Incidents

Dec 2023

2026-11-06

Eagers Automotive, an Australian automotive dealership group operating across Australia and New Zealand, experienced a cyber incident that disrupted IT systems at some locations and forced a trading halt of its shares. The attack restricted the company's ability to finalize transactions for certain new vehicles ready for delivery and affected some service and parts operations, while most dealerships continued operating. Unauthorized access to parts of its IT systems allowed a third party to access some server data, leading to notifications to a small number of affected individuals, though the total number was not disclosed. The company engaged external cybersecurity experts and notified national cybersecurity authorities in both countries, and a ransomware group claimed responsibility for the intrusion.

Oct 2023

2026-11-06

A cybersecurity incident disrupted portions of the victim's manufacturing and distribution operations, prompting precautionary measures including system takedowns that caused temporary business interruptions. The company engaged external cybersecurity experts and forensic IT specialists to investigate potential data impacts and notified law enforcement, while confirming its customer-facing practice management software remained unaffected. The incident disclosure aligned with new SEC regulations requiring prompt reporting of significant cyber events, though the organization did not explicitly classify it as a cyberattack or confirm material financial impact. A ransomware gang later threatened to release sensitive data obtained during the breach.

Sep 2026

2026-11-05

Hackers infiltrated Bristol City Council's Trading with Schools platform with malicious software, compromising data from 39 schools that rely on the system for scheduling, lesson plans, staff details, payroll, and sensitive information about children including educational psychology files. More than 320,000 stolen files were later published on the dark web, while the broader platform serves 88 schools, 49 of which only use it for internet services. After the breach was detected, the system was shut down, leaving many schools without phone service and forcing teachers to work longer hours to deliver lessons. The authority stated it could not confirm the specific data details and said officers were reviewing the material to determine what was affected and notify families. The South West Regional Organised Crime Unit is investigating the attack.

Jun 2026

2026-11-05

DigiCert suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to archived customer information and identity documents. The exposed records included names, business email addresses, phone numbers, and business addresses, with some records also containing personal identification documents such as driver's licenses, passports, and utility bills. An authorization flaw let externally created accounts access the data in read-only mode, though the company initially treated the issue as account creation rather than data access. The organization confirmed its certificate authority services, platforms, customer login credentials, and issued certificates remained secure, and it has since restricted access, disabled self-registration, and added additional access controls.

Nov 2026

2026-11-05

Air Botswana disclosed a suspected ransomware attack that gave unauthorised parties access to some internal systems containing employee and internal information. The airline identified the incident and activated its response procedures, engaging relevant authorities and addressing data protection obligations while passenger booking systems, aircraft systems, flight operations, and aviation safety systems remained unaffected. It operates a smaller fleet serving scheduled destinations across several countries and is wholly government-owned. The disclosure did not specify how many people were affected, which systems were accessed, whether data was copied or encrypted, or if a ransom was demanded, and no group has claimed responsibility. Botswana's Data Protection Act requires breach notification to the Information and Data Protection Commission without delay and where feasible within 72 hours of awareness, with penalties for failure to implement appropriate security safeguards.

Nov 2026

2026-11-05

Mercado Bitcoin suspended deposits and withdrawals after a cybersecurity incident in which blockchain security companies reported more than $46 million left the platform, though the company did not confirm the figure. The exchange stated the attack did not harm customers or cause a data breach, but blockchain security experts disputed that assessment, citing evidence that hackers siphoned funds from some customer wallets. Tether froze about $4.5 million of the stolen funds, and other platforms froze another $2 million, while Chainalysis investigators tracked the coins to help the industry identify, freeze, and disrupt impacted funds. The platform, which calls itself the largest digital assets investment platform in Latin America with about 4.5 million customers, pledged to restore services in the coming days and coordinated with authorities.

Oct 2026

2026-11-05

Chainalysis disclosed a data breach stemming from an AI-driven cyberattack in which an external actor used offensive agentic techniques to access its systems and internal tools. The intrusion exposed non-sensitive customer data including user IDs, full names, email addresses, and organization role labels, though investigation content, transaction and query results, passwords, and other credentials were not compromised. The company stated the incident is unrelated to a separate cryptocurrency heist and said it continues to investigate the full scope without disclosing the number of affected individuals while working with external experts and language models to harden its security posture amid a broader rise in similar attacks across the tech industry.

Nov 2026

2026-11-04

A cyber incident affecting refrigeration systems in 13 SuperValu stores operated by food wholesaler Musgrave forced the removal of some chilled and frozen products from sale after monitoring systems detected the issue. The company stated that its investigation was ongoing and that immediate action had been taken, with the disruption occurring as part of a wider European wave of attacks on supermarket cooling units that caused temperature spikes and spoiled food.

Oct 2026

2026-11-04

A Swedish ICA Kvantum store in Sjöbo reported that hackers compromised its refrigeration and freezing systems, raising temperatures to 50 degrees Celsius and forcing staff to discard spoiled goods. The incident was part of a broader wave of cyberattacks targeting supermarket refrigeration across several European countries, including Belgium, Luxembourg, Ireland, and Estonia, where chains such as Coop, Delhaize, Carrefour, SuperValu, and Selver experienced disrupted cooling, product removals, or limited fresh and frozen availability. In France, similar attacks previously compromised hundreds of supermarket and independent store cooling systems, apparently focusing on older technology, while affected retailers elsewhere worked to restore operations and replenish chilled and frozen ranges.

Nov 2026

2026-11-04

A cyberattack targeting an external refrigeration management provider disrupted operations at seven Intermarché stores in Portugal, contributing to a wider wave of incidents across at least ten European countries that caused supermarket freezer temperatures to spike as high as 50 degrees Celsius and forced retailers to discard spoiled food. The broader campaign, which also affected chains in Belgium, Ireland, Italy, and other nations, resulted in food losses estimated in the tens of millions of euros and prompted European Union officials to warn of deliberate attempts to disrupt the food supply chain.

Nov 2026

2026-11-04

Cyber-attacks targeting refrigeration systems disrupted supermarket chains across at least ten European countries, causing freezer temperatures to rise as high as 50 degrees Celsius and forcing retailers to discard spoiled food. Co-op locations in Sicily and Tuscany were among the affected businesses, with national authorities noting outdated security measures and exposed interfaces. The European Union characterized the incidents as a serious threat to the food supply chain, while several member states opened investigations into the breaches that also impacted other grocery retailers and corner shops.

Nov 2026

2026-11-04

SuperValu, Ireland’s third-largest supermarket chain, reported that a specific model of refrigeration systems was affected by a cyber incident at 13 of its 223 stores. The event was part of a broader wave of suspected cyberattacks targeting grocery cooling systems across multiple European countries, where temperatures in fridges and freezers spiked to as high as 50 degrees Celsius, spoiling food and in some cases causing fires. Retailers in Belgium, Estonia, Ireland, Luxembourg, and Sweden reported overnight temperature increases, with additional incidents affecting Ahold Delhaize, Spar, ICA, Coop, and Axfood locations. No group claimed responsibility for the attacks.

Oct 2025

2026-11-04

Harvard University disclosed that attackers breached its Alumni Affairs and Development systems and stole data linked to more than 850,000 unique email addresses. The exposed information included names, email addresses, dates of birth, phone numbers, physical addresses, social media profiles, event attendance records, donation details, and biographical information pertaining to fundraising and alumni engagement. The university stated that the breached systems did not store Social Security numbers, passwords, payment card information, or financial information. An extortion gang claimed responsibility and leaked a 1.1GB archive of documents on a dark web leak site after the institution refused to pay a ransom. Have I Been Pwned confirmed the breach affected 850,500 accounts involving donors, alumni, parents, and some faculty, staff, and students.

Feb 2026

2026-11-04

The incident summary cannot be produced from the supplied materials because the only provided article concerns a ransomware attack and data breach at Del Monte Foods rather than the University of New Mexico Hospital. That article describes unauthorized access to files containing names, Social Security numbers, government identification numbers, financial account codes, credit and debit account information, and health records, with consumer notifications beginning after the investigation and complimentary identity protection services offered to affected individuals.

Oct 2026

2026-11-03

A cyber-attack targeting refrigeration systems affected dozens of supermarkets across seven European countries, including around 40 Delhaize stores in Belgium and Luxembourg, with additional impacts on Carrefour, Colruyt, Ikea, ICA, Coop, SuperValu, and other retailers in Sweden, Ireland, the Netherlands, Estonia, and Finland. The attack switched evaporators to defrost mode, causing freezer temperatures to rise as high as 50 degrees Celsius and forcing stores to discard spoiled food, with one Belgian branch reporting losses of approximately 100,000 euros. National cyber-security agencies in Belgium and Sweden monitored the incident while authorities investigated potential links to similar attacks on French supermarkets and American military bases.

Oct 2026

2026-11-03

The provided materials do not contain an incident involving Johns Hopkins Bayview Medical Center. The only available article describes a breach at the Florida Department of Education affecting approximately 4.9 million individuals through its student financial aid website, with exposed data including names, Social Security numbers, dates of birth, addresses, phone numbers, email addresses, and gender codes.

Feb 2026

2026-11-03

Del Monte Foods Corp. II Inc. detected a network operability issue and launched an investigation with independent cybersecurity experts that determined unauthorized parties acquired certain files from its systems. A ransomware group claimed responsibility on the dark web, stating it had obtained approximately 1.2 terabytes of internal data, and the company later learned the compromised files contained personal information including names, Social Security numbers, government identification numbers, financial account codes, credit and debit account information, and health records. The company disclosed the incident to state attorneys general, began notifying affected consumers, implemented enhanced security measures, and is cooperating with law enforcement while offering complimentary identity protection services to those impacted.

Aug 2025

2026-11-03

The University of Phoenix disclosed a major data breach affecting 3,489,274 individuals, including current and former students, faculty, staff, and suppliers, after attackers exploited a zero-day vulnerability tracked as CVE-2025-61882 in Oracle's E-Business Suite during a multi-day window in August. The intrusion went undetected until late November, when the Clop ransomware group listed the institution on a public leak site following the theft of highly sensitive personal and financial information such as full names, contact details, dates of birth, Social Security numbers, and bank account and routing data. The incident is part of a broader Clop campaign leveraging the same Oracle flaw against other universities including Harvard, the University of Pennsylvania, and Dartmouth College. The institution has engaged third-party forensic experts, is cooperating with law enforcement, and is offering affected individuals twelve months of complimentary credit monitoring, identity theft recovery assistance, dark web surveillance, and a fraud reimbursement policy.

Dec 2025

2026-11-03

A data breach exposed sensitive information of University of Pennsylvania donors, with those claiming responsibility releasing thousands of files including memos about donors, encompassing details about their contributions and personal information. The incident occurred shortly before a similar breach affected Princeton University's donor database, highlighting a broader trend of hackers targeting nonprofit organizations for the valuable donor data they maintain. The breach threatened to damage fundraising efforts by undermining donor trust, as surveys indicate that significant portions of donors would cease or pause giving following such incidents, with reputational impacts potentially lasting for years.

Nov 2025

2026-11-03

Princeton University's donor database was breached, exposing email addresses, phone numbers, street addresses, and donation information. The incident prompted significant concerns about donor trust and potential long‑term effects on fundraising, as experts note that similar breaches can undermine confidence for years and affect giving behavior.