Iran's MuddyWater Dressed as Ransomware to Spy on U.S. Banks and Defense Contractors
Iranian state-sponsored group MuddyWater used the Chaos ransomware brand as a false flag to mask an espionage campaign targeting a U.S. bank, an airpo...
Breach Intelligence & Articles
833 articles on data breaches, ransomware, incident response, and threat intelligence.
PowerSchool to Canvas: The 18-Month EdTech Supply Chain Collapse
Two breaches. 350 million combined records. One architectural pattern. A side-by-side analysis of the December 2024 PowerSchool breach and the May 202...
The Canvas Breach Is an LMS Supply Chain Failure, Not a School Problem
8,809 institutions. 275 million records. One freemium tier. The Canvas breach wasn't a sophisticated APT or a zero-day — it was a free-tier onboarding...
The Gentlemen Got Hacked: Inside the Leaked Backend of 2026's Second Most Active Ransomware Group
The Gentlemen ransomware group — #2 most active RaaS operation globally in 2026, with 320+ confirmed victims — had their own backend database breached...
Nitrogen Ransomware Hits Foxconn: 8TB Stolen, Apple and Nvidia Files Claimed
The Nitrogen ransomware group has claimed a breach of Foxconn's North American manufacturing facilities, alleging theft of 8 terabytes and 11 million ...
Cloudflare Cut 1,100 Jobs and Blamed AI — But the CEO Was Already Selling
Cloudflare reported a record quarter on May 7, then announced it was cutting 1,100 employees — 20% of its workforce — and attributing the cuts to agen...
Instructure Paid the Ransom: ShinyHunters Claims Data Destruction After Canvas Breach
Instructure confirmed it reached an agreement with ShinyHunters following the 275-million-record Canvas breach, receiving 'digital confirmation of dat...
How ShinyHunters Is Using Vishing to Drain Enterprise Salesforce Environments
ShinyHunters has quietly evolved from technical exploits to phone calls. Across a wave of 2026 breaches — Carnival, Cushman & Wakefield, Instructure, ...
SpaceBears Ransomware Group Targets Johnson & Johnson's Pharmaceutical Division
The SpaceBears ransomware group has listed Johnson & Johnson Innovative Medicine — the pharmaceutical arm of J&J — on its data leak site, claiming to ...
Largest Cyberattack in SDCCD History Knocks 90,000 Students Offline During Finals
The San Diego Community College District suffered what its chancellor described as the largest cyberattack in its history, forcing the entire campus n...
Cushman & Wakefield Hit by ShinyHunters Vishing Attack — 50GB Salesforce Data Dumped
ShinyHunters compromised global real estate giant Cushman & Wakefield through a vishing attack that convinced an employee to hand over Salesforce cred...
ShinyHunters Breaches Carnival Corporation, Leaks 8.7 Million Cruise Loyalty Records
ShinyHunters claimed the theft of 8.7 million Carnival Corporation records in April 2026, exposing Holland America Mariner Society loyalty members' pe...