Hackmanac Cyber Alerts

🚨Data Breach Alert 🇪🇸 🇪🇸Spain - RESA RESA, Spain's largest operator of student residences, has disclosed a data breach that occurred in March 2025 due to unauthorized access by a third party. The compromised data includes identification and contact information (name, surname, nationality, email address, phone number, postal address), identity document numbers (DNI) or passport numbers, and bank account numbers (IBAN). More details: https://bandaancha.eu/foros/filtracion-datos-clientes-resa-1756318 Thanks to @Rokitelikua for the report.

🚨🚨Cyber Attack Alert‼️ 🇦🇺Australia - At least $500,000 stolen from Australian super fund cyberattack Several superannuation funds have been impacted by a coordinated cyberattack, resulting in financial losses for some members due to a password breach. Customers of Australian Retirement Trust, AustralianSuper, Hostplus, Rest, and Insignia have been affected. Members are advised to promptly contact their fund if they detect any unusual activity in their account. More details: https://www.9news.com.au/national/super-funds-hit-in-apparent-cyber-attack/bb29f397-c409-4ff7-8a3a-f9603e06e4ce?ocid=Social-9News

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Yuma Spazio S.L. Qilin hacking group claims to have breached Yuma Spazio S.L. Allegedly, 77 GB of data were exfiltrated. Ransom deadline: 14th Apr 2025.

Fake Passport Generated by ChatGPT Bypasses Security https://securityexpress.info/fake-passport-generated-by-chatgpt-bypasses-security/

🚨Data Breach Alert‼️ 🇪🇸Spain - Naturgy The threat actor known as "crocs" claims to be selling a database of 2.5 million rows exfiltrated from Naturgy. According to the post, the stolen information includes data such as DNI, full name, IBAN, address, email, etc.

🚨Cyber Attacks Alert‼️ Akira hacking group has published a post listing 6 victims from March: 🇪🇸 Spain - Comunicaciones Unidas del Sur - CSUR 🇮🇹 Italy - Grandi Molini Italiani 🇧🇷 Brazil - TRANSPORTES CARVALHO 🇨🇭 Switzerland - Alghisi Treuhand 🇬🇷 Greece - ΜΙΝΩΑΣ 🇺🇸 USA - Cesaroni Design

🟧 #HackTuesday 🟧 Hack Tuesday: Week 26 Mar - 01 Apr 2025 ⚠️457 cyber attacks across 45 countries ⚠️ ➡️The most active threat actor last week was NoName057(16) claiming responsibility for 88 cyber attacks. ➡️The 🇺🇸USA is the most affected country, accounting for 26.5% of incidents, with 121 cyber attacks. ➡️The Gov / Mil / LE sector is the most impacted, accounting for 14.7% of incidents with 67 cyber attacks. ➡️The estimated Critical cyber attacks account to 13(2.8% of the total). ➡️Overall, the claimed compromised data amounts to approximately 20TB. Follow the link for the list of attacks (claimed or disclosed): https://hackmanac.com/news/hack-tuesday-week-26-mar-01-apr-2025 #Hackmanac #HT #Cybersecurity

🚨 Cyber Attack Alert 🚨 🇮🇹 Italy - Prima Power Akira hacking group claims to have breached Prima Power. According to the post, the exfiltrated information includes corporate NDAs and financial data.

🚨 New version of HackRisk.io just launched! Strategic Threat Intelligence based on real-world cyber attacks — built for CISOs, SOC teams, analysts and insurers. 🔍 What’s inside: ✅ Free dashboard (3-month view) ✅ Real-time Threat Feed ✅ Threat Actor insights: who, what, where ✅ Trends by industry & country 🎁 Use code: WELCOME20 to get 20% OFF (valid 1 month) 👉 https://hackrisk.io Let us know what you think — this version is just the beginning 🚀

🚨Cyber Attack Alert ‼️ 🇮🇹Italy - A cyberattack targeted the Plus Service company, disrupting the Telemaco electronic ticketing platform used by over 150 public transport companies in Italy, including Mobilità di Marca (Mom). The attack paralyzed services for two days starting March 30, 2025, during a critical time for school and work subscription renewals. https://www.tribunatreviso.it/cronaca/mon-hacker-attacco-biglietti-xueo4que

🚨 New! You can now comment on all our alerts and updates. We’ve just launched the Hackmanac Community — a dedicated space for SOC teams, cybersecurity analysts, threat researchers and curious minds to discuss: 🧠 Threat actors & tactics 📊 Trends in cyber attacks 🛠 Strategic threat intelligence workflows 💬 And everything we post here! Every new alert or update will now include a Comment button 👇 Feel free to share your thoughts, ask questions or start a thread. 👉 Join the discussion here: https://t.me/hackmanaccommunity

🚨🚨🚨Cyber Attack Alert ‼️ 🇸🇦 Saudi Arabia - Royal Saudi Air Force Kill Security hacking group claims to have breached the Royal Saudi Air Force. Ransom deadline for 10th April 2025.

🚨Data Breach Alert‼️ 🇸🇦Saudi - Saudi Pro League The threat actor known as antisocial claims to have breached spl[.]com[.]sa, the official website of the Saudi Pro League, in March 2025, compromising personal data from over 300,000 records. According to the post, the exposed information includes full passport names, passport numbers, MD5-hashed passwords, emails, personnel IDs, old passwords, and data on team players and their assigned clubs.

🚨Cyber Attack Alert ‼️ 🇪🇸 Spain - STE Group Akira ransomware group claims to have breached STE Group, allegedly exfiltrating more than 30 GB of data, including corporate NDAs, financial data (audits, payment details, reports), contact numbers and email addresses of employees and customers, and more.

📅 World Backup Day: 3 Reasons to Keep Reliable Backups (and Separate from Your Main IT Systems!): 1️⃣ Technology isn't infallible We increasingly rely on devices that inevitably break or fail unexpectedly. Regular, reliable backups protect you from losing critical data when tech lets you down. 2️⃣ Human error happens Accidental deletions, lost devices, or incorrect procedures—mistakes happen. Effective backups ensure these errors don’t become permanent disasters. 3️⃣ Expect the unexpected Malware, especially ransomware, affects millions yearly. Data breaches, theft, or unexpected failures are common realities. Being unprepared can cost your business data, money, trust, and reputation. #WorldBackupDay #CyberSecurity #Backup #Malware #CyberSecurityAwareness #hackmanac

🚨X (Twitter): 2.8 Billion Users Compromised (?) A threat actor known as "ThinkingOne" claims that 400GB of information on 2,873,410,842 Twitter (X) users was leaked in January 2025. The first thing that comes to mind is: - Woah, this is massive The second thing that comes to mind is: - But does X even have 2.8 billion users?? However, since the database was leaked for free, detailed analyses are unlikely to take long to emerge.

🚨Cyberattack Alert‼️ 🇪🇸 Spain – Pere Claver Grup RALord hacking group claims to have breached Pere Claver Grup, allegedly exfiltrating 5 GB of data, including secret reports, private plans, credentials and other information, Excel files, project sources, documents, PDFs, payments, projects, and source codes.

Malaysia Airports Holdings Bhd system hacked, US$10 million demanded, says Prime Minister https://www.dailyexpress.com.my/news/255002/malaysia-airports-holdings-bhd-system-hacked-us-10-million-demanded-says-prime-minister/

Another double #RiskFriday! 🚀 👉 Explore this and last week's insights⤵️ ✅ We analysed 382 cyber attacks last week (-19% compared to previous week) and 574 this week (+50%) ✅ Wholesale / Retail was the most impacted industry last week (+10% and an average ESIX© of 4.68 ), while this week is Agriculture / Forestry / Fishing (+54% and average ESIX© 4.25) ✅ Healthcare is stable in second place among the most impacted industries in both weeks ✅ Micronesia (average ESIX© 6.57) and Costa Rica (average ESIX© 5.52) were the new entries last week and the most impacted countries, while Canada saw the biggest difference compared to previous week (+21%) ✅ Sri Lanka is the new entry of this week and the most impacted country (average ESIX© 6.17) ✅ South Africa grew by 81% compared to previous week (average ESIX© 6.07) Discover with us the evolution of: 📈 Global Average ESIX© score 🔄 ESIX© changes compared to the previous week 🏭 Top 5 impacted industries (with highest average ESIX©) 🌍 Top 5 impacted countries (with highest average ESIX©) 📆 Weekly, monthly, and quarterly ESIX© variations Stay informed with our actionable strategic intelligence insights discovering how the global threat landscape evolves and impacts different industries and regions. #CyberThreatIntelligence #StrategicCyberThreatIntelligence #ESIX #Hackmanac #HackRisk #CyberSecurity

🟧 #HackTuesday 🟧 Hack Tuesday: Week 19 - 25 March 2025 ⚠️574 cyber attacks across 54 countries ⚠️ ➡️The most active threat actor last week was NoName057(16) claiming responsibility for 135 cyber attacks. ➡️The 🇺🇸USA is the most affected country, accounting for 20.9% of incidents, with 120 cyber attacks. ➡️The Gov / Mil / LE sector is the most impacted, accounting for 31.9% of incidents with 183 cyber attacks. ➡️The estimated Critical cyber attacks account to 12(2.1% of the total). ➡️Overall, the claimed compromised data amounts to approximately 21.4TB. Follow the link for the list of attacks (claimed or disclosed): https://hackmanac.com/news/hack-tuesday-week-19-25-march-2025 #Hackmanac #HT #Cybersecurity