ServiceNow Data Breach Exposes Customer Records
ServiceNow has confirmed a security incident after a misconfigured API endpoint exposed enterprise customer data to unauthorized access. The ServiceNow data breach became public on June 9, 2026, when the company began notifying affected customers through a gated support bulletin and direct support cases. ServiceNow had already pushed a patch to hosted instances on June 5. But questions about how

Oracle PeopleSoft Data Breach Hits 100+ Organizations
A major Oracle PeopleSoft data breach is now confirmed, with the ShinyHunters extortion gang claiming responsibility for attacks on more than 100 organizations worldwide. The group says it has compromised 300 separate instances and is actively sending extortion demands to victims. One university has already acknowledged the incident publicly, and stolen data has appeared on ShinyHunters' leak site. What Is

Ajax Data Breach Leads to Dutch Police Arrest
Dutch police arrested a 35-year-old man from the municipality of Buren on the morning of May 27 in connection with the Ajax data breach. Investigators determined he had accessed the football club's computer systems without authorization on multiple occasions earlier this year. Officers searched his home and seized computers, hard drives, and other digital storage devices as part of the

7-Eleven Confirms Data Breach Tied to ShinyHunters Gang
7-Eleven has confirmed a data breach affecting its internal systems, with the attack traced back to April 8, 2026. The 7-Eleven data breach exposed documents tied to the company's franchise application process, and the group behind it wasted no time making demands. ShinyHunters, one of the most active cybercrime groups operating today, claimed responsibility and threatened to publish stolen data

NVIDIA GeForce NOW Data Breach Exposes Armenian User Data
A GeForce NOW data breach has been confirmed by NVIDIA, exposing personal information belonging to users of the cloud gaming service in Armenia. The incident did not touch NVIDIA's own global infrastructure, but it has put a spotlight on the security risks that come with the company's regional partner model. What Happened The breach originated at GFN.am, a third-party company

ADT Data Breach: 5.5 Million Customers Hit After ShinyHunters Extortion Attack
Home security company ADT has confirmed an ADT data breach that exposed the personal information of millions of customers across the United States. The attack started with a phone call. It ended with an 11GB archive of stolen data published on the dark web. What Happened at ADT ADT detected unauthorized access to its systems on April 20, 2026. The

Itron Cyberattack: Utility Firm Discloses Internal IT Breach
A cyberattack has hit one of the most quietly critical companies in the global utility sector. Itron, Inc., a Washington-based technology firm whose smart meters and data platforms underpin electricity, gas, and water systems across 100+ countries, has confirmed that unauthorized attackers accessed its internal IT network in April 2026. The Itron cyberattack came to light through a formal regulatory

Lotus Wiper Malware Targets Venezuela’s Energy Sector
A newly discovered cyberweapon is raising serious concerns about the security of critical infrastructure. Lotus Wiper malware was deployed against energy and utility organizations in Venezuela in late 2025, and unlike most malicious software, it was built for one purpose: permanent destruction. There was no ransom demand, no data theft, and no path to recovery. Once Lotus Wiper malware executes,

Bitcoin Depot Data Breach: $3.6M in Bitcoin Stolen
The Bitcoin Depot data breach has put one of North America's largest crypto ATM operators in the spotlight for all the wrong reasons. Hackers broke into the company's internal systems and walked away with approximately 50.9 Bitcoin — worth around $3.665 million — from corporate settlement accounts. The company disclosed the incident via an SEC filing on April 8, 2026,

Eurail Confirms 308,000 Affected in December Data Breach
A data breach at European rail pass provider Eurail B.V. has compromised the personal information of 308,777 people worldwide. The Eurail data breach began on December 26, 2025, when an unauthorized actor accessed the company's systems and transferred files containing sensitive customer data. The stolen records have since appeared for sale on the dark web, making this one of the