Hackmanac Cyber Alerts

🚨Cyberattack Alert ‼️ 🇺🇸USA - Sunsweet RansomHub hacking group claims to have breached Sunsweet. Allegedly, 275 GB of data were exfiltrated. Ransom deadline: 15th March 2025.

🚨DDoS Alert ‼️ 🇪🇸Spain - The pro-Russian hacktivist group NoName057(16) continues its DDoS campaign against multiple Spanish governmental institutions, targeting city councils, provincial councils, and public infrastructure. Today's attacks include: - Ayuntamiento de Donostia - Ayuntamiento de Irun - Diputación de Gipuzkoa - Ayuntamiento de Hondarribia - Ayuntamiento de Zaragoza - Tranvía de Zaragoza - Provincia de Huesca - Comunidad Autónoma de Castilla-La Mancha - Diputación de Albacete - Diputación de Girona - Diputación de Ciudad Real - Diputación de Toledo

🚨Data Breach Alert‼️ 🇸🇦Saudi - Saudi Arabia’s General Intelligence Presidency (GIP) The threat actor known as The_Sn1p3r claims to be selling 11GB of classified data allegedly stolen from Saudi Arabia’s General Intelligence Presidency (GIP). The data set reportedly includes: - Phone numbers of current and former GIP employees - Front and back copies of IDs - Confidential communications with foreign intelligence agencies - Secret internal files from GIP servers - Full list of past and present GIP personnel The confirmation or denial of these claims has yet to be verified

🇯🇵Japan - Tokushima Prefecture Between February 22 and February 27, 2025, an unidentified third party exploited the Tokushima Prefecture Board of Education's email server to send approximately 1.4 million spam emails, including 137 million messages to non-existent addresses. The emails contained non-Japanese subject lines, making them easily identifiable as spam. More details: https://www.pref.tokushima.lg.jp/ippannokata/kyoiku/gakkokyoiku/7302132/

🚨Cyberattack Alert ‼️ 🇧🇷Brazil - Pampili Nation Fog hacking group claims to have breached Pampili Nation. Allegedly, 36.3 GB of data were exfiltrated, including internal financial documents, corporate confidential documents, customer and employee contacts, and employee CPF numbers.

🚨Smishing Alert ‼️ 🇪🇸Spain - The Guardia Civil has warned about a new SMS phishing (Smishing) scam exploiting weather alerts in Spain. Cybercriminals send fraudulent messages with a malicious link pretending to be from AEMET (Spanish Meteorological Agency), leading victims to download a fake AEMET app that requests personal data. Authorities advise users to avoid clicking on suspicious links and verify official communications through AEMET’s official website.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - PFS Grupo Qilin hacking group claims to have breached PFS Grupo. Allegedly, the attack led to the exfiltration of audit plans, curriculums, invoices, and other documents. A sample of the stolen data has been leaked.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 26 Feb - 04 Mar 2025 ⚠️653 cyber attacks across 56 countries ⚠️ ➡️The most active threat actor last week was Cl0p claiming responsibility for 228 cyber attacks. ➡️The USA is the most affected country, accounting for 38.7% of incidents, with 253 cyber attacks. ➡️The Gov / Mil / LE sector is the most impacted, accounting for 29.2% of incidents with 191 cyber attacks. ➡️The estimated Critical cyber attacks account to 215(32.9% of the total). ➡️Overall, the claimed compromised data amounts to approximately 30.9TB. Follow the link for the list of attacks (claimed or disclosed): https://hackmanac.com/news/hack-tuesday-week-26-feb-04-mar-2025 #Hackmanac #HT #Cybersecurity

🚨Cyberattack Alert ‼️ 🇲🇹Malta - Seabank Group Lynx hacking group claims to have breached Seabank Group. Allegedly, 700 GB of users data, business data, employee data, production data, and financial data were exfiltrated.

🚨Cyberattack Alert ‼️ 🇮🇳India - Tata Technologies Hunters International hacking group claims to have breached Tata Technologies. Allegedly, 1.4 TB (730,160 files) of data were exfiltrated. Ransom deadline: 11th March 2025.

🚨Cyber Attack Alert ‼️ 🇵🇱Poland - Cyberattack detected at Polish space agency https://www.reuters.com/world/europe/cyberattack-detected-polish-space-agency-minister-says-2025-03-02/

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Utsunomiya Central Clinic Qilin hacking group claims responsibility for the cyberattack on Utsunomiya Central Clinic. Allegedly, 140 GB (178,319 files) of data were exfiltrated, including X-ray data, patients' data, medical records, radiology data, medical examinations, BOD secretary data, ECG and ECG-Holter data, specific medical examinations, and various medical data related to Japanese citizens. A sample has been leaked. Utsunomiya Central Clinic suffered a ransomware attack on February 10, 2025, leading to unauthorized access to its servers and a possible data breach affecting up to 300,000 individuals.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - La Unión INC Ransom ransomware group claims to have breached La Unión. A sample of the leaked data has been published.

🚨Data Leak Alert ‼️ 🇪🇸Spain - Servicios CCOO As promised, Hunters International leaked all 570 GB stolen from Servicios CCOO.

🚨Cyber Attack Alert ‼️ 🇦🇷Argentina - Fabricaciones Militares Sociedad del Estado Monti hacking group claims to have breached and leaked the data belonging to Fabricaciones Militares Sociedad del Estado.

🚨Cyberattack Alert ‼️ 🇺🇸USA: La-Z-Boy Trinity hacking group claims to have breached La-Z-Boy, an American furniture manufacturer. The company employs more than 11,000 people.

🚨Data Breach Alert‼️ 🇪🇸Spain - LEGÁLITAS A threat actor known as DNI claims to be selling data allegedly exfiltrated from legalitas[.]com, a Spanish legal services company. The breach reportedly affects 125 clients and includes sensitive personal and financial information. The leaked dataset allegedly contains: - Front and back copies of DNI (Spanish national ID) - Bank account details, including IBAN, full names, and DNI numbers The authenticity of the breach remains unverified.

Exclusive: Hegseth orders Cyber Command to stand down on Russia planning https://therecord.media/hegseth-orders-cyber-command-stand-down-russia-planning

🚨Data Leak Alert ‼️ 🇲🇽Mexico - National Institute of Anthropology and History (INAH) A threat actor known as ByteRev0luti0n claims to have leaked a dataset allegedly stolen from the National Institute of Anthropology and History (INAH) of Mexico. The data was reportedly obtained through DIT[.]MX The dataset allegedly contains over 23 million lines of data.

🚨Data Breach Alert‼️ 🇫🇷France - French Football Federation (FFF) The threat actor known as Lanvin claims to have leaked data allegedly stolen from the French Football Federation (FFF). The breach reportedly occurred in February 2025, affecting over 43,000 users, including well-known referees such as François Letexier. The leaked dataset allegedly includes: -43,000 unique email addresses -Full names (first and last names) The authenticity of the leak remains unverified.