Threat actors have compromised over 270 Zimbra Collaboration Suite (ZCS) servers by exploiting a high-severity remote code execution vulnerability. These ongoing attacks have resulted in unauthorized access to multiple Zimbra instances. No specific affected versions or patch information is provided in the available data.
Cybersecurity company ReliaQuest has confirmed that one of its employees was targeted in a social engineering attack after hackers impersonated a member of the security team. [...]
A breach at South Korea's government-backed startup platform exposed encrypted personal data after an encryption key was included in an API. Penta Security explains why encryption keys must be securely managed and kept separate from the data they protect. [...]
The private equity firm appears to have been targeted as part of a campaign focusing on major financial companies. The post Personal Information Exposed in Apollo Global Data Breach appeared first on SecurityWeek .
The Hospital for Sick Children (SickKids) in Toronto experienced a cybersecurity incident involving unauthorized access to personal information of some current and former employees and job applicants. The breach originated from a vulnerability in third-party software used by the hospital. Clinical systems and patient records were not affected, and the hospital's public-facing Careers website was temporarily taken offline and later restored. The hospital is investigating the scope of the incident and has notified potentially affected individuals, offering 24 months of complimentary credit monitoring and identity protection. The exact data categories exposed and the number of affected individuals have not been disclosed. This incident follows previous security events impacting SickKids, including ransomware and third-party breaches.
The StopAndProtect operation is a cybercrime campaign that has compromised nearly 2,000 WordPress websites, turning them into a criminal network used for malware delivery, data theft, surveillance, and ransomware activities. The campaign uses social engineering via fake CAPTCHAs to trick victims into executing PowerShell commands that initiate multi-stage malware infections. The malware toolkit includes ransomware, credential stealers, screen lockers, and chat utilities, enabling attackers to selectively steal files and monitor victims before potentially encrypting data. Compromised WordPress sites serve multiple roles, including hosting malware, delivering commands, and storing stolen data. The operation exploits outdated WordPress versions and plugins with known vulnerabilities. The campaign has collected extensive victim data, including screenshots, passwords, and wallet information, indicating a sophisticated surveillance component alongside ransomware. The infection chain and infrastructure management tools were uncovered by Check Point Research in mid-2026.
Sakura Internet, a Japanese cloud and data center service provider, suffered a data breach where hackers accessed its sales management system containing customer contract and membership information. Up to 1.36 million accounts may have been affected by this unauthorized access. The incident involves exposure of sensitive customer data but no specific technical details about the attack vector or exploited vulnerabilities are provided. No patch or remediation information is available from the input data. The breach highlights risks to customer data confidentiality in cloud-related service environments.
CareCloud, a U.S. healthcare IT company, disclosed a data breach impacting over 3.7 million individuals. The breach occurred between March 10 and March 16, 2026, when an unauthorized third party accessed one of CareCloud's AWS environments and exfiltrated data from databases containing patient information. The incident caused an 8-hour network disruption and cut access to one of its databases. CareCloud notified affected individuals starting July 25, offering identity protection services. No ransomware or extortion groups have claimed responsibility. The company is publicly traded and provides electronic health records and related healthcare IT services.
The data breach was initially believed to affect roughly 350,000 people, but the HHS breach tracker shows a far bigger impact. The post CareCloud Data Breach Impact Grows to 3.7 Million Individuals appeared first on SecurityWeek .
Hackers stole names, addresses, phone numbers, Social Security numbers, and financial information from a third-party platform. The post Heights Finance Data Breach Impacts at Least 1.2 Million Individuals appeared first on SecurityWeek .
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers stole customer personal and order information from third-party logistics provider CEVA Logistics. [...]
Hackers used compromised credentials to access enterprise and personal tax-related data. The post 680,000 Impacted by French Tax Authority Data Breach appeared first on SecurityWeek .
The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems and stole data belonging to 678,000 individuals. [...]
Hackers exploited a vulnerability in the order-tracking function of a plugin to access SafePal customer information. The post 40,000 Impacted by SafePal Data Breach appeared first on SecurityWeek .
Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now claiming to be selling the stolen data. [...]
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned. [...]
The hackers published the allegedly stolen information, including names, addresses, email addresses, and phone numbers. The post 1.6 Million Likely Impacted by RingCentral Data Breach appeared first on SecurityWeek .
The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts. The post Over 1,000 Charities Hit by Beacon CRM Data Breach appeared first on SecurityWeek .
Hackers stole the customers’ shipping information, including names, addresses, email addresses, and phone numbers. The post 14,000 Trezor Customers Impacted by Data Breach at ShipMonk appeared first on SecurityWeek .
