BreachWatcher

Your data breach moves faster than your coffee order. BreachWatcher watches the dark web 24/7 so you know the moment your info is exposed, not months later. $5/month. Less than a coffee. More than peace of mind. Sign up today! breachwatcher.io

🚨Ransomware Alert: 🇺🇸 Trump Mobile Wireless was listed by BYOD as a victim. They claimed to have compromised approximately 3600 records containing: * First and last names * Email addresses * Phone number and address

🚨Ransomware Alert: 🇿🇦LegalWise (legalwise[.]co[.]za) listed by The Gentlemen ransomware group as a victim. The volume and type of compromised data have not yet been determined.

🚨Ransomware Alert: 🇿🇦SAMWUMED (samwumed[.]org) listed by The Gentlemen ransomware group as a victim. The volume and type of compromised data have not yet been determined.

🚨Ransomware Alert: 🇿🇦Edcon (edcon[.]co[.]za) listed by The Gentlemen ransomware group as a victim. The volume and type of compromised data have not yet been determined.

🚨Ransomware Alert: 🇿🇦BCX (bcx[.]co[.]za) listed by Incransom as a victim. Claimed data volume: 500 GB (4,224,088 files / 596,613 folders) Allegedly includes: * Source code * Technical documentation * Other confidential information

🚨 Shinyhunters posted a "PSA" on their leak site directly addressing FBI Cyber Division AD Brett Leatherman & Director Kash Patel, disputing the Q2 2026 FLASH report and claiming compromise of multiple FBI systems. Unverified claim.

🚨 Ransomware Alert: 🇿🇦Rohloff Group (major KFC franchise partner in South Africa) listed by Incransom as a victim. Claimed data volume: 536 GB (103,196 files / 30,805 folders) Allegedly includes: • Employee personal data & IDs • Banking details & account statements • Loan applications • Disciplinary hearing results • Acknowledgement of debt documents • Financial docs (royalties, food cost reconciliation)

🚨 Ransomware Alert: Qilin Claims the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) as a victim.

🚨 Data Breach Alert: xpl0itrs claims Target as a victim. The threat actor claims to have compromised 8.6GB of data from internal git repositories.

Running WordPress? Elementor Pro just got a critical RCE (CVE-2026-32475, CVSS 9.0) letting unauthenticated attackers upload and run PHP. thehackernews.com/2026/08/el…

🚨ShinyHunters just gave Logitech-owned Streamlabs a deadline: pay by Aug 21 or they leak the data. This is the standard playbook now. Breach, threaten, extort, repeat. If you or your team use Streamlabs, assume linked credentials are already circulating. Rotate them now.

🚨 Data Breach Alert: Heights Finance discloses security incident Unauthorized access to a third-party cloud platform storing customer data (discovered May 7, 2026). Data that may be involved includes: • Names, addresses, phone numbers, emails • Bank account & routing numbers • SSNs, driver’s licenses, dates of birth No impact to core loan systems. Credit monitoring offered. heightsfinance.com/important…

🚨 Data Breach Alert: xpl0itrs claims BMW Group as a victim. The threat actor claims employee + customer PII (names, addresses, cars, VINs), config/API data, subsidiary maps, and data on 36 other car brands. Asking price: $1.2k

🚨 A threat actor claims to have pulled Dynatrace source code and credentials via GitHub access. Unconfirmed claims like this still matter: If your team's creds surface in a leaked repo or breach dump, you want to know before an attacker logs in with them.

🚨 Ransomware Alert: Thecourierguy (thecourierguy.co.za) claimed by MeduzaLocker Files provided as proof include: • Monthly Rental Payment Schedules • Kiosk & Depot CSVs • Payment Schedules And many more. BreachWatcher is monitoring the incident.

🚨Qilin's ransomware crew posted 7+ new victims to their leak site in the last two hours alone including Canada, Germany, Italy, Malaysia, and the Philippines. Manufacturing, publishing, telecom, no pattern except opportunity. "We're too small to be a target" isn't a strategy. Screenshot: Ransomware.live

📰News: 3,000+ phishing URLs are impersonating recruiters right now, using browser-in-browser windows to steal Google/Facebook logins and intercept MFA codes. If a "recruiter" sends you a login page mid-chat, close the tab. Read more here: thehackernews.com/2026/08/ct…

📰 What we know so far about the alleged Iranian hacks on U.S. water utilities Since late July, water and wastewater systems in multiple states (Minnesota, Arkansas, Georgia, New Jersey, Michigan and others) have been hit by cyberattacks. Some caused temporary operational disruptions, loss of pressure, and short-term boil-water notices. U.S. officials have not publicly attributed the campaign, but CISA had already warned about Iranian actors targeting internet-facing devices in the water sector. Reporting suggests U.S. intelligence is confident Iran’s IRGC is responsible. These systems are often low-hanging fruit as many industrial controllers remain exposed online. Full rundown of what’s confirmed and what isn’t: techcrunch.com/2026/08/14/wh…

🚨RingCentral data breach: 1.6 million accounts exposed ShinyHunters claimed responsibility after a July 2026 breach via social engineering. They stole ~623 GB and later leaked 280 GB of data after no ransom was paid. Exposed info includes names, email addresses, phone numbers, and physical addresses. RingCentral says the core platform was not impacted, services remain operational, and only a limited portion of customers were affected. They are notifying those impacted directly. Sign up to BreachWatcher to check if you are affected. Full details: bleepingcomputer.com/news/se…

🚨 Data Breach Alert: Cl0p lists Zebra (zebra.com) as a victim. The threat actor claims 8TB was compromised.