Cyber incident radar: frauds, breaches, ransomware and fines
Daily radar of frauds, scams, data breaches, ransomware attacks, privacy fines and police operations in the US, Brazil and worldwide, each with date, sector, impact and source.
- — Binance hit by ~US$6.3bn crypto theft attributed to North Korea · ~US$ 6,3 bi. Early report: a DevOps engineer's laptop was compromised by TraderTraitor; ~US$3bn frozen. Possibly the largest crypto theft ever. Source: The Record; Help Net Security
- — Polymarket loses over US$2.1m to wallet drainer via DebugBear · > US$ 2,1 mi. Malicious code injected through third-party vendor DebugBear drained users' wallets at the prediction market. Source: The Record
- — Burger King Japan exposes 11 million records. The case was cited by The Record among the string of incidents hitting Japanese companies in 2026. Source: The Record
- — Brasscom: cybersecurity investment in Brazil to reach R$25.6bn in 2026 · R$ 25,6 bi (2026). Spending was R$22.2bn in 2025, projected at R$38.2bn in 2029; security is still only 6.4% of IT budgets, versus 8–12% abroad. Source: Brasscom, Relatório de Cibersegurança (via Teletime)
- — Sony Network Communications: So-net ISP breach exposes 2.6 million records. Sony's Japanese internet provider confirmed 2.6 million records were exposed. Source: Help Net Security
- — Japan Airlines warns of Amadeus-linked breach affecting 92,000 customers. The third-party system breach exposed about 92,000 customers, about 2,000 with passport data. Source: The Record
- — Belgium: cyberattack suspends MyMinfin ahead of tax deadline. FPS Finance suspended the tax portal after the attack; there was no sign of a data leak. Source: The Record
- — University of Copenhagen breach affects 525,000 people. The Danish university disclosed a breach involving data on 525,000 people. Source: Help Net Security (listagem)
- — Ransomware at New Mexico hospital diverts ambulances, cancels surgeries. The BYOD group's attack on the University of New Mexico Health Sciences Center disrupted care. Source: The Record
- — Russia: cyberattack shuts Poryadok stores for five days · 48 lojas; 5 dias offline. The 48-store home goods chain was offline for five days after the attack. Source: The Record
- — Capcom breach exposes 11.7 million accounts. The Japanese game developer had 11.7 million Capcom ID account records exposed. Source: Help Net Security
- — Quest Diagnostics: Quanum LSM intrusion hits patient data. The lab network confirmed the intrusion; the number of affected patients is still being determined. Source: The Record
- — Russia: FirstVDS hosting hit via VMmanager 6 flaw. Attackers exploited a VMmanager 6 flaw and stole credentials from the cloud provider. Source: The Record
- — Ahold Delhaize cyberattack takes systems offline, halts e-commerce. The grocery group shut down systems in the US and Europe; as of reporting there was no evidence of data theft. Source: The Record
- — ASOS notifies customers of data breach via app. The UK online retailer alerted customers to the breach; the number affected was not disclosed. Source: Help Net Security
- — Denmark: CPR population register breach affects 8.8 million. The incident at Denmark's civil register involves data on 8.8 million people, more than the country's current population. Source: Help Net Security (listagem)
- — Pentagon breach affects more than 3 million people · > 3 mi de pessoas. The US Department of Defense suffered a breach affecting over 3 million people, per a Help Net Security listing. Source: Help Net Security (listagem)
- — Poland: SQL injection in Qbusoft medical software exposes patients. Attackers exploited SQL injection in the medical software to access patient data. Source: Help Net Security
- — Japan: Helpfeel's Gyazo flaw exposes 23.6 million users. Exploitation of a flaw in the screenshot tool affected data of 23.6 million users. Source: Help Net Security
- — CenterPoint Energy probes breach after hacker claims. The US energy utility is investigating a breach claimed by a hacker; the scope was not disclosed. Source: Help Net Security
- — Revolut confirms customer data breach. The fintech, operating in the UK and EU, disclosed a breach; the number affected was not given. Source: Help Net Security
- — IDScan.net leak exposes 153 million driver's licenses. The identity verification company exposed data from 153 million driver's licenses. Source: Help Net Security
- — Trezor: shipping partner breach fuels phishing attacks. Data leaked from the crypto wallet maker's logistics partner is being used to phish customers. Source: Help Net Security
- — Australia: Metabase flaw exposes over 1 million Mathspace students and parents · > 1 mi de pessoas. The Australian edtech had data exposed through a vulnerability in the Metabase analytics tool. Source: Help Net Security
- — Thomson Reuters reveals breach exposing US and Canadian court records. The legal information company confirmed court records in both countries were exposed. Source: Help Net Security
- — Rhysida ransomware steals data from Berlin government network. The Rhysida group exfiltrated data from Berlin state's administrative network and is using it for extortion. Source: Help Net Security
- — McKesson: ShinyHunters claims theft of 284 million patient records · 284 mi de registros (alegado). The 284 million figure is the criminal group's claim and has not been confirmed by the healthcare company. Source: Help Net Security
- — Manchester Airports Group breach hits 'millions' of customers · milhões de clientes. The UK airport group reported a breach involving millions of customers, without an exact figure. Source: Help Net Security
- — Crypto wallet SafePal exposes order data of 39,798 customers. The breach hit customer order information at the hardware wallet maker. Source: Help Net Security
- — France: tax authority DGFiP breach affects 678,000 people. The Directorate General of Public Finances confirmed data on 678,000 taxpayers was exposed. Source: Help Net Security
- — Valve/Steam: CEVA Logistics attack exposes hardware order data. The attack on the logistics partner exposed Steam customers' names, addresses and orders. Source: Help Net Security
- — Pix scams have diverted at least R$24.5bn since 2022; only 8.9% returned · R$ 24,52 bi. Central Bank data compiled by O POVO+ show R$2.2bn returned between Jan/2022 and Apr/2026, with an average of 271,500 confirmed frauds a month. Source: Banco Central (via O POVO+)
- — Paidwork breach exposes 23 million users. The online paid-tasks platform had data of 23 million users exposed. Source: Help Net Security
- — Mexico: bank fraud rises 17% in Q1 2026. CONDUSEF received 1.515 million complaints in the quarter, up 31.5% year on year. Source: CONDUSEF (via Crónica)
- — Romania: cyberattack on land registry ANCPI and data put up for sale. The national cadastre and land registry agency was attacked and data was offered for sale; the volume was not disclosed. Source: Help Net Security
- — Brazil ranks 3rd for ransomware victims in June 2026. According to Ransomware.live, Brazil had 23 victims in the month, behind the US (199) and Germany (49); Mexico had 14. Source: Ransomware.live (via TI Inside)
- — Lidl customer data exposed through IT provider. The European supermarket chain was hit by a supply-chain attack on an IT supplier. Source: Help Net Security
- — Accenture data theft: attackers claim 35 GB · 35 GB (reivindicado). Criminals claim to have stolen 35 GB of data from the consultancy; the number affected was not disclosed. Source: Help Net Security
- — Gartner: global information security spending to reach US$248.2bn in 2026 · US$ 248,2 bi. Up 12.7% from 2025 (US$217.7bn); the 2030 forecast is US$371.9bn, with AI security jumping to US$37.6bn. Source: Gartner (via Software Strategies Blog)
- — UK fraud losses near £1.3bn in 2025 · ~£ 1,3 bi. There were over 4 million cases (+11%); APP fraud totaled £576.4m and investment scam losses rose 40%. Source: UK Finance Annual Fraud Report 2026 (via Financier Worldwide)
- — Deepfake fraud losses reach US$2.5bn in 2025 · US$ 2,5 bi. That is seven times 2024's US$335m; H1 2026 added US$764m, for a cumulative ~US$3.7bn. Source: Surfshark Research
- — Ransomware grows 17.8% worldwide; Brazil is the 9th most targeted country. ISH Tecnologia counted 7,410 confirmed victim companies in 2025. Source: ISH Tecnologia (via Estado de Minas)
- — Brazil records 2.26 million fraud cases in 2025, up 430% since 2018. The Public Security Yearbook shows a rate of 1,059 per 100,000; 26.3 million people fell for online or phone scams in 12 months. Source: FBSP, Anuário Brasileiro de Segurança Pública (via Brasil 61)
- — Xsolis phishing attack leads to breach of 1.4 million people's data. The healthcare technology firm attributed the breach to a phishing attack. Source: Help Net Security
- — Dashlane brute-force attack obtains customers' encrypted vaults. Attackers brute-forced accounts at the password manager; the number of affected vaults was not disclosed. Source: Help Net Security
- — Carnival Corporation confirms breach of 6 million customers' data. The cruise operator said the breach exposed data of 6 million customers. Source: Help Net Security
- — Dutch police arrest suspect in AFC Ajax hack. The intrusion exposed 300,000 fan records at the Amsterdam club. Source: Help Net Security
- — 7-Eleven: ShinyHunters exposes data of 185,000 people. The breach attributed to ShinyHunters affected 185,000 people, with impact in Japan and the US. Source: Help Net Security
- — Ransomware complaints to the FBI rise to 3,611; reported losses top US$32m · > US$ 32 mi. In 2024 there were 3,156 complaints and ~US$12m. Akira, Qilin and INC/Lynx top the most-reported variants. Source: FBI IC3 2025 (via The Record)
- — Investment fraud leads IC3 losses at US$8.65bn in 2025 · US$ 8,65 bi. There were 72,984 complaints, up from 47,919 in 2024; crypto investment fraud alone totaled US$7.2bn. Source: FBI IC3 2025 (cópia do PDF via Finsiders Brasil)
- — US seniors lose US$7.7bn to scams, up 59% · US$ 7,75 bi. Victims aged 60+ filed 201,266 complaints (+37%), with an average loss of US$38,500. Source: FBI IC3 2025 (cópia do PDF via Finsiders Brasil)
- — Crypto-linked losses reach US$11.4bn in the US in 2025 · US$ 11,37 bi. IC3 logged 181,565 crypto-related complaints, with losses 22% above 2024 (US$9.32bn). Source: FBI IC3 2025 (cópia do PDF via Finsiders Brasil)
- — Business email compromise costs US firms US$3.05bn · US$ 3,05 bi. IC3 received 24,768 BEC complaints in 2025, with losses of US$3,046,598,558. Source: FBI IC3 2025 (cópia do PDF via PPC Land)
- — FBI counts 22,300 AI-related complaints and US$893m in losses · US$ 893,3 mi. The IC3 annual report flags complaints with an AI component: 22,364 cases and US$893.3m. Source: FBI IC3 2025 (cópia do PDF via PPC Land)
- — FBI IC3: internet crime losses hit record US$20.9bn in 2025 · US$ 20,9 bi. Losses rose 26% year on year and complaints topped 1 million (1,008,597); cyber-enabled fraud made up 85% of the total. Source: FBI IC3 2025 (via Help Net Security)
- — FTC: social media scam losses are 8x higher than in 2020. Social media is the contact method with the highest losses; SMS is the most used channel. Source: FTC Data Spotlight
- — FTC: US consumers report US$15.9bn in fraud losses in 2025 · US$ 15,9 bi. There were 3 million reports; investment scams led losses (US$7.9bn) and impostor scams topped US$3.5bn. Source: FTC (depoimento ao Joint Economic Committee)
- — Latin American organizations face twice as many cyberattacks as US ones · ~3.100 ataques/semana. In March 2026 there were ~3,100 weekly attacks per organization in the region, versus just under 1,500 in the US. Source: Check Point (via Dark Reading)
- — Australia: scam losses rise 7.8% to over A$2bn in 2025 · A$ 2,18 bi. Losses were A$2.18bn across 481,523 reports; investment scams totaled A$837.7m. The peak was A$3.1bn in 2022. Source: ACCC / National Anti-Scam Centre, Targeting Scams 2025
- — Singapore: scams and cybercrime fall by almost a quarter in 2025 · S$ 913,1 mi. There were 41,974 cases (−24.8%) and losses of S$913.1m, versus S$1.1bn in 2024; about S$140m was recovered. Source: Singapore Police Force
- — ITRC: US logs record 3,322 data compromises in 2025 · 3.322 comprometimentos. Victim notices fell to 278.8 million; 70% of notices did not disclose the attack vector. Source: ITRC 2025 Annual Data Breach Report
- — Latin America posts the world's largest rise in cyberattacks in December · 3.065 ataques/semana. Organizations in the region faced an average of 3,065 attacks a week (+26%), versus a global average of 2,027. Source: Check Point Research (via Intelligent CIO)
- — Sophos: median ransom demand in Brazil rises to US$640,000 · US$ 640 mil (mediana). Malicious email is the root cause in 37% of cases, the highest of any country studied; average recovery cost was US$1.05m. Source: Sophos, State of Ransomware in Brazil 2026
- — Pix MED disputes nearly triple after new dispute button · 3,5 mi de contestações (out/25). An average of 1.3m a month in Jan–Aug 2025, versus 3.5m in October and 3.4m in November; refunds remain 7–9% of the disputed amount. Source: Banco Central (via Economic News Brasil)
- — Ransomware hits record in 2025 with 7,458 victims and 124 active groups · 7.458 vítimas. Of the 124 groups, 73 are new; the US accounts for 1,536 victims, followed by Canada (182) and Germany (167). Qilin dominates. Source: Searchlight Cyber (via TechRadar)
- — US healthcare logs 805 breaches and 138.5 million people affected in 2025. The highest breach count in the HHS series (≥500 people per case); 2024 had 741 breaches and over 289 million people. Source: HHS OCR (via HIPAA Journal)
- — GuidePoint: ransomware victims grow 58% as Qilin leads with 1,044 attacks. Q4 2025 had 2,287 victims, the largest quarter on record; the number of groups rose 46% to 124. Source: GuidePoint Security, GRIT 2026 Report
- — APWG: phishing hits record 1.13 million attacks in Q2 2025 · 1,13 mi (2T25). Volume fell to 853,000 in Q4; social media and SaaS/webmail were the most targeted sectors (20.3% each). Source: APWG Phishing Activity Trends Q4 2025
- — EBA-ECB: payment fraud in Europe rises to €4.2bn · € 4,2 bi. Card fraud grew 29% (€1.33bn) and credit transfer fraud 16% (€2.2bn), with users bearing ~85% of losses. Source: EBA-ECB 2025 Report on Payment Fraud (via Banque de France)
- — Check Point: 1 in 27 GenAI prompts carries high data-leak risk. In December 2025, 91% of organizations had high-risk prompts. Source: Check Point (via IT Edge News)
- — Fake-sale scam soars 314% and leads bank customer reports in Brazil. In H1 2025 there were 174,000 fake-sale reports and 139,000 fake call-center reports (+195.7%); WhatsApp scams fell 9.9%. Source: Febraban (via Diario de Pernambuco)
- — Fintech Prosper suffers breach affecting 17.6 million. Lending platform Prosper Funding reported a Q4 2025 breach affecting 17.6 million people. Source: ITRC 2025 Annual Data Breach Report
- — 700Credit breach exposes financial data of 5.6 million. The financial services firm reported a Q4 2025 breach with 5.6 million victims. Source: ITRC 2025 Annual Data Breach Report
- — GASA: scams took about US$442bn from victims worldwide in 12 months · ~US$ 442 bi. Survey of 46,000 adults in 42 markets: 57% faced a scam attempt and 23% lost money; South America has 72% exposure. Source: GASA e Feedzai, Global State of Scams 2025
- — Serasa: Brazil logs 10.9 million fraud attempts through September, up 28.6% · 10,9 mi de tentativas. That is one attempt every 2.2 seconds, with more than 14 million projected for the year; the Federal District leads per capita (8,559 per million). Source: Serasa Experian, Indicador de Tentativas de Fraude
- — More than 24 million Brazilians fell for Pix scams in 12 months · ~R$ 29 bi. The FBSP survey estimates losses of about R$29bn between Jul/2024 and Jun/2025. Source: FBSP (via Rádio Senado)
- — Kaspersky blocks 553 million phishing attacks in Brazil in 12 months · 553 mi bloqueios. That's 1.5 million a day and 42.8% of Latin America's total, where blocks grew 85% to 1.29bn. Source: Kaspersky, Panorama de Ameaças 2025 (via InfoMoney)
- — Brazil is Latin America's No. 1 ransomware target, says Kaspersky · 549 mil tentativas. There were 549,000 blocked attempts (+12%) between Aug/2024 and Jun/2025, 1,664 a day and over half the regional total. Source: Kaspersky, Panorama de Ameaças 2025 (via Hardware.com.br)
- — Sophos: median ransom paid halves to US$1m · US$ 1 mi (mediana). About half of companies paid a ransom; average recovery cost fell from US$2.73m to US$1.53m. Source: Sophos, State of Ransomware 2025
- — Pix MED returned R$459m of R$6.98bn disputed · R$ 459 mi devolvidos. Through June 2025 there were about 5 million refund requests, 31% accepted, according to the Central Bank. Source: Banco Central (via Jovem Pan)