Account required
Sign in to view threat intelligence
CTI data is restricted to registered users. Create a free account to browse the dashboard, then upgrade to a paid plan to unlock event details and IOCs.
Cyber Threat Intelligence
Daily snapshot
Daily brief 16 June 2026
Mexico Under Siege: Multiple Government Breaches, Qilin & ShinyHunters Active
61 critical data exposures today, with Mexico hit by 12 events including government and telecom breaches. Qilin and ShinyHunters lead actor activity. Fortinet and Vertex AI flaws under active exploita
Events
0
In current view
Critical exposure
0
Last 24 hours
0
vs previous 24h
Distinct actors
0
In current view
By attack category · 9
Data Exposure
0
Ransomware
0
Access Brokerage
0
DDoS
0
Web Defacement
0
Malware Ops
0
Vulnerability
0
Threat Alert
0
Cyber Operation
0
Top victim countries
No country data in this view.
Subscriber-only
CTI brief — 2026-06-16
The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.
Events
showing 0
Category
Title
Actor
Country
Date
- Data LeakAlleged sale of PII recordsbizfullz—16 Jun
- Access BrokerageAlleged leak of login access to WeComics Company LimitedZAHER INFINITYThailand16 Jun
- Access BrokerageAlleged unauthorized access to Polaris by TLA Saint-ÉtienneNoName057(16)France16 Jun
- RansomwareFramesi falls victim to incransom ransomwareincransomItaly16 Jun
- DDoSBD Anonymous targets the website of Minrav Group LtdBD AnonymousIsrael16 Jun
- Access BrokerageAlleged unauthorized access to hydroelectric power station in the Czech RepublicZ-PENTEST ALLIANCECzech Republic16 Jun
- Data BreachAlleged data breach of AT&T MéxicoMagoSpeakMexico16 Jun
- Access BrokerageAlleged Sale of Admin Access to an Unidentified Retail Company in CroatiaRitsu08Croatia16 Jun
- Access BrokerageAlleged sale of web shell access to Government of BrazilX9 ListBrazil16 Jun
- Web DefacementHax.or targets the website of multifleetservices.plHax.or—16 Jun
- DDoSRipperSec targets the website of GuideStar IsraelRipperSecIsrael16 Jun
- Access BrokerageAlleged leak of web shell access to Portuguese Communist PartyX9 ListPortugal16 Jun
- Access BrokerageAlleged Sale of Unauthorized Access to an Unidentified FinTech PlatformFrikinoi—16 Jun
- Access BrokerageAlleged leak of web shell access to The Official Government News Portal of Sri LankaX9 ListSri Lanka16 Jun
- Access BrokerageAlleged leak of webshell access to Commission nationale du débat publicX9 ListFrance16 Jun
- Data LeakAlleged data leak of Instituto de Seguridad y Servicios Sociales de los Trabajadores del EstadoMagoSpeakMexico16 Jun
- Access BrokerageAlleged leak of webshell access to University of South CarolinaX9 ListColombia16 Jun
- Web DefacementHax.or targets the website of NESTIGO SP. Z O.O.Hax.orPoland16 Jun
- Access BrokerageAlleged leak of webshell access to RCD EspanyolX9 ListSpain16 Jun
- Data BreachAlleged data breach of Ministry of Tourism of the Republic of IndonesiaJ1nx5Indonesia16 Jun
- Web Defacementmaulnism1337 targets the website of Indur Institute Of Engineering & Technologymaulnism1337India16 Jun
- Web Defacementmaulnism1337 targets the website of kingstoncoe.edu.inmaulnism1337India16 Jun
- Web DefacementOpsShadowStrike targets the website of VKL SeasoningOpsShadowStrikeIndia16 Jun
- RansomwareTecfi SpA falls victim to Dragon Force ransomwareDragonForceItaly16 Jun
- RansomwareInsite Architects falls victim to Akira ransomwareakiraAustralia16 Jun
- Data BreachAlleged data breach of ReplyUARobert2025Ukraine16 Jun
- Data BreachAlleged data breach of OSCEstop EducationRobert2025United Kingdom16 Jun
- RansomwareSumitomo Electric Bordnetze SE falls victim to Aur0ra RansomwareAur0raGermany16 Jun
- Data LeakAlleged database leak of MexicoBhayangkaraIDMexico16 Jun
- Web DefacementHax.or targets the website of DJ - Entertainer - Mariusz KordalskiHax.orPoland16 Jun
- RansomwareGolfview Developmental Center falls victim to Qilin ransomwareQilinUnited States16 Jun
- RansomwareAllan Brothers, Inc. falls victim to Aur0ra RansomwareAur0raUnited States16 Jun
- RansomwareDiamond Truck Centres falls victim to Aur0ra RansomwareAur0raCanada16 Jun
- Web DefacementHax.or targets the website of grabfit.xyzHax.or—16 Jun
- Web DefacementHax.or targets the website of Regional Inspectorate of Seruyan RegencyHax.orIndonesia16 Jun
- DDoSRipperSec targets the website of Haifa municipalityRipperSecIsrael16 Jun
- DDoSl1ghtSoulHem targets the website of Platform of the Peruvian Statel1ghtSoulHemPeru16 Jun
- Web DefacementHax.or targets the website of Areton Marek KudełkaHax.orPoland16 Jun
- Web DefacementHax.or targets the website of meble-jg.plHax.orPoland16 Jun
- Data LeakAlleged data leak of Russian State Agent DatabaseXyph0rixRussia16 Jun
- Web DefacementHax.or targets the website of MIMAX GROUPHax.orPoland16 Jun
- RansomwareCloak ransomware group adds an unknown victim (W******S*******D)Cloak—16 Jun
- RansomwareCloak ransomware group adds an unknown victim (D**********E)Cloak—16 Jun
- Data LeakAlleged Sale of Mailpass Data from Spainpollins05Spain16 Jun
- RansomwareCloak ransomware group adds an unknown victim (RA-*******E)Cloak—16 Jun
- VulnerabilityCISA Warns of Another Actively Exploited cPanel Plugin Vulnerability——16 Jun
- RansomwareSunass falls victim to Nova ransomwareNovaPeru16 Jun
- Data LeakAlleged data leak of Facebook users in Western LibyaNightrootLibya16 Jun
- Combo ListAlleged Leak of 3.5KK Shopping Mailpass RecordsSTRADU—16 Jun
- Web DefacementHax.or targets the website of Lopo TenunHax.orIndonesia16 Jun
- Combo ListAlleged Leak of 17K Gmail Domain Mailpass RecordsSTRADU—16 Jun
- Web DefacementHax.or targets the website of Desa KarangtengahHax.orIndonesia16 Jun
- RansomwareNightSpire Ransomware group has added an unidentified victim (Ri***** Co**** Europe S.r.l.)NightSpire—16 Jun
- RansomwareNightSpire Ransomware group has added an unidentified victim (Central Texas **********)NightSpire—16 Jun
- Access BrokerageAlleged Sale of Unauthorized WordPress Admin Access to an Unidentified Shop in AustraliaTreeWaterAustralia16 Jun
- Data BreachAlleged data breach of YoremiaCortex-groupMexico16 Jun
- RansomwareNightSpire Ransomware group has added an unidentified victim (Guy E******* & F*******, P.A)NightSpire—16 Jun
- VulnerabilityCritical Fortinet FortiSandbox Vulnerabilities Exploited in Attacks—United States16 Jun
- Malware OpsCyber Attack Hits Government Organizations with New Windows SprySOCKS Malware——16 Jun
- Data LeakAlleged leak of French Facebook databaseNightrootFrance16 Jun
- Data BreachAlleged data breach of BT GroupNightrootUnited Kingdom16 Jun
- RansomwareThe Credit Pros falls victim to ICARUS RansomwareICARUSUnited States16 Jun
- Access BrokerageAlleged Sale of FortiGate Access to an Unidentified Shipping Company in Greeceget_comGreece16 Jun
- Access BrokerageAlleged Sale of Webshell Access to an Unidentified News Website in BulgariamonteksoBulgaria16 Jun
- DDoSNoName targets the website of HOP!NoName057(16)France16 Jun
- DDoSNoName targets the website of French Government - Multichannel Payment APINoName057(16)France16 Jun
- DDoSNoName targets the website of ThingsBoardNoName057(16)France16 Jun
- DDoSNoName targets the website of Aéroport de Tahiti-Faa'aNoName057(16)France16 Jun
- DDoSNoName targets the website of State services in French PolynesiaNoName057(16)France16 Jun
- Access BrokerageAlleged Sale of Root Access to a Brazilian Shared Hosting ProvidermonteksoBrazil16 Jun
- DDoSNoName targets the website of Meurthe-et-MoselleNoName057(16)France16 Jun
- DDoSNoName targets the website of Essonne PrefectureNoName057(16)France16 Jun
- DDoSNoName targets the website of Département de la Côte-d'OrNoName057(16)France16 Jun
- DDoSNoName targets the website of Hotel Les CygnesNoName057(16)France16 Jun
- Access BrokerageAlleged Sale of Unauthorized WordPress Admin Access to an Unidentified Shop in the USATreeWaterUnited States16 Jun
- DDoSNoName targets the website of Hotel Continental Evian-les-BainsNoName057(16)France16 Jun
- Access BrokerageAlleged Sale of Unauthorized Admin Access to an Unidentified Shop in UkTreeWaterUnited Kingdom16 Jun
- Data LeakAlleged data leak of Chihuahua and ChiapasV01Mexico16 Jun
- Web Defacementfsociety targets the website of Government Medical College & Hospital KarurfsocietyIndia16 Jun
- Access BrokerageAlleged Sale of FortiGate Access to an Unidentified Security Company in Finlandget_comFinland16 Jun
- Access BrokerageAlleged Sale of Unauthorized Access to an Unidentified Pharma ShopcorptodayUnited States16 Jun
- Cyber OperationCyberattack Hits OptinMonster WordPress Plugin Users—United States16 Jun
- Data BreachCyberattack Hits iRhythm—United States16 Jun
- Web DefacementH3C4KEDZ targets the website of Department of Marine and Coastal ResourcesH3C4KEDZThailand16 Jun
- Data LeakAlleged leak of records related to overseas Chinese individuals in the United States0xulnarUnited States16 Jun
- RansomwareSporton International Inc. Falls Victim to Payload RansomwarePayloadTaiwan16 Jun
- DDoSTHE GARUDA EYE targets the website of Morocco Government & Online Tourism PortalTHE GARUDA EYEMorocco16 Jun
- DDoSDark Storm Team targets the website of Authorization energy FranceDark Storm TeamFrance16 Jun
- DDoSDark Storm Team targets the website of Electricity of FranceDark Storm TeamFrance16 Jun
- RansomwareElmoris falls victim to Deadlock RansomwareDeadLockItaly16 Jun
- Data Breachmoneybookers ( France )CaVaniFrance16 Jun
- RansomwareGerusia s.l falls victim to DeadLock ransomwareDeadLockSpain16 Jun
- Data BreachAlleged data breach of Qatar Red Crescent SocietyShinyHuntersQatar16 Jun
- Web DefacementEXA-DOS | NCX targets the website of Khao Poon Subdistrict Administrative OrganizationEXA-DOS | NCXThailand16 Jun
- Data Breachregionhuanuco.gob.pecrakaizenPeru16 Jun
- Data BreachArmenia - iGaming Platform Provider (1B - 1.5B revenue)endtoastArmenia16 Jun
- Data Breachflexbooker.com 9.5 millionDuckDBUnited States16 Jun
- Data BreachBrazilian KYC DataBaseDuckDBBrazil16 Jun
- Data Breachhouzz.com 55.3 million user recordDuckDBUnited States16 Jun
- Data BreachSOURCE CODE SKYDROPX.COMjoaoestrellaMexico16 Jun
- Data BreachPeruvian migrationSELEKTPeru16 Jun
- RansomwareKedah Darul Aman State Government falls victim to Nova RansomwareNovaMalaysia16 Jun
- RansomwareQ Link Wireless falls victim to Qilin ransomwareQilinUnited States16 Jun
- RansomwareMisericórdia de Santo Tirso falls victim to Qilin ransomwareQilinPortugal16 Jun
- Data BreachHOSPITAL ITALIANO ARGENTINAEdisonGironFArgentina16 Jun
- Data BreachPOLYMARKET (2GB)CyberSpyFreeUnited States16 Jun
- DDoSDark Storm Team targets the website of Sagem (SAFRAN)Dark Storm TeamFrance16 Jun
- Access BrokerageAlleged Sale of Lucy Modular C2 Remote Access Trojan(RAT)godslucy—16 Jun
- DDoSDark Storm Team targets the website of GICATDark Storm TeamFrance16 Jun
- Data BreachAlleged Data breach of Wickr and AWS GovCloud Exploitation PackageOrcinus orcaUnited States16 Jun
- DDoSDark Storm Team targets the website of Register of Financial AgentsDark Storm TeamFrance16 Jun
- DDoSDark Storm Team targets the website of LAZARD FRERES GESTIONDark Storm TeamFrance16 Jun
- Data Breachvietinbank.vncabycVietnam16 Jun
- Data Breachvietcombank.com.vn 5.5 million userscabycVietnam16 Jun
- Data Breachsbv.gov.vn 563,000 linescabycVietnam16 Jun
- Data Breachbidv.com.vn 5,16McabycVietnam16 Jun
- Data Breachcic.gov.vn 5,58M userscabycVietnam16 Jun
- Data Breach[BRAZIL] Sicoob BankV0idixBrazil16 Jun
- Data BreachHOSPITAL ITALIANO ARGENTINAEdisonGironFArgentina16 Jun
- Data BreachAlleged leak of infrastructure details associated with MossadLasTjewsHUNTERIsrael16 Jun
- Data BreachAlleged leak of Clark County School District internal EmailsMaxi2446United States16 Jun
- Data BreachAlleged Data Breach of Hospital ItalianoEdisonGironFArgentina16 Jun
- Data BreachAlleged Data Breach of Erfan KhoshnazarSorbIran16 Jun
- Data LeakAlleged leak of of Maria Inmaculada school DatabaseV0idixCosta Rica16 Jun
- Data BreachAlleged GÖKNUR Gıda A.Ş. Data Leak – Part 1russiangirl2Turkey16 Jun
- Web DefacementCYBER DARK ECHO targets the website of bomton.beutysoft4u.czCYBER DARK ECHOCzech Republic16 Jun
- Web DefacementCYBER DARK ECHO targets the website of ITG&DCYBER DARK ECHO—16 Jun
- Web DefacementCYBER DARK ECHO targets the website of Institute of Posts and Telecommunications Science and TechnologyCYBER DARK ECHOVietnam16 Jun
- Data BreachAlleged data sale of CineTelaSorbBrazil16 Jun
- Data BreachAlleged data breach of Dinas Kependudukan dan Pencatatan SipilSilentiaGhostIndonesia16 Jun
- Data BreachAlleged data breach of Forma 2+pwn2ddFrance16 Jun
- Web DefacementCyb3r Sn4ke targets the website of MikroskopyCyb3r Sn4kePoland16 Jun
- Threat AlertAlleged purchase of server boosting serviceRymski—16 Jun
- Web DefacementPHANTOM666 targets the website of National Civil Service AgencyPHANTOM666Indonesia16 Jun
- RansomwareAlleged data breach of Glendale Community CollegeShinyHuntersUnited States16 Jun
- RansomwareAlleged data breach of Moody Bible InstituteShinyHuntersUnited States16 Jun
- RansomwareAlleged data breach of Illinois Central CollegeShinyHuntersUnited States16 Jun
- RansomwareEXPRESOKNA falls victim to DeadLock ransomwareDeadLockPoland16 Jun
- RansomwareThe Gentlemen Ransomware group adds an unknown victim (c*********y.com)The GentlemenUnited States16 Jun
- Threat AlertAlleged sale of Mail Brute 1.5russiandog—16 Jun
- RansomwareCentro Agricoltura Ambiente "Giorgio Nicoli" S.r.l falls victim to DeadLock ransomwareDeadLockItaly16 Jun
- Data LeakAlleged leak of Mexican prosecutors datanightMexico16 Jun
- Data BreachAlleged data breach of National Epidemiological Surveillance System of MexiconightMexico16 Jun
- Data LeakAlleged data breach of GN RemotenightMexico16 Jun
- RansomwareSmith & Associates, CPAs falls victim to INC RANSOM RansomwareINC RANSOMUnited States16 Jun
- RansomwareHood River County Sheriff's Office falls victim to SafePay ransomwareSAFEPAYUnited States16 Jun
- VulnerabilityAlleged Vulnerability Leak of Infomed· .Demolition GroupIsrael16 Jun
- RansomwareHugh Stirling falls victim to SAFEPAY RansomwareSAFEPAYGermany16 Jun
- RansomwareAquaclean falls victim to SafePay ransomwareSAFEPAYSpain16 Jun
- Data BreachAlleged data breach of SEAPAL VallartanightMexico16 Jun
- RansomwareMatuzawa Company falls victim to SAFEPAY RansomwareSAFEPAYJapan16 Jun
- RansomwareKawai America falls victim to SAFEPAY RansomwareSAFEPAYUnited States16 Jun
- RansomwareTokyo Civil falls victim to SAFEPAY RansomwareSAFEPAYJapan16 Jun
- RansomwareBautz Maschinen- und Stahlbau GmbH falls victim to SAFEPAY RansomwareSAFEPAYGermany16 Jun
- Access BrokerageAlleged sale of unauthorized admin access to an unidentified shop in DenmarkDestanBeguDenmark16 Jun
- Data LeakAlleged leak of multiple Mexican organization databasenightMexico16 Jun
- Threat AlertThe GODFATHER of all claims to target Lockheed MartinThe GODFATHER of allUnited States16 Jun
- DDoSYEMEN CYBER GROUP targets the website of Manufacturers Association of IsraelYEMEN CYBER GROUPIsrael16 Jun
- RansomwareIFC Europa S.L. falls victim to IFC Europa S.L.DeadLockSpain16 Jun
- Data LeakAlleged sale of confidential documents related to state FSB in RussiamosadRussia16 Jun
- Access BrokerageAlleged unauthorized access to The Institute of Chartered Accountants of IndiazowicoIndia16 Jun
- RansomwareSheraton Miramar Resort El Gouna falls victim to Night Spire ransomwareNightSpireEgypt16 Jun
- Data LeakAlleged data sale of Ministry of DefensemosadIndia16 Jun
- Data LeakAlleged sale of confidential documents related to defense industries in South KoreamosadSouth Korea16 Jun
- Access BrokerageAlleged leak of login access to Department of Groundwater ResourcesDr.Nexusec-CyberThailand16 Jun
- Web DefacementAren Team targets the website of photocloud.caAren Team—16 Jun
- Access BrokerageAlleged leak of login access to Digital2homeDr.Nexusec-CyberThailand16 Jun
- Web DefacementAren Team targets the website of Art Geography of RussiaAren TeamRussia16 Jun
- RansomwareNightSpire Ransomware group has added an unidentified victim (G**** R****l*e)NightSpire—16 Jun
- RansomwareNightSpire Ransomware group has added an unidentified victim (B **** S I ****** t *** 1)NightSpire—16 Jun
- RansomwareAnglomoil Lubricants falls victim to Brain Cipher ransomwareBrain CipherAustralia16 Jun
- RansomwareAlu-Rex inc falls victim to Brain Cipher RansomwareBrain CipherCanada16 Jun
- Access BrokerageAlleged sale of unauthorized network access to an unidentified shop in GermanyDeckgrinderGermany16 Jun
- Web DefacementAren Team targets the website of Pengadilan Agama SitubondoAren TeamIndonesia16 Jun
- Web DefacementAren Team targets the website of INTELYMECAren TeamArgentina16 Jun
- RansomwareKoMiCo falls victim to ANUBIS RansomwareANUBISSouth Korea16 Jun
- RansomwareNAGECCO falls victim to Qilin ransomwareQilinVietnam16 Jun
- Data BreachAlleged data breach of Local'Emploi0xSecFrance16 Jun
- RansomwareMava Behavioral Health falls victim to Qilin ransomwareQilinUnited States16 Jun
- DDoSYEMEN CYBER GROUP targets the website of Carlton Tel Aviv HotelYEMEN CYBER GROUPIsrael16 Jun
- Web DefacementBABAYO EROR SYSTEM targets the website of menq.eidea.twBABAYO EROR SYSTEMTaiwan16 Jun
- RansomwareGrupo INDI falls victim to Qilin ransomwareQilinMexico16 Jun
- RansomwareCan Healthcare Group falls victim to Qilin RansomwareQilinTurkey16 Jun
- Web DefacementPh.Bl4ke targets the website of City Government of IsabelaPh.Bl4kePhilippines16 Jun
- Web DefacementBABAYO EROR SYSTEM targets the website of Tea ForumBABAYO EROR SYSTEMRussia16 Jun
- Data BreachAlleged data sale of LedgerauthenticUnited States16 Jun
- Threat AlertAlleged sale of SMTP Accountleosegreto—16 Jun
- Data LeakAlleged sale of identity verification documents from USAxandasUnited States16 Jun
- Access BrokerageAlleged unauthorized access to Volkswagen HazebrouckNoName057(16)France16 Jun
- Data BreachAlleged data breach of the Department of Thai Traditional and Alternative MedicineRichard2002Thailand16 Jun
- Data BreachAlleged data sale of ÇizgiMAXblackhunter1Turkey16 Jun
- Threat AlertAlleged sale of AWS SES Accountst_pahomUnited States16 Jun
- Data BreachAlleged data breach of Jambi Education DepartmentVextraNexsusIndonesia16 Jun
- Data BreachAlleged data breach of YaeliqRichard2002Turkey16 Jun
- RansomwareAlleged data breach of SyscoShinyHuntersUnited States16 Jun
- Data LeakAlleged sale of an internal directory of the police of Argentinaoverdose4uArgentina16 Jun
- Data BreachAlleged data breach of SampadahitaRichard2002Indonesia16 Jun
- RansomwareAlleged data breach of Deep Well ServicesShinyHuntersUnited States16 Jun
- Access BrokerageAlleged leak of login access to Burapha UniversityZxS3CThailand16 Jun
- RansomwareAlleged data breach of Eastman Kodak CompanyShinyHuntersUnited States16 Jun
- RansomwareAlleged data breach of Houston City CollegeShinyHuntersUnited States16 Jun
No events match your filters.
Page 1 of 1
Active threat actors
click any actor to filter the list aboveNo active actors in this view.