Posts

Pentagon Data Breach Exposes Personal Information of 3 Million People

Date: September 30, 2026 Location: United States Organization: U.S. Department of Defense (DoD) Threat Actor: Unknown What Happened in the Pentagon Data Breach? A major Pentagon data breach exposed sensitive personal information belonging to approximately 3.05 million people, according to reports published in September 2026. The incident involved the Defense Manpower Data Center (DMDC), an organization connected to the U.S. Department of Defense. The breach reportedly affected 2.76 million living individuals and around 294,000 deceased individuals. The exposed information included Social Security numbers, names, dates of birth, and military or civilian employment details. The incident has raised concerns about government data security and the protection of sensitive information belonging to military personnel and other individuals. How Did the Data Breach Happen? Reports indicate that unauthorized users accessed files through a vulnerable file-sharing system. The unauthorized acce...
Post a Comment
Read more

Rajasthan Government Data Breach Claim: 8.63 Million Emails Reportedly Exposed

A new cybersecurity allegation involving Rajasthan’s Department of Information Technology & Communication (DoIT&C) has raised concerns about the safety of government data in India. According to reports, a threat actor is allegedly offering a large dataset linked to the department for sale. The claimed collection contains millions of emails, personal information and potentially sensitive access-related records. However, the authenticity and full extent of the alleged breach have not been independently confirmed. What Does the Alleged Data Leak Include? According to the reported figures, the dataset contains: 5,926 mailboxes containing approximately 8.63 million emails. 22,686 email attachments with a combined size of 6.63 GB. 783,495 unique email addresses. 70,301 identity records. 59,460 mobile numbers. 69 reportedly verified credentials. 21 VPN logins and 64 VPN certificates. 1,065 mailboxes reportedly belonging to senior officers. The reported data may include...
Post a Comment
Location: Delhi, India
Read more

Berlin Government Hit by Ransomware Attack as Hackers Leak Stolen Data

Image
Date: September 5, 2026 Location: Berlin, Germany Threat Actor: Rhysida ransomware group Berlin Government Hit by Ransomware Attack The Berlin government ransomware attack has raised serious concerns about data security and the protection of sensitive government information. On September 5, 2026, stolen data from two Berlin government departments was reportedly published online after the authorities refused to pay a ransom. The incident highlights how ransomware attacks are increasingly targeting public institutions, putting government records, employee information, and potentially sensitive personal data at risk. How Did the Berlin Cyberattack Happen? The attack affected two departments of Berlin's state government: Senate Department for Mobility, Transport, Climate Protection and the Environment Senate Department for Urban Development, Building and Housing Authorities reportedly detected the cyberattack on August 14, 2026, and took steps to secure the affected systems. Howeve...
Post a Comment
Location: Delhi, India
Read more

Telegram Desktop Vulnerability: How One Click Could Risk Your Account

Introduction A single click can sometimes create a serious cybersecurity risk. In September 2026, a reported vulnerability in Telegram Desktop highlighted how improper handling of external links could potentially expose users’ local files and compromise their accounts. According to the published advisory, the vulnerability affected versions earlier than 7.2.9. How Does the Vulnerability Work? The reported flaw involved improper handling of the semicolon ( ; ) character in Telegram Desktop’s internal communication mechanism, known as inter-process communication (IPC). An attacker could potentially exploit this weakness using a specially crafted external link. Under the necessary conditions, the application might interpret injected data as additional commands, allowing sensitive local files to be transmitted to an attacker-controlled Telegram chat. If usable session data were exposed, account takeover could also become possible. However, clicking an arbitrary link does not automat...
Post a Comment
Read more

Aesto Health Data Breach Affects Over 9.5 Million Patients

September 1, 2026 Healthcare technology company Aesto Health has reported a major data breach potentially affecting 9,540,683 individuals . According to Aesto, an unauthorized actor accessed a portion of its AWS infrastructure between December 2 and December 18, 2025 . The company detected the incident on December 18 and launched an investigation with the help of external cybersecurity experts. The investigation found that personal and protected health information belonging to patients of Aesto's healthcare-provider clients may have been accessed or acquired. What Information Was Exposed? The potentially affected information varied by individual and may have included: Names and dates of birth Medical and health insurance information Social Security numbers Government identification numbers Driver's license information Financial account information Aesto has stated that it currently has no evidence of identity theft or financial fraud connected to the incident. The Cybersecuri...
Post a Comment
Location: Delhi, India
Read more

Merrimack County Cyberattack: What Happened?

  September 2026 Merrimack County in New Hampshire, USA, recently experienced a network security incident that disrupted several county computer systems and temporarily affected government services. The earliest documented impact occurred on August 25, 2026 , when county dispatchers lost access to criminal-information data through New Hampshire's IMC system. The county publicly confirmed the incident on August 26 and began working with cybersecurity specialists to investigate the unauthorized activity. What Happened? Merrimack County dispatchers were unable to access important law-enforcement information, including: Criminal records Driving information Active warrants Nearly 20 law-enforcement departments rely on Merrimack County's dispatch services. Alternative procedures were used while access to the affected system was unavailable. Despite the disruption, emergency call-taking and response operations continued . The county also took some systems offline as a precaution whil...
Post a Comment
Location: Delhi, India
Read more

Apollo Global Management Data Breach: When Hackers Target People, Not Just Systems

On July 6–10, 2026, attackers gained unauthorized access to cloud systems belonging to Apollo Global Management , a major private-equity firm. Apollo confirmed the incident on August 21, reporting that sensitive personal information had been compromised. The incident is part of a wider wave of cyberattacks targeting financial-sector organizations and highlights an important reality of modern cybersecurity: sometimes, attackers don't need to break through the technology—they simply convince someone to let them in. What Happened? According to reports, attackers used social engineering to gain access to Apollo's cloud environment. Social engineering is a technique in which attackers manipulate people into revealing information or performing actions that compromise security. In this broader campaign, attackers reportedly impersonated IT or help-desk personnel and contacted employees by phone. Victims were then directed toward fraudulent login pages designed to capture credentials ...
Post a Comment
Location: Delhi, India
Read more