Breach

The World Food Programme confirmed a breach of its self-registration application (SRA) for Palestine, which occurred on May 14.

Ultrahuman confirmed that attackers accessed customer data using credentials stolen from an employee's malware-infected laptop.

The lawsuit stems from a credential-stuffing attack in October 2023, where threat actors exploited weak user credentials to access accounts.

The suspect, apprehended in Buren, is believed to have repeatedly accessed Ajax's computer systems without authorization earlier this year.

The incident came to light after Charter was listed on ShinyHunters' data leak site, where the group claimed to have stolen 40 million records.

The Oncology Institute disclosed on May 20, 2026, that Kroll, a third-party administrator for an unnamed vendor, detected unauthorized access to systems that may have affected patient data.

The breach occurred after a threat actor obtained a compromised token.