the UmBra ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-beni-suef-technological-university-btu.html https://securityincident.net/incidents/2026-10-beni-suef-technological-university-btu.html Tue, 06 Oct 2026 22:24:00 GMT Status: EMERGING
Target Domain: benisueftechnologicaluniversitybtu.com
Threat Actor: UmBra
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Beni Suef Technological University – BTU was listed on the UmBra ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

  • 2026-10-06 22:24 UTC [UNVERIFIED CLAIM]: Beni Suef Technological University – BTU Listed on UmBra Ransomware Extortion Portal (UmBra Ransomware Leak Site Claim)

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim umbra emerging [EMERGING] BNYH — BNYH was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-bnyh.html https://securityincident.net/incidents/2026-10-bnyh.html Tue, 06 Oct 2026 20:19:00 GMT Status: EMERGING
Target Domain: bnyh.com
Threat Actor: Qilin
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

BNYH was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim qilin emerging [EMERGING] Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi — Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-ciftay-insaat-taahhut-ve-ticaret-anonim-sirketi.html https://securityincident.net/incidents/2026-10-ciftay-insaat-taahhut-ve-ticaret-anonim-sirketi.html Tue, 06 Oct 2026 20:18:00 GMT Status: EMERGING
Target Domain: ciftay.com.tr
Threat Actor: Qilin
Open Weights Confidence: 17% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

  • 2026-10-06 20:18 UTC [UNVERIFIED CLAIM]: Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi Listed on Qilin Ransomware Extortion Portal (Qilin Ransomware Leak Site Claim)

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim qilin emerging [EMERGING] CORBY ROCK MILL — CORBY ROCK MILL was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-corby-rock-mill.html https://securityincident.net/incidents/2026-10-corby-rock-mill.html Tue, 06 Oct 2026 09:03:00 GMT Status: EMERGING
Target Domain: corbyrock.ie
Threat Actor: Qilin
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

CORBY ROCK MILL was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim qilin emerging [EMERGING] Delta Marine — Delta Marine was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-delta-marine.html https://securityincident.net/incidents/2026-10-delta-marine.html Tue, 06 Oct 2026 09:02:00 GMT Status: EMERGING
Target Domain: deltamarine.com
Threat Actor: Qilin
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Delta Marine was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim qilin emerging [EMERGING] EDFelectronics — EDFelectronics was listed on the Panzer ransomware extortion leak portal. EDFelectronics.com is a Polish engineering company that develops specialized electronics and plasma technology for industrial and research applications. https://securityincident.net/incidents/2026-10-edfelectronics.html https://securityincident.net/incidents/2026-10-edfelectronics.html Tue, 06 Oct 2026 22:55:00 GMT Status: EMERGING
Target Domain: edfelectronics.com
Threat Actor: Panzer
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

EDFelectronics was listed on the Panzer ransomware extortion leak portal. EDFelectronics.com is a Polish engineering company that develops specialized electronics and plasma technology for industrial and research applications.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim panzer emerging [EMERGING] Flydubai — Flydubai was listed on the Everest ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-flydubai.html https://securityincident.net/incidents/2026-10-flydubai.html Tue, 06 Oct 2026 16:15:00 GMT Status: EMERGING
Target Domain: flydubai.com
Threat Actor: Everest
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Flydubai was listed on the Everest ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim everest emerging [EMERGING] Four Hands LLC — Four Hands LLC was listed on the UmBra ransomware extortion leak portal. Four Hands LLC is a global leader in lifestyle home furnishings, designing and wholesaling innovative, artisanal furniture and decor to top retailers and designers worldwide. https://securityincident.net/incidents/2026-10-four-hands-llc.html https://securityincident.net/incidents/2026-10-four-hands-llc.html Tue, 06 Oct 2026 14:54:00 GMT Status: EMERGING
Target Domain: fourhands.com
Threat Actor: UmBra
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Four Hands LLC was listed on the UmBra ransomware extortion leak portal. Four Hands LLC is a global leader in lifestyle home furnishings, designing and wholesaling innovative, artisanal furniture and decor to top retailers and designers worldwide.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim umbra emerging [EMERGING] Greggio Argento — Greggio Argento was listed on the Deadlock ransomware extortion leak portal. Threat actor claims exfiltration of 500GB of internal data files. https://securityincident.net/incidents/2026-10-greggio-argento.html https://securityincident.net/incidents/2026-10-greggio-argento.html Tue, 06 Oct 2026 16:21:00 GMT Status: EMERGING
Target Domain: greggio.com
Threat Actor: Deadlock
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Greggio Argento was listed on the Deadlock ransomware extortion leak portal. Threat actor claims exfiltration of 500GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim deadlock emerging [EMERGING] Hygrade — Hygrade was listed on the Akira ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-hygrade.html https://securityincident.net/incidents/2026-10-hygrade.html Tue, 06 Oct 2026 14:52:00 GMT Status: EMERGING
Target Domain: hygrade.com
Threat Actor: Akira
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Hygrade was listed on the Akira ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim akira emerging [EMERGING] J&D Financial — J&D Financial was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-j-d-financial.html https://securityincident.net/incidents/2026-10-j-d-financial.html Tue, 06 Oct 2026 09:02:00 GMT Status: EMERGING
Target Domain: jdfinancial.com
Threat Actor: Qilin
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

J&D Financial was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim qilin emerging [EMERGING] Kennametal — Kennametal was listed on the Everest ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-kennametal.html https://securityincident.net/incidents/2026-10-kennametal.html Tue, 06 Oct 2026 16:15:00 GMT Status: EMERGING
Target Domain: kennametal.com
Threat Actor: Everest
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Kennametal was listed on the Everest ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim everest emerging [EMERGING] KOOKABARRA JUICE — KOOKABARRA JUICE was listed on the Vexy Ransomware ransomware extortion leak portal. French manufacturer specializing in fresh-pressed fruit juices, detox juices, smoothies, nectars and other fresh fruit products, serving both professionals and co... https://securityincident.net/incidents/2026-10-kookabarra-juice.html https://securityincident.net/incidents/2026-10-kookabarra-juice.html Tue, 06 Oct 2026 20:55:00 GMT Status: EMERGING
Target Domain: kookabarra.com
Threat Actor: Vexy Ransomware
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

KOOKABARRA JUICE was listed on the Vexy Ransomware ransomware extortion leak portal. French manufacturer specializing in fresh-pressed fruit juices, detox juices, smoothies, nectars and other fresh fruit products, serving both professionals and co...

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim vexy ransomware emerging [EMERGING] magnals.com — magnals.com was listed on the Incransom ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-magnals-com.html https://securityincident.net/incidents/2026-10-magnals-com.html Tue, 06 Oct 2026 17:27:00 GMT Status: EMERGING
Target Domain: magnals.com
Threat Actor: Incransom
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

magnals.com was listed on the Incransom ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim incransom emerging [EMERGING] Michael K Shelby, CPA — Michael K Shelby, CPA was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 18GB of internal data files. https://securityincident.net/incidents/2026-10-michael-k-shelby-cpa.html https://securityincident.net/incidents/2026-10-michael-k-shelby-cpa.html Tue, 06 Oct 2026 14:52:00 GMT Status: EMERGING
Target Domain: mkshelbycpa.com
Threat Actor: Akira
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Michael K Shelby, CPA was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 18GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim akira emerging [EMERGING] Morcon Developments — Morcon Developments was listed on the Everest ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-morcon-developments.html https://securityincident.net/incidents/2026-10-morcon-developments.html Tue, 06 Oct 2026 16:16:00 GMT Status: EMERGING
Target Domain: morcondevelopments.com
Threat Actor: Everest
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Morcon Developments was listed on the Everest ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim everest emerging [DEVELOPING] Nikkei — Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails. [...] https://securityincident.net/incidents/2026-10-nikkei.html https://securityincident.net/incidents/2026-10-nikkei.html Tue, 06 Oct 2026 09:25:00 GMT Status: DEVELOPING
Target Domain: nikkei.com
Open Weights Confidence: 35% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails. [...]

Milestone Timeline

  • 2026-10-06 09:25 UTC [INDEPENDENT VERIFICATION]: Nikkei discloses breaches of employees’ Microsoft, Google email accounts (BleepingComputer Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING threat-intel developing [EMERGING] Philander Smith University — Philander Smith University was listed on the EndZone ransomware extortion leak portal. Threat actor claims exfiltration of 500GB of internal data files. https://securityincident.net/incidents/2026-10-philander-smith-university.html https://securityincident.net/incidents/2026-10-philander-smith-university.html Tue, 06 Oct 2026 07:50:00 GMT Status: EMERGING
Target Domain: philander.edu
Threat Actor: EndZone
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

Philander Smith University was listed on the EndZone ransomware extortion leak portal. Threat actor claims exfiltration of 500GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim endzone emerging [EMERGING] SweetRush — SweetRush was listed on the Panzer ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-sweetrush.html https://securityincident.net/incidents/2026-10-sweetrush.html Tue, 06 Oct 2026 17:51:00 GMT Status: EMERGING
Target Domain: sweetrush.com
Threat Actor: Panzer
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

SweetRush was listed on the Panzer ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim panzer emerging [DEVELOPING] Wikimedia — The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public note-taking tool, and edit Wikipedia pages. "Th... https://securityincident.net/incidents/2026-10-wikimedia.html https://securityincident.net/incidents/2026-10-wikimedia.html Tue, 06 Oct 2026 11:26:00 GMT Status: DEVELOPING
Target Domain: wikimedia.com
Open Weights Confidence: 35% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-10-06
Last Updated: 2026-10-06

The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public note-taking tool, and edit Wikipedia pages. "Th...

Milestone Timeline

  • 2026-10-06 11:26 UTC [INDEPENDENT VERIFICATION]: Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies (The Hacker News Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING threat-intel developing [EMERGING] A...n — A...n was listed on the SilentRansomGroup ransomware extortion leak portal. Redacted entry - full company name pending disclosure (FULL DATA TIMER active). https://securityincident.net/incidents/2026-10-a-n.html https://securityincident.net/incidents/2026-10-a-n.html Mon, 05 Oct 2026 22:27:00 GMT Status: EMERGING
Target Domain: an.com
Threat Actor: SilentRansomGroup
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

A...n was listed on the SilentRansomGroup ransomware extortion leak portal. Redacted entry - full company name pending disclosure (FULL DATA TIMER active).

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim silentransomgroup emerging [CONFIRMED] Advantest America — State of California Department of Justice data breach disclosure notice filed by Advantest America. https://securityincident.net/incidents/2026-10-advantest-america.html https://securityincident.net/incidents/2026-10-advantest-america.html Mon, 05 Oct 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: advantestamerica.com
Open Weights Confidence: 80% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

State of California Department of Justice data breach disclosure notice filed by Advantest America.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [EMERGING] anwo.cl — anwo.cl was listed on the Safepay ransomware extortion leak portal. The company was established in 1984 by Víctor Herrmann and has developed into one of the major HVAC distribution businesses … https://securityincident.net/incidents/2026-10-anwo-cl.html https://securityincident.net/incidents/2026-10-anwo-cl.html Mon, 05 Oct 2026 18:28:00 GMT Status: EMERGING
Target Domain: anwo.cl
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

anwo.cl was listed on the Safepay ransomware extortion leak portal. The company was established in 1984 by Víctor Herrmann and has developed into one of the major HVAC distribution businesses …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [EMERGING] bwi-bau.de — bwi-bau.de was listed on the Safepay ransomware extortion leak portal. The organization was established in October 1964 as a subsidiary of the Construction Industry Association of North Rhine-Westphalia. It originally … https://securityincident.net/incidents/2026-10-bwi-bau-de.html https://securityincident.net/incidents/2026-10-bwi-bau-de.html Mon, 05 Oct 2026 19:36:00 GMT Status: EMERGING
Target Domain: bwi-bau.de
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

bwi-bau.de was listed on the Safepay ransomware extortion leak portal. The organization was established in October 1964 as a subsidiary of the Construction Industry Association of North Rhine-Westphalia. It originally …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [EMERGING] Cam Group LLC — Cam Group LLC was listed on the Doommageddon ransomware extortion leak portal. Status: upcoming | Deadline: 2026-10-15T00:00:00Z https://securityincident.net/incidents/2026-10-cam-group-llc.html https://securityincident.net/incidents/2026-10-cam-group-llc.html Mon, 05 Oct 2026 11:53:00 GMT Status: EMERGING
Target Domain: camgroupllc.com
Threat Actor: Doommageddon
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

Cam Group LLC was listed on the Doommageddon ransomware extortion leak portal. Status: upcoming | Deadline: 2026-10-15T00:00:00Z

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim doommageddon emerging [DEVELOPING] Daiwa Securities — Takashi Nakamichi and Ryo Horiuchi report that Daiwa Securities, Japan's second-largest brokerage and investment banking firm, is responding to a breach at one of its vendors. Daiwa Securities Group said information on as many as 110,000 clients m... https://securityincident.net/incidents/2026-10-daiwa-securities.html https://securityincident.net/incidents/2026-10-daiwa-securities.html Mon, 05 Oct 2026 12:30:00 GMT Status: DEVELOPING
Target Domain: daiwasecurities.com
Open Weights Confidence: 35% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

Takashi Nakamichi and Ryo Horiuchi report that Daiwa Securities, Japan's second-largest brokerage and investment banking firm, is responding to a breach at one of its vendors. Daiwa Securities Group said information on as many as 110,000 clients m...

Milestone Timeline

  • 2026-10-05 12:30 UTC [INDEPENDENT VERIFICATION]: Daiwa Securities says info on 110,000 clients may have been leaked in vendor incident (DataBreaches.net Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative developing [EMERGING] dd-automation.ch — dd-automation.ch was listed on the Safepay ransomware extortion leak portal. The company was entered into the Swiss commercial register in 1997 and specializes in electrical engineering, automation systems, conveyor technology, … https://securityincident.net/incidents/2026-10-dd-automation-ch.html https://securityincident.net/incidents/2026-10-dd-automation-ch.html Mon, 05 Oct 2026 19:39:00 GMT Status: EMERGING
Target Domain: dd-automation.ch
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

dd-automation.ch was listed on the Safepay ransomware extortion leak portal. The company was entered into the Swiss commercial register in 1997 and specializes in electrical engineering, automation systems, conveyor technology, …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [DEVELOPING] Denmark population registry — Denmark's Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals. [...] https://securityincident.net/incidents/2026-10-denmark-population-registry.html https://securityincident.net/incidents/2026-10-denmark-population-registry.html Mon, 05 Oct 2026 15:21:00 GMT Status: DEVELOPING
Target Domain: denmarkpopulationregistry.com
Open Weights Confidence: 39% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

Denmark's Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals. [...]

Milestone Timeline

  • 2026-10-05 15:21 UTC [INDEPENDENT VERIFICATION]: Denmark population registry data breach affects 8.8 million people (BleepingComputer Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING threat-intel developing [EMERGING] duhaas.sk — duhaas.sk was listed on the Safepay ransomware extortion leak portal. The company was subsequently transformed into a limited liability company in 1992 and established as a joint-stock company in 1994. … https://securityincident.net/incidents/2026-10-duhaas-sk.html https://securityincident.net/incidents/2026-10-duhaas-sk.html Mon, 05 Oct 2026 18:27:00 GMT Status: EMERGING
Target Domain: duhaas.sk
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

duhaas.sk was listed on the Safepay ransomware extortion leak portal. The company was subsequently transformed into a limited liability company in 1992 and established as a joint-stock company in 1994. …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [EMERGING] ENKA Schools — ENKA Schools was listed on the Doommageddon ransomware extortion leak portal. Status: upcoming | Deadline: 2026-10-15T00:00:00Z https://securityincident.net/incidents/2026-10-enka-schools.html https://securityincident.net/incidents/2026-10-enka-schools.html Mon, 05 Oct 2026 11:53:00 GMT Status: EMERGING
Target Domain: enka.k12.tr
Threat Actor: Doommageddon
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

ENKA Schools was listed on the Doommageddon ransomware extortion leak portal. Status: upcoming | Deadline: 2026-10-15T00:00:00Z

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim doommageddon emerging [EMERGING] Global Security Concepts — Global Security Concepts was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-global-security-concepts.html https://securityincident.net/incidents/2026-10-global-security-concepts.html Mon, 05 Oct 2026 21:04:00 GMT Status: EMERGING
Target Domain: gscsecurity.com
Threat Actor: Qilin
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

Global Security Concepts was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim qilin emerging [EMERGING] grundens.com — grundens.com was listed on the Safepay ransomware extortion leak portal. The company's origins can be traced to 1911, when Carl A. Grundén, the son of a fisherman from Grundsund on … https://securityincident.net/incidents/2026-10-grundens-com.html https://securityincident.net/incidents/2026-10-grundens-com.html Mon, 05 Oct 2026 19:35:00 GMT Status: EMERGING
Target Domain: grundens.com
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

grundens.com was listed on the Safepay ransomware extortion leak portal. The company's origins can be traced to 1911, when Carl A. Grundén, the son of a fisherman from Grundsund on …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [EMERGING] H&L Manufacturing — H&L Manufacturing was listed on the Interlock ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-h-l-manufacturing.html https://securityincident.net/incidents/2026-10-h-l-manufacturing.html Mon, 05 Oct 2026 15:59:00 GMT Status: EMERGING
Target Domain: https:hlmanufacturing.com
Threat Actor: Interlock
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

H&L Manufacturing was listed on the Interlock ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim interlock emerging [EMERGING] halservice.it — halservice.it was listed on the Safepay ransomware extortion leak portal. Established in 1990, the company initially focused on system integration and information-technology services and later expanded into telecommunications following the … https://securityincident.net/incidents/2026-10-halservice-it.html https://securityincident.net/incidents/2026-10-halservice-it.html Mon, 05 Oct 2026 19:36:00 GMT Status: EMERGING
Target Domain: halservice.it
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

halservice.it was listed on the Safepay ransomware extortion leak portal. Established in 1990, the company initially focused on system integration and information-technology services and later expanded into telecommunications following the …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [EMERGING] ikhasas.com — ikhasas.com was listed on the Safepay ransomware extortion leak portal. The group was incorporated as iKHASAS Sdn. Bhd. in 2008 and subsequently expanded beyond construction into property development, hospitality, plantation, … https://securityincident.net/incidents/2026-10-ikhasas-com.html https://securityincident.net/incidents/2026-10-ikhasas-com.html Mon, 05 Oct 2026 18:26:00 GMT Status: EMERGING
Target Domain: ikhasas.com
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

ikhasas.com was listed on the Safepay ransomware extortion leak portal. The group was incorporated as iKHASAS Sdn. Bhd. in 2008 and subsequently expanded beyond construction into property development, hospitality, plantation, …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [EMERGING] Millensys — Millensys was listed on the Medusalocker ransomware extortion leak portal. Organization with 2 emails extracted. Domain: millensys.com https://securityincident.net/incidents/2026-10-millensys.html https://securityincident.net/incidents/2026-10-millensys.html Mon, 05 Oct 2026 11:08:00 GMT Status: EMERGING
Target Domain: millensys.com
Threat Actor: Medusalocker
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

Millensys was listed on the Medusalocker ransomware extortion leak portal. Organization with 2 emails extracted. Domain: millensys.com

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim medusalocker emerging [EMERGING] Nelson Mullins Riley & Scarborough — Nelson Mullins Riley & Scarborough was listed on the SilentRansomGroup ransomware extortion leak portal. They offered $8.000.000 to keep the data from being published. https://securityincident.net/incidents/2026-10-nelson-mullins-riley-scarborough.html https://securityincident.net/incidents/2026-10-nelson-mullins-riley-scarborough.html Mon, 05 Oct 2026 19:25:00 GMT Status: EMERGING
Target Domain: nelsonmullinsrileyscarborough.com
Threat Actor: SilentRansomGroup
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

Nelson Mullins Riley & Scarborough was listed on the SilentRansomGroup ransomware extortion leak portal. They offered $8.000.000 to keep the data from being published.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim silentransomgroup emerging [EMERGING] O2 Dental Group — O2 Dental Group was listed on the Interlock ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-o2-dental-group.html https://securityincident.net/incidents/2026-10-o2-dental-group.html Mon, 05 Oct 2026 15:01:00 GMT Status: EMERGING
Target Domain: o2smiles.com
Threat Actor: Interlock
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

O2 Dental Group was listed on the Interlock ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim interlock emerging [EMERGING] Onsemi — Onsemi was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-onsemi.html https://securityincident.net/incidents/2026-10-onsemi.html Mon, 05 Oct 2026 13:15:00 GMT Status: EMERGING
Target Domain: onsemi.com
Threat Actor: Qilin
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

Onsemi was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim qilin emerging [CONFIRMED] Sheppard, Mullin, Richter & Hampton — State of California Department of Justice data breach disclosure notice filed by Sheppard, Mullin, Richter & Hampton. https://securityincident.net/incidents/2026-10-sheppard-mullin-richter-hampto.html https://securityincident.net/incidents/2026-10-sheppard-mullin-richter-hampto.html Fri, 02 Oct 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: sheppardmullinrichterhampto.com
Threat Actor: SilentRansomGroup
Open Weights Confidence: 92% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-10-02
Last Updated: 2026-10-05

State of California Department of Justice data breach disclosure notice filed by Sheppard, Mullin, Richter & Hampton.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed extortion ransomware-claim silentransomgroup emerging [EMERGING] sterrer.net — sterrer.net was listed on the Safepay ransomware extortion leak portal. The company has operated since 1979 and combines agricultural production with technical services for commercial poultry farms. Its activities include … https://securityincident.net/incidents/2026-10-sterrer-net.html https://securityincident.net/incidents/2026-10-sterrer-net.html Mon, 05 Oct 2026 18:26:00 GMT Status: EMERGING
Target Domain: sterrer.net
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

sterrer.net was listed on the Safepay ransomware extortion leak portal. The company has operated since 1979 and combines agricultural production with technical services for commercial poultry farms. Its activities include …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [EMERGING] stuecheli.ch — stuecheli.ch was listed on the Safepay ransomware extortion leak portal. The firm was founded by architect Werner Stücheli in 1946 and has developed into a third-generation architectural practice. It is … https://securityincident.net/incidents/2026-10-stuecheli-ch.html https://securityincident.net/incidents/2026-10-stuecheli-ch.html Mon, 05 Oct 2026 19:37:00 GMT Status: EMERGING
Target Domain: stuecheli.ch
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

stuecheli.ch was listed on the Safepay ransomware extortion leak portal. The firm was founded by architect Werner Stücheli in 1946 and has developed into a third-generation architectural practice. It is …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [EMERGING] t-systems.com — t-systems.com was listed on the Safepay ransomware extortion leak portal. Headquartered in Germany, the company operates internationally and has locations in 26 countries, employing more than 26,000 people. T-Systems specializes … https://securityincident.net/incidents/2026-10-t-systems-com.html https://securityincident.net/incidents/2026-10-t-systems-com.html Mon, 05 Oct 2026 19:34:00 GMT Status: EMERGING
Target Domain: t-systems.com
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

t-systems.com was listed on the Safepay ransomware extortion leak portal. Headquartered in Germany, the company operates internationally and has locations in 26 countries, employing more than 26,000 people. T-Systems specializes …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [EMERGING] Turn5 — Turn5 was listed on the Global Secret Group ransomware extortion leak portal. Threat actor claims exfiltration of 328 GB of internal data files. https://securityincident.net/incidents/2026-10-turn5.html https://securityincident.net/incidents/2026-10-turn5.html Mon, 05 Oct 2026 18:53:00 GMT Status: EMERGING
Target Domain: turn5.com
Threat Actor: Global Secret Group
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-05
Last Updated: 2026-10-05

Turn5 was listed on the Global Secret Group ransomware extortion leak portal. Threat actor claims exfiltration of 328 GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim global secret group emerging [EMERGING] Automovil Club del Ecuador ANETA — Automovil Club del Ecuador ANETA was listed on the Barracuda ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-automovil-club-del-ecuador-aneta.html https://securityincident.net/incidents/2026-10-automovil-club-del-ecuador-aneta.html Fri, 02 Oct 2026 04:50:00 GMT Status: EMERGING
Target Domain: aneta.org.ec
Threat Actor: Barracuda
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

Automovil Club del Ecuador ANETA was listed on the Barracuda ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim barracuda emerging [EMERGING] EdgeEndo® USA — EdgeEndo® USA was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 103 GB of internal data files. https://securityincident.net/incidents/2026-10-edgeendo-usa.html https://securityincident.net/incidents/2026-10-edgeendo-usa.html Fri, 02 Oct 2026 12:50:00 GMT Status: EMERGING
Target Domain: edgeendo.com
Threat Actor: Booba Project
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

EdgeEndo® USA was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 103 GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim booba project emerging [EMERGING] Far West Contractors — Far West Contractors was listed on the Deadlock ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-far-west-contractors.html https://securityincident.net/incidents/2026-10-far-west-contractors.html Fri, 02 Oct 2026 07:50:00 GMT Status: EMERGING
Target Domain: farwestcontractors.com
Threat Actor: Deadlock
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

Far West Contractors was listed on the Deadlock ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim deadlock emerging [CONFIRMED] Fragomen, Del Rey, Bernsen & Loewy — State of California Department of Justice data breach disclosure notice filed by Fragomen, Del Rey, Bernsen & Loewy. https://securityincident.net/incidents/2026-10-fragomen-del-rey-bernsen-loewy.html https://securityincident.net/incidents/2026-10-fragomen-del-rey-bernsen-loewy.html Fri, 02 Oct 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: fragomendelreybernsenloewy.com
Open Weights Confidence: 80% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

State of California Department of Justice data breach disclosure notice filed by Fragomen, Del Rey, Bernsen & Loewy.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [EMERGING] Inova Semiconductors GmbH — Inova Semiconductors GmbH was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-inova-semiconductors-gmbh.html https://securityincident.net/incidents/2026-10-inova-semiconductors-gmbh.html Fri, 02 Oct 2026 14:04:00 GMT Status: EMERGING
Target Domain: inova-semiconductors.de
Threat Actor: Qilin
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

Inova Semiconductors GmbH was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim qilin emerging [EMERGING] Jampac Alimentos — Jampac Alimentos was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 35GB of internal data files. https://securityincident.net/incidents/2026-10-jampac-alimentos.html https://securityincident.net/incidents/2026-10-jampac-alimentos.html Fri, 02 Oct 2026 14:59:00 GMT Status: EMERGING
Target Domain: jampacalimentos.com
Threat Actor: Akira
Open Weights Confidence: 13% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

Jampac Alimentos was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 35GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim akira emerging [EMERGING] Main Place Mall — Main Place Mall was listed on the Netrunner ransomware extortion leak portal. Main Place is part of a mixed development that combines residence, leisure, retail and dining to bring you the ultimate city-suburban lifestyle. https://securityincident.net/incidents/2026-10-main-place-mall.html https://securityincident.net/incidents/2026-10-main-place-mall.html Fri, 02 Oct 2026 00:05:00 GMT Status: EMERGING
Target Domain: mainplace.com.my
Threat Actor: Netrunner
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

Main Place Mall was listed on the Netrunner ransomware extortion leak portal. Main Place is part of a mixed development that combines residence, leisure, retail and dining to bring you the ultimate city-suburban lifestyle.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim netrunner emerging [EMERGING] Pacific Tank Lines — Pacific Tank Lines was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 13GB of internal data files. https://securityincident.net/incidents/2026-10-pacific-tank-lines.html https://securityincident.net/incidents/2026-10-pacific-tank-lines.html Fri, 02 Oct 2026 14:24:00 GMT Status: EMERGING
Target Domain: pacifictanklines.com
Threat Actor: Akira
Open Weights Confidence: 13% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

Pacific Tank Lines was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 13GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim akira emerging [EMERGING] Raleigh Family Medicine — Raleigh Family Medicine was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 1 GB of internal data files. https://securityincident.net/incidents/2026-10-raleigh-family-medicine.html https://securityincident.net/incidents/2026-10-raleigh-family-medicine.html Fri, 02 Oct 2026 12:51:00 GMT Status: EMERGING
Target Domain: rfppa.com
Threat Actor: Booba Project
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

Raleigh Family Medicine was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 1 GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim booba project emerging [EMERGING] Sangre de Cristo Electric Association — Sangre de Cristo Electric Association was listed on the Incransom ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-sangre-de-cristo-electric-association.html https://securityincident.net/incidents/2026-10-sangre-de-cristo-electric-association.html Fri, 02 Oct 2026 01:33:00 GMT Status: EMERGING
Target Domain: myelectric.coop
Threat Actor: Incransom
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

Sangre de Cristo Electric Association was listed on the Incransom ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim incransom emerging [EMERGING] Soni Medical Centre — Soni Medical Centre was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 5.5 GB of internal data files. https://securityincident.net/incidents/2026-10-soni-medical-centre.html https://securityincident.net/incidents/2026-10-soni-medical-centre.html Fri, 02 Oct 2026 12:50:00 GMT Status: EMERGING
Target Domain: lakewoodmedical.ca
Threat Actor: Booba Project
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

Soni Medical Centre was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 5.5 GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim booba project emerging [EMERGING] The Official College of Architects of León (COAL) — The Official College of Architects of León (COAL) was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 77GB of internal data files. https://securityincident.net/incidents/2026-10-the-official-college-of-architects-of-leon-coal.html https://securityincident.net/incidents/2026-10-the-official-college-of-architects-of-leon-coal.html Fri, 02 Oct 2026 14:59:00 GMT Status: EMERGING
Target Domain: theofficialcollegeofarchitectsofleoncoal.com
Threat Actor: Akira
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

The Official College of Architects of León (COAL) was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 77GB of internal data files.

Milestone Timeline

  • 2026-10-02 14:59 UTC [UNVERIFIED CLAIM]: The Official College of Architects of León (COAL) Listed on Akira Ransomware Extortion Portal (Akira Ransomware Leak Site Claim)

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim akira emerging [EMERGING] Tronex A/S — Tronex A/S was listed on the Wallstreet ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-tronex-a-s.html https://securityincident.net/incidents/2026-10-tronex-a-s.html Fri, 02 Oct 2026 11:55:00 GMT Status: EMERGING
Target Domain: tronexas.com
Threat Actor: Wallstreet
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

Tronex A/S was listed on the Wallstreet ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim wallstreet emerging [EMERGING] UNION FA — UNION FA was listed on the Deadlock ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-union-fa.html https://securityincident.net/incidents/2026-10-union-fa.html Fri, 02 Oct 2026 07:50:00 GMT Status: EMERGING
Target Domain: rogdianakis.gr
Threat Actor: Deadlock
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

UNION FA was listed on the Deadlock ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim deadlock emerging [EMERGING] University of Illinois Chicago — University of Illinois Chicago was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 344 GB of internal data files. https://securityincident.net/incidents/2026-10-university-of-illinois-chicago.html https://securityincident.net/incidents/2026-10-university-of-illinois-chicago.html Fri, 02 Oct 2026 12:50:00 GMT Status: EMERGING
Target Domain: uic.edu
Threat Actor: Booba Project
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

University of Illinois Chicago was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 344 GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim booba project emerging [EMERGING] www.kres.cz — www.kres.cz was listed on the Krybit ransomware extortion leak portal. KRES spol. s r.o. is a Czech company headquartered in Krnov, Moravskoslezský Region, Czech Republic, specializing in wh... https://securityincident.net/incidents/2026-10-www-kres-cz.html https://securityincident.net/incidents/2026-10-www-kres-cz.html Fri, 02 Oct 2026 09:31:00 GMT Status: EMERGING
Target Domain: kres.cz
Threat Actor: Krybit
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

www.kres.cz was listed on the Krybit ransomware extortion leak portal. KRES spol. s r.o. is a Czech company headquartered in Krnov, Moravskoslezský Region, Czech Republic, specializing in wh...

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim krybit emerging [EMERGING] www.pierrefeu.fr — www.pierrefeu.fr was listed on the Krybit ransomware extortion leak portal. Pierrefeu Immobilier is an independent French real estate agency founded in 1963, headquartered in Tarare, in the Nord-O... https://securityincident.net/incidents/2026-10-www-pierrefeu-fr.html https://securityincident.net/incidents/2026-10-www-pierrefeu-fr.html Fri, 02 Oct 2026 09:30:00 GMT Status: EMERGING
Target Domain: pierrefeu.fr
Threat Actor: Krybit
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

www.pierrefeu.fr was listed on the Krybit ransomware extortion leak portal. Pierrefeu Immobilier is an independent French real estate agency founded in 1963, headquartered in Tarare, in the Nord-O...

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim krybit emerging [EMERGING] www.raajratna.com — www.raajratna.com was listed on the Krybit ransomware extortion leak portal. Raajratna Metal Industries Limited (RMIL) is a leading Indian public limited company incorporated on May 9, 1988, headqu... https://securityincident.net/incidents/2026-10-www-raajratna-com.html https://securityincident.net/incidents/2026-10-www-raajratna-com.html Fri, 02 Oct 2026 09:31:00 GMT Status: EMERGING
Target Domain: raajratna.com
Threat Actor: Krybit
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-02
Last Updated: 2026-10-02

www.raajratna.com was listed on the Krybit ransomware extortion leak portal. Raajratna Metal Industries Limited (RMIL) is a leading Indian public limited company incorporated on May 9, 1988, headqu...

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim krybit emerging [CONFIRMED] Microsoft — Microsoft disclosed an intrusion by Russian foreign intelligence threat group Midnight Blizzard (APT29), accessing senior leadership corporate emails and source code. https://securityincident.net/incidents/2024-01-microsoft-midnight-blizzard.html https://securityincident.net/incidents/2024-01-microsoft-midnight-blizzard.html Fri, 12 Jan 2024 18:00:00 GMT Status: CONFIRMED
Target Domain: microsoft.com
Threat Actor: Midnight Blizzard (APT29)
Open Weights Confidence: 100% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 3
First Seen: 2024-01-12
Last Updated: 2026-10-01

Microsoft disclosed an intrusion by Russian foreign intelligence threat group Midnight Blizzard (APT29), accessing senior leadership corporate emails and source code.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k nation-state apt29 confirmed threat-intel developing [CONFIRMED] Bitget — Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million. [...] https://securityincident.net/incidents/2026-09-bitget.html https://securityincident.net/incidents/2026-09-bitget.html Mon, 28 Sep 2026 09:25:00 GMT Status: CONFIRMED
Target Domain: bitget.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 74% (CONFIRMED BY TARGET)
Corroborated Source Domains: 2
First Seen: 2026-09-25
Last Updated: 2026-10-01

Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million. [...]

Milestone Timeline

  • 2026-09-28 09:25 UTC [INDEPENDENT VERIFICATION]: Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist (BleepingComputer Report)
  • 2026-09-28 17:42 UTC [INDEPENDENT VERIFICATION]: Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M (The Hacker News Intelligence Notice)
  • 2026-09-25 10:35 UTC [INDEPENDENT VERIFICATION]: Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise (The Hacker News Intelligence Notice)
  • 2026-09-30 11:11 UTC [INDEPENDENT VERIFICATION]: Bitget hacked via zero-day in third-party security products (BleepingComputer Report)
  • 2026-10-01 05:21 UTC [CONFIRMED BY TARGET]: Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft (The Hacker News Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED threat-intel developing [DEVELOPING] DIVD — The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. [...] https://securityincident.net/incidents/2026-09-divd.html https://securityincident.net/incidents/2026-09-divd.html Wed, 30 Sep 2026 19:49:00 GMT Status: DEVELOPING
Target Domain: divd.nl
Open Weights Confidence: 42% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 2
First Seen: 2026-09-30
Last Updated: 2026-10-01

The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. [...]

Milestone Timeline

  • 2026-09-30 19:49 UTC [INDEPENDENT VERIFICATION]: DIVD says Zammad zero-days enabled AI-driven network breach (BleepingComputer Report)
  • 2026-10-01 10:42 UTC [INDEPENDENT VERIFICATION]: Zammad Zero-Days Exploited in AI-Powered DIVD Hack (SecurityWeek Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING threat-intel developing [CONFIRMED] Greenberg Traurig — Global law firm Greenberg Traurig was compromised by Silent Ransom Group, resulting in the exfiltration and notification of over 126,000 individuals. https://securityincident.net/incidents/2026-09-greenberg-traurig.html https://securityincident.net/incidents/2026-09-greenberg-traurig.html Mon, 14 Sep 2026 11:30:00 GMT Status: CONFIRMED
Target Domain: gtlaw.com
Threat Actor: RansomHub
Open Weights Confidence: 100% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-09-09
Last Updated: 2026-10-01

Global law firm Greenberg Traurig was compromised by Silent Ransom Group, resulting in the exfiltration and notification of over 126,000 individuals.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED investigative legal ransomware-claim developing regulatory state-ag california confirmed [DEVELOPING] U.S. Department of Defense (Pentagon) — Sean Lyngaas and Davis Winkie report: A data breach at the Pentagon’s vast HR system has exposed Social Security numbers and other personal information of current and former military personnel, raising counterintelligence concerns among national s... https://securityincident.net/incidents/2026-09-us-dod-pentagon.html https://securityincident.net/incidents/2026-09-us-dod-pentagon.html Sat, 26 Sep 2026 11:47:00 GMT Status: DEVELOPING
Target Domain: defense.gov
Threat Actor: Unattributed
Open Weights Confidence: 70% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 3
First Seen: 2026-09-26
Last Updated: 2026-10-01

Sean Lyngaas and Davis Winkie report: A data breach at the Pentagon’s vast HR system has exposed Social Security numbers and other personal information of current and former military personnel, raising counterintelligence concerns among national s...

Milestone Timeline

  • 2026-09-26 11:47 UTC [INDEPENDENT VERIFICATION]: Pentagon data breach of military personnel raises national security concerns (DataBreaches.net Report)
  • 2026-09-29 12:25 UTC [INDEPENDENT VERIFICATION]: Pentagon Personnel Agency Data Breach Impacts 3 Million People (SecurityWeek Intelligence Notice)
  • 2026-10-01 09:44 UTC [INDEPENDENT VERIFICATION]: Hackers stole Pentagon personnel records of over 3 million people (BleepingComputer Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative developing threat-intel [CONFIRMED] Aldrich Services — State of California Department of Justice data breach disclosure notice filed by Aldrich Services. https://securityincident.net/incidents/2026-10-aldrich-services.html https://securityincident.net/incidents/2026-10-aldrich-services.html Thu, 01 Oct 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: aldrichservices.com
Open Weights Confidence: 80% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

State of California Department of Justice data breach disclosure notice filed by Aldrich Services.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [EMERGING] ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C — ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 70 GB of internal data files. https://securityincident.net/incidents/2026-10-associated-gastroenterologists-of-central-new.html https://securityincident.net/incidents/2026-10-associated-gastroenterologists-of-central-new.html Thu, 01 Oct 2026 14:50:00 GMT Status: EMERGING
Target Domain: gastrocny.com
Threat Actor: Booba Project
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

ASSOCIATED GASTROENTEROLOGISTS OF CENTRAL NEW YORK, P.C was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 70 GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim booba project emerging [EMERGING] C*ro *nty *es — C*ro *nty *es was listed on the Nightspire ransomware extortion leak portal. Data is not available now. https://securityincident.net/incidents/2026-10-c-ro-nty-es.html https://securityincident.net/incidents/2026-10-c-ro-nty-es.html Thu, 01 Oct 2026 13:35:00 GMT Status: EMERGING
Target Domain: crontyes.com
Threat Actor: Nightspire
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

C*ro *nty *es was listed on the Nightspire ransomware extortion leak portal. Data is not available now.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim nightspire emerging [EMERGING] Den Hartog Industries — Den Hartog Industries was listed on the Incransom ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-den-hartog-industries.html https://securityincident.net/incidents/2026-10-den-hartog-industries.html Thu, 01 Oct 2026 11:29:00 GMT Status: EMERGING
Target Domain: denhartogindustries.com
Threat Actor: Incransom
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Den Hartog Industries was listed on the Incransom ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim incransom emerging [EMERGING] DISK PRECISION GROUP - diskprecision.com — DISK PRECISION GROUP - diskprecision.com was listed on the Krybit ransomware extortion leak portal. - Disk Precision Industries Pte Ltd (Singapore, est. 1986) - Spacetech Industrial Pte Ltd (Singapore) - Niteac Eng... https://securityincident.net/incidents/2026-10-disk-precision-group-diskprecision-com.html https://securityincident.net/incidents/2026-10-disk-precision-group-diskprecision-com.html Thu, 01 Oct 2026 14:59:00 GMT Status: EMERGING
Target Domain: disk precision group - diskprecision.com
Threat Actor: Krybit
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

DISK PRECISION GROUP - diskprecision.com was listed on the Krybit ransomware extortion leak portal. - Disk Precision Industries Pte Ltd (Singapore, est. 1986) - Spacetech Industrial Pte Ltd (Singapore) - Niteac Eng...

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim krybit emerging [EMERGING] DPL Group — DPL Group was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 8GB of internal data files. https://securityincident.net/incidents/2026-10-dpl-group.html https://securityincident.net/incidents/2026-10-dpl-group.html Thu, 01 Oct 2026 13:27:00 GMT Status: EMERGING
Target Domain: dplgroup.com
Threat Actor: Akira
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

DPL Group was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 8GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim akira emerging [EMERGING] Dynamic Office Solutions — Dynamic Office Solutions was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-dynamic-office-solutions.html https://securityincident.net/incidents/2026-10-dynamic-office-solutions.html Thu, 01 Oct 2026 09:04:00 GMT Status: EMERGING
Target Domain: dynamicos.co.uk
Threat Actor: Qilin
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Dynamic Office Solutions was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim qilin emerging [EMERGING] EURODITEL/RESOTELECOM — EURODITEL/RESOTELECOM was listed on the Krybit ransomware extortion leak portal. Euroditel is a French managed services provider (MSP) specializing in telephony and unified communications. Based in th... https://securityincident.net/incidents/2026-10-euroditel-resotelecom.html https://securityincident.net/incidents/2026-10-euroditel-resotelecom.html Thu, 01 Oct 2026 21:33:00 GMT Status: EMERGING
Target Domain: euroditel.com
Threat Actor: Krybit
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

EURODITEL/RESOTELECOM was listed on the Krybit ransomware extortion leak portal. Euroditel is a French managed services provider (MSP) specializing in telephony and unified communications. Based in th...

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim krybit emerging [DEVELOPING] Fortinet — Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...] https://securityincident.net/incidents/2026-10-fortinet.html https://securityincident.net/incidents/2026-10-fortinet.html Thu, 01 Oct 2026 22:42:00 GMT Status: DEVELOPING
Target Domain: fortinet.com
Open Weights Confidence: 35% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...]

Milestone Timeline

  • 2026-10-01 22:42 UTC [INDEPENDENT VERIFICATION]: Fortinet warns of critical FortiMail flaw exploited in zero-day attacks (BleepingComputer Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING threat-intel developing [EMERGING] FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel" — FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel" was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 26 GB of internal data files. https://securityincident.net/incidents/2026-10-funap-fundacao-prof-dr-manoel-pedro-pimentel.html https://securityincident.net/incidents/2026-10-funap-fundacao-prof-dr-manoel-pedro-pimentel.html Thu, 01 Oct 2026 14:50:00 GMT Status: EMERGING
Target Domain: funap.sp.gov.br
Threat Actor: Booba Project
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

FUNAP - Fundação "Prof. Dr. Manoel Pedro Pimentel" was listed on the Booba Project ransomware extortion leak portal. Threat actor claims exfiltration of 26 GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim booba project emerging [EMERGING] Graybar Electric Company, Inc. — Graybar Electric Company, Inc. was listed on the Redact ransomware extortion leak portal. Sector: Electrical Equipment | Revenue: $11B USD https://securityincident.net/incidents/2026-10-graybar-electric-company-inc.html https://securityincident.net/incidents/2026-10-graybar-electric-company-inc.html Thu, 01 Oct 2026 12:55:00 GMT Status: EMERGING
Target Domain: graybarelectriccompanyinc.com
Threat Actor: Redact
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Graybar Electric Company, Inc. was listed on the Redact ransomware extortion leak portal. Sector: Electrical Equipment | Revenue: $11B USD

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim redact emerging [EMERGING] Guardian Pharmacy LLC — Guardian Pharmacy LLC was listed on the Incransom ransomware extortion leak portal. Hacked; more news coming soon. . . https://securityincident.net/incidents/2026-10-guardian-pharmacy-llc.html https://securityincident.net/incidents/2026-10-guardian-pharmacy-llc.html Thu, 01 Oct 2026 11:30:00 GMT Status: EMERGING
Target Domain: guardianpharmacyllc.com
Threat Actor: Incransom
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Guardian Pharmacy LLC was listed on the Incransom ransomware extortion leak portal. Hacked; more news coming soon. . .

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim incransom emerging [EMERGING] Krycler, Ervin, Taubman & Kaminsky — Krycler, Ervin, Taubman & Kaminsky was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 88GB of internal data files. https://securityincident.net/incidents/2026-10-krycler-ervin-taubman-kaminsky.html https://securityincident.net/incidents/2026-10-krycler-ervin-taubman-kaminsky.html Thu, 01 Oct 2026 12:56:00 GMT Status: EMERGING
Target Domain: kryclerervintaubmankaminsky.com
Threat Actor: Akira
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Krycler, Ervin, Taubman & Kaminsky was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 88GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim akira emerging [EMERGING] LA PONDEROSA — LA PONDEROSA was listed on the Emperador ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-la-ponderosa.html https://securityincident.net/incidents/2026-10-la-ponderosa.html Thu, 01 Oct 2026 09:51:00 GMT Status: EMERGING
Target Domain: laponderosa.com
Threat Actor: Emperador
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

LA PONDEROSA was listed on the Emperador ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim emperador emerging [EMERGING] Laboratorios Roemmers SAICF — Laboratorios Roemmers SAICF was listed on the Aurora ransomware extortion leak portal. Threat actor claims exfiltration of 82 GB of internal data files. https://securityincident.net/incidents/2026-10-laboratorios-roemmers-saicf.html https://securityincident.net/incidents/2026-10-laboratorios-roemmers-saicf.html Thu, 01 Oct 2026 06:55:00 GMT Status: EMERGING
Target Domain: roemmers.com.ar
Threat Actor: Aurora
Open Weights Confidence: 13% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Laboratorios Roemmers SAICF was listed on the Aurora ransomware extortion leak portal. Threat actor claims exfiltration of 82 GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim aurora emerging [CONFIRMED] Lincoln Property Company Commercial — State of California Department of Justice data breach disclosure notice filed by Lincoln Property Company Commercial. https://securityincident.net/incidents/2026-10-lincoln-property-company-comme.html https://securityincident.net/incidents/2026-10-lincoln-property-company-comme.html Thu, 01 Oct 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: lincolnpropertycompanycomme.com
Open Weights Confidence: 80% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

State of California Department of Justice data breach disclosure notice filed by Lincoln Property Company Commercial.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Marana Health Center — State of California Department of Justice data breach disclosure notice filed by Marana Health Center. https://securityincident.net/incidents/2026-10-marana-health-center.html https://securityincident.net/incidents/2026-10-marana-health-center.html Thu, 01 Oct 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: maranahealthcenter.com
Open Weights Confidence: 80% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

State of California Department of Justice data breach disclosure notice filed by Marana Health Center.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [EMERGING] Northern Counties Health Care — Northern Counties Health Care was listed on the Incransom ransomware extortion leak portal. With five community Health Centers, two dental centers, and a certified Home Health Care & Hospice division, NCHC provides health care services to patients... https://securityincident.net/incidents/2026-10-northern-counties-health-care.html https://securityincident.net/incidents/2026-10-northern-counties-health-care.html Thu, 01 Oct 2026 11:29:00 GMT Status: EMERGING
Target Domain: nchcvt.org
Threat Actor: Incransom
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Northern Counties Health Care was listed on the Incransom ransomware extortion leak portal. With five community Health Centers, two dental centers, and a certified Home Health Care & Hospice division, NCHC provides health care services to patients...

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim incransom emerging [EMERGING] Post Metal Recycling — Post Metal Recycling was listed on the Incransom ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-post-metal-recycling.html https://securityincident.net/incidents/2026-10-post-metal-recycling.html Thu, 01 Oct 2026 11:29:00 GMT Status: EMERGING
Target Domain: postmetalrecycling.com
Threat Actor: Incransom
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Post Metal Recycling was listed on the Incransom ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim incransom emerging [EMERGING] Rimrock Foundation — Rimrock Foundation was listed on the Incransom ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-rimrock-foundation.html https://securityincident.net/incidents/2026-10-rimrock-foundation.html Thu, 01 Oct 2026 12:31:00 GMT Status: EMERGING
Target Domain: rimrock.org
Threat Actor: Incransom
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Rimrock Foundation was listed on the Incransom ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim incransom emerging [EMERGING] Superior Plating Technology CO — Superior Plating Technology CO was listed on the Morpheus ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-10-superior-plating-technology-co.html https://securityincident.net/incidents/2026-10-superior-plating-technology-co.html Thu, 01 Oct 2026 14:30:00 GMT Status: EMERGING
Target Domain: superiorplatingtechnologyco.com
Threat Actor: Morpheus
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Superior Plating Technology CO was listed on the Morpheus ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim morpheus emerging [EMERGING] Wesmar — Wesmar was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 66GB of internal data files. https://securityincident.net/incidents/2026-10-wesmar.html https://securityincident.net/incidents/2026-10-wesmar.html Thu, 01 Oct 2026 13:27:00 GMT Status: EMERGING
Target Domain: wesmar.com
Threat Actor: Akira
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-10-01
Last Updated: 2026-10-01

Wesmar was listed on the Akira ransomware extortion leak portal. Threat actor claims exfiltration of 66GB of internal data files.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim akira emerging [CONFIRMED] American Family Connect Insurance Company — State of California Department of Justice data breach disclosure notice filed by American Family Connect Insurance Company. https://securityincident.net/incidents/2026-09-american-family-connect-insura.html https://securityincident.net/incidents/2026-09-american-family-connect-insura.html Wed, 30 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: americanfamilyconnectinsura.com
Open Weights Confidence: 80% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-30
Last Updated: 2026-09-30

State of California Department of Justice data breach disclosure notice filed by American Family Connect Insurance Company.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] DriveWealth — State of California Department of Justice data breach disclosure notice filed by DriveWealth. https://securityincident.net/incidents/2026-09-drivewealth.html https://securityincident.net/incidents/2026-09-drivewealth.html Wed, 30 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: drivewealth.com
Open Weights Confidence: 80% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-30
Last Updated: 2026-09-30

State of California Department of Justice data breach disclosure notice filed by DriveWealth.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [EMERGING] Houston Thyroid & Endocrine Specialists — Houston Thyroid & Endocrine Specialists was listed on the N0n ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-09-houston-thyroid-endocrine-specialists.html https://securityincident.net/incidents/2026-09-houston-thyroid-endocrine-specialists.html Wed, 30 Sep 2026 22:53:00 GMT Status: EMERGING
Target Domain: houstonthyroidendocrinespecialists.com
Threat Actor: N0n
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-09-30
Last Updated: 2026-09-30

Houston Thyroid & Endocrine Specialists was listed on the N0n ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

  • 2026-09-30 22:53 UTC [UNVERIFIED CLAIM]: Houston Thyroid & Endocrine Specialists Listed on N0n Ransomware Extortion Portal (N0n Ransomware Leak Site Claim)

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim n0n emerging [CONFIRMED] Nishiyamato Academy — State of California Department of Justice data breach disclosure notice filed by Nishiyamato Academy. https://securityincident.net/incidents/2026-09-nishiyamato-academy.html https://securityincident.net/incidents/2026-09-nishiyamato-academy.html Wed, 30 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: nishiyamatoacademy.com
Open Weights Confidence: 80% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-30
Last Updated: 2026-09-30

State of California Department of Justice data breach disclosure notice filed by Nishiyamato Academy.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] ProCamps — State of California Department of Justice data breach disclosure notice filed by ProCamps. https://securityincident.net/incidents/2026-09-procamps.html https://securityincident.net/incidents/2026-09-procamps.html Wed, 30 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: procamps.com
Open Weights Confidence: 80% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-30
Last Updated: 2026-09-30

State of California Department of Justice data breach disclosure notice filed by ProCamps.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [EMERGING] Summit Electric Supply — Summit Electric Supply was listed on the Vexy Ransomware ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise. https://securityincident.net/incidents/2026-09-summit-electric-supply.html https://securityincident.net/incidents/2026-09-summit-electric-supply.html Wed, 30 Sep 2026 20:55:00 GMT Status: EMERGING
Target Domain: summit.com
Threat Actor: Vexy Ransomware
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-09-30
Last Updated: 2026-09-30

Summit Electric Supply was listed on the Vexy Ransomware ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim vexy ransomware emerging [EMERGING] wolfusofsky.de — wolfusofsky.de was listed on the Safepay ransomware extortion leak portal. The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland, neighboring … https://securityincident.net/incidents/2026-09-wolfusofsky-de.html https://securityincident.net/incidents/2026-09-wolfusofsky-de.html Wed, 30 Sep 2026 20:11:00 GMT Status: EMERGING
Target Domain: wolfusofsky.de
Threat Actor: Safepay
Open Weights Confidence: 9% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-09-30
Last Updated: 2026-09-30

wolfusofsky.de was listed on the Safepay ransomware extortion leak portal. The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland, neighboring …

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING extortion ransomware-claim safepay emerging [CONFIRMED] Challenge Financial Services — State of California Department of Justice data breach disclosure notice filed by Challenge Financial Services. https://securityincident.net/incidents/2026-09-challenge-financial-services.html https://securityincident.net/incidents/2026-09-challenge-financial-services.html Tue, 29 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: challengefinancialservices.com
Open Weights Confidence: 68% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-29
Last Updated: 2026-09-29

State of California Department of Justice data breach disclosure notice filed by Challenge Financial Services.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] City of McMinnville — State of California Department of Justice data breach disclosure notice filed by City of McMinnville. https://securityincident.net/incidents/2026-09-city-of-mcminnville.html https://securityincident.net/incidents/2026-09-city-of-mcminnville.html Tue, 29 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: cityofmcminnville.com
Open Weights Confidence: 68% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-29
Last Updated: 2026-09-29

State of California Department of Justice data breach disclosure notice filed by City of McMinnville.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Dodo Brands (Dodo Pizza) — Andrey Mihayloff reports: Dodo Pizza has confirmed a cyberattack on its IT systems, admitting that attackers may have accessed personal data of a portion of its customer base. The company reported the breach to Roskomnadzor and stated that access... https://securityincident.net/incidents/2026-09-dodo-pizza.html https://securityincident.net/incidents/2026-09-dodo-pizza.html Tue, 29 Sep 2026 12:43:00 GMT Status: CONFIRMED
Target Domain: dodopizza.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 64% (CONFIRMED BY TARGET)
Corroborated Source Domains: 2
First Seen: 2026-09-29
Last Updated: 2026-09-29

Andrey Mihayloff reports: Dodo Pizza has confirmed a cyberattack on its IT systems, admitting that attackers may have accessed personal data of a portion of its customer base. The company reported the breach to Roskomnadzor and stated that access...

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED investigative developing [DEVELOPING] Dutch Police (Politie) — Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's arrest, remaining Sh... https://securityincident.net/incidents/2026-09-dutch-police-politie.html https://securityincident.net/incidents/2026-09-dutch-police-politie.html Mon, 28 Sep 2026 15:08:00 GMT Status: DEVELOPING
Target Domain: politie.nl
Threat Actor: ShinyHunters
Open Weights Confidence: 62% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 2
First Seen: 2026-09-28
Last Updated: 2026-09-29

Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's arrest, remaining Sh...

Milestone Timeline

  • 2026-09-28 15:08 UTC [INDEPENDENT VERIFICATION]: Dutch Police Arrest 'Reformed' Hacker in Shiny Hunters Investigation (Krebs on Security Report)
  • 2026-09-29 11:01 UTC [INDEPENDENT VERIFICATION]: Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation (SecurityWeek Intelligence Notice)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative developing [CONFIRMED] Lamb Weston — Oregon Department of Justice formal data breach disclosure notice filed by Lamb Weston affecting 7,175 Oregon residents. https://securityincident.net/incidents/2026-09-lamb-weston.html https://securityincident.net/incidents/2026-09-lamb-weston.html Tue, 29 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: lambweston.com
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-29
Last Updated: 2026-09-29

Oregon Department of Justice formal data breach disclosure notice filed by Lamb Weston affecting 7,175 Oregon residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag oregon confirmed [CONFIRMED] Poppins Payroll Company — State of California Department of Justice data breach disclosure notice filed by Poppins Payroll Company. https://securityincident.net/incidents/2026-09-poppins-payroll-company.html https://securityincident.net/incidents/2026-09-poppins-payroll-company.html Tue, 29 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: poppinspayrollcompany.com
Open Weights Confidence: 68% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-29
Last Updated: 2026-09-29

State of California Department of Justice data breach disclosure notice filed by Poppins Payroll Company.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [DEVELOPING] AT&T — A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered... https://securityincident.net/incidents/2026-09-at-t.html https://securityincident.net/incidents/2026-09-at-t.html Fri, 25 Sep 2026 21:44:00 GMT Status: DEVELOPING
Target Domain: att.com
Threat Actor: ShinyHunters / UNC5537
Open Weights Confidence: 62% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 2
First Seen: 2026-09-25
Last Updated: 2026-09-28

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered...

Milestone Timeline

  • 2026-09-25 21:44 UTC [INDEPENDENT VERIFICATION]: U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions (Krebs on Security Report)
  • 2026-09-28 12:36 UTC [INDEPENDENT VERIFICATION]: Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon (SecurityWeek Intelligence Notice)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative developing [DEVELOPING] Hogan Lovells — Numerous major law firms have fallen prey to the Silent Ransom Group this year. Now DataBreaches provides exclusive details on SRG's recent attacks on Hogan Lovells Cadwalader. Yes, that's "attacks," plural. When New York City's oldest law firm, C... https://securityincident.net/incidents/2026-09-hogan-lovells.html https://securityincident.net/incidents/2026-09-hogan-lovells.html Mon, 28 Sep 2026 17:07:00 GMT Status: DEVELOPING
Target Domain: hoganlovells.com
Threat Actor: Silent Ransom Group
Open Weights Confidence: 39% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-09-28
Last Updated: 2026-09-28

Numerous major law firms have fallen prey to the Silent Ransom Group this year. Now DataBreaches provides exclusive details on SRG's recent attacks on Hogan Lovells Cadwalader. Yes, that's "attacks," plural. When New York City's oldest law firm, C...

Milestone Timeline

  • 2026-09-28 17:07 UTC [INDEPENDENT VERIFICATION]: Hogan Lovells Cadwalader hacked by Silent Ransom Group; re-attacked after they wouldn't pay (DataBreaches.net Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative developing [CONFIRMED] Keio Corporation — Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting some of its business systems. [...] https://securityincident.net/incidents/2026-09-keio-corp.html https://securityincident.net/incidents/2026-09-keio-corp.html Mon, 28 Sep 2026 20:56:00 GMT Status: CONFIRMED
Target Domain: keio.co.jp
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 57% (CONFIRMED BY TARGET)
Corroborated Source Domains: 1
First Seen: 2026-09-28
Last Updated: 2026-09-28

Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting some of its business systems. [...]

Milestone Timeline

  • 2026-09-28 20:56 UTC [CONFIRMED BY TARGET]: Japan's Keio confirms ransomware attack disrupted business systems (BleepingComputer Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED threat-intel confirmed [CONFIRMED] San Bernardino County on behalf of Arrowhead Regional Medical Center — State of California Department of Justice data breach disclosure notice filed by San Bernardino County on behalf of Arrowhead Regional Medical Center. https://securityincident.net/incidents/2026-09-san-bernardino-county-on-behal.html https://securityincident.net/incidents/2026-09-san-bernardino-county-on-behal.html Mon, 28 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: sanbernardinocountyonbehal.com
Open Weights Confidence: 68% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-28
Last Updated: 2026-09-28

State of California Department of Justice data breach disclosure notice filed by San Bernardino County on behalf of Arrowhead Regional Medical Center.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Times Car — Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week. [...] https://securityincident.net/incidents/2026-09-times-car.html https://securityincident.net/incidents/2026-09-times-car.html Mon, 28 Sep 2026 20:31:00 GMT Status: CONFIRMED
Target Domain: timescar.jp
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 57% (CONFIRMED BY TARGET)
Corroborated Source Domains: 1
First Seen: 2026-09-28
Last Updated: 2026-09-28

Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week. [...]

Milestone Timeline

  • 2026-09-28 20:31 UTC [CONFIRMED BY TARGET]: Times Car confirms data breach affecting 6.6 million user accounts (BleepingComputer Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED threat-intel confirmed [CONFIRMED] Upbound Group — Upbound Group disclosed unauthorized acquisition of customer records and internal documents subsequently leveraged in fraudulent attempts. https://securityincident.net/incidents/2026-07-upbound-group.html https://securityincident.net/incidents/2026-07-upbound-group.html Wed, 22 Jul 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: upbound.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 95% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-07-22
Last Updated: 2026-09-27

Upbound Group disclosed unauthorized acquisition of customer records and internal documents subsequently leveraged in fraudulent attempts.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k retail confirmed state-ag california [DEVELOPING] NHS England — Tom McArthur and Louise Parry report: Ten NHS staff have been removed from duty or suspended after a data breach involving the digital medical records of three-year-old Noah Woods. Launching an "urgent" investigation, Dr Martin Mansfield, deputy c... https://securityincident.net/incidents/2026-09-nhs-england.html https://securityincident.net/incidents/2026-09-nhs-england.html Sun, 27 Sep 2026 13:22:00 GMT Status: DEVELOPING
Target Domain: nhs.uk
Threat Actor: Qilin
Open Weights Confidence: 55% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-09-27
Last Updated: 2026-09-27

Tom McArthur and Louise Parry report: Ten NHS staff have been removed from duty or suspended after a data breach involving the digital medical records of three-year-old Noah Woods. Launching an "urgent" investigation, Dr Martin Mansfield, deputy c...

Milestone Timeline

  • 2026-09-27 13:22 UTC [INDEPENDENT VERIFICATION]: UK: Ten NHS staff removed over Noah Woods data breach (DataBreaches.net Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative developing [DEVELOPING] Cloudflare — The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which desc... https://securityincident.net/incidents/2026-09-cloudflare.html https://securityincident.net/incidents/2026-09-cloudflare.html Sat, 26 Sep 2026 18:22:00 GMT Status: DEVELOPING
Target Domain: cloudflare.com
Open Weights Confidence: 39% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-09-26
Last Updated: 2026-09-26

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which desc...

Milestone Timeline

  • 2026-09-26 18:22 UTC [INDEPENDENT VERIFICATION]: Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials (The Hacker News Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING threat-intel developing [DEVELOPING] Labcorp — Suzanne Smiley reports another update on litigation stemming from the American Medical Collection Agency breach. A bipartisan coalition of 44 state attorneys general on Thursday announced that they settled a lawsuit against Labcorp in exchange for... https://securityincident.net/incidents/2026-09-labcorp.html https://securityincident.net/incidents/2026-09-labcorp.html Sat, 26 Sep 2026 10:49:00 GMT Status: DEVELOPING
Target Domain: labcorp.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 39% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-09-26
Last Updated: 2026-09-26

Suzanne Smiley reports another update on litigation stemming from the American Medical Collection Agency breach. A bipartisan coalition of 44 state attorneys general on Thursday announced that they settled a lawsuit against Labcorp in exchange for...

Milestone Timeline

  • 2026-09-26 10:49 UTC [INDEPENDENT VERIFICATION]: Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings (DataBreaches.net Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative developing [CONFIRMED] Financial Administrative Support Services — State of California Department of Justice data breach disclosure notice filed by Financial Administrative Support Services. https://securityincident.net/incidents/2026-09-financial-administrative-suppo.html https://securityincident.net/incidents/2026-09-financial-administrative-suppo.html Fri, 25 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: financialadministrativesuppo.com
Open Weights Confidence: 68% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-25
Last Updated: 2026-09-25

State of California Department of Justice data breach disclosure notice filed by Financial Administrative Support Services.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Gallagher Transport International — State of California Department of Justice data breach disclosure notice filed by Gallagher Transport International. https://securityincident.net/incidents/2026-09-gallagher-transport-international.html https://securityincident.net/incidents/2026-09-gallagher-transport-international.html Fri, 25 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: gallaghertransport.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-25
Last Updated: 2026-09-25

State of California Department of Justice data breach disclosure notice filed by Gallagher Transport International.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Kings United Way — State of California Department of Justice data breach disclosure notice filed by Kings United Way. https://securityincident.net/incidents/2026-09-kings-united-way.html https://securityincident.net/incidents/2026-09-kings-united-way.html Fri, 25 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: kingsunitedway.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-25
Last Updated: 2026-09-25

State of California Department of Justice data breach disclosure notice filed by Kings United Way.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] MedImpact Healthcare Systems — State of California Department of Justice data breach disclosure notice filed by MedImpact Healthcare Systems. https://securityincident.net/incidents/2026-09-medimpact-healthcare-systems.html https://securityincident.net/incidents/2026-09-medimpact-healthcare-systems.html Fri, 25 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: medimpacthealthcaresystems.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-25
Last Updated: 2026-09-25

State of California Department of Justice data breach disclosure notice filed by MedImpact Healthcare Systems.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] OneMain Financial Group — State of California Department of Justice data breach disclosure notice filed by OneMain Financial Group. https://securityincident.net/incidents/2026-09-onemain-financial-group.html https://securityincident.net/incidents/2026-09-onemain-financial-group.html Fri, 25 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: onemainfinancialgroup.com
Threat Actor: Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-25
Last Updated: 2026-09-25

State of California Department of Justice data breach disclosure notice filed by OneMain Financial Group.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] 5Star Life Insurance Company — State of California Department of Justice data breach disclosure notice filed by 5Star Life Insurance Company. https://securityincident.net/incidents/2026-09-5star-life-insurance-company.html https://securityincident.net/incidents/2026-09-5star-life-insurance-company.html Thu, 24 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: 5starlifeinsurancecompany.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-24
Last Updated: 2026-09-24

State of California Department of Justice data breach disclosure notice filed by 5Star Life Insurance Company.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Blanchard Training & Development — State of California Department of Justice data breach disclosure notice filed by Blanchard Training & Development. https://securityincident.net/incidents/2026-09-blanchard-training-development.html https://securityincident.net/incidents/2026-09-blanchard-training-development.html Thu, 24 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: blanchardtrainingdevelopment.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-24
Last Updated: 2026-09-24

State of California Department of Justice data breach disclosure notice filed by Blanchard Training & Development.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] HILT-Trust 2020-A and its underlying trusts and affiliates — State of California Department of Justice data breach disclosure notice filed by HILT-Trust 2020-A and its underlying trusts and affiliates. https://securityincident.net/incidents/2026-09-hilt-trust-2020-a-and-its-unde.html https://securityincident.net/incidents/2026-09-hilt-trust-2020-a-and-its-unde.html Thu, 24 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: hilttrust2020aanditsunde.com
Open Weights Confidence: 68% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-24
Last Updated: 2026-09-24

State of California Department of Justice data breach disclosure notice filed by HILT-Trust 2020-A and its underlying trusts and affiliates.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] NSE Insurance Agencies — State of California Department of Justice data breach disclosure notice filed by NSE Insurance Agencies. https://securityincident.net/incidents/2026-09-nse-insurance-agencies.html https://securityincident.net/incidents/2026-09-nse-insurance-agencies.html Thu, 24 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: nseinsuranceagencies.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-24
Last Updated: 2026-09-24

State of California Department of Justice data breach disclosure notice filed by NSE Insurance Agencies.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Peña and Bromberg — State of California Department of Justice data breach disclosure notice filed by Peña and Bromberg. https://securityincident.net/incidents/2026-09-pena-and-bromberg.html https://securityincident.net/incidents/2026-09-pena-and-bromberg.html Thu, 24 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: penabromberg.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-24
Last Updated: 2026-09-24

State of California Department of Justice data breach disclosure notice filed by Peña and Bromberg.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Astrana Health — Healthcare management company Astrana Health filed Form 8-K Item 1.05 disclosing a cybersecurity intrusion at its Astrana Health Management subsidiary. https://securityincident.net/incidents/2026-09-astrana-health.html https://securityincident.net/incidents/2026-09-astrana-health.html Wed, 23 Sep 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: astranahealth.com
Threat Actor: RansomHub
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-23
Last Updated: 2026-09-23

Healthcare management company Astrana Health filed Form 8-K Item 1.05 disclosing a cybersecurity intrusion at its Astrana Health Management subsidiary.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k healthcare confirmed [CONFIRMED] Fairwinds Credit Union — State of California Department of Justice data breach disclosure notice filed by Fairwinds Credit Union. https://securityincident.net/incidents/2026-09-fairwinds-credit-union.html https://securityincident.net/incidents/2026-09-fairwinds-credit-union.html Wed, 23 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: fairwindscreditunion.com
Threat Actor: Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-23
Last Updated: 2026-09-23

State of California Department of Justice data breach disclosure notice filed by Fairwinds Credit Union.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Modoc Medical Center — State of California Department of Justice data breach disclosure notice filed by Modoc Medical Center. https://securityincident.net/incidents/2026-09-modoc-medical-center.html https://securityincident.net/incidents/2026-09-modoc-medical-center.html Tue, 22 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: modocmedicalcenter.com
Threat Actor: Akira
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-22
Last Updated: 2026-09-22

State of California Department of Justice data breach disclosure notice filed by Modoc Medical Center.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Ethan Conrad Properties — State of California Department of Justice data breach disclosure notice filed by Ethan Conrad Properties. https://securityincident.net/incidents/2026-09-ethan-conrad-properties.html https://securityincident.net/incidents/2026-09-ethan-conrad-properties.html Mon, 21 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: ethanconradproperties.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-21
Last Updated: 2026-09-21

State of California Department of Justice data breach disclosure notice filed by Ethan Conrad Properties.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Friesen Group — State of California Department of Justice data breach disclosure notice filed by Friesen Group. https://securityincident.net/incidents/2026-09-friesen-group.html https://securityincident.net/incidents/2026-09-friesen-group.html Mon, 21 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: friesengroup.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-21
Last Updated: 2026-09-21

State of California Department of Justice data breach disclosure notice filed by Friesen Group.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Fun For Less Tours — State of California Department of Justice data breach disclosure notice filed by Fun For Less Tours. https://securityincident.net/incidents/2026-09-fun-for-less-tours.html https://securityincident.net/incidents/2026-09-fun-for-less-tours.html Mon, 21 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: funforlesstours.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-21
Last Updated: 2026-09-21

State of California Department of Justice data breach disclosure notice filed by Fun For Less Tours.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Ridgeway Pharmacy — State of California Department of Justice data breach disclosure notice filed by Ridgeway Pharmacy. https://securityincident.net/incidents/2026-09-ridgeway-pharmacy.html https://securityincident.net/incidents/2026-09-ridgeway-pharmacy.html Mon, 21 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: ridgewaypharmacy.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-21
Last Updated: 2026-09-21

State of California Department of Justice data breach disclosure notice filed by Ridgeway Pharmacy.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] United Underwriters — State of California Department of Justice data breach disclosure notice filed by United Underwriters. https://securityincident.net/incidents/2026-09-united-underwriters.html https://securityincident.net/incidents/2026-09-united-underwriters.html Mon, 21 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: unitedunderwriters.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-21
Last Updated: 2026-09-21

State of California Department of Justice data breach disclosure notice filed by United Underwriters.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Office of the Los Angeles City Attorney — State of California Department of Justice data breach disclosure notice filed by The Office of the Los Angeles City. https://securityincident.net/incidents/2026-09-los-angeles-city-attorney.html https://securityincident.net/incidents/2026-09-los-angeles-city-attorney.html Fri, 18 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: lacityattorney.org
Threat Actor: Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-18
Last Updated: 2026-09-18

State of California Department of Justice data breach disclosure notice filed by The Office of the Los Angeles City.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Opportune — State of California Department of Justice data breach disclosure notice filed by Opportune. https://securityincident.net/incidents/2026-09-opportune.html https://securityincident.net/incidents/2026-09-opportune.html Fri, 18 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: opportune.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-18
Last Updated: 2026-09-18

State of California Department of Justice data breach disclosure notice filed by Opportune.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Seyfarth Shaw — State of California Department of Justice data breach disclosure notice filed by Seyfarth Shaw. https://securityincident.net/incidents/2026-09-seyfarth-shaw.html https://securityincident.net/incidents/2026-09-seyfarth-shaw.html Fri, 18 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: seyfarthshaw.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-18
Last Updated: 2026-09-18

State of California Department of Justice data breach disclosure notice filed by Seyfarth Shaw.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] CallonDoc — State of California Department of Justice data breach disclosure notice filed by CallonDoc. https://securityincident.net/incidents/2026-09-callondoc.html https://securityincident.net/incidents/2026-09-callondoc.html Thu, 17 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: callondoc.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-17
Last Updated: 2026-09-17

State of California Department of Justice data breach disclosure notice filed by CallonDoc.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Gyazo — Screen capture platform Gyazo suffered a major data breach exposing 23.62 million user account records and 490 million image metadata entries. https://securityincident.net/incidents/2026-09-gyazo.html https://securityincident.net/incidents/2026-09-gyazo.html Thu, 17 Sep 2026 14:00:00 GMT Status: CONFIRMED
Target Domain: gyazo.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 57% (CONFIRMED BY TARGET)
Corroborated Source Domains: 1
First Seen: 2026-09-17
Last Updated: 2026-09-17

Screen capture platform Gyazo suffered a major data breach exposing 23.62 million user account records and 490 million image metadata entries.

Milestone Timeline

  • 2026-09-17 14:00 UTC [CONFIRMED BY TARGET]: Gyazo confirms data breach affecting 23.62M user accounts and resets all session tokens and user API keys. (The Hacker News Investigation Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED threat-intel credential-breach confirmed [CONFIRMED] Partnership HealthPlan of California — State of California Department of Justice data breach disclosure notice filed by Partnership HealthPlan of California. https://securityincident.net/incidents/2026-09-partnership-healthplan-california.html https://securityincident.net/incidents/2026-09-partnership-healthplan-california.html Thu, 17 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: partnershiphp.net
Threat Actor: Hive / Successor Affiliate
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-17
Last Updated: 2026-09-17

State of California Department of Justice data breach disclosure notice filed by Partnership HealthPlan of California.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Alliance Environmental Group — State of California Department of Justice data breach disclosure notice filed by Alliance Environmental Group. https://securityincident.net/incidents/2026-09-alliance-environmental-group.html https://securityincident.net/incidents/2026-09-alliance-environmental-group.html Tue, 15 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: allianceenvironmentalgroup.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-15
Last Updated: 2026-09-15

State of California Department of Justice data breach disclosure notice filed by Alliance Environmental Group.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Leggett & Platt Employee Benefits Plan — State of California Department of Justice data breach disclosure notice filed by Leggett & Platt, Employee Benefits Plan. https://securityincident.net/incidents/2026-09-leggett-platt-benefits.html https://securityincident.net/incidents/2026-09-leggett-platt-benefits.html Tue, 15 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: leggett.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-15
Last Updated: 2026-09-15

State of California Department of Justice data breach disclosure notice filed by Leggett & Platt, Employee Benefits Plan.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Tarter Krinsky & Drogin — State of California Department of Justice data breach disclosure notice filed by Tarter Krinsky & Drogin. https://securityincident.net/incidents/2026-09-tarter-krinsky-drogin.html https://securityincident.net/incidents/2026-09-tarter-krinsky-drogin.html Tue, 15 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: tarterkrinskydrogin.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-15
Last Updated: 2026-09-15

State of California Department of Justice data breach disclosure notice filed by Tarter Krinsky & Drogin.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Accela — State of California Department of Justice data breach disclosure notice filed by Accela. https://securityincident.net/incidents/2026-09-accela.html https://securityincident.net/incidents/2026-09-accela.html Mon, 14 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: accela.com
Threat Actor: Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-14
Last Updated: 2026-09-14

State of California Department of Justice data breach disclosure notice filed by Accela.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Cambridge Mercantile — State of California Department of Justice data breach disclosure notice filed by Cambridge Mercantile. https://securityincident.net/incidents/2026-09-cambridge-mercantile.html https://securityincident.net/incidents/2026-09-cambridge-mercantile.html Mon, 14 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: cambridgemercantile.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-14
Last Updated: 2026-09-14

State of California Department of Justice data breach disclosure notice filed by Cambridge Mercantile.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Paradigm Healthcare Services — State of California Department of Justice data breach disclosure notice filed by Paradigm Healthcare Services. https://securityincident.net/incidents/2026-09-paradigm-healthcare-services.html https://securityincident.net/incidents/2026-09-paradigm-healthcare-services.html Mon, 14 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: paradigmhealthcareservices.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-14
Last Updated: 2026-09-14

State of California Department of Justice data breach disclosure notice filed by Paradigm Healthcare Services.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Nutex Health — Nutex Health disclosed an unauthorized cybersecurity incident involving corporate data environments, triggering formal Item 1.05 notification. https://securityincident.net/incidents/2026-08-nutex-health.html https://securityincident.net/incidents/2026-08-nutex-health.html Mon, 31 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: nutexhealth.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-31
Last Updated: 2026-09-11

Nutex Health disclosed an unauthorized cybersecurity incident involving corporate data environments, triggering formal Item 1.05 notification.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k healthcare confirmed [CONFIRMED] Catalyst Physician Group — State of California Department of Justice data breach disclosure notice filed by Catalyst Physician Group. https://securityincident.net/incidents/2026-09-catalyst-physician-group.html https://securityincident.net/incidents/2026-09-catalyst-physician-group.html Fri, 11 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: catalystphysiciangroup.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-11
Last Updated: 2026-09-11

State of California Department of Justice data breach disclosure notice filed by Catalyst Physician Group.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Cornerstone Staffing Solutions — State of California Department of Justice data breach disclosure notice filed by Cornerstone Staffing Solutions. https://securityincident.net/incidents/2026-09-cornerstone-staffing-solutions.html https://securityincident.net/incidents/2026-09-cornerstone-staffing-solutions.html Fri, 11 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: cornerstonestaffingsolutions.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 91% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-09-11
Last Updated: 2026-09-11

State of California Department of Justice data breach disclosure notice filed by Cornerstone Staffing Solutions.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed washington [CONFIRMED] Suffolk Federal Credit Union — State of California Department of Justice data breach disclosure notice filed by Suffolk Federal Credit Union. https://securityincident.net/incidents/2026-09-suffolk-federal-credit-union.html https://securityincident.net/incidents/2026-09-suffolk-federal-credit-union.html Fri, 11 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: suffolkfederalcreditunion.com
Threat Actor: Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-11
Last Updated: 2026-09-11

State of California Department of Justice data breach disclosure notice filed by Suffolk Federal Credit Union.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] zHealth — State of California Department of Justice data breach disclosure notice filed by zHealth. https://securityincident.net/incidents/2026-09-zhealth.html https://securityincident.net/incidents/2026-09-zhealth.html Fri, 11 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: zhealth.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 91% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-09-11
Last Updated: 2026-09-11

State of California Department of Justice data breach disclosure notice filed by zHealth.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed washington [CONFIRMED] Quatrro Business Support Services — State of California Department of Justice data breach disclosure notice filed by Quatrro Business Support Services. https://securityincident.net/incidents/2026-09-quatrro-business-support.html https://securityincident.net/incidents/2026-09-quatrro-business-support.html Wed, 09 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: quatrrobss.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 91% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-09-09
Last Updated: 2026-09-09

State of California Department of Justice data breach disclosure notice filed by Quatrro Business Support Services.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed washington [CONFIRMED] Boston Scientific — Medical manufacturer Boston Scientific Corporation filed Form 8-K Item 1.05 formalizing disclosure of an unauthorized intrusion into corporate IT environments. https://securityincident.net/incidents/2026-09-boston-scientific.html https://securityincident.net/incidents/2026-09-boston-scientific.html Tue, 08 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: bostonscientific.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-08
Last Updated: 2026-09-08

Medical manufacturer Boston Scientific Corporation filed Form 8-K Item 1.05 formalizing disclosure of an unauthorized intrusion into corporate IT environments.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k healthcare confirmed [CONFIRMED] Hibbett Retail — State of California Department of Justice data breach disclosure notice filed by Hibbett Retail. https://securityincident.net/incidents/2026-09-hibbett-retail.html https://securityincident.net/incidents/2026-09-hibbett-retail.html Tue, 08 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: hibbettretail.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 91% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-09-08
Last Updated: 2026-09-08

State of California Department of Justice data breach disclosure notice filed by Hibbett Retail.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed washington [CONFIRMED] June 2026 Healthcare Data — Healthcare data breach disclosure submitted to federal regulators by June 2026 Healthcare Data. https://securityincident.net/incidents/2026-09-june-2026-healthcare-data.html https://securityincident.net/incidents/2026-09-june-2026-healthcare-data.html Mon, 07 Sep 2026 15:00:00 GMT Status: CONFIRMED
Target Domain: june2026healthcaredata.com
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-07
Last Updated: 2026-09-07

Healthcare data breach disclosure submitted to federal regulators by June 2026 Healthcare Data.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory hhs-ocr healthcare confirmed [CONFIRMED] Bimbo Bakeries USA — State of California Department of Justice data breach disclosure notice filed by Bimbo Bakeries USA. https://securityincident.net/incidents/2026-09-bimbo-bakeries-usa.html https://securityincident.net/incidents/2026-09-bimbo-bakeries-usa.html Fri, 04 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: bimbobakeriesusa.com
Threat Actor: BlackSuit
Open Weights Confidence: 95% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-09-04
Last Updated: 2026-09-04

State of California Department of Justice data breach disclosure notice filed by Bimbo Bakeries USA.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed washington [CONFIRMED] Catalyst Brands — State of California Department of Justice data breach disclosure notice filed by Catalyst Brands. https://securityincident.net/incidents/2026-09-catalyst-brands.html https://securityincident.net/incidents/2026-09-catalyst-brands.html Fri, 04 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: catalystbrands.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 91% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-09-04
Last Updated: 2026-09-04

State of California Department of Justice data breach disclosure notice filed by Catalyst Brands.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed washington [CONFIRMED] Elixir Medical — State of California Department of Justice data breach disclosure notice filed by Elixir Medical. https://securityincident.net/incidents/2026-09-elixir-medical.html https://securityincident.net/incidents/2026-09-elixir-medical.html Fri, 04 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: elixirmedical.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-04
Last Updated: 2026-09-04

State of California Department of Justice data breach disclosure notice filed by Elixir Medical.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] LHC Group — Washington State Attorney General formal data breach disclosure notice filed by LHC Group affecting 6602 residents. https://securityincident.net/incidents/2026-09-lhc-group.html https://securityincident.net/incidents/2026-09-lhc-group.html Fri, 04 Sep 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: lhcgroup.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-04
Last Updated: 2026-09-04

Washington State Attorney General formal data breach disclosure notice filed by LHC Group affecting 6602 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Virta Health and Virta Medical — State of California Department of Justice data breach disclosure notice filed by Virta Health and Virta Medical. https://securityincident.net/incidents/2026-08-virta-health-and-virta-medical.html https://securityincident.net/incidents/2026-08-virta-health-and-virta-medical.html Mon, 31 Aug 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: virtahealthandvirtamedical.com
Threat Actor: Unattributed
Open Weights Confidence: 95% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-08-31
Last Updated: 2026-09-03

State of California Department of Justice data breach disclosure notice filed by Virta Health and Virta Medical.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed washington [CONFIRMED] Mogren, Glessner & Ahrens, P.S — Washington State Attorney General formal data breach disclosure notice filed by Mogren, Glessner & Ahrens, P.S affecting 1379 residents. https://securityincident.net/incidents/2026-09-mogren-glessner-ahrens-p-s.html https://securityincident.net/incidents/2026-09-mogren-glessner-ahrens-p-s.html Thu, 03 Sep 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: mogrenglessnerahrensps.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-03
Last Updated: 2026-09-03

Washington State Attorney General formal data breach disclosure notice filed by Mogren, Glessner & Ahrens, P.S affecting 1379 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] The Lighthouse for the Blind — Washington State Attorney General formal data breach disclosure notice filed by The Lighthouse for the Blind affecting 520 residents. https://securityincident.net/incidents/2026-09-the-lighthouse-for-the-blind.html https://securityincident.net/incidents/2026-09-the-lighthouse-for-the-blind.html Thu, 03 Sep 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: thelighthousefortheblind.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-03
Last Updated: 2026-09-03

Washington State Attorney General formal data breach disclosure notice filed by The Lighthouse for the Blind affecting 520 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [DEVELOPING] Thomson Reuters — A vulnerability in Thomson Reuters court management software exposed sensitive sealed court filings and Social Security numbers across multiple jurisdictions. https://securityincident.net/incidents/2026-09-thomson-reuters.html https://securityincident.net/incidents/2026-09-thomson-reuters.html Thu, 03 Sep 2026 15:45:00 GMT Status: DEVELOPING
Target Domain: thomsonreuters.com
Threat Actor: Independent Researcher Disclosure
Open Weights Confidence: 55% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-09-03
Last Updated: 2026-09-03

A vulnerability in Thomson Reuters court management software exposed sensitive sealed court filings and Social Security numbers across multiple jurisdictions.

Milestone Timeline

  • 2026-09-03 15:45 UTC [INDEPENDENT VERIFICATION]: Security researchers discover unauthorized exposure of sealed court records and PII in court software systems. (The Hacker News Telemetry Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING threat-intel legal court-systems developing [CONFIRMED] Fiesta Insurance Franchise — State of California Department of Justice data breach disclosure notice filed by Fiesta Insurance Franchise. https://securityincident.net/incidents/2026-09-fiesta-insurance-franchise.html https://securityincident.net/incidents/2026-09-fiesta-insurance-franchise.html Wed, 02 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: fiestainsurancefranchise.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-02
Last Updated: 2026-09-02

State of California Department of Justice data breach disclosure notice filed by Fiesta Insurance Franchise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Fishbrain AB — State of California Department of Justice data breach disclosure notice filed by Fishbrain AB. https://securityincident.net/incidents/2026-09-fishbrain-ab.html https://securityincident.net/incidents/2026-09-fishbrain-ab.html Wed, 02 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: fishbrainab.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-02
Last Updated: 2026-09-02

State of California Department of Justice data breach disclosure notice filed by Fishbrain AB.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] HumanEdge — State of California Department of Justice data breach disclosure notice filed by HumanEdge. https://securityincident.net/incidents/2026-09-humanedge.html https://securityincident.net/incidents/2026-09-humanedge.html Wed, 02 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: humanedge.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-02
Last Updated: 2026-09-02

State of California Department of Justice data breach disclosure notice filed by HumanEdge.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Knowledge Research Center — State of California Department of Justice data breach disclosure notice filed by Knowledge Research Center. https://securityincident.net/incidents/2026-09-knowledge-research-center.html https://securityincident.net/incidents/2026-09-knowledge-research-center.html Wed, 02 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: knowledgeresearchcenter.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-02
Last Updated: 2026-09-02

State of California Department of Justice data breach disclosure notice filed by Knowledge Research Center.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] See’s Candies — State of California Department of Justice data breach disclosure notice filed by See’s Candies. https://securityincident.net/incidents/2026-09-see-s-candies.html https://securityincident.net/incidents/2026-09-see-s-candies.html Wed, 02 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: seescandies.com
Threat Actor: Magecart / E-commerce Skimmer
Open Weights Confidence: 95% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-09-02
Last Updated: 2026-09-02

State of California Department of Justice data breach disclosure notice filed by See’s Candies.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed washington [CONFIRMED] YouLend US — State of California Department of Justice data breach disclosure notice filed by YouLend US. https://securityincident.net/incidents/2026-09-youlend-us.html https://securityincident.net/incidents/2026-09-youlend-us.html Wed, 02 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: youlendus.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-02
Last Updated: 2026-09-02

State of California Department of Justice data breach disclosure notice filed by YouLend US.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] DeMera DeMera Cameron — State of California Department of Justice data breach disclosure notice filed by DeMera DeMera Cameron. https://securityincident.net/incidents/2026-09-demera-demera-cameron.html https://securityincident.net/incidents/2026-09-demera-demera-cameron.html Tue, 01 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: demerademeracameron.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-01
Last Updated: 2026-09-01

State of California Department of Justice data breach disclosure notice filed by DeMera DeMera Cameron.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Kaniksu Community Health — State of California Department of Justice data breach disclosure notice filed by Kaniksu Community Health. https://securityincident.net/incidents/2026-09-kaniksu-community-health.html https://securityincident.net/incidents/2026-09-kaniksu-community-health.html Tue, 01 Sep 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: kaniksucommunityhealth.com
Threat Actor: Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-01
Last Updated: 2026-09-01

State of California Department of Justice data breach disclosure notice filed by Kaniksu Community Health.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] NovoCure — Oncology medical device company NovoCure disclosed unauthorized access to subsidiary information systems detected in mid-August 2026. https://securityincident.net/incidents/2026-09-novocure.html https://securityincident.net/incidents/2026-09-novocure.html Tue, 01 Sep 2026 16:45:00 GMT Status: CONFIRMED
Target Domain: novocure.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-01
Last Updated: 2026-09-01

Oncology medical device company NovoCure disclosed unauthorized access to subsidiary information systems detected in mid-August 2026.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k medical-device confirmed [CONFIRMED] Park Dental Partners — Dental support organization Park Dental Partners filed Form 8-K Item 1.05 disclosing network disruption and forensic containment efforts. https://securityincident.net/incidents/2026-09-park-dental-partners.html https://securityincident.net/incidents/2026-09-park-dental-partners.html Tue, 01 Sep 2026 18:00:00 GMT Status: CONFIRMED
Target Domain: parkdental.com
Threat Actor: Akira
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-09-01
Last Updated: 2026-09-01

Dental support organization Park Dental Partners filed Form 8-K Item 1.05 disclosing network disruption and forensic containment efforts.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k healthcare confirmed [CONFIRMED] Berkeley Research Group — State of California Department of Justice data breach disclosure notice filed by Berkeley Research Group. https://securityincident.net/incidents/2026-08-berkeley-research-group.html https://securityincident.net/incidents/2026-08-berkeley-research-group.html Mon, 31 Aug 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: berkeleyresearchgroup.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-31
Last Updated: 2026-08-31

State of California Department of Justice data breach disclosure notice filed by Berkeley Research Group.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] Bennett College — State of California Department of Justice data breach disclosure notice filed by Bennett College. https://securityincident.net/incidents/2026-08-bennett-college.html https://securityincident.net/incidents/2026-08-bennett-college.html Fri, 28 Aug 2026 17:00:00 GMT Status: CONFIRMED
Target Domain: bennettcollege.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-28
Last Updated: 2026-08-28

State of California Department of Justice data breach disclosure notice filed by Bennett College.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag california confirmed [CONFIRMED] RB American Group — Washington State Attorney General formal data breach disclosure notice filed by RB American Group affecting 974 residents. https://securityincident.net/incidents/2026-08-rb-american-group.html https://securityincident.net/incidents/2026-08-rb-american-group.html Fri, 28 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: rbamericangroup.com
Threat Actor: RansomHub
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-28
Last Updated: 2026-08-28

Washington State Attorney General formal data breach disclosure notice filed by RB American Group affecting 974 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Greystar Real Estate Partners — Washington State Attorney General formal data breach disclosure notice filed by Greystar Real Estate Partners affecting 333 residents. https://securityincident.net/incidents/2026-08-greystar-real-estate-partners.html https://securityincident.net/incidents/2026-08-greystar-real-estate-partners.html Thu, 27 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: greystarrealestatepartners.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-27
Last Updated: 2026-08-27

Washington State Attorney General formal data breach disclosure notice filed by Greystar Real Estate Partners affecting 333 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Cascade Coffee — Washington State Attorney General formal data breach disclosure notice filed by Cascade Coffee affecting 610 residents. https://securityincident.net/incidents/2026-08-cascade-coffee.html https://securityincident.net/incidents/2026-08-cascade-coffee.html Wed, 26 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: cascadecoffee.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-26
Last Updated: 2026-08-26

Washington State Attorney General formal data breach disclosure notice filed by Cascade Coffee affecting 610 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Murfreesboro Medical Clinic — Washington State Attorney General formal data breach disclosure notice filed by Murfreesboro Medical Clinic affecting 845 residents. https://securityincident.net/incidents/2026-08-murfreesboro-medical-clinic.html https://securityincident.net/incidents/2026-08-murfreesboro-medical-clinic.html Wed, 26 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: murfreesboromedicalclinic.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-26
Last Updated: 2026-08-26

Washington State Attorney General formal data breach disclosure notice filed by Murfreesboro Medical Clinic affecting 845 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] News UK & Ireland Limited — Washington State Attorney General formal data breach disclosure notice filed by News UK & Ireland Limited affecting 3304 residents. https://securityincident.net/incidents/2026-08-news-uk-ireland-limited.html https://securityincident.net/incidents/2026-08-news-uk-ireland-limited.html Wed, 26 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: newsukirelandlimited.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-26
Last Updated: 2026-08-26

Washington State Attorney General formal data breach disclosure notice filed by News UK & Ireland Limited affecting 3304 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Pan American Group — Washington State Attorney General formal data breach disclosure notice filed by Pan American Group affecting 12309 residents. https://securityincident.net/incidents/2026-08-pan-american-group.html https://securityincident.net/incidents/2026-08-pan-american-group.html Mon, 24 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: panamericangroup.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-24
Last Updated: 2026-08-24

Washington State Attorney General formal data breach disclosure notice filed by Pan American Group affecting 12309 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] ASOS US Sales — Washington State Attorney General formal data breach disclosure notice filed by ASOS US Sales affecting 1929 residents. https://securityincident.net/incidents/2026-08-asos-us-sales.html https://securityincident.net/incidents/2026-08-asos-us-sales.html Fri, 21 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: asosussales.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-21
Last Updated: 2026-08-21

Washington State Attorney General formal data breach disclosure notice filed by ASOS US Sales affecting 1929 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Rockwood Retirement Communities — Washington State Attorney General formal data breach disclosure notice filed by Rockwood Retirement Communities affecting 7136 residents. https://securityincident.net/incidents/2026-08-rockwood-retirement-communities.html https://securityincident.net/incidents/2026-08-rockwood-retirement-communities.html Thu, 20 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: rockwoodretirement.org
Threat Actor: Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-20
Last Updated: 2026-08-20

Washington State Attorney General formal data breach disclosure notice filed by Rockwood Retirement Communities affecting 7136 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Southern Illinois University — Washington State Attorney General formal data breach disclosure notice filed by Southern Illinois University affecting 552 residents. https://securityincident.net/incidents/2026-08-southern-illinois-university.html https://securityincident.net/incidents/2026-08-southern-illinois-university.html Thu, 20 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: southernillinoisuniversity.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-20
Last Updated: 2026-08-20

Washington State Attorney General formal data breach disclosure notice filed by Southern Illinois University affecting 552 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Nebraska Orthopaedic Center — Washington State Attorney General formal data breach disclosure notice filed by Nebraska Orthopaedic Center affecting 992 residents. https://securityincident.net/incidents/2026-08-nebraska-orthopaedic-center.html https://securityincident.net/incidents/2026-08-nebraska-orthopaedic-center.html Wed, 19 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: nebraskaorthopaediccenter.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-19
Last Updated: 2026-08-19

Washington State Attorney General formal data breach disclosure notice filed by Nebraska Orthopaedic Center affecting 992 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Apple American Group and Apple American Group II — Washington State Attorney General formal data breach disclosure notice filed by Apple American Group and Apple American Group II affecting 20653 residents. https://securityincident.net/incidents/2026-08-apple-american-group-and-apple.html https://securityincident.net/incidents/2026-08-apple-american-group-and-apple.html Tue, 18 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: appleamericangroupandapple.com
Open Weights Confidence: 68% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-18
Last Updated: 2026-08-18

Washington State Attorney General formal data breach disclosure notice filed by Apple American Group and Apple American Group II affecting 20653 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Turner Construction Company — Washington State Attorney General formal data breach disclosure notice filed by Turner Construction Company affecting 3401 residents. https://securityincident.net/incidents/2026-08-turner-construction-company.html https://securityincident.net/incidents/2026-08-turner-construction-company.html Tue, 18 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: turnerconstructioncompany.com
Threat Actor: Unattributed
Open Weights Confidence: 88% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-18
Last Updated: 2026-08-18

Washington State Attorney General formal data breach disclosure notice filed by Turner Construction Company affecting 3401 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [DEVELOPING] TaxAct — Tax preparation provider TaxAct investigated unauthorized acquisition of over 2 million user records following sample leaks on illicit forums. https://securityincident.net/incidents/2026-08-taxact.html https://securityincident.net/incidents/2026-08-taxact.html Mon, 17 Aug 2026 13:15:00 GMT Status: DEVELOPING
Target Domain: taxact.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 39% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-08-17
Last Updated: 2026-08-17

Tax preparation provider TaxAct investigated unauthorized acquisition of over 2 million user records following sample leaks on illicit forums.

Milestone Timeline

  • 2026-08-17 13:15 UTC [INDEPENDENT VERIFICATION]: Threat actor leaks 450k tax preparation sample records, claiming access to 2 million customer files. (DataBreaches.net Telemetry Audit)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative tax-data leak-site developing [EMERGING] Fairlife — Dairy brand Fairlife suffered an Anubis ransomware cyberattack compromising 500 network hosts and resulting in 1 TB of exfiltrated operational data. https://securityincident.net/incidents/2026-08-fairlife.html https://securityincident.net/incidents/2026-08-fairlife.html Sun, 16 Aug 2026 19:20:00 GMT Status: EMERGING
Target Domain: fairlife.com
Threat Actor: Anubis
Open Weights Confidence: 8% (UNVERIFIED CLAIM)
Corroborated Source Domains: 1
First Seen: 2026-08-16
Last Updated: 2026-08-16

Dairy brand Fairlife suffered an Anubis ransomware cyberattack compromising 500 network hosts and resulting in 1 TB of exfiltrated operational data.

Milestone Timeline

  • 2026-08-16 19:20 UTC [UNVERIFIED CLAIM]: Anubis ransomware gang publishes technical telemetry detailing compromise of 500 internal hosts at Fairlife. (DataBreaches.net Extortion Watch)

View Full Verified Timeline & Evidence on securityincident.net

]]> EMERGING investigative ransomware industrial emerging [CONFIRMED] AdaptHealth — Healthcare solutions provider AdaptHealth Corp disclosed an external threat actor gained unauthorized access to internal systems and exfiltrated company data. https://securityincident.net/incidents/2026-07-adapthealth.html https://securityincident.net/incidents/2026-07-adapthealth.html Thu, 02 Jul 2026 18:00:00 GMT Status: CONFIRMED
Target Domain: adapthealth.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 91% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2026-07-02
Last Updated: 2026-08-14

Healthcare solutions provider AdaptHealth Corp disclosed an external threat actor gained unauthorized access to internal systems and exfiltrated company data.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k healthcare confirmed state-ag washington [CONFIRMED] Baylor Genetics — Washington State Attorney General formal data breach disclosure notice filed by Baylor Genetics affecting 27243 residents. https://securityincident.net/incidents/2026-08-baylor-genetics.html https://securityincident.net/incidents/2026-08-baylor-genetics.html Fri, 14 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: baylorgenetics.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-14
Last Updated: 2026-08-14

Washington State Attorney General formal data breach disclosure notice filed by Baylor Genetics affecting 27243 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Lennar Mortgage — Washington State Attorney General formal data breach disclosure notice filed by Lennar Mortgage affecting 11417 residents. https://securityincident.net/incidents/2026-08-lennar-mortgage.html https://securityincident.net/incidents/2026-08-lennar-mortgage.html Fri, 14 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: lennarmortgage.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-14
Last Updated: 2026-08-14

Washington State Attorney General formal data breach disclosure notice filed by Lennar Mortgage affecting 11417 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Paylogix — Washington State Attorney General formal data breach disclosure notice filed by Paylogix affecting 28449 residents. https://securityincident.net/incidents/2026-08-paylogix.html https://securityincident.net/incidents/2026-08-paylogix.html Fri, 14 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: paylogix.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-14
Last Updated: 2026-08-14

Washington State Attorney General formal data breach disclosure notice filed by Paylogix affecting 28449 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Quantum Health — Washington State Attorney General formal data breach disclosure notice filed by Quantum Health affecting 5909 residents. https://securityincident.net/incidents/2026-08-quantum-health.html https://securityincident.net/incidents/2026-08-quantum-health.html Fri, 14 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: quantumhealth.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-14
Last Updated: 2026-08-14

Washington State Attorney General formal data breach disclosure notice filed by Quantum Health affecting 5909 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Chelan County, WA — Washington State Attorney General formal data breach disclosure notice filed by Chelan County, WA. https://securityincident.net/incidents/2026-08-chelan-county-wa.html https://securityincident.net/incidents/2026-08-chelan-county-wa.html Tue, 11 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: chelancountywa.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-11
Last Updated: 2026-08-11

Washington State Attorney General formal data breach disclosure notice filed by Chelan County, WA.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Kovack Financial — Washington State Attorney General formal data breach disclosure notice filed by Kovack Financial affecting 657 residents. https://securityincident.net/incidents/2026-08-kovack-financial.html https://securityincident.net/incidents/2026-08-kovack-financial.html Mon, 10 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: kovackfinancial.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-10
Last Updated: 2026-08-10

Washington State Attorney General formal data breach disclosure notice filed by Kovack Financial affecting 657 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] American Addiction Centers — Washington State Attorney General formal data breach disclosure notice filed by American Addiction Centers affecting 1155 residents. https://securityincident.net/incidents/2026-08-american-addiction-centers.html https://securityincident.net/incidents/2026-08-american-addiction-centers.html Fri, 07 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: americanaddictioncenters.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-07
Last Updated: 2026-08-07

Washington State Attorney General formal data breach disclosure notice filed by American Addiction Centers affecting 1155 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Golden Opportunities And Local Support — Washington State Attorney General formal data breach disclosure notice filed by Golden Opportunities And Local Support. https://securityincident.net/incidents/2026-08-golden-opportunities-and-local.html https://securityincident.net/incidents/2026-08-golden-opportunities-and-local.html Fri, 07 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: goldenopportunitiesandlocal.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-07
Last Updated: 2026-08-07

Washington State Attorney General formal data breach disclosure notice filed by Golden Opportunities And Local Support.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Aesto — Washington State Attorney General formal data breach disclosure notice filed by Aesto affecting 37253 residents. https://securityincident.net/incidents/2026-08-aesto.html https://securityincident.net/incidents/2026-08-aesto.html Tue, 04 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: aesto.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-04
Last Updated: 2026-08-04

Washington State Attorney General formal data breach disclosure notice filed by Aesto affecting 37253 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] CTS Journey — Washington State Attorney General formal data breach disclosure notice filed by CTS Journey affecting 2226 residents. https://securityincident.net/incidents/2026-08-cts-journey.html https://securityincident.net/incidents/2026-08-cts-journey.html Mon, 03 Aug 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: ctsjourney.com
Open Weights Confidence: 68% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-08-03
Last Updated: 2026-08-03

Washington State Attorney General formal data breach disclosure notice filed by CTS Journey affecting 2226 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Amgen — Biotechnology company Amgen filed Form 8-K Item 1.05 disclosing unauthorized cyber activity detected in July 2026. https://securityincident.net/incidents/2026-07-amgen.html https://securityincident.net/incidents/2026-07-amgen.html Fri, 31 Jul 2026 16:15:00 GMT Status: CONFIRMED
Target Domain: amgen.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-31
Last Updated: 2026-07-31

Biotechnology company Amgen filed Form 8-K Item 1.05 disclosing unauthorized cyber activity detected in July 2026.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k biotech confirmed [CONFIRMED] Everside Health — Washington State Attorney General formal data breach disclosure notice filed by Everside Health affecting 21308 residents. https://securityincident.net/incidents/2026-07-everside-health.html https://securityincident.net/incidents/2026-07-everside-health.html Fri, 31 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: eversidehealth.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-31
Last Updated: 2026-07-31

Washington State Attorney General formal data breach disclosure notice filed by Everside Health affecting 21308 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Microcode — Washington State Attorney General formal data breach disclosure notice filed by Microcode affecting 4096 residents. https://securityincident.net/incidents/2026-07-microcode.html https://securityincident.net/incidents/2026-07-microcode.html Thu, 30 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: microcode.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-30
Last Updated: 2026-07-30

Washington State Attorney General formal data breach disclosure notice filed by Microcode affecting 4096 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] River Financial — River Financial Corporation (parent of River Bank & Trust) disclosed an unauthorized intrusion into its banking network involving corporate data exfiltration. https://securityincident.net/incidents/2026-07-river-financial.html https://securityincident.net/incidents/2026-07-river-financial.html Mon, 06 Jul 2026 17:15:00 GMT Status: CONFIRMED
Target Domain: riverbankandtrust.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 87% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-06
Last Updated: 2026-07-30

River Financial Corporation (parent of River Bank & Trust) disclosed an unauthorized intrusion into its banking network involving corporate data exfiltration.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k banking confirmed [CONFIRMED] ADT — Washington State Attorney General formal data breach disclosure notice filed by ADT affecting 5129 residents. https://securityincident.net/incidents/2026-07-adt.html https://securityincident.net/incidents/2026-07-adt.html Tue, 28 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: adt.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-28
Last Updated: 2026-07-28

Washington State Attorney General formal data breach disclosure notice filed by ADT affecting 5129 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] JRK Property — Washington State Attorney General formal data breach disclosure notice filed by JRK Property affecting 5667 residents. https://securityincident.net/incidents/2026-07-jrk-property.html https://securityincident.net/incidents/2026-07-jrk-property.html Mon, 27 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: jrkproperty.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-27
Last Updated: 2026-07-27

Washington State Attorney General formal data breach disclosure notice filed by JRK Property affecting 5667 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] SPay dba Stack Sports — Washington State Attorney General formal data breach disclosure notice filed by SPay dba Stack Sports affecting 1190 residents. https://securityincident.net/incidents/2026-07-spay-dba-stack-sports.html https://securityincident.net/incidents/2026-07-spay-dba-stack-sports.html Mon, 27 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: spaydbastacksports.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-27
Last Updated: 2026-07-27

Washington State Attorney General formal data breach disclosure notice filed by SPay dba Stack Sports affecting 1190 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] AnMed Health — South Carolina healthcare system AnMed Health experienced extensive IT and telecommunications outages across all hospital campuses. https://securityincident.net/incidents/2026-07-anmed-health.html https://securityincident.net/incidents/2026-07-anmed-health.html Sun, 26 Jul 2026 14:00:00 GMT Status: CONFIRMED
Target Domain: anmed.org
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 57% (CONFIRMED BY TARGET)
Corroborated Source Domains: 1
First Seen: 2026-07-26
Last Updated: 2026-07-26

South Carolina healthcare system AnMed Health experienced extensive IT and telecommunications outages across all hospital campuses.

Milestone Timeline

  • 2026-07-26 14:00 UTC [CONFIRMED BY TARGET]: AnMed Health confirms widespread network and phone outages affecting all facilities, maintaining emergency room triage. (DataBreaches.net Telemetry Alert)

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED investigative healthcare outage acknowledged [DEVELOPING] Tribeca Film Festival — Confidential attendee records, contact information, and travel itineraries for celebrity directors and actors leaked from Tribeca Festival systems. https://securityincident.net/incidents/2026-07-tribeca-film-festival.html https://securityincident.net/incidents/2026-07-tribeca-film-festival.html Sun, 26 Jul 2026 16:30:00 GMT Status: DEVELOPING
Target Domain: tribecafilm.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 39% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-07-26
Last Updated: 2026-07-26

Confidential attendee records, contact information, and travel itineraries for celebrity directors and actors leaked from Tribeca Festival systems.

Milestone Timeline

  • 2026-07-26 16:30 UTC [INDEPENDENT VERIFICATION]: Independent audit confirms exposure of internal filmmaker directories and high-profile attendee rosters. (DataBreaches.net Security Report)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative entertainment data-leak developing [CONFIRMED] Bridgeway Benefit Technologies — Washington State Attorney General formal data breach disclosure notice filed by Bridgeway Benefit Technologies affecting 640 residents. https://securityincident.net/incidents/2026-07-bridgeway-benefit-technologies.html https://securityincident.net/incidents/2026-07-bridgeway-benefit-technologies.html Fri, 24 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: bridgewaybenefittechnologies.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-24
Last Updated: 2026-07-24

Washington State Attorney General formal data breach disclosure notice filed by Bridgeway Benefit Technologies affecting 640 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] CareCloud — Washington State Attorney General formal data breach disclosure notice filed by CareCloud affecting 20706 residents. https://securityincident.net/incidents/2026-07-carecloud.html https://securityincident.net/incidents/2026-07-carecloud.html Fri, 24 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: carecloud.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-24
Last Updated: 2026-07-24

Washington State Attorney General formal data breach disclosure notice filed by CareCloud affecting 20706 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [DEVELOPING] Crime Stoppers USA — Over 1 million confidential crime tip records intended to remain strictly anonymous were exposed through an unsecured online system. https://securityincident.net/incidents/2026-07-crime-stoppers-usa.html https://securityincident.net/incidents/2026-07-crime-stoppers-usa.html Fri, 24 Jul 2026 18:00:00 GMT Status: DEVELOPING
Target Domain: crimestoppersusa.org
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 43% (INDEPENDENT VERIFICATION)
Corroborated Source Domains: 1
First Seen: 2026-07-24
Last Updated: 2026-07-24

Over 1 million confidential crime tip records intended to remain strictly anonymous were exposed through an unsecured online system.

Milestone Timeline

  • 2026-07-24 18:00 UTC [INDEPENDENT VERIFICATION]: Investigative audit reveals misconfigured repository leaking over 1 million anonymous tipster reports. (DataBreaches.net Investigation)

View Full Verified Timeline & Evidence on securityincident.net

]]> DEVELOPING investigative law-enforcement exposure developing [CONFIRMED] Eyemart Express — Washington State Attorney General formal data breach disclosure notice filed by Eyemart Express affecting 1704 residents. https://securityincident.net/incidents/2026-07-eyemart-express.html https://securityincident.net/incidents/2026-07-eyemart-express.html Fri, 24 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: eyemartexpress.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-24
Last Updated: 2026-07-24

Washington State Attorney General formal data breach disclosure notice filed by Eyemart Express affecting 1704 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Safetyfirst Systems — Washington State Attorney General formal data breach disclosure notice filed by Safetyfirst Systems affecting 1157 residents. https://securityincident.net/incidents/2026-07-safetyfirst-systems.html https://securityincident.net/incidents/2026-07-safetyfirst-systems.html Thu, 23 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: safetyfirstsystems.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-23
Last Updated: 2026-07-23

Washington State Attorney General formal data breach disclosure notice filed by Safetyfirst Systems affecting 1157 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] The Moody Bible Institute of Chicago — Washington State Attorney General formal data breach disclosure notice filed by The Moody Bible Institute of Chicago affecting 8955 residents. https://securityincident.net/incidents/2026-07-the-moody-bible-institute.html https://securityincident.net/incidents/2026-07-the-moody-bible-institute.html Thu, 23 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: moodybible.org
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-23
Last Updated: 2026-07-23

Washington State Attorney General formal data breach disclosure notice filed by The Moody Bible Institute of Chicago affecting 8955 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Kootenai County, Idaho — Washington State Attorney General formal data breach disclosure notice filed by Kootenai County, Idaho affecting 746 residents. https://securityincident.net/incidents/2026-07-kootenai-county-idaho.html https://securityincident.net/incidents/2026-07-kootenai-county-idaho.html Wed, 22 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: kootenaicountyidaho.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-22
Last Updated: 2026-07-22

Washington State Attorney General formal data breach disclosure notice filed by Kootenai County, Idaho affecting 746 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Unlimited Technology Systems — Washington State Attorney General formal data breach disclosure notice filed by Unlimited Technology Systems affecting 724 residents. https://securityincident.net/incidents/2026-07-unlimited-technology-systems.html https://securityincident.net/incidents/2026-07-unlimited-technology-systems.html Tue, 21 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: unlimitedtechnologysystems.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-21
Last Updated: 2026-07-21

Washington State Attorney General formal data breach disclosure notice filed by Unlimited Technology Systems affecting 724 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] The Estée Lauder Companies — Washington State Attorney General formal data breach disclosure notice filed by The Estée Lauder Companies affecting 2110 residents. https://securityincident.net/incidents/2026-07-the-estee-lauder-companies.html https://securityincident.net/incidents/2026-07-the-estee-lauder-companies.html Fri, 17 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: theesteelaudercompanies.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-17
Last Updated: 2026-07-17

Washington State Attorney General formal data breach disclosure notice filed by The Estée Lauder Companies affecting 2110 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] ZenPatient — Washington State Attorney General formal data breach disclosure notice filed by ZenPatient affecting 651 residents. https://securityincident.net/incidents/2026-07-zenpatient.html https://securityincident.net/incidents/2026-07-zenpatient.html Fri, 17 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: zenpatient.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-17
Last Updated: 2026-07-17

Washington State Attorney General formal data breach disclosure notice filed by ZenPatient affecting 651 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] DentaQuest — Washington State Attorney General formal data breach disclosure notice filed by DentaQuest affecting 148300 residents. https://securityincident.net/incidents/2026-07-dentaquest.html https://securityincident.net/incidents/2026-07-dentaquest.html Thu, 16 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: dentaquest.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-16
Last Updated: 2026-07-16

Washington State Attorney General formal data breach disclosure notice filed by DentaQuest affecting 148300 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [CONFIRMED] Fox Rothschild — Washington State Attorney General formal data breach disclosure notice filed by Fox Rothschild affecting 1891 residents. https://securityincident.net/incidents/2026-07-fox-rothschild.html https://securityincident.net/incidents/2026-07-fox-rothschild.html Thu, 16 Jul 2026 16:30:00 GMT Status: CONFIRMED
Target Domain: foxrothschild.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-16
Last Updated: 2026-07-16

Washington State Attorney General formal data breach disclosure notice filed by Fox Rothschild affecting 1891 residents.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory state-ag washington confirmed [REFUTED] Synopsys — Threat actor extortion claims asserting an intrusion into Synopsys systems were formally audited and disproven with no evidence of compromise. https://securityincident.net/incidents/2026-07-synopsys.html https://securityincident.net/incidents/2026-07-synopsys.html Tue, 14 Jul 2026 12:00:00 GMT Status: REFUTED
Target Domain: synopsys.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 0% (REFUTED)
Corroborated Source Domains: 0
First Seen: 2026-07-14
Last Updated: 2026-07-14

Threat actor extortion claims asserting an intrusion into Synopsys systems were formally audited and disproven with no evidence of compromise.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> REFUTED investigative semiconductors refuted [CONFIRMED] Navient — Student loan servicer Navient disclosed a third-party ransomware attack affecting legal service provider systems containing Navient corporate data. https://securityincident.net/incidents/2026-07-navient.html https://securityincident.net/incidents/2026-07-navient.html Thu, 02 Jul 2026 17:30:00 GMT Status: CONFIRMED
Target Domain: navient.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 84% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 1
First Seen: 2026-07-02
Last Updated: 2026-07-02

Student loan servicer Navient disclosed a third-party ransomware attack affecting legal service provider systems containing Navient corporate data.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k third-party financial confirmed [CONFIRMED] Change Healthcare — Change Healthcare (UnitedHealth Group) suffered a devastating ALPHV / BlackCat ransomware extortion attack halting healthcare clearinghouse networks nationwide and impacting 100M individuals. https://securityincident.net/incidents/2024-02-change-healthcare.html https://securityincident.net/incidents/2024-02-change-healthcare.html Wed, 21 Feb 2024 14:00:00 GMT Status: CONFIRMED
Target Domain: changehealthcare.com
Threat Actor: ALPHV / BlackCat
Open Weights Confidence: 100% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 4
First Seen: 2024-02-21
Last Updated: 2024-10-24

Change Healthcare (UnitedHealth Group) suffered a devastating ALPHV / BlackCat ransomware extortion attack halting healthcare clearinghouse networks nationwide and impacting 100M individuals.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k hhs-ocr healthcare ransomware confirmed [CONFIRMED] Halliburton — Oilfield services corporation Halliburton filed Form 8-K Item 1.05 disclosing an unauthorized intrusion by RansomHub that forced the company to take global systems offline. https://securityincident.net/incidents/2024-08-halliburton.html https://securityincident.net/incidents/2024-08-halliburton.html Wed, 21 Aug 2024 16:00:00 GMT Status: CONFIRMED
Target Domain: halliburton.com
Threat Actor: RansomHub
Open Weights Confidence: 94% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2024-08-21
Last Updated: 2024-09-03

Oilfield services corporation Halliburton filed Form 8-K Item 1.05 disclosing an unauthorized intrusion by RansomHub that forced the company to take global systems offline.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k energy oil-gas confirmed [CONFIRMED] CDK Global — Dealership software giant CDK Global suffered an operational paralysis cyberattack by the BlackSuit ransomware group, shutting down 15,000 auto dealerships nationwide. https://securityincident.net/incidents/2024-06-cdk-global.html https://securityincident.net/incidents/2024-06-cdk-global.html Wed, 19 Jun 2024 14:00:00 GMT Status: CONFIRMED
Target Domain: cdkglobal.com
Threat Actor: BlackSuit
Open Weights Confidence: 88% (CONFIRMED BY TARGET)
Corroborated Source Domains: 2
First Seen: 2024-06-19
Last Updated: 2024-07-02

Dealership software giant CDK Global suffered an operational paralysis cyberattack by the BlackSuit ransomware group, shutting down 15,000 auto dealerships nationwide.

Milestone Timeline

  • 2024-06-19 14:00 UTC [CONFIRMED BY TARGET]: CDK Global shuts down all core dealership management systems following massive cyberattack disrupting 15,000 car dealerships nationwide. (CDK Global Customer Advisory Bulletin)
  • 2024-06-21 16:30 UTC [INDEPENDENT VERIFICATION]: BlackSuit ransomware collective demands $25M ransom; second intrusion detected during restoration attempt. (BleepingComputer Cybersecurity Investigation)
  • 2024-07-02 18:00 UTC [CONFIRMED BY TARGET]: CDK confirms phased restoration of dealer management system (DMS) for core dealership clients nationwide. (CDK Global Restoration Announcement)

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED investigative automotive software ransomware confirmed [CONFIRMED] Advance Auto Parts — Automotive retailer Advance Auto Parts filed Form 8-K Item 1.05 after cybercriminals compromised its cloud database tenant, stealing 380 million customer profiles. https://securityincident.net/incidents/2024-06-advance-auto-parts.html https://securityincident.net/incidents/2024-06-advance-auto-parts.html Thu, 23 May 2024 16:30:00 GMT Status: CONFIRMED
Target Domain: advanceautoparts.com
Threat Actor: UNC5537
Open Weights Confidence: 100% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 3
First Seen: 2024-05-23
Last Updated: 2024-06-05

Automotive retailer Advance Auto Parts filed Form 8-K Item 1.05 after cybercriminals compromised its cloud database tenant, stealing 380 million customer profiles.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k retail snowflake-cloud confirmed [CONFIRMED] Prudential Financial — Prudential Financial filed Form 8-K Item 1.05 following an administrative system intrusion by the ALPHV / BlackCat ransomware group compromising employee and user data. https://securityincident.net/incidents/2024-02-prudential-financial.html https://securityincident.net/incidents/2024-02-prudential-financial.html Mon, 05 Feb 2024 16:00:00 GMT Status: CONFIRMED
Target Domain: prudential.com
Threat Actor: ALPHV / BlackCat
Open Weights Confidence: 98% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2024-02-05
Last Updated: 2024-03-29

Prudential Financial filed Form 8-K Item 1.05 following an administrative system intrusion by the ALPHV / BlackCat ransomware group compromising employee and user data.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k financial insurance confirmed [CONFIRMED] Hewlett Packard Enterprise — Hewlett Packard Enterprise filed Form 8-K Item 1.05 disclosing that nation-state actor Midnight Blizzard compromised its cloud-based Office 365 email environment. https://securityincident.net/incidents/2024-01-hewlett-packard-enterprise.html https://securityincident.net/incidents/2024-01-hewlett-packard-enterprise.html Fri, 19 Jan 2024 16:30:00 GMT Status: CONFIRMED
Target Domain: hpe.com
Threat Actor: Midnight Blizzard (APT29)
Open Weights Confidence: 91% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2024-01-19
Last Updated: 2024-01-24

Hewlett Packard Enterprise filed Form 8-K Item 1.05 disclosing that nation-state actor Midnight Blizzard compromised its cloud-based Office 365 email environment.

Milestone Timeline

  • 2024-01-19 16:30 UTC [CONFIRMED BY TARGET]: HPE notified that nation-state actor Midnight Blizzard gained unauthorized access to Office 365 cloud email environment. (HPE Press & Security Disclosure Notice)
  • 2024-01-24 17:00 UTC [CONFIRMED BY REGULATOR]: HPE files Form 8-K Item 1.05 disclosing data exfiltration from cybersecurity, legal, and operational team mailboxes dating back to May 2023. (SEC EDGAR 8-K Item 1.05 (Adsh 0001645590-24-000003))

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k technology nation-state confirmed [CONFIRMED] LoanDepot — LoanDepot filed Form 8-K Item 1.05 disclosing a major ransomware extortion attack encrypting mortgage servicing systems and compromising 16.6 million customers. https://securityincident.net/incidents/2024-01-loandepot.html https://securityincident.net/incidents/2024-01-loandepot.html Mon, 08 Jan 2024 15:00:00 GMT Status: CONFIRMED
Target Domain: loandepot.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 98% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2024-01-08
Last Updated: 2024-01-22

LoanDepot filed Form 8-K Item 1.05 disclosing a major ransomware extortion attack encrypting mortgage servicing systems and compromising 16.6 million customers.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k financial mortgage confirmed [CONFIRMED] VF Corporation — VF Corporation (parent of Vans, The North Face, and Timberland) filed Form 8-K Item 1.05 following an ALPHV ransomware attack compromising 35.5 million customer records. https://securityincident.net/incidents/2023-12-vf-corporation.html https://securityincident.net/incidents/2023-12-vf-corporation.html Wed, 13 Dec 2023 19:00:00 GMT Status: CONFIRMED
Target Domain: vfc.com
Threat Actor: ALPHV / BlackCat
Open Weights Confidence: 98% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2023-12-13
Last Updated: 2024-01-18

VF Corporation (parent of Vans, The North Face, and Timberland) filed Form 8-K Item 1.05 following an ALPHV ransomware attack compromising 35.5 million customer records.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k retail ransomware confirmed [CONFIRMED] First American Financial — First American Financial filed the very first SEC Form 8-K Item 1.05 disclosure under the SEC mandate following an unauthorized network intrusion that disabled title portals. https://securityincident.net/incidents/2023-12-first-american-financial.html https://securityincident.net/incidents/2023-12-first-american-financial.html Wed, 20 Dec 2023 18:00:00 GMT Status: CONFIRMED
Target Domain: firstam.com
Threat Actor: Unknown / Unattributed
Open Weights Confidence: 98% (CONFIRMED BY REGULATOR)
Corroborated Source Domains: 2
First Seen: 2023-12-20
Last Updated: 2024-01-16

First American Financial filed the very first SEC Form 8-K Item 1.05 disclosure under the SEC mandate following an unauthorized network intrusion that disabled title portals.

Milestone Timeline

View Full Verified Timeline & Evidence on securityincident.net

]]> CONFIRMED regulatory sec-8k financial title-insurance confirmed