Low-Skilled Cybercriminals Use AI to
Unit 42 researchers observed a low-skilled threat actor using an LLM to script a professional extortion strategy, complete with deadlines and pressure tactics
2026 Data Breaches Year-to-Date (1186 indexed)
Infostealer Targets OpenClaw to Loot
Hudson Rock has warned OpenClaw users that infostealers are targeting their configuration files
Bupa (UK/Global)
780K international health insurance member records exposed via insider data theft
APOIA.se
450,764 records exposed — Email addresses, Names, Physical addresses
Odido Breach Impacts Millions of
Dutch telco Odido has revealed a major data breach impacting over six million customers
University of Pennsylvania
623,750 records exposed — Charitable donations, Dates of birth, Email addresses, Genders and 7 more
Metro Inc. (Canada)
740K customer records from Jean Coutu pharmacy division exposed in ransomware attack
IRS (Tax Vendor Breach)
1.8M taxpayer records exposed via compromised e-filing software vendor
Nike Inc.
1.2M SNKRS app user records exposed — sneaker purchase history and payment data stolen
Equinix Data Centers
740K enterprise customer metadata and colocation records exposed in Netscaler vulnerability exploit
Mayo Clinic
900K patient research records exposed via compromised genomics analysis platform
Zoom Communications (2026)
780K enterprise meeting recordings and transcripts accessed via compromised admin portal
Province of British Columbia
1.4M citizen records from provincial health and education systems compromised
Barclays Bank
780K customer records from wealth management division exposed via insider threat
Brookfield Asset Management
480K investor records from Canadian asset manager exposed via compromised fund admin portal
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Suc
Fake AI Assistants in Google
Hundreds of thousands of users have downloaded malicious AI extensions masquerading as ChatGPT, Gemini, Grok and others, warn cybersecurity researchers at LayerX
Lockheed Martin (Subcontractor)
Defense subcontractor breach exposes classified program metadata and personnel clearance records
Odido (Dutch Telecom)
6.2M customer records including passport and bank account numbers leaked by ShinyHunters
Microsoft Configuration Manager
Microsoft Configuration Manager SQL Injection Vulnerability — Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by sending specially cra
State of Ohio Unemployment System
890K unemployment claimant records exposed via compromised benefits administration portal
Cerner / Oracle Health
5.9M patient records exposed after legacy Cerner migration database left unsecured on Oracle Cloud
SolarWinds Web Help Desk
SolarWinds Web Help Desk Security Control Bypass Vulnerability — SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted
Delta Air Lines
870K SkyMiles member records and passport data exposed via compromised CrowdStrike integration