From The Record · 40 stories
China and India-Linked Hackers Infiltrate Balochistan Police Networks
Chinese and Indian cyberespionage groups targeted the Balochistan Police from February 2024 to April 2026. The attackers accessed sensitive systems, including biometric data and criminal records. This exposes significant regional security vulnerabilities tied to geopolitical tensions.
EU Parliament Revives Chat Control 1.0 Allowing CSAM Scans Until 2028
The European Parliament has approved a procedure to revive the expired 'Chat Control 1.0' regulation, permitting tech companies to scan digital communications for child sexual abuse material (CSAM) until 2028. Despite previous rejections, the law was reinstated through a legal maneuver requiring an absolute majority to block it. The regulation raises significant privacy concerns, but excludes encrypted messaging services.
12 Million Affected in KDDI Data Breach, Exploiting Zero-Day Vulnerability
KDDI, a major Japanese telecom provider, confirmed a breach affecting 12.2 million email addresses and 7.6 million passwords via a compromised email system used by five ISPs. The breach exploited a zero-day vulnerability in third-party software. KDDI has implemented security measures and coordinated password resets to prevent future incidents.
Supreme Court Upholds Texas App Store Age Verification Law
The US Supreme Court denied requests from trade groups, including Apple and Google, to block the enforcement of Texas's App Store Accountability Act, a law requiring age verification for app users. The law mandates that app stores verify users' ages and obtain parental consent for minors, amid constitutional debates. This development impacts how app companies handle user compliance in Texas.
Medtronic Hack Exposes Data of Nearly 4 Million People in ShinyHunters Breach
Medtronic suffered a data breach in April 2026, compromising the personal and medical information of over 3.8 million individuals, with some sources claiming 9 million records affected. The ShinyHunters group accessed Medtronic's corporate IT systems, despite the company's reassurance about device safety. Medtronic is offering credit monitoring and support services to those impacted, highlighting security vulnerabilities in healthcare technology.
Microsoft releases 419 security fixes, including 3 zero-days, amid AI-driven bug surge
Microsoft released patches for 419 security vulnerabilities, including three zero-days, marking one of its largest monthly counts. This surge in discovered flaws is attributed to the increasing use of AI in vulnerability discovery, leading to a significant increase in the number of issues security teams must address.
North Korean Kimsuky Group Compromises South Korean Software Vendors and Customers
The North Korean Kimsuky group (APT43) compromised South Korean collaborative-work software vendors and subsequently breached their customers in a campaign spanning 2025 and early 2026. The attacks involved remote code execution, social engineering, and malware deployment to steal customer server information and employee credentials, highlighting persistent state-sponsored supply chain threats.
Finland issues wanted notice for hacker behind Vastaamo psychotherapy data breach
Finnish police have issued a wanted notice for Aleksanteri Kivimäki after his appeal was denied. Kivimäki was convicted for hacking psychotherapy provider Vastaamo and extorting patients, with implications for cybercrime accountability.
EU files court cases against four countries over cybersecurity law delays
The European Commission has initiated legal action against Ireland, Spain, France, and the Netherlands for not implementing the NIS2 Directive, which sets standards for cybersecurity across critical sectors. The action signals the EU's commitment to bolster cybersecurity, particularly as threats to infrastructure grow.
Greek victims sue Intellexa over Predator spyware allegations
Eight Greek victims of Predator spyware have filed a lawsuit against Intellexa and 13 affiliated individuals, seeking approximately €7.6 million in damages. This case aims to address the violations of privacy and data confidentiality resulting from the unauthorized surveillance activities tied to the spyware, which have already led to significant political repercussions in Greece.
Taiwan charges two businessmen in Chinese espionage scheme
Taiwan has charged two businessmen for aiding Chinese hackers in an espionage campaign targeting political and journalistic figures. The duo reportedly provided accounts used to impersonate journalists, facilitating malware deployment against Taiwanese individuals.
$20 million drained from BONK cryptocurrency in governance attack
Attackers exploited a governance proposal to drain $20 million from the BONK cryptocurrency. BonkDAO is collaborating with law enforcement to recover the funds and has temporarily suspended activities with the coin on South Korean exchange Upbit.
Ukrainian media outlets targeted by Russian hackers amid military pressures
Ukrainian media organizations are increasingly becoming priority targets for Russian hackers, according to the SBU. This escalation in cyber warfare aims to disrupt media operations and spread disinformation, impacting public trust during the ongoing conflict.
Supreme Court ruling jeopardizes EU-US data transfer framework
A Supreme Court ruling allowing the president to dismiss independent agency heads jeopardizes the EU-U.S. Data Privacy Framework. Max Schrems plans to sue to invalidate the framework, which governs data transfers crucial for €1.7 trillion in transatlantic trade.
Brazil Orders Discord to Suspend Livestreaming Feature After Teen's Death
Brazil's National Data Protection Authority (ANPD) has ordered Discord to suspend its "Go Live" livestreaming feature. This action follows an investigation into the death of a 13-year-old girl who was allegedly encouraged to take her own life during a Discord livestream. The suspension will remain until Discord implements adequate protective measures for minors, as the ANPD found the platform lacked real-time access to livestream content for automated violation detection.
Craneware Reports Data Breach Affecting US Hospitals and Pharmacies
Craneware, a UK-based software provider for over 2,000 US hospitals, reported a data breach involving employee and customer information. The breach resulted in the theft of significant data, impacting hospitals' billing and patient management services. The incident has been contained, with investigations ongoing.
New York Funds Water System Cybersecurity; Senate Bill Proposes $300M Annual Federal Aid
New York State has allocated over $9 million to 153 drinking water and wastewater systems to enhance cybersecurity defenses and comply with new state standards. Concurrently, Senate Democrats introduced the Water Cyber Shield Act, proposing $300 million annually for national water infrastructure cybersecurity improvements and expanded EPA authority, following recent cyberattacks on water systems.
UK Man Sentenced for Blackmail and Sextortion of 117 Victims as Part of 'The Com'
Justin Swaddle, a 20-year-old from Leeds, was sentenced to two years in prison for blackmail and sextortion offenses against 117 victims aged 13 to 17. Operating under aliases like 'Epstein' and 'Moscow' on platforms including Snapchat, Telegram, and Discord, Swaddle was a member of 'The Com,' an online collective whose members coerce victims into self-harm and sexual activity for peer status.
North Carolina Ports Hit by Cyberattack, Forcing Manual Operations
North Carolina Ports experienced a cyberattack that disrupted IT systems and forced a shift to manual operations across its three locations: Wilmington, Morehead City, and Charlotte. The incident, detected on August 4, led to system-wide outages and delays, though operations are gradually returning to normal with manual processing still in effect. This event highlights the ongoing vulnerability of critical infrastructure to cyber threats.
Russia Charges Telegram Founder Pavel Durov with Aiding Terrorism, Seeks Arrest
Russia's Federal Security Service (FSB) has charged Telegram founder Pavel Durov with aiding terrorist activity and placed him on an international wanted list. The FSB alleges Telegram failed to remove channels and bots used by Ukrainian special services and extremist organizations to coordinate sabotage and terrorism within Russia, resulting in casualties and financial damage. Durov has rejected the allegations, stating Russia is retaliating for his refusal to comply with demands for mass surveillance and censorship.
Liechtenstein's Register of Beneficial Owners Breached, 31,000 Records Exfiltrated
A cyberattack on Liechtenstein's Register of Beneficial Owners resulted in the exfiltration of data belonging to approximately 31,000 individuals. The breach, which occurred from Wednesday night into Thursday last week, compromised a critical financial transparency tool used to combat money laundering and terror financing in the principality.
Amgen Discloses Data Breach Affecting Patient Health and Proprietary Information
Biotechnology company Amgen reported a data breach where threat actors stole corporate data and patient information from third-party cloud systems. The unauthorized activity was detected in July 2026, leading to an ongoing investigation into the scope of the exfiltrated data, which includes proprietary information and protected health information.
FTC Sues Hims & Hers Over Alleged Patient Data Sharing with Advertisers
The Federal Trade Commission (FTC) has filed a lawsuit against telehealth provider Hims & Hers, alleging the company shared sensitive patient health information with advertising platforms such as Meta, Snap, Microsoft, Pinterest, Reddit, and X. The FTC claims Hims & Hers engaged in deceptive practices by promising privacy while sharing customer data, violating the FTC Act. This action highlights ongoing regulatory scrutiny of data privacy in the telehealth sector.
White House Launches AI-Driven Gold Eagle Initiative for Cybersecurity Coordination
The White House has launched the Gold Eagle initiative, an AI-supported federal clearinghouse for cybersecurity vulnerabilities. This program aims to enhance vulnerability detection and remediation across government and private sectors by facilitating collaboration between software maintainers and infrastructure operators. Gold Eagle is backed by multiple federal agencies and uses AI to manage cybersecurity risks efficiently.
Swiss rail manufacturer Stadler rejects $12.3M ransom demand after cyberattack
Swiss rail vehicle manufacturer Stadler Rail rejected a $12.3 million ransom demand from the Everest ransomware gang following a data breach on a platform shared with a supplier. The company reported no impact on its IT systems or production operations, and stated only non-security-relevant technical information was stolen, demonstrating a firm stance against cyber extortion.
South Korea's diplomat training system breached by hackers for 9 months
Hackers compromised South Korea's diplomatic academy's e-learning platform for nine months, exposing employee data. This breach raises serious cybersecurity concerns, especially given the country's past experiences with North Korean cyberattacks.
Cyberattack Halts Operations of Japanese Cold-Chain Operator Nichirei, Impacts Food Supply
A cyberattack on Nichirei Logistics Group disrupted frozen food shipments in Japan, affecting major chains like KFC. Operations began partial restoration post-attack, with a focus on data safety due to potential personal data compromise.
23andMe Settles $18 Million Data Breach Case Across 42 States
23andMe will pay $18 million to settle claims from 42 states over a data breach affecting 6.9 million users, including genetic data. The settlement requires enhanced cybersecurity measures and accountability going forward. This settlement follows issues of inadequate data protection and significant delays in breach notifications.
Hacker Attack Disrupts Romania's Land Registry Operations
Romania's land registry agency suffered a cyberattack, resulting in the wiping of its database and a halt in real estate transactions. The agency is migrating its systems to the government cloud to restore operations while ensuring data integrity.
Russian Hackers Use Security Cameras to Monitor NATO and Ukrainian Military Movements
Russian intelligence services are using internet-connected security cameras across Ukraine and NATO states to gather military intelligence. This operation involves exploiting cameras with default settings or security flaws, collecting data on military logistics and weapon shipments, and targeting Ukrainian troops. The breaches pose serious security risks across Europe and Ukraine.
Dutch Police Uncover Global Crypto Scam, Arrest Alleged Leader
Dutch police dismantled a large-scale international crypto scam, arresting the alleged mastermind and several associates. The scheme, operating through 20 call centers, swindled tens of thousands, making over €100 million monthly. The main suspect is a 46-year-old Israeli-Polish known in the cyberworld, caught in Poland and extradited to the Netherlands.
Lidl Data Breach Affects Customers in Germany, Belgium, and Netherlands
Lidl, a European supermarket chain, suffered a data breach affecting online customers in Germany, Belgium, and the Netherlands. Attackers accessed customer data stored by a third-party service provider. Although no payment information was compromised, affected customers have been advised to be cautious of potential phishing scams.
Supreme Court Ruling on Location Data May Impact Automated License Plate Cameras
The Supreme Court's decision in Chatrie v. United States mandates warrants for cellphone location data, potentially affecting the use of automated license plate readers (ALPRs) like those used by Flock Safety. This could impose legal constraints on current law enforcement practices utilizing widespread ALPR networks without warrants. The case reflects broader privacy concerns about surveillance technologies and Fourth Amendment rights.
Dutch Police Probe Local Hackers in Odido Telecom Data Breach
The Dutch police are investigating local hackers in the February Odido data breach affecting 6.2 million customers. A suspect impersonated an Odido IT employee, facilitating unauthorized access through a customer contact system. Authorities are requesting public assistance to identify the caller.
Block Inc. Settles for $45M Over Cash App Security Allegations with 46 States
Block, Inc., the parent company of Cash App, agreed to pay $45 million to settle claims from 46 U.S. states over allegations of misleading users about security protections. State attorneys general accused Block of inadequate fraud protection measures which left users exposed. This settlement addresses prior consumer protection failures and requires around-the-clock customer support.
UK Unveils AI-Driven 'Cyber Shield' for Enhanced National Cybersecurity
The UK announced the Cyber Shield initiative to improve national cybersecurity through agentic AI systems. The initiative, led by the National Cyber Security Centre, focuses on countering advanced threats that exploit AI to rapidly identify vulnerabilities. This collaboration with academia and industry aims to hardwire AI advancements into national security defenses against increasingly sophisticated cyber threats.
Spanish Police Arrest Suspected Member of Pro-Russian Hacktivist Groups
Spanish authorities arrested a man in Palencia linked to pro-Russian hacktivist groups CARR and Z-Pentest following an FBI tip. The suspect is accused of aiding a hacker's escape and supporting cyber activities against Ukraine. The arrest could impact international investigations into cyber threats.
Canadian Spy Agency Conducted Cyber Operations Against Criminal Groups
In 2022, Canada's Communications Security Establishment executed cyber operations against drug traffickers, violent extremists, and a ransomware gang. These state-authorized interventions aimed to thwart groups threatening Canada's national security and public safety. The operations utilized signals intelligence to disrupt criminal activities abroad, significantly impacting the targeted groups.
French Tax Authority Investigates Data Breach After Hacker Claims 600,000 Victims
France's Directorate General of Public Finances (DGFiP) confirmed a data breach in late June where an attacker accessed and extracted data on individuals and businesses. The incident became public after a hacker claimed responsibility, stating they obtained data on over 600,000 people, including personal and tax identification information.
Germany's Cabinet Approves Legislation Granting Spy Agencies Hacking and Sabotage Powers
Germany's cabinet approved legislation that would allow its intelligence agencies to hack foreign systems, sabotage supply chains, and disseminate false information to extremists within Germany. This overhaul of post-war spy laws is justified by a changing threat environment, including drone incidents and terrorist attacks.