Skip to content

🛡️ Cybersecurity

Security vendors and service providers — also the M&A universe · a shareable slice of the daily brief for stakeholders who only care about this industry · RSS feed

Victims L30D0▼ −1
Prior 30D1
Active actor L90DUnknown · 1

Today — 03 Nov 2026

No industry-tagged items in today's briefing — see recent activity below.

Last 14 days

Chainalysis, the blockchain-analytics firm at the center of the Binance attribution story, discloses its own breach — company says it's unrelated.HighCybersecurityChainalysis's own security notice (Oct 30) states an external actor used "offensive agentic techniques" to gain unauthorized access to its systems and internal tools, and that the incident is not related to the Binance theft it was separately investigating the same week. The notice does not itself specify what data was accessed; a secondary, unverified report describes names, emails and role labels — treat that detail as unconfirmed until Chainalysis says so directly. Chainalysis

Recent victim claims

Newest first, mapped to this industry from the victim database. Most are leak-site claims — verify before acting.

September 2026

Sep 16 CrowdSec Unknown Ransomware · Cybersecurity · France CrowdSec confirmed Sep 16-17 that an attacker cloned roughly 170 private GitHub repositories (SaaS console, cloud routines, connectors, automations) using an OAuth token tied to a former employee whose laptop was compromised in the May 2026 TanStack npm supply-chain attack (CVE-2026-45321, 84 malicious releases across 42 packages). The theft occurred May 22 but went undetected until stolen source code surfaced on a cybercrime forum Sep 16; also exposed were email addresses of 83 CrowdSec users and names/emails/investment context of 51 prospective 2020 investors. CrowdSec says its infrastructure and databases were not accessed and no code was altered; credentials rotated Sep 16-17. · Sources: The Hacker News · CrowdSec

July 2026

Jul 31 Brinks Home ShinyHunters Extortion · Security Services · US ShinyHunters claims breach via Microsoft Entra vishing attack July 13; detected by Brinks July 20; claimed: 4.9M+ Salesforce records including 1.1M customer contacts, 3.8M customer support chat logs (Cresta), 4000+ employee PII rows; CEO confirmed breach, alarm monitoring unaffected · Sources: https://www.bleepingcomputer.com/news/security/shinyhunters-claims-brinks-home-breach-threatens-to-leak-stolen-data/ https://www.theregister.com/security/2026/07/31/the-most-famous-brand-in-physical-security-got-pwned-by-shinyhunters/5281924
Jul 22 Recsa Qilin Ransomware · Business Services / Security · South Africa Qilin DLS claim posted Jul 22-23; data leak threatened if no negotiations. Unverified — verify before treating as confirmed breach. · Sources: https://www.dexpose.io/qilin-ransomware-strikes-recsa-in-south-africa/
Jul 20 Brinks Home Unknown Ransomware · Security Services · US Dallas-based alarm and home security firm; unauthorized access detected July 20 2026; company disclosed July 28; outside cybersecurity experts engaged; blackmail threat reported; incident does not involve alarm products or monitoring services; customer data scope not yet disclosed; 🟨 confirmed by company · Sources: https://hoodline.com/2026/07/dallas-alarm-giant-brinks-home-shaken-by-cyber-heist-and-blackmail-threat-6930961/
Jul 15 Fidelity Services Group Ransomhouse Ransomware · security services · South Africa Southern Africa's largest integrated security solutions provider (guarding, cash management, fire protection, 60+ years); Ransomhouse DLS claim Jul 15, 2026; estimated attack date Jul 12; 🟥 unverified · Sources: https://ransomware.live/id/RmlkZWxpdHkgU2VydmljZXMgR3JvdXBAcmFuc29taG91c2U=

June 2026

Jun 29 Total Monitoring Services Inc. SETTRA Ransomware · security monitoring services · Canada SETTRA DLS claim June 29, 2026; data scope and impact unconfirmed; 🟥 unverified · https://x.com/FalconFeedsio/status/2070588706558550063 · https://www.ransomware.live/group/settra · Sources: [FalconFeeds] · [ransomware.live]
Jun 23 OneTrust Icarus Ransomware · governance risk and compliance software · US Salesforce CRM data · https://www.securityweek.com/more-cybersecurity-firms-disclose-impact-from-klue-hack/ · Sources: [SecurityWeek]
Jun 23 LastPass Icarus Ransomware · password management · cybersecurity/US customer names, phone numbers, email addresses, physical addresses, and Salesforce support-case data accessed via Klue OAuth integration; vaults and core product infrastructure unaffected; LastPass disabled Klue access, rotated OAuth tokens, notified law enforcement; 12th confirmed downstream Klue supply-chain victim · https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/ · https://techcrunch.com/2026/06/23/password-manager-maker-lastpass-says-hackers-stole-customer-support-case-data-during-klue-breach/ · https://blog.lastpass.com/posts/klue-supply-chain-incident-and-lastpass-response · Sources: [BleepingComputer] · [TechCrunch] · [LastPass Blog]
Jun 22 Huntress Icarus Ransomware · cybersecurity · US Salesforce CRM data exfiltrated (business contacts, pricing, sales comms, opportunity notes); no threat data/passwords/engineering data affected · https://www.huntress.com/blog/klue-breach-investigation · https://www.securityweek.com/cybersecurity-firms-impacted-by-klue-supply-chain-attack/ · Sources: [Huntress] · [SecurityWeek]
Jun 22 Recorded Future Icarus Ransomware · cybersecurity · US client contact names, email addresses, potential contract info · https://www.securityweek.com/cybersecurity-firms-impacted-by-klue-supply-chain-attack/ · Sources: [SecurityWeek]
Jun 22 Tanium Icarus Ransomware · cybersecurity · US Salesforce CRM data · https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/ · Sources: [BleepingComputer]
Jun 22 HackerOne Icarus Ransomware · cybersecurity · US Salesforce CRM data · https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/ · Sources: [BleepingComputer]
Jun 22 Snyk Icarus Ransomware · cybersecurity · US Salesforce CRM data · https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/ · Sources: [BleepingComputer]
Jun 22 Kudelski Security Icarus Ransomware · cybersecurity · Switzerland Salesforce CRM data · https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/ · Sources: [BleepingComputer]
Jun 12 BeyondTrust Icarus Ransomware · cybersecurity · PAM solutions/US Salesforce CRM business contact and general sales-related customer information accessed via Klue OAuth integration; notified June 12, publicly disclosed June 24 via BeyondTrust Trust Center; 13th confirmed Klue supply-chain victim · https://www.beyondtrust.com/trust-center/security-advisories/klue-security-incident · https://www.securityweek.com/beyondtrust-lastpass-impacted-by-klue-salesforce-incident/ · Sources: [BeyondTrust] · [SecurityWeek]
Jun 12 Link11 Icarus Ransomware · DDoS protection · cybersecurity/Germany Salesforce CRM data accessed via Klue OAuth integration; disclosed June 30, 2026 · Sources: [SecurityWeek]
Jun 12 Tines Icarus Ransomware · security automation · SOAR/Ireland Salesforce CRM data accessed via Klue OAuth integration; disclosed June 30, 2026 · Sources: [SecurityWeek]

← All industries · Victim database →