Incident tracker
Recent cyber attacks and data breaches
| Disclosed | Company | What happened | Type | Records | Source |
|---|---|---|---|---|---|
| 2025-09-25 | Cultura | Cultura: a data breach In September 2024, French retailer Cultura was the victim of a cyber attack they attributed to an external IT service provider . The resultant data breach included almost 1.5M unique email addresses along with names, phone numbers, physical addresses and orders. Cultura advised that all affected customers had been notified about the incident. | Data breach | 1,462,025 | Have I Been Pwned ↗ |
| 2025-09-24 | Bouygues Telecom | Bouygues Telecom: a data breach In August 2025, the French telecommunications company Bouygues Telecom detected a cyber attack against their services . The incident resulted in a data breach that exposed almost 6.4M customer records, including 5.7M unique email addresses. The breach also exposed names, physical addresses, phone numbers, dates of birth and IBANs (International Bank Account Numbers). Bouygues Telecom advised that all affected customers had been notified about the incident. | Data breach | 5,685,771 | Have I Been Pwned ↗ |
| 2025-09-21 | Animeify | Animeify: a data breach In October 2021, the now defunct Arabic language Anime website Animeify suffered a data breach that was later redistributed as part of a larger corpus of data . The data included 808k unique email addresses along with names, usernames, genders and plain text passwords. | Data breach | 808,034 | Have I Been Pwned ↗ |
| 2025-09-18 | FreeOnes | FreeOnes: a data breach In February 2017, the forum for the adult website FreeOnes suffered a data breach that was later redistributed as part of a larger corpus of data . The data included 960k unique email addresses alongside usernames, IP addresses and salted MD5 password hashes. | Data breach | 960,213 | Have I Been Pwned ↗ |
| 2025-09-16 | Miljödata | Miljödata: a data breach In August 2025, the Swedish system supplier Miljödata was the victim of a ransomware attack . Following the attack, data was subsequently published on the dark web and included 870k unique email addresses across various compromised files. Data also included names, phone numbers, physical addresses, dates of birth and government-issued personal identity numbers. | Data breach | 870,108 | Have I Been Pwned ↗ |
About this tracker
- 435
- Incidents
- 287
- Ransomware gang claims
- 722
- Last 30 days
- 389
- Companies tracked
- 2,742,501,669
- Records disclosed