BreachFeed

Incidents

Breaches, outages and other incidents on the BreachFeed record, with the official disclosure and the coverage behind each one. Track an entity and route its alerts to confirmed incidents only to hear about these the moment they are confirmed — and nothing else.

companyLiteLLMTrack
suspectedhighSupply chainFirst reported Oct 21, 2026

LiteLLM: malicious 1.107.0 PyPI release spread infostealer and RAT

LiteLLM version 1.107.0 was reported compromised on PyPI on October 21, 2026, with all seven wheel files carrying a credential stealer and a remote access trojan. The malicious release also reached Docker images, affecting developer systems, build runners, and AI services. Security firm Aikido warned that anyone who installed the release should assume credentials were compromised.

Full record and coverage →

companyUnnamed Russian healthcare organizationTrack
suspectedmediumData breachFirst reported Oct 21, 2026

Russian healthcare organization: two-year intrusion with Vasilek backdoor hidden in VMware Tools

Russian cybersecurity firm Solar reported that a Belarus-aligned hacktivist group tracked as Partisan Zmiy (Cyber Partisans) spent nearly two years inside the network of a Russian healthcare organization. The attackers hid a backdoor dubbed Vasilek in VMware Tools. The group has been active since at least 2020.

Full record and coverage →

Members only

Every incident on record

  • The whole list, newest first, with filters by kind, status and when
  • Each record in full: its timeline, severity and every linked report
  • Alerts by email or push the moment an organization you track is hit

A free account is all it takes — no card, one minute.

Create a free accountLog in