news

Crunchbase confirmed a cybersecurity incident after the extortion group ShinyHunters claimed it stole company documents and posted a tranche of data online, part of a broader wave of social engineering intrusions tied to single sign on account takeovers.Crunchbase told SecurityWeek it detected a threat actor exfiltrated certain documents from its corporate network, said business operations…

Personal details tied to about 4,500 Immigration and Customs Enforcement and Border Patrol personnel were reported as leaked to the ICE List website, an episode that has intensified a U.S. debate over privacy, transparency, and the safety of federal officers.What Happened in the 4,500 ICE Names Leak Data BreachThe ICE List website and multiple news…

What Happened in the Oracle E-Business Suite Hack? A sprawling extortion campaign tied to the CL0P brand has targeted organizations that run Oracle’s E-Business Suite (EBS), with attackers claiming they stole data from victims’ EBS environments and then pressuring executives for payment. The campaign surfaced publicly in late September 2025 and continued into January 2026, with…

What HappenedU.S. fiber broadband provider Brightspeed opened an internal cybersecurity investigation in early January 2026 after a criminal group, Crimson Collective, claimed it accessed company systems and stole sensitive customer data affecting more than 1 million individuals. The group made the allegation public on January 4, 2026 via Telegram and shared screenshots and small data…

What Happened in the Instagram Breach? In early January 2026, a threat actor known as “Solonik” posted a dataset titled “INSTAGRAM.COM 17M GLOBAL USERS — 2024 API LEAK” on a dark-web marketplace. The data reportedly covered about 17.5 million Instagram accounts and included usernames, names, email addresses, phone numbers, and some partial physical addresses.Shortly after…

What HappenedIn early January 2026, hardware wallet maker Ledger warned that a data breach involving unauthorized access to the Global-e platform, its e-commerce and payment provider, exposed the personal details of some Ledger customers who purchased products through Ledger’s online shop.Ledger said the incident involved unauthorized access to order data stored in Global-e systems and…

What HappenedIn late December 2025, a database with 2.3+ million records tied to WIRED subscribers surfaced on underground forums. A threat actor called Lovely posted it on Breach Stars on Dec 20, claiming they exploited weaknesses in Condé Nast’s account systems, then reposted it elsewhere. Researchers said the files appear to come from an internal…

What Actually HappenedIn December 2025, Nissan Motor Co. Ltd. confirmed that personal data for about 21,000 customers tied to a former Fukuoka dealership in Japan was copied from a Red Hat Consulting server used to build a customer management system. Attackers accessed Red Hat’s self-managed GitLab earlier in autumn, and Red Hat notified Nissan on…

What Happened700Credit LLC, a Michigan based provider of credit reports and identity verification services for auto dealerships, disclosed in late 2025 that attackers accessed its dealership web application and copied sensitive consumer data tied to dealership customers. Public breach reporting and state level disclosures put the total impacted population at about 5.8 million people nationwide,…

Background and TimelineDuring the 2025 holiday break, users of Trust Wallet’s Chrome extension began reporting that their crypto wallets were suddenly drained shortly after interacting with the extension. Trust Wallet later confirmed a security incident affecting only Chrome extension version 2.68, and multiple sources reported losses reaching roughly $7 million.On December 24, 2025, Trust Wallet’s…