رادار الحوادث: الاحتيال وتسريب البيانات وبرامج الفدية والغرامات
Daily radar of frauds, scams, data breaches, ransomware attacks, privacy fines and police operations in the US, Brazil and worldwide, each with date, sector, impact and source.
- — Binance hit by ~US$6.3bn crypto theft attributed to North Korea · ~US$ 6,3 bi. Early report: a DevOps engineer's laptop was compromised by TraderTraitor; ~US$3bn frozen. Possibly the largest crypto theft ever. المصدر: The Record; Help Net Security
- — Polymarket loses over US$2.1m to wallet drainer via DebugBear · > US$ 2,1 mi. Malicious code injected through third-party vendor DebugBear drained users' wallets at the prediction market. المصدر: The Record
- — Burger King Japan exposes 11 million records. The case was cited by The Record among the string of incidents hitting Japanese companies in 2026. المصدر: The Record
- — Brasscom: cybersecurity investment in Brazil to reach R$25.6bn in 2026 · R$ 25,6 bi (2026). Spending was R$22.2bn in 2025, projected at R$38.2bn in 2029; security is still only 6.4% of IT budgets, versus 8–12% abroad. المصدر: Brasscom, Relatório de Cibersegurança (via Teletime)
- — Sony Network Communications: So-net ISP breach exposes 2.6 million records. Sony's Japanese internet provider confirmed 2.6 million records were exposed. المصدر: Help Net Security
- — Japan Airlines warns of Amadeus-linked breach affecting 92,000 customers. The third-party system breach exposed about 92,000 customers, about 2,000 with passport data. المصدر: The Record
- — Belgium: cyberattack suspends MyMinfin ahead of tax deadline. FPS Finance suspended the tax portal after the attack; there was no sign of a data leak. المصدر: The Record
- — University of Copenhagen breach affects 525,000 people. The Danish university disclosed a breach involving data on 525,000 people. المصدر: Help Net Security (listagem)
- — Ransomware at New Mexico hospital diverts ambulances, cancels surgeries. The BYOD group's attack on the University of New Mexico Health Sciences Center disrupted care. المصدر: The Record
- — Russia: cyberattack shuts Poryadok stores for five days · 48 lojas; 5 dias offline. The 48-store home goods chain was offline for five days after the attack. المصدر: The Record
- — Capcom breach exposes 11.7 million accounts. The Japanese game developer had 11.7 million Capcom ID account records exposed. المصدر: Help Net Security
- — Quest Diagnostics: Quanum LSM intrusion hits patient data. The lab network confirmed the intrusion; the number of affected patients is still being determined. المصدر: The Record
- — Russia: FirstVDS hosting hit via VMmanager 6 flaw. Attackers exploited a VMmanager 6 flaw and stole credentials from the cloud provider. المصدر: The Record
- — Ahold Delhaize cyberattack takes systems offline, halts e-commerce. The grocery group shut down systems in the US and Europe; as of reporting there was no evidence of data theft. المصدر: The Record
- — ASOS notifies customers of data breach via app. The UK online retailer alerted customers to the breach; the number affected was not disclosed. المصدر: Help Net Security
- — Denmark: CPR population register breach affects 8.8 million. The incident at Denmark's civil register involves data on 8.8 million people, more than the country's current population. المصدر: Help Net Security (listagem)
- — Pentagon breach affects more than 3 million people · > 3 mi de pessoas. The US Department of Defense suffered a breach affecting over 3 million people, per a Help Net Security listing. المصدر: Help Net Security (listagem)
- — Poland: SQL injection in Qbusoft medical software exposes patients. Attackers exploited SQL injection in the medical software to access patient data. المصدر: Help Net Security
- — Japan: Helpfeel's Gyazo flaw exposes 23.6 million users. Exploitation of a flaw in the screenshot tool affected data of 23.6 million users. المصدر: Help Net Security
- — CenterPoint Energy probes breach after hacker claims. The US energy utility is investigating a breach claimed by a hacker; the scope was not disclosed. المصدر: Help Net Security
- — Revolut confirms customer data breach. The fintech, operating in the UK and EU, disclosed a breach; the number affected was not given. المصدر: Help Net Security
- — IDScan.net leak exposes 153 million driver's licenses. The identity verification company exposed data from 153 million driver's licenses. المصدر: Help Net Security
- — Trezor: shipping partner breach fuels phishing attacks. Data leaked from the crypto wallet maker's logistics partner is being used to phish customers. المصدر: Help Net Security
- — Australia: Metabase flaw exposes over 1 million Mathspace students and parents · > 1 mi de pessoas. The Australian edtech had data exposed through a vulnerability in the Metabase analytics tool. المصدر: Help Net Security
- — Thomson Reuters reveals breach exposing US and Canadian court records. The legal information company confirmed court records in both countries were exposed. المصدر: Help Net Security
- — Rhysida ransomware steals data from Berlin government network. The Rhysida group exfiltrated data from Berlin state's administrative network and is using it for extortion. المصدر: Help Net Security
- — McKesson: ShinyHunters claims theft of 284 million patient records · 284 mi de registros (alegado). The 284 million figure is the criminal group's claim and has not been confirmed by the healthcare company. المصدر: Help Net Security
- — Manchester Airports Group breach hits 'millions' of customers · milhões de clientes. The UK airport group reported a breach involving millions of customers, without an exact figure. المصدر: Help Net Security
- — Crypto wallet SafePal exposes order data of 39,798 customers. The breach hit customer order information at the hardware wallet maker. المصدر: Help Net Security
- — France: tax authority DGFiP breach affects 678,000 people. The Directorate General of Public Finances confirmed data on 678,000 taxpayers was exposed. المصدر: Help Net Security
- — Valve/Steam: CEVA Logistics attack exposes hardware order data. The attack on the logistics partner exposed Steam customers' names, addresses and orders. المصدر: Help Net Security
- — Pix scams have diverted at least R$24.5bn since 2022; only 8.9% returned · R$ 24,52 bi. Central Bank data compiled by O POVO+ show R$2.2bn returned between Jan/2022 and Apr/2026, with an average of 271,500 confirmed frauds a month. المصدر: Banco Central (via O POVO+)
- — Paidwork breach exposes 23 million users. The online paid-tasks platform had data of 23 million users exposed. المصدر: Help Net Security
- — Mexico: bank fraud rises 17% in Q1 2026. CONDUSEF received 1.515 million complaints in the quarter, up 31.5% year on year. المصدر: CONDUSEF (via Crónica)
- — Romania: cyberattack on land registry ANCPI and data put up for sale. The national cadastre and land registry agency was attacked and data was offered for sale; the volume was not disclosed. المصدر: Help Net Security
- — Brazil ranks 3rd for ransomware victims in June 2026. According to Ransomware.live, Brazil had 23 victims in the month, behind the US (199) and Germany (49); Mexico had 14. المصدر: Ransomware.live (via TI Inside)
- — Lidl customer data exposed through IT provider. The European supermarket chain was hit by a supply-chain attack on an IT supplier. المصدر: Help Net Security
- — Accenture data theft: attackers claim 35 GB · 35 GB (reivindicado). Criminals claim to have stolen 35 GB of data from the consultancy; the number affected was not disclosed. المصدر: Help Net Security
- — Gartner: global information security spending to reach US$248.2bn in 2026 · US$ 248,2 bi. Up 12.7% from 2025 (US$217.7bn); the 2030 forecast is US$371.9bn, with AI security jumping to US$37.6bn. المصدر: Gartner (via Software Strategies Blog)
- — UK fraud losses near £1.3bn in 2025 · ~£ 1,3 bi. There were over 4 million cases (+11%); APP fraud totaled £576.4m and investment scam losses rose 40%. المصدر: UK Finance Annual Fraud Report 2026 (via Financier Worldwide)
- — Deepfake fraud losses reach US$2.5bn in 2025 · US$ 2,5 bi. That is seven times 2024's US$335m; H1 2026 added US$764m, for a cumulative ~US$3.7bn. المصدر: Surfshark Research
- — Ransomware grows 17.8% worldwide; Brazil is the 9th most targeted country. ISH Tecnologia counted 7,410 confirmed victim companies in 2025. المصدر: ISH Tecnologia (via Estado de Minas)
- — Brazil records 2.26 million fraud cases in 2025, up 430% since 2018. The Public Security Yearbook shows a rate of 1,059 per 100,000; 26.3 million people fell for online or phone scams in 12 months. المصدر: FBSP, Anuário Brasileiro de Segurança Pública (via Brasil 61)
- — Xsolis phishing attack leads to breach of 1.4 million people's data. The healthcare technology firm attributed the breach to a phishing attack. المصدر: Help Net Security
- — Dashlane brute-force attack obtains customers' encrypted vaults. Attackers brute-forced accounts at the password manager; the number of affected vaults was not disclosed. المصدر: Help Net Security
- — Carnival Corporation confirms breach of 6 million customers' data. The cruise operator said the breach exposed data of 6 million customers. المصدر: Help Net Security
- — Dutch police arrest suspect in AFC Ajax hack. The intrusion exposed 300,000 fan records at the Amsterdam club. المصدر: Help Net Security
- — 7-Eleven: ShinyHunters exposes data of 185,000 people. The breach attributed to ShinyHunters affected 185,000 people, with impact in Japan and the US. المصدر: Help Net Security
- — Ransomware complaints to the FBI rise to 3,611; reported losses top US$32m · > US$ 32 mi. In 2024 there were 3,156 complaints and ~US$12m. Akira, Qilin and INC/Lynx top the most-reported variants. المصدر: FBI IC3 2025 (via The Record)
- — Investment fraud leads IC3 losses at US$8.65bn in 2025 · US$ 8,65 bi. There were 72,984 complaints, up from 47,919 in 2024; crypto investment fraud alone totaled US$7.2bn. المصدر: FBI IC3 2025 (cópia do PDF via Finsiders Brasil)
- — US seniors lose US$7.7bn to scams, up 59% · US$ 7,75 bi. Victims aged 60+ filed 201,266 complaints (+37%), with an average loss of US$38,500. المصدر: FBI IC3 2025 (cópia do PDF via Finsiders Brasil)
- — Crypto-linked losses reach US$11.4bn in the US in 2025 · US$ 11,37 bi. IC3 logged 181,565 crypto-related complaints, with losses 22% above 2024 (US$9.32bn). المصدر: FBI IC3 2025 (cópia do PDF via Finsiders Brasil)
- — Business email compromise costs US firms US$3.05bn · US$ 3,05 bi. IC3 received 24,768 BEC complaints in 2025, with losses of US$3,046,598,558. المصدر: FBI IC3 2025 (cópia do PDF via PPC Land)
- — FBI counts 22,300 AI-related complaints and US$893m in losses · US$ 893,3 mi. The IC3 annual report flags complaints with an AI component: 22,364 cases and US$893.3m. المصدر: FBI IC3 2025 (cópia do PDF via PPC Land)
- — FBI IC3: internet crime losses hit record US$20.9bn in 2025 · US$ 20,9 bi. Losses rose 26% year on year and complaints topped 1 million (1,008,597); cyber-enabled fraud made up 85% of the total. المصدر: FBI IC3 2025 (via Help Net Security)
- — FTC: social media scam losses are 8x higher than in 2020. Social media is the contact method with the highest losses; SMS is the most used channel. المصدر: FTC Data Spotlight
- — FTC: US consumers report US$15.9bn in fraud losses in 2025 · US$ 15,9 bi. There were 3 million reports; investment scams led losses (US$7.9bn) and impostor scams topped US$3.5bn. المصدر: FTC (depoimento ao Joint Economic Committee)
- — Latin American organizations face twice as many cyberattacks as US ones · ~3.100 ataques/semana. In March 2026 there were ~3,100 weekly attacks per organization in the region, versus just under 1,500 in the US. المصدر: Check Point (via Dark Reading)
- — Australia: scam losses rise 7.8% to over A$2bn in 2025 · A$ 2,18 bi. Losses were A$2.18bn across 481,523 reports; investment scams totaled A$837.7m. The peak was A$3.1bn in 2022. المصدر: ACCC / National Anti-Scam Centre, Targeting Scams 2025
- — Singapore: scams and cybercrime fall by almost a quarter in 2025 · S$ 913,1 mi. There were 41,974 cases (−24.8%) and losses of S$913.1m, versus S$1.1bn in 2024; about S$140m was recovered. المصدر: Singapore Police Force
- — ITRC: US logs record 3,322 data compromises in 2025 · 3.322 comprometimentos. Victim notices fell to 278.8 million; 70% of notices did not disclose the attack vector. المصدر: ITRC 2025 Annual Data Breach Report
- — Latin America posts the world's largest rise in cyberattacks in December · 3.065 ataques/semana. Organizations in the region faced an average of 3,065 attacks a week (+26%), versus a global average of 2,027. المصدر: Check Point Research (via Intelligent CIO)
- — Sophos: median ransom demand in Brazil rises to US$640,000 · US$ 640 mil (mediana). Malicious email is the root cause in 37% of cases, the highest of any country studied; average recovery cost was US$1.05m. المصدر: Sophos, State of Ransomware in Brazil 2026
- — Pix MED disputes nearly triple after new dispute button · 3,5 mi de contestações (out/25). An average of 1.3m a month in Jan–Aug 2025, versus 3.5m in October and 3.4m in November; refunds remain 7–9% of the disputed amount. المصدر: Banco Central (via Economic News Brasil)
- — Ransomware hits record in 2025 with 7,458 victims and 124 active groups · 7.458 vítimas. Of the 124 groups, 73 are new; the US accounts for 1,536 victims, followed by Canada (182) and Germany (167). Qilin dominates. المصدر: Searchlight Cyber (via TechRadar)
- — US healthcare logs 805 breaches and 138.5 million people affected in 2025. The highest breach count in the HHS series (≥500 people per case); 2024 had 741 breaches and over 289 million people. المصدر: HHS OCR (via HIPAA Journal)
- — GuidePoint: ransomware victims grow 58% as Qilin leads with 1,044 attacks. Q4 2025 had 2,287 victims, the largest quarter on record; the number of groups rose 46% to 124. المصدر: GuidePoint Security, GRIT 2026 Report
- — APWG: phishing hits record 1.13 million attacks in Q2 2025 · 1,13 mi (2T25). Volume fell to 853,000 in Q4; social media and SaaS/webmail were the most targeted sectors (20.3% each). المصدر: APWG Phishing Activity Trends Q4 2025
- — EBA-ECB: payment fraud in Europe rises to €4.2bn · € 4,2 bi. Card fraud grew 29% (€1.33bn) and credit transfer fraud 16% (€2.2bn), with users bearing ~85% of losses. المصدر: EBA-ECB 2025 Report on Payment Fraud (via Banque de France)
- — Check Point: 1 in 27 GenAI prompts carries high data-leak risk. In December 2025, 91% of organizations had high-risk prompts. المصدر: Check Point (via IT Edge News)
- — Fake-sale scam soars 314% and leads bank customer reports in Brazil. In H1 2025 there were 174,000 fake-sale reports and 139,000 fake call-center reports (+195.7%); WhatsApp scams fell 9.9%. المصدر: Febraban (via Diario de Pernambuco)
- — Fintech Prosper suffers breach affecting 17.6 million. Lending platform Prosper Funding reported a Q4 2025 breach affecting 17.6 million people. المصدر: ITRC 2025 Annual Data Breach Report
- — 700Credit breach exposes financial data of 5.6 million. The financial services firm reported a Q4 2025 breach with 5.6 million victims. المصدر: ITRC 2025 Annual Data Breach Report
- — GASA: scams took about US$442bn from victims worldwide in 12 months · ~US$ 442 bi. Survey of 46,000 adults in 42 markets: 57% faced a scam attempt and 23% lost money; South America has 72% exposure. المصدر: GASA e Feedzai, Global State of Scams 2025
- — Serasa: Brazil logs 10.9 million fraud attempts through September, up 28.6% · 10,9 mi de tentativas. That is one attempt every 2.2 seconds, with more than 14 million projected for the year; the Federal District leads per capita (8,559 per million). المصدر: Serasa Experian, Indicador de Tentativas de Fraude
- — More than 24 million Brazilians fell for Pix scams in 12 months · ~R$ 29 bi. The FBSP survey estimates losses of about R$29bn between Jul/2024 and Jun/2025. المصدر: FBSP (via Rádio Senado)
- — Kaspersky blocks 553 million phishing attacks in Brazil in 12 months · 553 mi bloqueios. That's 1.5 million a day and 42.8% of Latin America's total, where blocks grew 85% to 1.29bn. المصدر: Kaspersky, Panorama de Ameaças 2025 (via InfoMoney)
- — Brazil is Latin America's No. 1 ransomware target, says Kaspersky · 549 mil tentativas. There were 549,000 blocked attempts (+12%) between Aug/2024 and Jun/2025, 1,664 a day and over half the regional total. المصدر: Kaspersky, Panorama de Ameaças 2025 (via Hardware.com.br)
- — Sophos: median ransom paid halves to US$1m · US$ 1 mi (mediana). About half of companies paid a ransom; average recovery cost fell from US$2.73m to US$1.53m. المصدر: Sophos, State of Ransomware 2025
- — Pix MED returned R$459m of R$6.98bn disputed · R$ 459 mi devolvidos. Through June 2025 there were about 5 million refund requests, 31% accepted, according to the Central Bank. المصدر: Banco Central (via Jovem Pan)