Incidents in sector:
Proofpoint disclosed that China-aligned actor TA419 impersonated a senior Anthropic employee and former US officials in credential-phishing campaigns aimed at AI policy experts at American think tanks, in an apparent effort to collect intelligence on US artificial-intelligence policy.
ShinyHunters defaced the Clop ransomware gang's Tor leak site via a Grav CMS path-traversal flaw and claimed to have stolen source code, server logs and the site's onion private keys.
Spain's AEPD said it received its first breach notification blamed on an autonomous AI agent that found flaws, logged into a company's systems, altered personal records and extracted invoices.
The DireWolf extortion group claimed to have stolen roughly 253 GB of highly sensitive data — including donor and transplant-recipient medical records — from the National Kidney Registry, a U.S. nonprofit that facilitates living-donor kidney transplants.
Turner Construction disclosed that attackers accessed its network in July 2026 and stole Social Security numbers, bank account details and passport numbers, with the Payout Kings extortion group claiming to have exfiltrated some 27 terabytes of data including sensitive project files.
Beacon, a CRM platform used by more than a thousand UK charities, confirmed that an attacker used an AWS access key exposed in the company's public JavaScript to copy and exfiltrate its entire customer database of supporter and donor records.
U.S. home security provider Brinks Home confirmed a cybersecurity incident after ShinyHunters claimed it stole 4.9 million Salesforce records and support chat logs through a Microsoft Entra voice-phishing call.
Data purportedly stolen from IAD, France's largest real-estate agent network, was put up for sale on a cybercrime forum, with the sellers claiming records on some 3.8 million people.
A data leak targeting Delko, a French network of garages and car maintenance centres, is currently being claimed by the cybercriminal group LAPSUS$, known for its extortion operations…
The French high-tech refurbishment specialist Largo informs its customers that it was the victim of a security incident that affected part of
The Titan ransomware group claimed a double-extortion attack on Groupe CRIT's Tunisian subsidiary CRIT Tunisie, leaking payroll and administrative records, financial files and scanned identity documents and passports belonging to workers and employees.
On 13 May 2026, a threat actor using the alias lazasec123 advertised a database of roughly 2.3 million profiles tied to French motorcycle licences and FFMOTO.org, exposing names, dates of birth, postal addresses, emails and phone numbers, offered for sale at 150 euros.
The Anubis ransomware group claims to have compromised the systems of A.R.Ge.Co, a French company specializing in accounting services and
The Qilin ransomware group claims to have compromised the systems of Le Domaine des Tournels, an establishment located in the Gulf of Saint-Tropez. At this
A hacker going by the name TeamPCP claims to hold a significant quantity of internal data belonging to Mistral AI, the French startup
The hacker ChimeraZ claims to hold data linked to La Boîte Immo, a French company specialized in software and digital services for
In May 2026, France's La France Insoumise party had data from its Action Populaire activist platform stolen and posted on a hacking forum, exposing some 120,000 email addresses, 20,000 phone numbers, postal addresses and member activity spanning 2017-2026.
A database tied to Monservicederemplacement.fr, the platform run by France's agricultural replacement service (Service de Remplacement France), surfaced online in May 2026, exposing 213,477 records on about 184,724 people, including names, contact details, dates of birth and social security numbers.
On 7 May 2026, a hacker using the alias 'fuzzeddffmepg' claimed to have breached Action Populaire, the activist platform of France's La France Insoumise party, exposing roughly 120,000 email addresses, 20,000 phone numbers, private messages and payment data spanning 2017-2026.
A database attributed to Newdeal Institut, a language training centre, has been published on a cybercrime forum by a hacker posing as
Customers of Groupe GCA, a network of car dealerships, are reportedly affected by a claimed leak impacting nearly 67,500 people, according to the claim. The Dumpsec collective states…
In April 2026 the French Basketball Federation (FFBB) suffered a data breach after an attacker abused a compromised user account in its licensee-management tool, exposing identity and contact details of up to ~2 million licensees and ~900,000 legal representatives.
A threat actor known as Lagui published a database attributed to French recruitment firm Profil Search containing roughly 100,642 candidate records, exposing names, emails, phone numbers, postal addresses and professional details.
A database attributed to ADEMI, an agricultural weighing system, is currently circulating online, exposing sensitive information related to