ATF Isolated the Breached System. It Still Contained Investigation Targets.
ATF says a standalone system breach did not reach its enterprise network or eForms, but the isolated environment contained information about investigation targets.
Incident Response
Manchester Airports Said No to the Ransom. The Attackers Answered With the Passenger Data.
Manchester Airports Group kept operations running, but reporting says the attackers published stolen passenger data after MAG refused a ransom demand.
Boston Scientific Could Not Process or Ship Orders After a Global Cyberattack.
A cybersecurity incident disrupted Boston Scientific's global operations and business applications used to process and ship orders. The company has not provided a restoration timetable.
Nutex Knows Data Left the Network. It Still Cannot Say Whose Data Was Taken.
Nutex Health has confirmed that an unauthorised party accessed its network and exfiltrated information from company servers. The healthcare operator knows that data left the environment. It does not yet know, or has not publicly disclosed, whether the stolen material…
The Keys Were Safe. BounceBit Still Lost Control of the Ledger.
BounceBit is retiring its Layer 1 after a protocol authorization flaw moved 286.5 million BB without stealing keys or forging signatures. The failure sat inside the ledger's authority model.
The Doors Stayed Open. The Organisation Behind Them Was Running on Emergency IT.
Brandenburg’s seven memorial sites remained open after ransomware disabled central IT. The real resilience story was the emergency operation behind the public doors.
The Seven-Day Timelock Worked. Nobody Used It.
A Term Finance governance proposal sat on-chain for six days without a veto, then removed its own timelock and drained an estimated $8.5 million from the protocol's vaults.
The Outage Lasted Eight Hours. The Patient Exposure Reached 3.75 Million.
CareCloud first described an eight-hour disruption affecting one of six electronic health record environments. The same incident is now listed as affecting 3,756,469 people.
They Did Not Steal Passwords. They Stole the Map of Who to Attack Next.
Alleged Entra directory theft exposed organisational maps rather than passwords. Treat bulk directory reads as a high-impact identity event.
The Private Keys Were Safe. The Address of the Person Holding Them Was Not.
SafePal says private keys and funds were not exposed, but order records linked wallet ownership to names, contact details and home addresses.