Account required
Sign in to view threat intelligence
CTI data is restricted to registered users. Create a free account to browse the dashboard, then upgrade to a paid plan to unlock event details and IOCs.
Cyber Threat Intelligence
Daily snapshot
Daily brief 26 May 2026
Data Breach Wave Hits Government, Education as DDoS Surges
A 178-incident day: NoName057(16) drives DDoS while alleged breaches hit NASA, Santander, Ukraine's defense ministry and Indonesian government bodies.
Events
0
In current view
Critical exposure
0
Last 24 hours
0
vs previous 24h
Distinct actors
0
In current view
By attack category · 9
Data Exposure
0
Ransomware
0
Access Brokerage
0
DDoS
0
Web Defacement
0
Malware Ops
0
Vulnerability
0
Threat Alert
0
Cyber Operation
0
Top victim countries
No country data in this view.
Subscriber-only
CTI brief — 2026-05-26
The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.
Events
showing 0
Category
Title
Actor
Country
Date
- Data BreachAlleged data breach of Venezuela State 51Proxy99Venezuela26 May
- Data BreachAlleged data breach of MobifriendsVyntraSpain26 May
- Access BrokerageAlleged leak of login credentials to Rajamangala University of Technology ThanyaburiZxS3CThailand26 May
- RansomwareMayelia Automotive falls victim to The Gentlemen ransomwareThe GentlemenIvory Coast26 May
- DDoSKeymous Plus targets the website of DAMANE CASHKeymous PlusMorocco26 May
- Data BreachAlleged data breach of Ministry of Education, Culture, Research, and TechnologyBARZXPLOITIndonesia26 May
- Data BreachAlleged data breach of ManoManosxcfoxFrance26 May
- Data LeakAlleged data leak of London Airport TransfersZ-BL4CX-H4TUnited Kingdom26 May
- Data LeakAlleged data leak of U.S. Diplomatic Cable DatabasemosadUnited States26 May
- DDoSKeymous Plus targets the website of NAPSKeymous PlusMorocco26 May
- Web DefacementZ-BL4CX-H4T targets the website of Legal Way VisaZ-BL4CX-H4T—26 May
- Data BreachAlleged Data Breach of Sardar Patel College404Crew Cyber TeamIndia26 May
- Web DefacementZ-BL4CX-H4T targets the website of Legal Way VisaZ-BL4CX-H4TPakistan26 May
- Web DefacementCYBER DARK ECHO targets the website of Eastern Railway Higher Secondary SchoolCYBER DARK ECHOIndia26 May
- Web DefacementZ-BL4CX-H4T targets the website of airportstransferservice.comZ-BL4CX-H4TUnited States26 May
- Access BrokerageAlleged unauthorized access to FUNES SCADA SystemAnonymous Sana'a—26 May
- DDoSBD Anonymous targets the website of SkylockBD AnonymousIsrael26 May
- Access BrokerageAlleged Unauthorized Access of SKY PRIMEwatariBulgaria26 May
- RansomwareTaipei Municipal Chengde Elementary School falls victim to KRYBIT ransomwareKRYBITTaiwan26 May
- DDoSArmenian code targets the website of ALOVArmenian codeAzerbaijan26 May
- DDoSArmenian code targets the website of CTC HoldingArmenian codeAzerbaijan26 May
- Web DefacementElite Squad targets the website of Đặc Sản 365Elite Squad—26 May
- RansomwareAndalusia Country Club falls victim to Akira ransomwareakiraUnited States26 May
- RansomwareToscana Country Club falls victim to Akira ransomwareakiraUnited States26 May
- RansomwareSunrise Company falls victim to Akira ransomwareakiraUnited States26 May
- Access BrokerageAlleged Unauthorized Access to Unidentified SINEC NMS SystemAnonymous Sana'a—26 May
- Data LeakAlleged data leak of Ministry of Defense of UkraineBereginiUkraine26 May
- Web DefacementElite Squad targets the website of Specialties 365Elite SquadVietnam26 May
- Access BrokerageAlleged sale of unauthorized access to Presta shop in Multiple Countriescosmodrome—26 May
- Data BreachAlleged data breach of Ministry of Health of IndonesiaGHOSTNET-XIndonesia26 May
- DDoSKeymous Plus targets the website of ChikayaKeymous PlusMorocco26 May
- DDoSKeymous Plus targets the website of Agence de Développement du Digital (ADD)Keymous PlusMorocco26 May
- Data LeakAlleged data leak of U.S. Department of StatemosadUnited States26 May
- RansomwareHamister Group, LLC falls victim to Qilin ransomwareQilinUnited States26 May
- Data LeakAlleged data leak of NASAThe BlackH4t MD-GhostUnited States26 May
- DDoSNoName targets the website of MeridianNoName057(16)Ukraine26 May
- DDoSNoName targets the website of VS Energy International UkraineNoName057(16)Ukraine26 May
- DDoSNoName targets the website of TEMP-3000NoName057(16)Ukraine26 May
- DDoSNoName057(16) targets the website of AutoKrAZNoName057(16)Ukraine26 May
- DDoSNoName targets the website of National Association of Road Workers of UkraineNoName057(16)Ukraine26 May
- DDoSNoName targets the website of ORION Ternopil Radio PlantNoName057(16)Ukraine26 May
- Web DefacementHax.or targets the website of MTsS An-Nawawi 01 BerjanHax.orIndonesia26 May
- Web DefacementHax.or targets the website of MIN 3 Kota Palangka RayaHax.orIndonesia26 May
- Web DefacementHax.or targets the website of SMK PP Negeri SembawaHax.orIndonesia26 May
- Access BrokerageAlleged unauthorized access to TECNO GROUP LABNoName057(16)Italy26 May
- Web DefacementBABAYO EROR SYSTEM targets the website of demowebsiteclient.comBABAYO EROR SYSTEM—26 May
- Web DefacementHax.or targets the website of Alfa Centauri SchoolHax.orIndonesia26 May
- Web DefacementHax.or targets the website of Perpustakaan SMA Negeri 1 TabananHax.orIndonesia26 May
- Access BrokerageAlleged sale of unauthorized access to Manufacturing company in TurkeyBig-BroTurkey26 May
- Data BreachAlleged Data Breach Universitas Mathla'ul Anwar Banten (UNMA Banten)SHENHAXSECIndonesia26 May
- DDoSNoName targets the website of CoverwiseNoName057(16)Italy26 May
- RansomwareSandox info falls victim to Nova ransomwareNovaUnited States26 May
- DDoSNoName targets the website of HolinsNoName057(16)Italy26 May
- Data BreachAlleged data breach of Silpakorn UniversityFYNTRIXThailand26 May
- RansomwareERIELL Group falls victim to Nova ransomwareNovaUzbekistan26 May
- DDoSNoName targets the website of 24hassistanceNoName057(16)Italy26 May
- Web DefacementPhiserXman targets the website of ZivePhiserXman—26 May
- DDoSNoName targets the website of QuixaNoName057(16)Italy26 May
- DDoSNoName targets the website of QUIXA Assicurazioni S.p.ANoName057(16)Italy26 May
- DDoSNoName targets the website of MutuiOnline.itNoName057(16)Italy26 May
- RansomwareHGS Wirtschaftsprüfung Steuerberatung falls victim to LOCKBIT 5.0 ransomwareLOCKBIT 5.0Austria26 May
- DDoSNoName targets the website of ConfrontaConti.itNoName057(16)Italy26 May
- Data BreachAlleged Data Breach of Grupo Breitkopfsta6Brazil26 May
- DDoSNoName targets the website of PrestitiOnline.itNoName057(16)Italy26 May
- Web DefacementPhiserXman targets the website of WEDS Global InstitutePhiserXman—26 May
- RansomwareAcros Sport GmbH falls victim to LAMASHTU ransomwareLAMASHTUGermany26 May
- RansomwareHWG Horst Weidner GmbH falls victim to LAMASHTU ransomwareLAMASHTUGermany26 May
- DDoSDark Storm Team targets the website of Chulalongkorn UniversityDark Storm TeamThailand26 May
- Access BrokerageAlleged Sale of Unauthorized Domain Admin Access to Retail Organization in BrazilRitsu08Brazil26 May
- DDoSDark Storm Team targets the website of Ministry of Public Health of ThailandDark Storm TeamThailand26 May
- DDoSDark Storm Team targets the website of Department of Land TransportDark Storm TeamThailand26 May
- Data BreachAlleged data breach of Pemerintah Kota Pariamans1ethx7zIndonesia26 May
- Data BreachAlleged Data Breach of Government of Pariaman Citys1ethx7zIndonesia26 May
- DDoS0Day.Today Learn Exploit Zero World Dark Web targets the website of Cyber BasementLearn ExploitIran26 May
- RansomwareCyberattack Hits Chelan County Government—United States26 May
- DDoSTHE GARUDA EYE targets the website of Visit KuwaitTHE GARUDA EYEKuwait26 May
- Data BreachAlleged Data Breach DCI IntegraciónazazeljakelMexico26 May
- Access BrokerageAlleged leak of admin access to Built-Up Consultant Pvt. Ltd.Maulnism1337India26 May
- Data BreachAlleged data leak of Kabar MaduraJUNZXSECCIndonesia26 May
- RansomwareFILABé company falls victim to Space Bears ransomwareSpace BearsSwitzerland26 May
- Data BreachAlleged data leak of Kementerian Ketenagakerjaan Republik IndonesiaMr. Hanz XploitIndonesia26 May
- Web DefacementMaulnism1337 targets multiple subdomains of Sukabumi Regency GovernmentMaulnism1337Indonesia26 May
- RansomwareBASE S.p.A. falls victim to Space Bears RansomwareSpace BearsItaly26 May
- Threat AlertWeAreCyberHunters claims to target Peru's National Office of Electoral ProcessesWeAreCyberHuntersPeru26 May
- Threat AlertHandala Hack Claims Cyber Attack on Digital Displays Across IsraelHandala HackIsrael26 May
- Data BreachAlleged data breach of University of OregonAnka TeamUnited States26 May
- Access BrokerageAlleged leak of admin access to Askmanishamaulnism1337India26 May
- Access BrokerageAlleged Unauthorized Access to DEV EngineeringMaulnism1337India26 May
- Data Breach140,000 profiles of Thai womencabycThailand26 May
- Data Breach95,000 KuCoin Digital CurrencycabycUnited States26 May
- Data BreachU.S. JPMorgan Chase Investment Bank 770,000cabycUnited States26 May
- Data BreachCitibank (USA) 750,000cabycUnited States26 May
- Data BreachPoder Judicial De Jalisco (+790 personas)CHRONUSTEAMMexico26 May
- Data Breachuoregon.eduSALDIRGANUnited States26 May
- Data BreachNissan Motor Co., Ltd. | nissan.co.jp | 2026-04-01thelastwhitehatja26 May
- Data BreachTAPSI User+VendormossadIran26 May
- Web DefacementEXADOS Targets the Website of KJPP ANA & RekanEXADOSIndonesia26 May
- Data LeakAlleged leak of Indonesian population databasewhoareIndonesia26 May
- Web DefacementChronus leaks targets the website of Higher Technological Institute of Eastern Hidalgo State (ITESA)Chronus leaksMexico26 May
- Data BreachAlleged Data Breach of Thai Dairy IndustryZxS3CThailand26 May
- Data LeakAlleged Data Leak Containing Personal Documents and Banking InformationCombo_BRBrazil26 May
- Data BreachAlleged data leak Kolorkim Kimya CorporatedoommageddonTurkey26 May
- Web DefacementOpsShadowStrike targets the website of GVPR EngineersOpsShadowStrikeIndia26 May
- Data LeakAlleged sale of forged legal documents, government emails, and EDR-related servicesconvince—26 May
- Data BreachAlleged data leak Hiddenbay Urla CustomerdoommageddonTurkey26 May
- Data BreachAlleged data leak of SantanderXyph0rixSpain26 May
- Data LeakAlleged leak of multiple consumer databasejannat123—26 May
- Data BreachAlleged sale of Growth Supplements Food Products LTD databaseSorbBrazil26 May
- Data BreachAlleged data breach of CIC Technology and Consulting Joint Stock CompanySorbVietnam26 May
- Data BreachHIDDENBAY URLA - SERRA SAKLI KOY BUTİK TURİZM İŞLETMELERİdoommageddonTurkey26 May
- Data BreachKOLORKIM KIMYAdoommageddonTurkey26 May
- Data BreachVietnam CIC Technology and Consulting 31 000SorbVietnam26 May
- Data Breachbimetica.com 157 000 users EUSorbItaly26 May
- Data Breachgsuplementos.com.brsorbBrazil26 May
- RansomwareBasata falls victim to NightSpire RansomwareNightSpireEgypt26 May
- Data BreachAlleged data breach of Lake County AppealXEROUnited States26 May
- Data BreachAlleged sale of CIC Technology and Consultancy JSC.SorbVietnam26 May
- Access BrokerageAlleged Sale of SSH Access to an Unidentified Shop in USAReveUnited States26 May
- Data BreachAlleged data leak of STATE UNIVERSITY OF TRADE AND ECONOMICS/ KYIV NATIONAL UNIVERSITY OF TRADE AND ECONOMICSMorbiusUkraine26 May
- Data BreachAlleged data leak of Bimetica Parametric Design Services S.L.SorbSpain26 May
- RansomwarePiller Aimmco falls victim to INC Ransom RansomwareINC RANSOMUnited States26 May
- Data BreachAlleged data breach Mercedes-Benz TurkeydoommageddonTurkey26 May
- Data BreachAlleged data leak of TAPSI user and vendor databasemosadIran26 May
- Data LeakAlleged data leak of Saladin's ResultsFreeManXIraq26 May
- Data BreachAlleged data breach of JCPenneythelastwhitehatUnited States26 May
- Access BrokerageAlleged sale of unauthorized admin access to unidentified store in SpainShopifySpain26 May
- Access BrokerageAlleged sale of unauthorized admin access to unidentified store in UKShopifyUnited Kingdom26 May
- Access BrokerageAlleged sale of unauthorized admin access to unidentified store in SpainShopifySpain26 May
- Access BrokerageAlleged sale of unauthorized admin access to unidentified store in AustraliaShopifyAustralia26 May
- Data BreachAlleged data breach of Federal Administration of Public Revenues of Argentinasergio87Argentina26 May
- Web DefacementBABAYO EROR SYSTEM targets the website of AivrasolBABAYO EROR SYSTEMPakistan26 May
- RansomwareWD Agroindustrial Ltda falls victim to LOCKBIT 5.0 ransomwareLOCKBIT 5.0Brazil26 May
- RansomwareMATHON BOULIN and MOREAU Group falls victim to LOCKBIT 5.0 ransomwareLOCKBIT 5.0France26 May
- Web DefacementBABAYO EROR SYSTEM targets the website of Pak SaaibaanBABAYO EROR SYSTEMPakistan26 May
- RansomwareSümer Faktoring A.Ş. falls victim to LOCKBIT 5.0 RansomwareLOCKBIT 5.0Turkey26 May
- RansomwareSCB Building Construction Pte Ltd falls victim to LOCKBIT 5.0 RansomwareLOCKBIT 5.0Singapore26 May
- Access BrokerageAlleged Unauthorized Access to Majlis Perbandaran KemamanLinxProdXMalaysia26 May
- RansomwareIMPLOSA falls victim to LOCKBIT 5.0 RansomwareLOCKBIT 5.0Panama26 May
- RansomwareHolland Bulb Farms falls victim to LOCKBIT 5.0 ransomwareLOCKBIT 5.0United States26 May
- RansomwareLegend Networking & Telecom falls victim to Play RansomwarePLAYUnited States26 May
- Web DefacementTeam Hazardous Pk targets the website of ATBU Teaching HospitalTeam Hazardous PkNigeria26 May
- RansomwareRound Hill Country Club falls victim to Play RansomwarePLAYUnited States26 May
- RansomwareNL Fisher Supervision & Engineering Ltd. falls victim to Play RansomwarePLAYCanada26 May
- RansomwareGW Mechanical Inc falls victim to Play RansomwarePLAYUnited States26 May
- RansomwareMyPillow falls victim to Play RansomwarePLAYUnited States26 May
- RansomwareDe Waard Transport B.V. falls victim to Play RansomwarePLAYNetherlands26 May
- Data BreachAlleged data breach of natural food retail companiesDumpsecIsBackFrance26 May
- RansomwareChuo Acupuncture and Osteopathic Clinic falls victim to SAFEPAY ransomwareSAFEPAYJapan26 May
- Access BrokerageAlleged leak of login credentials to Silvers HubBROTHERHOOD CAPUNG INDONESIACanada26 May
- RansomwareEITECPRO falls victim to SAFEPAY ransomwareSAFEPAYJapan26 May
- RansomwareTME RUSTA PLAYLAND GmbH falls victim to SAFEPAY ransomwareSAFEPAYGermany26 May
- RansomwareVDM Trucking Service Ltd. falls victim to SAFEPAY ransomwareSAFEPAYCanada26 May
- Data BreachAlleged Data Breach of Now-ForwardCMD OrganizationUnited States26 May
- Access BrokerageAlleged Sale of US Credit Card DataYesButYesUnited States26 May
- Data BreachAlleged data breach of Wilaya of TamanrassetDARK 07xAlgeria26 May
- Data BreachAlleged data breach of La RedoutehenrymartinFrance26 May
- Data BreachAlleged data breach of PT Samisuryaindah PlasticGHOSTNET-XIndonesia26 May
- Access BrokerageAlleged Sale of Unauthorized Domain Admin Access to Construction Management company in UKRitsu08United Kingdom26 May
- Access BrokerageAlleged sale of unauthorized access to unidentified shop from USAcorptodayUnited States26 May
- Data BreachAlleged data breach of ColisPrivTanakaFrance26 May
- Threat AlertLazarus claims to target Cayman IslandsLazarusCayman Islands26 May
- Threat AlertLazarus claims to target ArgentinaLazarusArgentina26 May
- Threat AlertLazarus claims to target SingaporeLazarusSingapore26 May
- Threat AlertLazarus claims to target ThailandLazarusThailand26 May
- Threat AlertLazarus claims to target South KoreaLazarusSouth Korea26 May
- Threat AlertLazarus claims to target IsraelLazarusIsrael26 May
- Threat AlertLazarus claims to target UzbekistanLazarusUzbekistan26 May
- Threat AlertLazarus claims to target FranceLazarusFrance26 May
- Threat AlertLazarus claims to target UKLazarusUnited Kingdom26 May
- Threat AlertLazarus claims to target USALazarusUnited States26 May
- Data BreachAlleged data breach of Consorcio Credicard C.AThe BlackH4t MD-GhostVenezuela26 May
- Data LeakAlleged data leak of Iran military databaseThe BlackH4t MD-GhostIran26 May
- DDoSBD Anonymous targets the website of Elbatech GroupBD AnonymousIsrael26 May
- Data BreachAlleged data breach of NASAThe BlackH4t MD-GhostUnited States26 May
No events match your filters.
Page 1 of 1
Active threat actors
click any actor to filter the list aboveNo active actors in this view.