Breaches and incidents verified by the BreachFeed team, newest first, with the official disclosure and the coverage behind each one. Track an entity and set its alerts to confirmed only to hear about these the moment they are confirmed — and nothing else.
A county in northwest Kansas reported a ransomware incident, according to a JC Post report. No further details on scope or impact were provided in the text.
An outage affecting credit union core processing vendor Sharetec has continued into a fourth day. The company's users conference has been postponed as a result.
Opportune LLP filed a data breach notification with the California Attorney General on 09/18/2026. The breach is dated 06/22/2026.
The Akira ransomware group listed Manders on its leak site, claiming to have stolen roughly 70GB of data. The claim comes from the extortion site and media reporting; no confirmation from Manders is stated.
Researchers discovered 13 npm packages distributing a previously undocumented JavaScript stealer called WeaselBiscuit that harvests Chrome extension storage. The malware reportedly shares functionality with BeaverTail and other strains linked to North Korea's Contagious Interview campaign.
Iowa Digestive Disease Center reported a data breach that occurred in December, according to a KCCI report. No details on scope or number of affected individuals were provided.
Ellis County reported a ransomware incident, according to a news report published September 18, 2026. No further details were provided in the text.
Colorado state officials said 'foreign actors' briefly hacked two small water utilities in the state last month. The intrusions were described as brief.
Hackers claim to have breached Russian election systems days before a parliamentary vote, according to reporting by The Record. No official confirmation is described in the text.
Hackers have claimed a data breach involving ProMantra, and law firms are investigating potential class action claims. The company has not confirmed the incident in the text.
A data breach at CEVA Logistics was reported. Valve stated that Steam user data remains safe following the incident.
The Von Braun Center (VBC) said its official X account was hacked. The organization acknowledged the compromise publicly, as reported by rocketcitynow.com.
Bell Canada said 911 services have been fully restored after outages affected Ontario, Quebec and four other provinces.
VanEck's CEO disclosed that the investment firm was hacked earlier in the year, according to InvestmentNews. No further details on scope or impact were provided in the text.
Revolut said that no group has made direct contact with the company following a data breach, according to Bloomberg.
The US Coast Guard confirmed evidence of malicious cyber activity aboard the oil tanker VL Prosperity, one of two tankers hit by cyberattacks. Coast Guard and FBI personnel boarded the vessels; the attack has not been attributed to Iran.
Brevo confirmed attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites. The injected scripts were used to distribute malware.
Helpfeel, the Kyoto-based operator of image-sharing service Gyazo, said in a notice published Wednesday that a security breach exposed about 23.62 million user records including email addresses and password hashes. Roughly 490 million image metadata records, mostly for images from January 2019 or earlier, were also exposed, including IDs used in Gyazo image links.
The Register reports that Salesforce is recovering after a global outage affecting its services. No official Salesforce statement is included in the available text.
Hackers accessed Premier Medical Group files in June 2026 containing patient names, contact information, diagnosis details, and health insurance information. Approximately 280,000 people were impacted.