Hackmanac

The leak allegedly includes over 30,000 high-resolution scans and photos of guest identification documents, such as passports (from EU, US, and Middle Eastern countries) and Italian ID cards, in JPG, PNG, and PDF formats.

Discover more at hackrisk.io

🚨Data Breach Alert‼️

🇮🇹Italy - Hotel Regina Isabella

A threat actor known as "mydocs" claims to be selling a fresh data dump from Hotel Regina Isabella, a luxury resort located in Ischia, Italy.

The leaked data was posted on a cybercrime forum and includes contact records with personal and corporate details. Exposed fields include full names, email addresses, company names and types, job roles, phone numbers, and full physical addresses.

Discover more at hackrisk.io

🚨Data Breach Alert‼️

🇯🇵Japan - Kawamoto Pump Mfg. Co. , Ltd.

The threat actor N1KA has claimed responsibility for leaking a database from the Japanese company Kawamoto Pump Mfg. Co. , Ltd.

Hackmanac HACK TUESDAY WEEK 30 JULY - 05 AUG 2025 HACK TUESDAY WEEK 30 JULY - 05 AUG 2025: 222 CYBERATTACKS ACROSS 35 COUNTRIES

🟧 #HackTuesday 🟧

Hack Tuesday: Week 30 July - 05 August 2025

⚠️222 cyber attacks across 35 countries ⚠️

More details:
hackmanac.com/news/hack-tu...

#Hackmanac #HT

Cisco discloses data breach impacting Cisco.com user accounts Cisco has disclosed that cybercriminals stole the basic profile information of users registered on Cisco.com following a voice phishing (vishing) attack that targeted a company representative.

🚨Data Breach Alert‼️

Cisco discloses data breach impacting Cisco[. ]com user accounts
https://www.bleepingcomputer.com/news/security/cisco-discloses-data-breach-impacting-ciscocom-user-accounts/

🚨SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Reported
https://thehackernews.com/2025/08/sonicwall-investigating-potential-ssl.html

He added that he is willing to delete the data if the authorities identify and address the source of the leak.

Discover more at hackrisk.io

The actor states that the information includes sensitive records, membership details, and population card data. DigitalGhost emphasized the scale of the breach, noting that 130,000 accounts represent a significant portion of Pakistan’s estimated 900,000 police personnel.

🚨Data Breach Alert‼️

🇵🇰Pakistan - Pakistani police personnel

The threat actor using the alias "DigitalGhost" has claimed possession of data belonging to 130,000 Pakistani police personnel, allegedly obtained through a security breach.

For Elmcrest Children's Center, the group has released samples and claims to have exfiltrated 448 GB of data, while for Weisman Children's, samples were also published and the exfiltrated data amounts to 566 GB.

Discover more at hackrisk.io

-based nonprofit healthcare and child support organizations specializing in pediatric rehabilitation and trauma-informed residential care for vulnerable youth.

🚨Cyber Attack Alert‼️

🇺🇸USA - Weisman Children's | Elmcrest Children's Center

Interlock ransomware group claims to have hit Weisman Children's and Elmcrest Children's Center, two U. S.

Related threats include ToxicPanda (3,000 infections via fake Chrome updates) and DoubleTrouble, spread through Discord.

Full article:
https://thehackernews.com/2025/08/playpraetor-android-trojan-infects.html

Controlled by a Chinese C2, it abuses accessibility services to steal banking credentials and control devices. It's offered as a MaaS with five variants, including “Phantom,” used for on-device fraud on 4,500 devices.

The campaign now focuses on Spanish- and Arabic-speaking users.

🚨Cyber Alert‼️

🇪🇸🇵🇹🇫🇷🇲🇦🇵🇪🇭🇰
PlayPraetor, a new Android RAT, has infected over 11,000 devices, mainly in Portugal, Spain, France, Morocco, Peru, and Hong Kong, growing by 2,000 weekly. It's spread via fake Google Play pages pushed through Meta Ads and SMS phishing.

🚨Quishing Alert‼️

🇪🇸Spain - A fake DGT fine with a QR code leading to a payment gateway is circulating, complete with a support chat

🚨 A New Linux Backdoor Named Plague Exposes Critical Linux Systems to Silent Credential Theft - Undetected by Every Antivirus.

Source:
https://thehackernews.com/2025/08/new-plague-pam-backdoor-exposes.html

The company has blocked the source IP address and will notify affected users individually.

Source:
https://www2.sagawa-exp.co.jp/information/detail/352/

The access was likely carried out using credentials obtained through third-party sources, suggesting a credential stuffing attack.

Although no server damage or financial data leakage has been confirmed, unauthorized logins to customer accounts may have occurred.

🚨Cyber Attack Alert‼️

🇯🇵Japan - Sagawa Express Co. , Ltd.

Sagawa Express Co. , Ltd. reported unauthorized access to its customer portal "Smart Club" as of August 1, 2025.

As previously reported, SGI suffered a ransomware attack on July 14, 2025, disrupting operations and halting core services. Systems were restored after four days.

Discover more at hackrisk.io

🚨Cyber Attack Update ‼️

🇰🇷 South Korea - Seoul Guarantee Insurance (SGI)

Gunra hacking group claims responsibility for the cyberattack on Seoul Guarantee Insurance (SGI).

According to the post, the group exfiltrated a 13. 2 TB (compressed) database.

The domain used for managing digital certificates was also reportedly left highly vulnerable.
The attacker invited others to explore further.

At the moment, we cannot confirm the claims, but an investigation never hurts.

🚨Cyber Alert ‼️

🇪🇸 Spain - Policía Nacional

A threat actor has published an "unauthorized pentest" report exposing severe misconfigurations on policia[. ]es.

According to the report, critical directories were publicly accessible, revealing SSH keys, shell history, and browser data.

The opt-in option required users to manually select and share chats, but OpenAI acknowledged that the risk of accidental exposure was too high.

The company is now working to have any indexed content removed from search engine results.

OpenAI has removed the feature that allowed ChatGPT conversations to be indexed by search engines.

Announced by OpenAI’s CISO, Dane Stuckey, the feature was originally designed to help people discover useful conversations, but it was rolled back due to privacy concerns.

More details:
https://cointelegraph.com/news/3-5b-btc-heist-retroactively-uncovered-arkham

The vulnerability exploited is believed to be a weak private key generation algorithm susceptible to brute-force attacks. Evidence shows LuBian later sent 1,516 OP_RETURN messages to the hacker’s wallet addresses. At today’s value, the stolen BTC is worth $14. 5 billion.

The hack went unreported for years by both LuBian and the attacker.

The threat actor stole 90% of the pool’s funds before LuBian managed to move 11,886 BTC to safety.