🚨 #𝐑𝐈𝐒𝐊𝐅𝐑𝐈𝐃𝐀𝐘: 𝐖𝐄𝐄𝐊 𝟏𝟎-𝟏𝟔/𝟏𝟐/𝟐𝟓 🚀 Every week we analyse confirmed, successful cyber attacks and score them with our proprietary ESIX© — a composite metric that measures operational, financial, technical and reputational impact. Here’s this week’s snapshot from HackRisk.io 👇 1/7

🚨Cyberattack Alert ‼️ 🇦🇷Argentina - Club Atlético River Plate Qilin hacking group claims to have breached Club Atlético River Plate. Samples have been provided. Sector: Sport Threat class: Cybercrime Observed: Dec 19, 2025 Status: Pending verification

🚨Cyber Alert ‼️ 🇦🇪UAE - Al Ain Club The threat actor who on Nov. 17 claimed to have breached Al-Ahli Saudi FC is now claiming to have breached Al Ain Club, allegedly leaking 141 internal documents containing sensitive personal and financial data, including IDs, passports, player contracts, and IBANs

🚨Zero-day Alert‼️ Cisco Alerts on Critical 10.0 CVSS AsyncOS Zero Day Actively Exploited by China Linked APT, No Patch Available

🚨Cyber Alert ‼️ 🇫🇷France - France Travail (Missions Locales) Indra threat actor claims to be selling personal data of 1,551,344 France Travail users, allegedly linked to Missions Locales.

🚨Cyber Alert ‼️ 🇦🇷Argentina - Threat Actor Claims Massive Data Leak Involving Argentinian Data Broker

🚨Cyber Alert ‼️ 🇯🇵Japan - Organizations in Japan warned of an ongoing phishing and social engineering campaign using impersonation emails The messages use the recipient company’s name as the subject and spoof the CEO as the sender, asking recipients to create a LINE group and reply with its QR code.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Grandes Vinos Qilin hacking group claims to have breached Grandes Vinos. Allegedly, the attackers exfiltrated 620 GB of data. Sector: Manufacturing Threat class: Cybercrime Observed: Dec 18, 2025 Status: Pending verification

𝐂𝐲𝐛𝐞𝐫 𝐑𝐞𝐬𝐢𝐥𝐢𝐞𝐧𝐜𝐞 𝐈𝐬 𝐍𝐨𝐭 𝐀𝐛𝐨𝐮𝐭 𝐑𝐞𝐜𝐨𝐯𝐞𝐫𝐲. 𝐈𝐭’𝐬 𝐀𝐛𝐨𝐮𝐭 𝐃𝐞𝐬𝐢𝐠𝐧. For years, resilience in cybersecurity was framed as the ability to recover quickly after an incident. That made sense when cyber attacks were rare and exceptional, but that context no longer exists. 1/3

🚨Cyber Alert ‼️ 🇪🇸Spain - Cirsa A threat actor using the alias "dead" claims to be selling unauthorized access to Cirsa, a major Spanish gambling and gaming company. The claimed access involves AWS S3 infrastructure.

🚨Cyberattack Alert ‼️ 🇯🇵 🇻🇳- DAINICHISEIKA DAINICHISEIKA disclosed a ransomware attack on its Vietnamese subsidiary, DAINICHI COLOR VIETNAM CO., LTD., confirmed on December 15, 2025, after internal servers and PCs were found encrypted and rendered inaccessible due to unauthorized access.

🚨Cyber Alert ‼️ 🇲🇽Mexico - Secretaría de Hacienda del Gobierno del Estado de Sonora The Secretaría de Hacienda of Sonora disclosed that it suspended all payment operations after detecting a suspected cyberattack involving possible access and data extraction from its Financial Information System.

🚨Cyberattack Alert ‼️ 🇲🇽Mexico - Partido Revolucionario Institucional (PRI) Sc0rp10nn threat actor claims to have breached Partido Revolucionario Institucional. Allegedly, the attacker exfiltrated a DB containing 1,350,000 INE voter ID images, including front and back photos of voter credentials.

🚨Cyberattack Alert ‼️ 🇮🇹Italy - Callipo Group Medusa hacking group claims to have breached Callipo Group. The attackers demanded a ransom of $200,000. Sector: Manufacturing Threat class: Cybercrime Observed: Dec 17, 2025 Status: Pending verification

🚨Cyberattack Update‼️ 🇯🇵Japan - Yokosuka Gakuin High School Yokosuka Gakuin School Corporation disclosed that in early December 2025 it suffered a ransomware attack involving unauthorized access to its server, which led to the leakage of multiple photos, videos, and other materials.

🚨Cyberattack Alert ‼️ 🇸🇦Saudi Arabia: Al-Ahli Saudi Fc Demetrius threat actor claims to have breached Al-Ahli Saudi Fc. Allegedly, the attackers exposed 111 files, including player employment contracts, personal identification documents, passports, and internal club records.

🚨Cyberattack Alert ‼️ 🇧🇷Brazil - República Federativa do Brasil Kill Security hacking group claims to have breached República Federativa do Brasil. Sector: Government Threat class: Cybercrime Observed: Dec 16, 2025 Status: Pending verification

🚨Apple, Google forced to issue emergency 0-day patches The zero-day bugs were caught being actively exploited in what the companies describe as "sophisticated" real-world attacks. Source: www.theregister.com/2025/12/15/a...

🚨 𝐖𝐞𝐥𝐜𝐨𝐦𝐞 𝐭𝐨 𝐇𝐚𝐜𝐤𝐦𝐚𝐧𝐚𝐜 — 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐢𝐜 𝐂𝐲𝐛𝐞𝐫 𝐓𝐡𝐫𝐞𝐚𝐭 𝐈𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞, 𝐛𝐮𝐢𝐥𝐭 𝐟𝐨𝐫 𝐝𝐞𝐜𝐢𝐬𝐢𝐨𝐧𝐬 🚨 1/6

🚨Cyberattack Alert ‼️ 🇭🇷Croatia - Region Of Istria Qilin hacking group claims to have breached Region Of Istria. Sector: Government Threat class: Cybercrime Observed: Dec 15, 2025 Status: Pending verification

🚨Cyberattack Alert ‼️ 🇪🇬Egypt - EAGLE Betway threat actor claims to have breached EAGLE. Allegedly, the attackers exfiltrated around 300,000 user records, including full names, phone numbers, email addresses, cities, and countries.

🚨 Cyber Alert - PornHub PornHub has been extorted by the ShinyHunters extortion gang following the alleged theft of search and watch history belonging to its Premium members in a recent Mixpanel data breach. Source:

🚨A “Featured” Chrome extension was silently copying everything users typed into ChatGPT and other AI tools.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Yokosuka Gakuin High School Rhysida hacking group claims to have breached Yokosuka Gakuin High School. Ransom demand: 6 BTC (approx. $515,000) Sector: Education Threat class: Cybercrime Observed: Dec 15, 2025 Status: Pending verification

🚨Cyberattack Alert ‼️ 🇬🇧UK - Thrings WorldLeaks hacking group claims to have breached Thrings. Sector: Legal Threat class: Cybercrime Observed: Dec 15, 2025 Status: Pending verification

🚨Cyberattack Alert ‼️ 🇦🇷Argentina - AySA SafePay hacking group claims to have breached AySA. Sector: Energy / Utilities Threat class: Cybercrime Observed: Dec 14, 2025 Status: Pending verification

🚨BreachForums has resurfaced yet again. "This time, things will be different"

🚨Cyberattack Alert ‼️ 🇲🇽Mexico - Centro de Investigación y de Estudios Avanzados (Cinvestav) Qilin hacking group claims to have breached Cinvestav. Allegedly, the attackers exfiltrated 105 GB of data.

🚨Cyberattack Alert ‼️ 🇹🇳Tunisia - Hopital La Rabta Devman hacking group claims to have breached Hopital La Rabta. Allegedly, the attackers exfiltrated 50 GB of data. Sector: Healthcare Threat class: Cybercrime Observed: Dec 12, 2025 Status: Pending verification

🚨 #𝐑𝐈𝐒𝐊𝐅𝐑𝐈𝐃𝐀𝐘: 𝐖𝐄𝐄𝐊 𝟎𝟑-𝟎𝟗/𝟏𝟐/𝟐𝟓 🚀 Every week we analyse confirmed, successful cyber attacks and score them with our proprietary 𝗘𝗦𝗜𝗫©, a composite metric that measures operational, financial (direct & indirect), technical and reputational impact. Here’s this week’s snapshot from HackRisk.io 👇 1/7

🚨Cyber Update‼️ 🇯🇵Japan - BroadBand Tower, Inc. BroadBand Tower, Inc. communicates that on December 6, 2025, it detected unauthorized external access to a specific virtual server and related servers on its cloud infrastructure, and that some data stored on the affected server may have been accessed.

🚨Cyberattack Alert ‼️ 🇰🇷South Korea - Nepes Corp Qilin hacking group claims to have breached Nepes Corp. Allegedly, the attackers exfiltrated 1.5 TB of data. Sector: Manufacturing Threat class: Cybercrime Observed: Dec 11, 2025 Status: Pending verification —

🚨Cyberattack Alert ‼️ 🇪🇸Spain - COOLMOD COOLMOD Informática disclosed that on December 8, 2025, an unauthorized party accessed customer contact details including name, phone number, and email. Sector: ICT Threat class: Cybercrime Status: Confirmed Source: bandaancha.eu/foros/nueva-...

🔐 𝗜𝗦 𝗬𝗢𝗨𝗥 𝗣𝗔𝗦𝗦𝗪𝗢𝗥𝗗 𝗣𝗢𝗟𝗜𝗖𝗬 𝗥𝗘𝗔𝗗𝗬 𝗙𝗢𝗥 𝟮𝟬𝟮𝟲? Recently we’ve seen three serious cases — the Louvre heist, a hospital in India, and 120,000 hacked IP cameras in South Korea — all tied to the same systemic weakness: 𝗱𝗲𝗳𝗮𝘂𝗹𝘁 𝗼𝗿 𝗼𝘃𝗲𝗿𝗹𝘆 𝘀𝗶𝗺𝗽𝗹𝗲 𝗽𝗮𝘀𝘀𝘄𝗼𝗿𝗱𝘀 𝗽𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗻𝗴 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗼𝗿 𝗵𝗶𝗴𝗵𝗹𝘆 𝘀𝗲𝗻𝘀𝗶𝘁𝗶𝘃𝗲 𝘀𝘆𝘀𝘁𝗲𝗺𝘀. 1/4

🚨Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw PATCH NOW! The vulnerability, rated high in severity, is being tracked under the Chromium issue tracker ID "466192044."

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Grupo Catalana Occidente BreachLaboratory threat actor claims to have breached Grupo Catalana Occidente.

🚨Cyberattack Alert ‼️ 🇮🇩Indonesia - Bank Mandiri BreachLaboratory threat actor claims to have breached Bank Mandiri. Allegedly, the attacker exfiltrated 3 million banking records, including names, account types, SWIFT codes, deposit details, balance thresholds, phone numbers, and emails.

𝗪𝗲’𝗿𝗲 𝗿𝗲𝗳𝗶𝗻𝗶𝗻𝗴 𝗼𝘂𝗿 𝘀𝘂𝗯𝘀𝗰𝗿𝗶𝗽𝘁𝗶𝗼𝗻 𝗽𝗹𝗮𝗻𝘀 HackRisk is evolving to reflect how security leaders use Strategic Threat Intelligence today. To focus entirely on premium-grade capabilities, we are 𝗿𝗲𝘁𝗶𝗿𝗶𝗻𝗴 𝘁𝗵𝗲 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹 𝗽𝗹𝗮𝗻. 𝗧𝗵𝗲 𝗽𝗹𝗮𝗻 𝘄𝗶𝗹𝗹 𝗯𝗲 𝗱𝗶𝘀𝗰𝗼𝗻𝘁𝗶𝗻𝘂𝗲𝗱 𝗼𝗻 𝗗𝗲𝗰𝗲𝗺𝗯𝗲𝗿 𝟭𝟲, 𝟮𝟬𝟮𝟱. 1/4

🚨Cyberattack Alert ‼️ 🇪🇸Spain - GRUPO PUMA Nova hacking group claims to have breached GRUPO PUMA. Allegedly, the attackers exfiltrated 10 GB of data. Sector: Construction Threat class: Cybercrime Observed: Dec 9, 2025 Status: Pending verification

🚨Cyberattack Alert ‼️ 🇨🇾Cyprus - Bank of Cyprus Oncology Center (BOCOC) BOCOC has allegedly been breached. Allegedly, the attackers gained unauthorised access to critical hospital systems, including GESY and Mosaiq.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 03 - 09 December 2025 ⚠️255 cyber attacks across 42 countries ⚠️ More details: hackmanac.com/news/hack-tu...

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Le Guide Noir betway threat actor claims to have breached Le Guide Noir. Allegedly, the attackers exfiltrated data including 120,000 user records containing personal and professional details such as names, work and personal emails, phone numbers.

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Renesas Electronics Corporation Coinbase Cartel hacking group claims to have breached Renesas Electronics Corporation. Sector: Manufacturing Threat class: Cybercrime Observed: Dec 6, 2025 Status: Pending verification

𝗪𝗲’𝗿𝗲 𝗿𝗲𝗳𝗶𝗻𝗶𝗻𝗴 𝗼𝘂𝗿 𝘀𝘂𝗯𝘀𝗰𝗿𝗶𝗽𝘁𝗶𝗼𝗻 𝗽𝗹𝗮𝗻𝘀 HackRisk is evolving to reflect how security leaders use Strategic Threat Intelligence today. To focus entirely on premium-grade capabilities, we are 𝗿𝗲𝘁𝗶𝗿𝗶𝗻𝗴 𝘁𝗵𝗲 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹 𝗽𝗹𝗮𝗻. 𝗧𝗵𝗲 𝗽𝗹𝗮𝗻 𝘄𝗶𝗹𝗹 𝗯𝗲 𝗱𝗶𝘀𝗰𝗼𝗻𝘁𝗶𝗻𝘂𝗲𝗱 𝗼𝗻 𝗗𝗲𝗰𝗲𝗺𝗯𝗲𝗿 𝟭𝟲, 𝟮𝟬𝟮𝟱. 1/4

🚨Cyberattack Alert ‼️ 🇺🇸USA - Comcast Space Bears hacking group claims to have breached Comcast. Sector: Telco Threat class: Cybercrime Observed: Dec 8, 2025 Status: Pending verification

🚨Cyberattack Alert ‼️ 🇺🇸USA - Scientology Qilin hacking group claims to have breached Scientology. Sector: Organizations Threat class: Cybercrime Observed: Dec 4, 2025 Status: Pending verification

🚨Cyberattack Alert ‼️ 🇯🇵Japan - Yazaki Group INC Ransom hacking group claims to have breached Yazaki Group.

🚨 #RISKFRIDAY: WEEK 26/11-02/12/25 🚀 Every week we analyse confirmed, successful cyber attacks and score them with our proprietary ESIX© (Estimated Severity Index) — a composite metric that measures operational, financial (direct & indirect), technical and reputational impact. 1/7

🚨Cyberattack Alert ‼️ 🇿🇲Zambia - National Health Insurance Scheme (NHIS) Nova hacking group claims to have breached National Health Insurance Scheme (NHIS). Allegedly, the attackers exfiltrated patients data.

🚨Cyberattack Alert ‼️ 🇪🇸Spain - Maset Qilin hacking group claims to have breached Maset. Allegedly, the attackers exfiltrated 17 GB of data. Sector: Manufacturing Threat class: Cybercrime Observed: Dec 4, 2025 Status: Pending verification