Hub: Ransomware & Cyber Attacks - Page 5

Three newly disclosed incidents: Ginkgo Bioworks says an outsider accessed data from cloud environments tied to its former biosecurity business; Turkey's data regulator says a ransomware attack on Yıldız Technical University may affect about 140,000 students and 4,500 staff; and Green Clinic in Ruston, Louisiana, is rebuilding after ransomware locked its records. What each organisation has confirmed.

A ransomware attack on SoftBank's IDC Frontier knocked out services for 495 customers, halting Nissui's logistics and Ibaraki's websites. Japan's police say Qilin has hit 53 Japanese firms. MrMax, GMO's infoQ and Nikkei disclosed breaches; Asos says hackers took detailed customer profiles; Oracle Health's count may near 20 million; and Denmark says its population register was looked up for 8.8 million people. What each organisation confirmed.

Arizona’s courts confirm data on 1.3 million people was copied; ccTLD registry hijacks let attackers obtain certificates for Google and other domains; exploitation attempts follow a public Atlassian PoC; Yoido Full Gospel Church confirms 850,000 members’ data exposed; the Double Counter Discord bot is breached; a MonsterCloud owner is charged; and the US offers $10m for accused HAFNIUM hacker Zhang Yu. Confirmed vs alleged, case by case.

From FortiBleed credential harvesting and ASOS customer notifications to UIC ransomware, Citrix NetScaler KEV deadlines and a new NetScaler flaw, CVE-2026-107406 (patch out; no known exploitation), Southern Company portal access and Advantest’s delayed PII notices — what is confirmed, what is alleged, and the patterns linking initial access to disclosure timing.

South Korea’s president ordered a full response after customer data was exposed at seven financial firms, saying some cases showed possible AI use. Police have formed a 28-member investigation team.