Ransomware campaigns, breach analysis and threat actor intelligence.
Date of Incident: 2023 Overview: In 2023, Match Group experienced a data breach attributed to the ShinyHunters threat group, which leaked approximately 1.7 GB of files containing data on 10 million users from brands like Hinge, Match, and OkCupid. The breach involved unauthorized access through valid credentials, exploiting technique T1078 (Valid Accounts), but there was… Read More »Match Group Data Breach
Date of Incident: Early 2024 Overview: The France Travail Data Breach of 2024 involved a large-scale social engineering attack that compromised the personal information of approximately 43 million individuals. Key data such as names, dates of birth, national insurance numbers, emails, home addresses, and phone numbers were stolen, though bank details and passwords remained secure.… Read More »France Travail Data Breach 2024
Executive Summary By the end of 2025, one reality became impossible to ignore: the barrier to executing high-impact cyberattacks has collapsed. The most damaging breaches of the year were not driven by novel zero-days or exotic techniques. Instead, they reflected something more concerning-capabilities once limited to nation-state or elite criminal groups are now widely accessible.… Read More »Panel Brief | Top Breaches in Cyber Security in 2025
Date of Incident: January 2025 Overview: In January 2025, Nike fell victim to a cyberattack by the World Leaks ransomware gang, which exploited vulnerabilities in Nike’s corporate network. The breach resulted in the leak of nearly 190,000 files, revealing sensitive corporate data that could potentially compromise consumer privacy and business operations. The attackers used sophisticated… Read More »Nike Data Breach by World Leaks Ransomware Gang
Date of Incident: December 15, 2025 Overview: In December 2025, SoundCloud experienced a data breach that compromised the personal and contact information of over 29.8 million user accounts. The breach, reported in January 2026, involved unauthorized access through weak API authentication and possibly compromised employee credentials. Attackers targeted the Broadcasting, Media & Internet sector, specifically… Read More »SoundCloud Data Breach