Account required
Sign in to view threat intelligence
CTI data is restricted to registered users. Create a free account to browse the dashboard, then upgrade to a paid plan to unlock event details and IOCs.
Cyber Threat Intelligence
Daily snapshot
Daily brief 25 May 2026
Databasehooligan Breach Spree Meets Ghost CMS Mass Exploit
Databasehooligan claimed 27 breaches across Europe and the Americas as a Ghost CMS flaw (CVE-2026-26980) was exploited to hijack 700+ sites.
Events
0
In current view
Critical exposure
0
Last 24 hours
0
vs previous 24h
Distinct actors
0
In current view
By attack category · 9
Data Exposure
0
Ransomware
0
Access Brokerage
0
DDoS
0
Web Defacement
0
Malware Ops
0
Vulnerability
0
Threat Alert
0
Cyber Operation
0
Top victim countries
No country data in this view.
Subscriber-only
CTI brief — 2026-05-25
The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.
Events
showing 0
Category
Title
Actor
Country
Date
- Data BreachAlleged data sale of Mobile Communications of IranEbonCherubIran25 May
- Data LeakAlleged Data Leak of USA Vehicle InformationLazarusUnited States25 May
- Data LeakAlleged sale of US B2B databaseLeadsMagnetUnited States25 May
- Data BreachAlleged Data Breach of Telkom IndonesiaprivilegeIndonesia25 May
- Web DefacementDigitalStormSec targets the website of E-Journal Universitas Mathla'ul AnwarDigitalStormSecIndonesia25 May
- Data LeakAlleged sale of Denmark Gambling DatabaseVyntraDenmark25 May
- Data BreachAlleged data leak of Saudi Ministry of InteriorFAD TeamSaudi Arabia25 May
- Data BreachAlleged data breach of CoinbaseThe BlackH4t MD-GhostUnited States25 May
- Data BreachAlleged data breach of Corbina telecom RussiaThe BlackH4t MD-GhostRussia25 May
- Web DefacementElite Squad targets the website of NoblogsElite Squad—25 May
- Access BrokerageAlleged unauthorized access to surveillance system of a solar power station in ItalyNoName057(16)Italy25 May
- Data LeakAlleged sale of 486 CC from USAxiniouerUnited States25 May
- DDoSZxS3C targets the website of The Pattaya NewsZxS3CThailand25 May
- Data BreachB1ckstash 4.7M Credit CardshenrymartinDark Web25 May
- Web DefacementHax.or targets the website of AutoLeadFindrHax.orUnited States25 May
- DDoSZAHER INFINITY targets the website of TCAS StarterZAHER INFINITYThailand25 May
- Web DefacementHax.or targets the website of LGM (La Gran Montaña)Hax.orGuatemala25 May
- Data LeakAlleged Data Leak of US Employment and Logistics DatabaseAldUnited States25 May
- Data LeakAlleged Data Sale of eGadget Pakistan Government Agency DatabaseCyb3R_Shubh4MPakistan25 May
- RansomwareBusiness Record falls victim to Dragonforce ransomwareDragonForceUnited States25 May
- Data LeakAlleged Data Leak of 69 Israeli Navy Officers IdentityHandala HackIsrael25 May
- DDoSFYNTRIX targets the website of The ThaigerFYNTRIXThailand25 May
- RansomwareVeg-Fresh Farms falls victim to Dragonforce ransomwareDragonForceUnited States25 May
- RansomwareJAKN Network Support & Services LLC falls victim to Dragonforce ransomwareDragonForceUnited States25 May
- RansomwareRolser falls victim to Dragonforce ransomwareDragonForceSpain25 May
- RansomwareEkblad, Pardee & Bewell, Inc. falls victim to Dragonforce ransomwareDragonForceUnited States25 May
- RansomwareArsenal Scaffold Inc. falls victim to Dragonforce ransomwareDragonForceUnited States25 May
- Data BreachMCI.ir data mymci | ewano | shop mci | Developer_assetEbonCherubIran25 May
- Data Breach+100K ecuatorian and medical tests| SolidarioAlameda_slimEcuador25 May
- Data Breachisl.gob.clSystem_RippersChile25 May
- Data BreachhospitalhuaycanSystem_RippersPeru25 May
- Web DefacementHax.or targets the website of spicarenovaHax.or—25 May
- RansomwareGoldklang Group CPAs, PC falls victim to Dragonforce ransomwareDragonForceUnited States25 May
- RansomwareSaver N.V. falls victim to Dragonforce ransomwareDragonForceNetherlands25 May
- RansomwareXchange Technology GmbH falls victim to Dragonforce ransomwareDragonForceGermany25 May
- RansomwareAlliance Adjustment Group, Inc. falls victim to Dragonforce ransomwareDragonForceUnited States25 May
- RansomwareEnns & Company Professional Corporation falls victim to Dragonforce ransomwareDragonForceCanada25 May
- DDoSNoName targets the website of Sumy Computer NetworksNoName057(16)Ukraine25 May
- RansomwareSanli Pastore & Hill, Inc. falls victim to Dragonforce ransomwareDragonForceUnited States25 May
- Web DefacementBABAYO EROR SYSTEM targets the website of Pak SaaibaanBABAYO EROR SYSTEMPakistan25 May
- Web DefacementBABAYO EROR SYSTEM targets the website of DevcubixBABAYO EROR SYSTEMPakistan25 May
- Web DefacementBABAYO EROR SYSTEM targets the website of Söderort Bygg & Entreprenad ABBABAYO EROR SYSTEMSweden25 May
- Web DefacementHax.or targets the website of Estudio ÁgilHax.orArgentina25 May
- Web DefacementBABAYO EROR SYSTEM targets the website of AI Expert ServicesBABAYO EROR SYSTEM—25 May
- Access BrokerageAlleged unauthorized access to BACINO DI LAMINAZIONENoName057(16)Italy25 May
- Web DefacementHax.or targets the website of Nida El AdabiHax.orIndonesia25 May
- Web DefacementHax.or targets the website of Spoties Pet ShopHax.orEl Salvador25 May
- Web DefacementHax.or targets the website of XocolatísimoHax.orEl Salvador25 May
- DDoSZxS3C targets the website of Digital IDZxS3CThailand25 May
- Web DefacementHax.or targets the website of Yayasan Birrul WaalidaynHax.orIndonesia25 May
- Web DefacementHax.or targets the website of EDJ TCSCHax.orUnited States25 May
- RansomwareVan Tuijl Haaften falls victim to LOCKBIT 5.0 ransomwareLOCKBIT 5.0Netherlands25 May
- RansomwareColumbia Orthopedic Group falls victim to LOCKBIT 5.0 ransomwareLOCKBIT 5.0United States25 May
- DDoSNoName targets the website of Città Metropolitana di VeneziaNoName057(16)Italy25 May
- DDoSNoName targets the website of Municipality of LonigoNoName057(16)Italy25 May
- Data BreachAlleged Leak of BloxyAI DatabasewtrGlobal25 May
- DDoSNoName targets the website of Provincia di VicenzaNoName057(16)Italy25 May
- Access BrokerageAlleged Sale of Unauthorized Access to Unidentified Shop in ItalyGEOLORDItaly25 May
- Access BrokerageAlleged sale of unauthorized access to Prestashop in Spained1n1caSpain25 May
- Access BrokerageAlleged sale of unauthorized access to Prestashop in Spained1n1caSpain25 May
- Access BrokerageAlleged sale of unauthorized access to Prestashop in Mexicoed1n1caMexico25 May
- Access BrokerageAlleged sale of unauthorized access to Prestashop in USAed1n1caUnited States25 May
- RansomwareFunkeScheid falls victim to Bavacai RansomwareBavacaiGermany25 May
- DDoSNoName targets the website of Comune di ArzignanoNoName057(16)Italy25 May
- RansomwareT-Online falls victim to Bavacai RansomwareBavacaiGermany25 May
- DDoSNoName targets the website of Regione del VenetoNoName057(16)Italy25 May
- Data BreachRadio Fides CR – ComercioP + DescriptionST4RSHINYCosta Rica25 May
- RansomwareDado Lighting falls victim to Bavacai RansomwareBavacaiUnited States25 May
- Data BreachUNIVERSIDAD DE LA SIERRA HIDALGUENSEMagoSpeakMexico25 May
- DDoSNoName targets the website of Provincia di VeronaNoName057(16)Italy25 May
- DDoSNoName targets the website of Provincia di PadovaNoName057(16)Italy25 May
- DDoSNoName targets the website of Comune di Cavallino-TreportiNoName057(16)Italy25 May
- DDoSNoName targets the website of Provincia di TrevisoNoName057(16)Italy25 May
- DDoSNoName targets the website of City of AlbignasegoNoName057(16)Italy25 May
- Data LeakAlleged Leak of U.S. Aviation Database RecordsS10United States25 May
- Data BreachAlleged data breach of International Centre for Integrated Mountain DevelopmentDatabasehooliganIndia25 May
- DDoSGoodL7 PROOF targets the website of What’s New IndonesiaGoodL7 PROOFIndonesia25 May
- Data Breachenlacevisual.clSystem_RippersChile25 May
- Data BreachAlleged data breach of Dzine AIyeblanUnited States25 May
- Data BreachAlleged data breach of Laboratorio Clínico SolidarioAlameda_slimEcuador25 May
- Data BreachAlleged data sale of Radio FidesST4RSHINYCosta Rica25 May
- DDoSTHE GARUDA EYE targets the website of Kuwait Official State PortalTHE GARUDA EYEKuwait25 May
- Data BreachRadio Fides CR – ComercioP + DescriptionST4RSHINYCosta Rica25 May
- Web Defacementazraelzer0d4y targets the website of Great Deals Services DMCCazraelzer0d4yUnited Arab Emirates25 May
- Data BreachAlleged data breach of Buenos Aires City PoliceSkull1172Argentina25 May
- Data LeakAlleged data leak of MarshKARAWANG ERROR SYSTEMUnited States25 May
- Data BreachAlleged breach of the Technological University of the Sierra HidalguenseMagoSpeakMexico25 May
- DDoSKeymous Plus targets the website of MahakimKeymous PlusMorocco25 May
- Web DefacementDr.Nexusec-Cyber targets the website of Koh Kaew Subdistrict Municipality ThailandDr.Nexusec-CyberThailand25 May
- DDoSKeymous Plus Targets the Website of Moroccan Agency for Energy Efficiency (AMEE)Keymous PlusMorocco25 May
- Access BrokerageAlleged access to Thailand Educational Development and Evaluation TestsZxS3CThailand25 May
- DDoSKeymous Plus Targets the Website of Office des Changes MoroccaKeymous PlusMorocco25 May
- DDoSKeymous Plus Targets the Website of Bank Of AfricaKeymous PlusMorocco25 May
- DDoSKeymous Plus Targets the Website of CREDIT DU MAROCKeymous PlusMorocco25 May
- DDoSKeymous Plus Targets the Website of Moroccan Office of Industrial and Commercial Property (OMPIC)Keymous PlusMorocco25 May
- DDoSKeymous Plus targets the website of Moroccan Office of Industrial and Commercial PropertyKeymous PlusMorocco25 May
- DDoSKeymous Plus targets the website of Ministry of Foreign Affairs, African Cooperation and Moroccan ExpatriatesKeymous PlusMorocco25 May
- DDoSKeymous Plus Targets the Website of AL BARID BANKKeymous PlusMorocco25 May
- DDoSKeymous Plus Targets the Website of GBP Private company.Keymous PlusMorocco25 May
- DDoSKeymous Plus targets the website of Cap ConnectKeymous PlusMorocco25 May
- DDoSKeymous Plus targets the website of HostowebKeymous PlusMorocco25 May
- DDoSKeymous Plus targets the website of ADK MediaKeymous PlusMorocco25 May
- DDoSKeymous Plus targets the website of HeberDomaineKeymous PlusMorocco25 May
- DDoSZxS3C targets the website of Department of Skill Development ThailandZxS3CThailand25 May
- Data BreachAlleged data breach of AgentRussia~ C10F./x404Russia25 May
- Data LeakAlleged data leak of Cellular Telecommunications Company~ C10F./x404Indonesia25 May
- Data BreachARGENTINA POLICIA DE LA CIUDAD BUENOS AIRESSkull1172Argentina25 May
- Data Breachdzine.ai all usersyeblanDark Web25 May
- Data BreachCorreos Seguros La UnionV0lt4r0xEcuador25 May
- DDoSKeymous Plus Targets the Website of INFRAWAY-MAROC Groupe ONCFKeymous PlusMorocco25 May
- Access BrokerageAlleged Sale of Mail Server Access to Seguros La Union in EcuadorV0lt4r0xEcuador25 May
- Data BreachAlleged data breach of Sri Lanka ArmyShenChuyi88Sri Lanka25 May
- DDoSKeymous Plus Targets the Website of Tanger MEDKeymous PlusMorocco25 May
- Web DefacementEXADOS Targets the Website of Resume.in.thEXADOSThailand25 May
- Access BrokerageAlleged access to CCTV of Chemist Warehouse GroupZ-PENTEST ALLIANCEAustralia25 May
- RansomwareMeirc Training & Consulting falls victim to INC Ransom RansomwareINC RANSOMUnited Arab Emirates25 May
- Web DefacementBABAYO EROR SYSTEM Targets the Website of Studio EADBABAYO EROR SYSTEMBrazil25 May
- Data BreachAlleged data leak of University of Osnabrück ORSEEDatabasehooliganGermany25 May
- Data BreachAlleged data breach of GRUmosadRussia25 May
- Data BreachAlleged data leak of Autoteile24.deDatabasehooliganGermany25 May
- DDoSKeymous Plus targets the website of Ministry of Health and Social ProtectionKeymous PlusMorocco25 May
- DDoSKeymous Plus targets the website of Moroccan Public Employment PortalKeymous PlusMorocco25 May
- DDoSKeymous Plus targets the website of National Portal of MoroccoKeymous PlusMorocco25 May
- DDoSKeymous Plus targets the website of Administration of Customs and Indirect TaxesKeymous PlusMorocco25 May
- Access BrokerageAlleged sale of shell access to JioS-RootIndia25 May
- DDoSTRoLL Team targets the website of PresslineTRoLL TeamIran25 May
- DDoSTRoLL Team targets the website of SkyroomTRoLL TeamIran25 May
- Data LeakAlleged Data Leak of Internal Documents Related to Missile Facility in IranTRoLL TeamIran25 May
- DDoSDieNet targets the website of Walt Disney WorldDieNetUnited States25 May
- DDoSUniT 313 claims to targets the website of TalabatUniT 313Kuwait25 May
- DDoSDieNet targets the website of Disney D23DieNetUnited States25 May
- Data BreachAlleged data sale of JOGPONTOKDatabasehooliganHungary25 May
- Data BreachAlleged data sale of VateraDatabasehooliganHungary25 May
- RansomwareAdensa Teknoloji falls victim to NOVA ransomwareNovaTurkey25 May
- Data BreachAlleged data breach of One HungaryDatabasehooliganHungary25 May
- DDoSDieNet targets the website of Disney PlusDieNetUnited States25 May
- Data BreachAlleged data breach firmy.czDatabasehooliganCzech Republic25 May
- DDoSDieNet targets the website of DisneyDieNetUnited States25 May
- Data BreachAlleged data sale of Jimm’s PC-Store OyDatabasehooliganFinland25 May
- Data BreachAlleged data sale of University of CologneDatabasehooliganGermany25 May
- Data BreachAlleged data sale of KotsovolosDatabasehooliganGreece25 May
- Data BreachAlleged data breach of Universität zu Köln (University of Cologne)DatabasehooliganGermany25 May
- Data BreachAlleged data breach of BBQ.grDatabasehooliganGreece25 May
- Data BreachAlleged sale of WUZZUF databaseDatabasehooliganEgypt25 May
- RansomwareSecretariat of Control and Transparency falls victim to NOVA ransomwareNovaBrazil25 May
- Data BreachAlleged data breach of Le-Sportif.comDatabasehooliganFrance25 May
- Data LeakAlleged data leak of IsraelDarkObryThonIsrael25 May
- Data LeakAlleged data sale of government databaseTEAM R99 HACKERS—25 May
- Data BreachAlleged data sale of PODADatabasehooliganCzech Republic25 May
- Access BrokerageAlleged sale of unauthirozed Corp Access to an unidentified orginization in USAyurikinoUnited States25 May
- Data BreachAlleged data leak of Central Intelligence Agency~ C10F./x404United States25 May
- Data BreachAlleged data breach of Team RRQ~ C10F./x404Indonesia25 May
- Data LeakAlleged data leak of Facebook users database~ C10F./x404—25 May
- Data BreachAlleged data sale of Broil Mate BBQDatabasehooliganCanada25 May
- Data BreachAlleged data sale of Broil King CanadaDatabasehooliganCanada25 May
- Data BreachAlleged data sale of Grainger CanadaDatabasehooliganCanada25 May
- Data BreachAlleged data sale of Imot.bgDatabasehooliganBulgaria25 May
- Access BrokerageAlleged leak of login credentials to Polres GroboganJAX7Thailand25 May
- Access BrokerageAlleged Unauthorized Access to an unidentified organisationDr.Nexusec-Cyber—25 May
- Data BreachAlleged data sale of PichauDatabasehooliganBrazil25 May
- Data BreachAlleged data sale of VetsmartDatabasehooliganBrazil25 May
- Data BreachAlleged data sale of PetBRDatabasehooliganBrazil25 May
- Data BreachAlleged data sale of MySocialSecurity.beDatabasehooliganBelgium25 May
- Data BreachAlleged data sale of Bangladesh Election CommissionDatabasehooliganBangladesh25 May
- DDoSPhiserXman targets the website of Spine ActionPhiserXmanIndia25 May
No events match your filters.
Page 1 of 1
Active threat actors
click any actor to filter the list aboveNo active actors in this view.