Ukrainian organizations' 628,000-record exfiltration
Data Leak
Summary
Hide ▲
Show ▼
Confirmed exfiltration from four Ukrainian organizations exposed more than 628,000 records tied to Ukrainian individuals, creating a large-scale data-leak event. The stolen material came from a broader access operation that also targeted WordPress sites, e-commerce platforms, and Ukrainian critical infrastructure. The scope indicates a substantial compromise of personal records and a continuing risk of further data removal.
Related Happenings
CyberXero AI-augmented dual-pipeline campaign against WordPress and Ukrainian critical infrastructure
Campaign
H score63
First: 12.10.2026 10:26
Last: 12.10.2026 10:26
Sources 1
How related:
"The operation runs two pipelines at once: a global, automated campaign against WordPress and e-commerce platforms, and a curated, manual campaign against Ukrainian energy and critical infrastructure," SOCRadar said in a report published last week.
About this happening:
The CyberXero campaign is running dual AI-augmented access pipelines that are stealing access at scale from WordPress and e-commerce sites while also targeting Ukrai...
CyberXero AI-augmented dual-pipeline campaign against WordPress and Ukrainian critical infrastructure
CampaignHow related: "The operation runs two pipelines at once: a global, automated campaign against WordPress and e-commerce platforms, and a curated, manual campaign against Ukrainian energy and critical infrastructure," SOCRadar said in a report published last week.
About this happening: The CyberXero campaign is running dual AI-augmented access pipelines that are stealing access at scale from WordPress and e-commerce sites while also targeting Ukrai...
North African government technology authority data exposed after North African government technology authority breach
Data Leak
H score45
First: 11.09.2026 17:10
Last: 11.09.2026 17:10
Sources 1
About this happening:
A North African government technology authority suffered a data leak after attackers hijacked its central account server and exfiltrated a credential database containi...
North African government technology authority data exposed after North African government technology authority breach
Data LeakAbout this happening: A North African government technology authority suffered a data leak after attackers hijacked its central account server and exfiltrated a credential database containi...
Palo Alto Networks GlobalProtect log search guidance for CVE-2026-0257
Advisory/Mitigation
H score35
First: 15.06.2026 09:17
Last: 15.06.2026 09:17
Sources 1
About this happening:
Palo Alto Networks is urging GlobalProtect customers to search logs for successful gateway-connected events tied to CVE-2026-0257, a step that can expose possible unau...
Palo Alto Networks GlobalProtect log search guidance for CVE-2026-0257
Advisory/MitigationAbout this happening: Palo Alto Networks is urging GlobalProtect customers to search logs for successful gateway-connected events tied to CVE-2026-0257, a step that can expose possible unau...
Unnamed organization stolen data published on DLS
Data Leak
H score35
First: 06.05.2026 16:00
Last: 06.05.2026 16:00
Sources 1
About this happening:
Stolen data from an unnamed organization was later posted on a data leak site (DLS), confirming exposure and increasing extortion pressure. The publication followed an...
Unnamed organization stolen data published on DLS
Data LeakAbout this happening: Stolen data from an unnamed organization was later posted on a data leak site (DLS), confirming exposure and increasing extortion pressure. The publication followed an...
BlackFile victims' Salesforce and SharePoint data leak
Data Leak
H score35
First: 24.04.2026 21:26
Last: 24.04.2026 21:26
Sources 1
About this happening:
BlackFile's stolen documents were published on a dark web leak site, exposing employee and business records taken from Salesforce and SharePoint environments. The...
BlackFile victims' Salesforce and SharePoint data leak
Data LeakAbout this happening: BlackFile's stolen documents were published on a dark web leak site, exposing employee and business records taken from Salesforce and SharePoint environments. The...
Timeline
-
12.10.2026 10:26 2 articles · 2h ago
CyberXero exfiltrates data from four Ukrainian organizations
Initial DisclosureCyberXero's AI-augmented access campaign was disclosed as having exfiltrated data from four Ukrainian organizations, harvesting more than 628,000 records tied to Ukrainian individuals, while the broader operation continued to target WordPress, e-commerce platforms, and Ukrainian critical infrastructure.
Show sources
- CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records — thehackernews.com — 12.10.2026 10:26
- CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records — thehackernews.com — 12.10.2026 10:26