Breaches

JetBrains Says Attackers Broke Into Its Cadence Cloud Through an Unpatched TeamCity Server
Customers of the build service are being told to rotate every credential after criminals exploited a critical flaw in JetBrains' own software.

Trezor Customers Caught in a Second Wave of ShipMonk Data Leak
The crypto hardware wallet maker says 67,000 more U.S. buyers had their names, addresses and phone numbers exposed through its old shipping partner. The wallets themselves are unaffected.

France fines Saint-Étienne hospital €500,000 over breach hitting 727,000 people
A teenage hacker got into a doctor's account and roamed the patient record system for days. Regulators say the hospital's security controls were nowhere near enough.

Thomson Reuters Says Court Records Software Breached, 11 States Affected
West Publishing's C-Track platform, used by courts across the U.S. and beyond, had files taken by an unauthorized party in March. Thomson Reuters only spotted the activity three months later.

Dark web store is selling 153 million US and Canadian drivers licence scans, FBI opens probe
A new criminal marketplace called Nexus is hawking front-and-back photos of drivers licences, with early evidence pointing at a Louisiana identity verification firm used by car rental counters and cannabis dispensaries.

Novocure Says Cancer Patient Data Exposed in August Break-In
The oncology device maker told the SEC that intruders reached records for more than 1,400 U.S. patients, though treatment devices were untouched.

Attackers Drain $600,000 in AI Credits After Stealing METR API Key
The AI safety non-profit says intruders got into a staff laptop and a code repository, but no sensitive research data was taken.

9.5 Million People's Health and Personal Records Stolen in Aesto Health Breach
A Birmingham, Alabama healthcare data company discovered in December 2025 that criminals had broken into its cloud storage and stolen records including Social Security numbers, medical histories, and financial account details belonging to more than 9.5 million people.

McKesson Confirms Break-In After Hackers Claim 284 Million Patient Records Stolen
The US pharmaceutical distribution giant says intruders reached third-party apps holding limited data. The ShinyHunters gang claims a haul far larger than McKesson admits.

Berlin Refuses Ransom After Hackers Breach City's Administrative Network
Berlin's state government says it will not pay the criminals behind an August intrusion, as forensic work uncovers fresh data theft from the city's transport and environment department.

Hasbro Tells Massachusetts Regulators Employee Data Was Stolen in Breach
The toy giant filed notification letters flagging exposed Social Security numbers, bank details and driver's licence data for 436 workers in the state, months after a separate March cyberattack cost it roughly $25 million.

Manchester Airports Group Confirms Data Theft From Wi-Fi Sign-ups and Booking Systems
Hackers pulled email addresses, phone numbers and car registrations from MAG's systems. Payment details were not touched, and flights are running normally.

ShinyHunters dumps 12.9 million Carhartt customer records after ransom refusal
The extortion crew says it grabbed 50GB from the workwear brand's cloud analytics platform. Carhartt walked away from a $3.3 million demand, and the data is now public.

Boston Scientific Hit By Cyberattack, Global Order Shipments Disrupted
The medical device maker says it detected an intrusion on August 25 that knocked out business systems and stopped some customer orders from going out.

LACMA data breach exposed Social Security numbers and medical records, museum confirms
The Los Angeles County Museum of Art says a July 2025 intrusion leaked names, SSNs, driver's licence numbers and health data. Notifications went out more than a year after detection.