Intel and Breaches

🚨 Tata Consultancy Services (TCS) — Alleged Data Breach A threat actor claims to have breached Tata Consultancy Services (TCS) and leaked company data. Claimed compromised data: • Source code • Private keys • Hardcoded credentials • API keys & access keys • SQL files • Configuration files ⚠️ The breach claim and data authenticity have not been independently verified. #TCS #TataConsultancyServices #DataBreach #CyberSecurity #CyberThreatIntelligence #India #InfoSec

🚨 Argentina’s pension database allegedly put up for sale A new leak claim alleges access to SIPA (Sistema Integrado Previsional Argentino), Argentina’s social security/pension system. The post claims a database containing ~9.5M unique citizens and 38M+ pension records, with data allegedly including: • DNI & full names • CUIL numbers • Dates of birth • Home addresses & postal codes • Email addresses • Bank CBU numbers • Pension/benefit amounts • Retirement application history • Payment dates & locations • Benefit status and deductions A 400K-record sample is reportedly being offered, while the full database is claimed to be around 38M records in SQLite format. ⚠️ The claims shown in the post have not been independently verified. #CyberSecurity #DataBreach #DataLeak #Argentina #CyberThreat #ThreatIntelligence #InfoSec #OSINT #Privacy #DataSecurity #BreachAlert #CyberCrime #Infosec #CyberAwareness #PersonalData #PII #Government #SocialSecurity #DarkWeb #CyberNews

🚨 Versace employee data allegedly leaked A threat actor claims access to the VERSACE V-SIDE retail training platform, allegedly exposing data belonging to 4,693 employees. The post claims the dataset includes: • Employee names, emails & bcrypt password hashes • 526K+ login records with IP addresses • 2,233 plaintext MFA codes • 9,941 registered devices • Gmail/OAuth access • OneSignal device data • AWS/RDS production data • API keys and hardcoded credentials • ~2.65M database rows across 81 tables The post also alleges potential RCE/WebShell access to the underlying infrastructure. ⚠️ These claims have not been independently verified. #CyberSecurity #DataBreach #DataLeak #CyberThreat #InfoSec #ThreatIntel #OSINT #CloudSecurity #AWS #DataSecurity #Privacy #BreachAlert #CyberSecurityNews #Infosec #SecurityAwareness

🚨 France: PapouilleFrance.com allegedly hit in new data leak A threat actor claims to have leaked ~75 GB of data from PapouilleFrance.com, a French pet-care website. The post claims the dataset contains around 240,177 files, with samples reportedly including email records, CRM/customer data and documents. The alleged leak is described as part of a broader BigCloud series of incidents. 📅 Posted: 15 September 2026 📦 Claimed size: 75 GB 📁 Claimed files: 240,177 ⚠️ The claims have not been independently verified. #CyberSecurity #DataBreach #DataLeak #CyberThreat #ThreatIntel #InfoSec #OSINT #Privacy #DataSecurity #CyberSecurityNews #France #FrenchCyberSecurity #CyberCrime #SecurityAwareness #BreachAlert #Infosec #CloudSecurity

🚨 RANSOMWARE THREAT INTEL — Daily Briefing (Sep 14, 2026) 22 new victims claimed in the last 24h across 10 threat actor groups. 🔴 Leading actor: qilin (6 claims, 27.3%) 🌍 Top target: United States (13 victims, 59.1%) 📋 FULL VICTIM LIST: 1. Better Accounting Solutions (Unknown) — anubis 2. Bernath & Rosenberg (US) — genesis 3. Dorfman Abrams Music, P.C (US) — genesis 4. geekybunch.com (US) — unsafe 5. Foremost Mfg (US) — qilin 6. Winston Contracting, LLC (US) — qilin 7. RoadEx America (US) — qilin 8. Minmer Global (Unknown) — qilin 9. Dublin City Schools GA (US) — Eclipse 10. Rosello et Fils (FR) — Eclipse 11. tpi.tw (TW) — lockbit5 12. comune.robeccosulnaviglio.mi… (IT) — lockbit5 13. httoy.fi (FI) — lockbit5 14. Metropolitan Community Health Services (US) — insomnia 15. Massey, Stotser & Nichols (US) — insomnia 16. glasfloss.com (US) — chaos 17. steelhausinc.com (US) — chaos 18. Vitar Group (AR) — qilin 19. Mestechkin Law Group P.C. (US) — Booba Project 20. Atlas Ocean Voyages (US) — Booba Project 21. Ne***ox (RU) — AuditTeam 22. Alicotrans (BR) — qilin ⚠️ Data note: Bernath & Rosenberg and Dorfman Abrams Music, P.C. (both genesis) show identical exposure figures (394 users, 188 third parties) — likely a template reuse or data error, treating both as unverified pending clarification. Atlas Ocean Voyages (cruise line) was also claimed today (Booba Project, 37GB) — unverified. #CyberSecurity #Ransomware #ThreatIntel #CTI

🚨 France: Sushi&Cie database allegedly leaked A threat actor claims to have obtained a database from Sushi&Cie, a Japanese restaurant in Houdan, France. The alleged dataset contains 7,486 lines covering ~6,000 users, including names, email addresses, customer status, dates, telephone numbers and other account details. 📅 Claimed breach date: 13 September 2026 Unverified claim — monitoring for further confirmation. #CyberSecurity #DataBreach #DataLeak #BreachAlert #CyberThreat #ThreatIntel #InfoSec #OSINT #DataSecurity #Privacy #CyberSecurityNews #France #FrenchCyberSecurity #Infosec #CyberCrime #SecurityAwareness

🚨 Rohto data breach claim A threat actor claims to have obtained ~4 TB of data from Rohto, allegedly spanning OneDrive, SharePoint, Salesforce and corporate voice recordings. The post claims the data includes: • ~3.95M Salesforce customer records • ~850K customer-call recordings (~3.5 TB) • Corporate documents and SharePoint files • HR, R&D, IT and marketing data • Internal database material and Outlook messages • ~87 GB related to joint university research • Dealer-level sales history The alleged dataset reportedly covers data from 2025–2026, with the poster providing a file as purported proof. This remains an unverified claim based on the threat-forum post. #CyberSecurity #DataBreach #DataLeak #ThreatIntel #InfoSec #CyberThreat #CyberSecurityNews #BreachAlert #OSINT #DataSecurity #Privacy #Japan #Rohto #CyberCrime

🚨 Data breach claim: FFGYM.BE A cybercrime forum post claims that data from FFGYM.BE, the Fédération francophone de Gymnastique, has been obtained and is being offered for sale. The post claims the dataset contains: • 209,818 subscriber records • 764 staff-user login records, including password hashes • 5,858 accident records • 26,058 invoices • 10,335 affiliation records • Names, email addresses, addresses and other account/administrative information A sample of the alleged database was also posted on the forum. Status: Unverified breach claim — independently confirmed details are not available from the screenshot alone. #CyberSecurity #DataBreach #DataLeak #BreachAlert #InfoSec #ThreatIntel #CyberSecurityNews #OSINT #DataSecurity #Privacy #CyberThreat #CyberCrime #DarkWeb #Infosec #Belgium #SecurityAwareness

🚨 MyNewTerm database allegedly leaked A post on a cybercrime forum claims that MyNewTerm, an online job board and applicant-tracking platform, suffered a data breach in August 2026, allegedly exposing data belonging to 142K unique users. The claimed dataset includes: • Email addresses • Job/application details • Appointment IDs • Job reference numbers • Vacancy information • User/account identifiers • Status and timestamp fields The post also includes sample records purportedly taken from the database. 142K users reportedly affected. #CyberSecurity #DataBreach #DataLeak #BreachAlert #InfoSec #CyberSecurityNews #ThreatIntel #OSINT #Privacy #DataSecurity #CyberThreat #DarkWeb #Infosec #AppSec #CyberCrime

🚨 RANSOMWARE THREAT INTEL — Daily Briefing (Sep 13, 2026) 11 new victims claimed in the last 24h across 8 threat actor groups — a very quiet day. 🔴 Leading actor: AuditTeam (3 claims, 27.3%) 🌍 Top target: India (2 victims, 18.2%) 📋 FULL VICTIM LIST: 1. Cerámicas Kantu (Unknown) — Panzer 2. Gilco Scaffolding (GB) — qilin 3. Navitrans (Unknown) — emperador 4. kashkha.com (Unknown) — krybit 5. CARIDRO VAL DE LOIRE (FR) — qilin 6. Paid Victim F9CF4B639CAC1B18 (RU) — AuditTeam 7. Paid Victim FDC699DE3A112669 (DE) — AuditTeam 8. vi***in (IN) — AuditTeam 9. i2i-systems (TR) — Barracuda 10. Kimberly-Clark (US) — shinyhunters 11. INCOR Group (IN) — Doommageddon ⭐ Kimberly-Clark (US) reported the largest confirmed exposure of the day — 158 users, 5 third parties — via shinyhunters. Notably the most recognizable brand claimed in weeks; scope appears limited to that specific dataset, not company-wide. Full victim list — most entries today are small businesses with no disclosed detail. #CyberSecurity #Ransomware #ThreatIntel #CTI

🚨 RANSOMWARE THREAT INTEL — Daily Briefing (Sep 12, 2026) 24 new victims claimed in the last 24h across 9 threat actor groups. 🔴 Leading actor: krybit (12 claims, 50.0%) — exactly half of today's claims 🌍 Top target: United States (5 victims, 20.8%) 📋 FULL VICTIM LIST: 1. Strad Solutions (GB) — Vexy Ransomware 2. Nexbex Solutions Private Limited (Unknown) — emperador 3. Axdia International (Unknown) — rhysida 4. watchops.com (US) — unsafe 5. TE***PB (RU) — AuditTeam 6. tiflispalace.ge (GE) — krybit 7. tender.mx (MX) — krybit 8. capricornlogistics.com (ZA) — krybit 9. ibnsinatrust.com (AE) — krybit 10. lasultanahotels.com (MA) — krybit 11. eracm.fr (FR) — krybit 12. pss.ht (HT) — krybit 13. metalware.ca (CA) — krybit 14. intherpro.com (Unknown) — krybit 15. meridian16.hr (HR) — krybit 16. eac-airports.com (KE) — krybit 17. swadeshicipl.com (IN) — krybit 18. Sutton Public Schools (US) — global 19. 瑞祥机电 (Ruixiang Jidian) (CN) — medusalocker 20. Abourametals (AE) — medusalocker 21. Frisby Roofing (Frisby Construction LLC) (US) — medusalocker 22. Praveg Caves Jawai (IN) — medusalocker 23. TOWN OF SUTTON | MASSACHUSETTS (US) — global 24. Shelco Filters (US) — securotrop ⚠️ Note: Sutton Public Schools and Town of Sutton, MA appear to be the same municipality hit together, not two independent victims. Strad Solutions (UK) reported the largest confirmed exposure of the day at 82 records via Vexy Ransomware. #CyberSecurity #Ransomware #ThreatIntel #CTI

🚨 Alleged source-code leak involving an Indian pharmacy platform A cybercrime forum post claims that the production source code of Zee Labs Pharmacy (zeelabpharmacy.com) was obtained and made available for download. The post claims the exposed repository contains a substantial Laravel/PHP application codebase, with files covering areas such as authentication, users, doctors, orders, products, employees, payments and other application functionality. The sample also appears to show configuration-related files such as .env.example. ⚠️ If the claim is legitimate, exposure of production application source code could assist attackers in identifying authentication weaknesses, exposed secrets, vulnerable dependencies, API endpoints and other security issues. The screenshot alone does not establish that credentials, production secrets or customer data were exposed. Status: Unverified third-party claim #CyberSecurity #DataBreach #SourceCodeLeak #CyberSecurityNews #InfoSec #ThreatIntel #OSINT #India #IndianCyberSecurity #Pharmacy #HealthcareSecurity #AppSec #ApplicationSecurity #DataSecurity #CyberThreat #SecurityResearch #Laravel #PHP #BreachAlert

🚨 Alleged data leak: Boulanger (France) A post on a cybercrime forum claims a database linked to Boulanger.com has been leaked, allegedly containing 132,230 records. The exposed sample appears to include customer and purchase-related information such as order/product details, customer names, telephone numbers, email addresses and postal addresses. 📌 Claimed records: 132,230 📌 Country: France 🇫🇷 📌 Data: Customer + purchase information 📌 Status: Allegation — not independently verified If genuine, the combination of customer identity, contact and transaction data could create significant phishing, fraud and targeted social-engineering risks. #CyberSecurity #DataBreach #DataLeak #Boulanger #France #InfoSec #CyberSecurityNews #Privacy #DataSecurity #ThreatIntel #OSINT #BreachAlert #CyberThreat #Infosec #GDPR #PersonalData #Phishing #CyberNews

🚨 RANSOMWARE THREAT INTEL — Daily Briefing (Sep 11, 2026) 12 new victims claimed in the last 24h across 8 threat actor groups. 🔴 Leading actor: nightspire (4 claims, 33.3%) 🌍 Top target: United States (4 victims, 33.3%) 📋 FULL VICTIM LIST: 1. compunnel.com (US) — safepay 2. Imperial Healthcare Solutions (US) — qilin 3. DiamondLease (AE) — nightspire 4. Perimetral Oriental de Bogotá S.A.S. (CO) — nightspire 5. Ozel & Ozel Laws Office (TR) — nightspire 6. Tuboaços da Amazônia Ltda. (BR) — nightspire 7. Port of Tanjung Pelepas (MY) — direwolf 8. Foss Inc. (US) — pear 9. Dustin Group (SE) — fulcrumsec 10. Konica Minolta Bulgaria (BG) — Panzer 11. Medical Department Store (US) — dragonforce 12. Agencia Estatal de Meteorología (ES) — Panzer Port of Tanjung Pelepas (Malaysia) reported the largest confirmed exposure of the day at 366 records via direwolf. #CyberSecurity #Ransomware #ThreatIntel #CTI

🚨 Alleged Claro Brazil data exposure A threat actor claims to have accessed Claro Brazil through an exposed API and extracted 46M+ telephone numbers allegedly linked to Brazilian CPF records. The post claims: • 46,033,380 phone numbers • Around 90.8M records allegedly existed • Historical data spanning 2004–2026 • A 6.1 GB database • A 2M-record sample offered as proof The claims and authenticity of the dataset have not been independently verified. #CyberSecurity #DataBreach #DataLeak #Brazil #Claro #Telecom #Privacy #PersonalData #API #InfoSec #CyberThreat #ThreatIntel #OSINT #BreachAlert #DataSecurity #CyberNews #Infosec #CPF #BrazilCyberSecurity

🚨 482K UK accounts reportedly exposed A database allegedly linked to SearchForSites.co.uk is being advertised with 482K SHA-1 password hashes. The poster claims around 150K passwords have already been cracked. The leak reportedly includes usernames, email addresses, account details and password hashes. The post also claims the service has 100K+ Google Play downloads and an iOS app. ⚠️ The breach claims and dataset authenticity have not been independently verified. #CyberSecurity #DataBreach #DataLeak #UK #InfoSec #CyberNews #ThreatIntel #OSINT #Privacy #DataSecurity #PasswordSecurity #CredentialLeak #Infosec #CyberThreat #BreachAlert

🚨 170 GB Data Leak Claimed — US Spirit Cultural Exchange A threat actor claims to have breached US Spirit Cultural Exchange, a U.S.-based organization involved in international cultural exchange and J-1 visa programs. The claimed dataset reportedly contains 136,817 files / 170 GB, including passport files, participation agreements, employment and teaching documents, foreign credential evaluations, face images, identity documents and criminal background checks. The post lists a September 20, 2026 deadline and demands a $100,000 ransom. ⚠️ The claim and authenticity of the data have not been independently verified. #CyberSecurity #DataBreach #DataLeak #US #Privacy #DataSecurity #CyberAttack #InfoSec #OSINT #ThreatIntelligence #CyberNews #BreachAlert #IdentityTheft #PersonalData #Ransomware #CyberThreats #SecurityNews

🚨 Spain Energy Data Leak — 40M+ CUPS A threat actor claims to have leaked a database containing 40M+ Spanish electricity supply points (CUPS) linked to SIPS (Supply Point Information System). The claimed dataset reportedly includes full names, DNI/NIE, dates of birth, customer/holder addresses, CUPS, supply addresses, postal codes, distributor/supplier information, electricity tariffs, contracted power, meter details, consumption profiles and billing frequency. ⚠️ The breach claim and dataset authenticity have not been independently verified. #CyberSecurity #DataBreach #DataLeak #Spain #SpainCyberSecurity #EnergySecurity #CriticalInfrastructure #OSINT #ThreatIntel #InfoSec #Privacy #DataSecurity #CyberAttack #BreachAlert #CyberNews

🚨 India Data Leak | Vedicline A threat actor claims to have leaked data allegedly linked to Vedicline[.]com, with 100K records exposed. The sample reportedly includes names, addresses, cities, states, PIN codes, email addresses, phone numbers and company information. ⚠️ The claim has not been independently verified. #CyberSecurity #DataBreach #DataLeak #India #InfoSec #CyberNews #ThreatIntel #OSINT #DataSecurity #Privacy #BreachAlert #CyberAttack #InfosecIndia

🚨 India: dftschools.in Data Leak A threat actor claims to have breached dftschools.in, alleging access to: • 1.5 GB SQL database • 13 GB of documents • 100K+ CSV records • Student and registration details • Names, DOB, parent details & addresses • Aadhaar & PAN information • Mobile numbers, emails and school details • Account/payment-related information The exposed data could pose significant identity theft, fraud and privacy risks if the claims are confirmed. ⚠️ The breach claim has not been independently verified. #CyberSecurity #DataBreach #DataLeak #India #Infosec #CyberNews #ThreatIntel #OSINT #DataSecurity #Privacy #BreachAlert #CyberAttack #Aadhaar #PAN #IndianCyberSecurity