ransomware hospital — both words
"data breach" — exact phrase
malware -android — exclude a word
(apple OR microsoft) patch — either company, plus patch
ransom* — a wildcard match
Searches article titles, summaries, keywords and sources. Filters use publication dates.
1–10 of 22 articles
Best match · title matches first
Graham Cluley
The Taliban government of Afghanistan is reeling after unidentified hackers successfully carried out a massive cyber attack against its computer systems and published over 50GB of stolen documents and files online. Read more in my article on the Hot for Security blog.
The Register
Experts warn not to take leaks lightly as years-long compromises could remain undetected Thousands of email addresses included in the Belsen Group's dump of FortiGate configs last week are now available online, revealing which organizations may have been impacted by the 2022 zero-day exploits.…
The Hacker News
Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's Shark vacuums across the same AWS region: watch the camera, drive the robot, read the map of the house, and take the Wi-Fi password in plaintext. A researcher publishing under the handle tokay0 put the method online on Monday, having tested it only against vacuums he
Have I Been Pwned
In June 2026, , later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with extensive personal information including names, addresses, phone numbers, ethnicities, disabilities, passport numbers and information relating to academic enrolments and fee payments. , the university advised that the breach affected both "current students, and alumni". the University of Nottingham was the target of a cyber attack In a post about the incident
Have I Been Pwned
In January 2026, . The data included 431k unique email addresses along with names, phone numbers and physical addresses. data allegedly sourced from US automotive retailer CarMax was published online following a failed extortion attempt
Have I Been Pwned
In October 2025, , largely affecting its donor database. After the incident, the attackers sent inflammatory emails to some victims. and included 624k unique email addresses alongside names and physical addresses. For some donor records, additional personal information was exposed, including gender and date of birth. A small subset of records also contained religion, spouse name, estimated income and donation history. the University of Pennsylvania was the victim of a data breach followed by a ransom demand The data was later published online in February 2026
Graham Cluley
The US Department of Homeland Security has had the details of more than 41,000 staff, including ICE and CBP agents, published online. Not ideal for an organisation with "Security" in its name. Read more in my article on the Hot for Security blog.
Have I Been Pwned
In September 2026, the German political party which exposed 345k unique email addresses. The following month, hundreds of gigabytes of data containing hundreds of thousands of emails and attachments was published online, with searchable AI-generated summaries and downloadable original files. reported that the breach was detected as early as 9 September, with a subsequent intrusion occurring five days later. , AfD attributed the breach to an attack on a hosting provider, identified in subsequent reporting as the party-owned Alternita Dienstleistungs GmbH. Alternative für Deutschland (AfD) suffered a data breach An analysis of the incident In its public statement
Have I Been Pwned
In June 2026, . Data allegedly obtained from Glendale was later published online and included almost 800k unique email addresses along with various other data fields, including names, addresses, phone numbers, Social Security numbers and other information relating to student enrolments. , the college advised that "the potentially impacted information may vary for each individual and may include all or just one of the above-listed types of information". Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign In its disclosure notice
Bleeping Computer
A critical pre-authentication remote code execution vulnerability in BeyondTrust Remote Support and Privileged Remote Access appliances is now being exploited in attacks after a PoC was published online. [...]