
Vanderbilt restores systems after attack; BYOD claims data theft
The university has not confirmed what data was accessed and says full restoration could take several weeks.
65 stories, newest first · one card per story

The university has not confirmed what data was accessed and says full restoration could take several weeks.

The gang claims about 100GB from the former LF Logistics platform, while Maersk says operations are unaffected.
Files were copied between July 10 and July 27, 2026, and the hospital still cannot say which information was involved.
The company says the issue is isolated to a system from a prior acquisition and does not expect operational impact.
The article body did not load, so the claim is unconfirmed and no data types or response are stated.
Norad's grant portal had 20614 user accounts compromised with names and emails stolen
Cursor says the listing was live about eleven hours and may have reached 5,000 users before the marketplace was taken offline.

The Byod gang claims it stole patient and employee data from 36,000 systems; UNM says core systems were not breached.

Other listed targets included Taiwan, Hong Kong, the UK, France, Italy, Qatar, and Colombia.

Ambulances were diverted Monday and clinics resume Tuesday; BYOD’s theft and 36,000-machine claims are unconfirmed.

About 90 organizations were hit from September 2025; extortion demands totaled 360 million won, not confirmed payments.

Police say seven suspects hit more than 90 organizations; ransom was demanded in 38 cases, and only the leader remains detained.

The October 25 leak-site post is unverified, with no shown encryption or disruption of brewing operations.

The unverified listing cites 108,426 files and a roughly five-day publication countdown; encryption is not shown.

SafePay ransomware has compromised at least 600 organizations since August 2024 by exploiting exposed VPNs, remote access and backup servers.

Edward Dubrovsky was arrested October 8; sources say shinywire.com listed nearly 100 organizations through October 16.

ThreatLabz cites 896.2 TB stolen by the top 10 groups and a healthcare payment of $2 million with no encryption.
Malware mounted some customers' virtual disks read-only and copied passwords, credentials, configs and wallets without stopping the servers.

A threat actor used the ARTEX agentic pentest framework to steal financial PII from South Korean institutions.

CrowdStrike says a Chinese-speaking actor used ARTEX and LLMs to breach South Korean banks and steal data for sale.

Leaked Silent Ransom Group chats indicate $206.95 million extorted from 27 firms, mostly law firms, via data theft and publication threats without encryption.
Joint advisory says Integrity Technology Group-enabled Chinese actors steal data from critical infrastructure using botnets and hands-on hacking.

CrowdStrike says a financially motivated operator used agentic AI to breach South Korean banks and steal data.
Silent Ransom Group allegedly made over $200 million in six months by extorting victims without encrypting systems.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views