🌍 𝐖𝐡𝐞𝐧 𝐀 𝐖𝐚𝐫 𝐆𝐨𝐞𝐬 𝐂𝐲𝐛𝐞𝐫 ⚠️ Modern conflicts are no longer fought only through military force or diplomacy. They now unfold in cyberspace too, through 𝐃𝐃𝐨𝐒 𝐚𝐭𝐭𝐚𝐜𝐤𝐬, 𝐩𝐫𝐨𝐩𝐚𝐠𝐚𝐧𝐝𝐚, 𝐝𝐢𝐬𝐢𝐧𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧, 𝐜𝐲𝐛𝐞𝐫 𝐞𝐬𝐩𝐢𝐨𝐧𝐚𝐠𝐞, 𝐬𝐚𝐛𝐨𝐭𝐚𝐠𝐞, 𝐚𝐧𝐝 𝐜𝐨𝐯𝐞𝐫𝐭 𝐚𝐜𝐜𝐞𝐬𝐬 𝐨𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬. 1/2

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗔𝗶𝗰𝗵𝗶 𝗘𝗹𝗲𝗰𝘁𝗿𝗶𝗰 The Gentlemen hacking group claims to have breached Aichi Electric. Threat actor: The Gentlemen Sector: Manufacturing Data exposure (claimed): Not specified Data type: Not specified Observed: Mar 26, 2026 Status: Pending verification ESIX©: 5.04

🚨Cyber Alert ‼️ 🇺🇸USA - 𝗚𝗼𝗼𝗱𝘄𝗶𝗹𝗹 Interlock hacking group claims to have breached Goodwill. Threat actor: Interlock Sector: Organizations Data exposure (claimed): 80 GB Data type: Personal data, financial documents Observed: Mar 26, 2026 Status: Pending verification ESIX©: 5.23

🚨Cyber Alert ‼️ 🇺🇸USA - 𝗠𝗼𝗻𝗺𝗼𝘂𝘁𝗵 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝘆 Pear hacking group claims to have breached Monmouth University, allegedly exfiltrating ~16 TB of data including financial, HR, vendor, and sensitive student information (PII, PHI, grades, minors’ data), as well as emails and cloud files.

🚨Cyber Alert ‼️ 🇳🇱Netherlands - 𝗔𝗙𝗖 𝗔𝗷𝗮𝘅 Ajax was hit by a cyberattack exploiting API and key management flaws, allowing attackers to access data of 300,000+ fans, steal or disable 42,000+ season tickets, and view or modify details of 538 banned supporters, including lifting bans.

🚨Cyber Alert ‼️ 🇮🇹Italy - 𝗘𝘀𝗽𝗿𝗶𝗻𝗲𝘁 𝗦𝗽𝗔 ALP-001 hacking group claims to have breached Esprinet SpA. Threat actor: ALP-001 Sector: Wholesale / Retail Data exposure (claimed): 1.2 TB Data type: Not specified Observed: Mar 25, 2026 Status: Pending verification ESIX©: 6.36

🚨Cyber Alert ‼️ 🇺🇸USA - 𝗛𝗮𝗰𝗸𝗲𝗿𝗢𝗻𝗲 A threat actor exploited a BOLA vulnerability in Navia systems to access and exfiltrate sensitive data affecting HackerOne employees.

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗣𝗼𝗿𝘁 𝗼𝗳 𝗩𝗶𝗴𝗼 Port of Vigo was hit by a ransomware attack, disrupting cargo traffic management after systems were encrypted and taken offline.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 18 - 24 March 2026 ⚠️597 cyber attacks across 63 countries ⚠️ More details: hackmanac.com/news/hack-tu...

Thank you 𝙏𝙝𝙚 𝘾𝙮𝙗𝙚𝙧 𝙀𝙭𝙥𝙧𝙚𝙨𝙨 for this interview to our CEO Sofia Scozzari: 𝐖𝐡𝐲 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐌𝐮𝐬𝐭 𝐌𝐨𝐯𝐞 𝐁𝐞𝐲𝐨𝐧𝐝 𝐓𝐞𝐜𝐡𝐧𝐨𝐥𝐨𝐠𝐲 "...the most misunderstood assumption is that cybersecurity is exclusively a technical issue, a subset of IT, often resulting in a fraction of a company’s IT budget. ..." 1/3

🚨Cyber Alert ‼️ 🇰🇷South Korea - 𝗞𝗶𝘀𝘄𝗶𝗿𝗲 INC Ransom hacking group claims to have breached Kiswire LTD.

🚨Cyber Alert ‼️ 🇫🇷France - 𝗢𝗩𝗛𝗰𝗹𝗼𝘂𝗱 The threat actor contactbreachforums claims to have breached OVHcloud, a major global web hosting provider, by gaining access to one of OVH’s parent accounts and associated servers.

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗶𝗚𝗟𝗦 Payload hacking group claims to have breached iGLS. Threat actor: Payload Sector: Healthcare Data exposure (claimed): 510 GB Data type: Not specified Observed: Mar 23, 2026 Status: Pending verification ESIX©: 5.58

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗥𝗶𝗼𝗷𝗮 𝗠𝗼𝘁𝗼𝗿 Akira hacking group claims to have breached Rioja Motor.

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗢𝗺𝗶𝗸𝗲𝗻𝘀𝗵𝗶 𝗖𝗼.,𝗟𝘁𝗱 The Gentlemen hacking group claims to have breached Omikenshi Co.,Ltd.

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗔𝘂𝘁𝗿𝗮𝗻𝘀𝗮 𝗦.𝗟. Akira ransomware group claims to have breached Autransa S.L., alleging data exfiltration.

‼️For the first time, Israel ranks first in terms of number of attacks suffered in the past month, surpassing the United States.

🚨Cyber Alert ‼️ 🇺🇸US - 𝗖𝗿𝘂𝗻𝗰𝗵𝘆𝗿𝗼𝗹𝗹 A threat actor reportedly breached Crunchyroll via a compromised employee account at its outsourcing partner, enabling unauthorised access and the exfiltration of approximately 100 GB of data, including customer analytics and ticketing system information.

🚨Cyber Alert ‼️ 🇬🇧United Kingdom - 𝗔𝘀𝘁𝗿𝗮𝗭𝗲𝗻𝗲𝗰𝗮 ShinyHunters claims to have breached AstraZeneca, allegedly exfiltrating source code, employee data, GitHub data, API and AWS keys, service credentials, and database access (MongoDB/MySQL) from production and staging environments.

🚨Cyber Alert ‼️ 🇸🇦Saudi Arabia: 𝗔𝗹-𝗦𝗮𝗳𝗶 𝗢𝗶𝗹 𝗖𝗼𝗺𝗽𝗮𝗻𝘆 (PURE IN Saudi) Nasir Security claims to have conducted a politically motivated breach of Al-Safi Oil Company (PURE IN Saudi).

🚨Cyber Alert ‼️ 🇦🇪UAE - 𝗔𝘅𝗰𝗲𝗿𝗮 ShinyHunters claims to have breached Axcera, allegedly exfiltrating 13 GB of data including source code, cloud configurations, credentials, API keys, and MongoDB dumps.

⚠️ 𝐌𝐢𝐝𝐝𝐥𝐞 𝐄𝐚𝐬𝐭 𝐂𝐲𝐛𝐞𝐫 𝐂𝐨𝐧𝐟𝐥𝐢𝐜𝐭 𝐖𝐞𝐞𝐤𝐥𝐲 𝐌𝐨𝐧𝐢𝐭𝐨𝐫 ⚠️ Cyber activity continues to accompany the ongoing tensions in the Middle East, although the latest data shows a clear slowdown in both volume and impact. This is our 3rd weekly update, tracking the evolution of cyber operations across the region. 1/5

🚨Cyber Alert ‼️ 🇺🇸United States - 𝗡𝗖𝗛 𝗖𝗼𝗿𝗽𝗼𝗿𝗮𝘁𝗶𝗼𝗻 Embargo hacking group claims to have breached NCH Corporation. The group alleges it obtained more than 7.3 TB of the organisation's data.

🔶#RiskFriday 𝟏𝟏-𝟏𝟕/𝟎𝟑/𝟐𝟎𝟐𝟔🔶 Here’s this week’s snapshot from hackrisk.io based on our proprietary 𝐄𝐒𝐈𝐗© (𝐸𝑠𝑡𝑖𝑚𝑎𝑡𝑒𝑑 𝑆𝑒𝑣𝑒𝑟𝑖𝑡𝑦 𝐼𝑛𝑑𝑒𝑥) metric that measures operational, financial (direct & indirect), technical and reputational impact of cyber attacks👇 1/6

Eid Al Fitr Mubarak from Hackmanac Team 🌙 ✨

🚨Cyber Alert ‼️ 🇮🇹Italy - 𝗙𝗹𝗲𝘅𝗳𝗼𝗿𝗺 𝗦𝗽𝗔 DragonForce hacking group claims to have breached Flexform SpA. Threat actor: DragonForce Sector: Manufacturing Data exposure (claimed): 29.5 GB Data type: Internal documents Observed: Mar 19, 2026 Status: Pending verification ESIX©: 5.39

🚨Cyber Alert ‼️ 🇳🇦Namibia - 𝗡𝗮𝗺𝗶𝗯𝗶𝗮 𝗔𝗶𝗿𝗽𝗼𝗿𝘁𝘀 INC Ransom hacking group claims to have breached Namibia Airports. Threat actor: INC Ransom Sector: Transportation Data exposure (claimed): 465.6 GB Data type: Not specified Observed: Mar 19, 2026 Status: Pending verification ESIX©: 5.73

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗠𝗮𝘇𝗱𝗮 𝗖𝗼𝗿𝗽𝗼𝗿𝗮𝘁𝗶𝗼𝗻 Mazda disclosed a mid-December 2025 breach caused by exploitation of a system vulnerability, potentially exposing 692 employee and partner records.

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗦𝗮𝘄𝗮𝘆𝗮𝗸𝗮𝗰𝗹𝘂𝗯 𝗖𝗼.,𝗟𝘁𝗱. Space Bears hacking group claims to have breached Sawayakaclub Co.,Ltd.

🚨Cyber Alert ‼️ 🇺🇸United States - 𝗜𝗻𝘁𝘂𝗶𝘁𝗶𝘃𝗲 𝗦𝘂𝗿𝗴𝗶𝗰𝗮𝗹 Intuitive disclosed that an unauthorized third party accessed certain internal IT business applications following a targeted phishing attack.

🚨Cyber Alert ‼️ 🇮🇱Israel - 𝗣𝗮𝗹𝗿𝗮𝗺 𝗜𝗻𝗱𝘂𝘀𝘁𝗿𝗶𝗲𝘀 𝗟𝘁𝗱. Kill Security hacking group claims to have breached Palram Industries Ltd.

🚨 Cyber Alert ‼️ 🇮🇶 Iraq (Kurdistan Region) - 𝗠𝗶𝗻𝗶𝘀𝘁𝗿𝘆 𝗼𝗳 𝗛𝗶𝗴𝗵𝗲𝗿 𝗘𝗱𝘂𝗰𝗮𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝗦𝗰𝗶𝗲𝗻𝘁𝗶𝗳𝗶𝗰 𝗥𝗲𝘀𝗲𝗮𝗿𝗰𝗵 LockBit 5.0 hacking group claims to have breached the Kurdistan Ministry of Higher Education and Scientific Research.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 11 - 17 March 2026 ⚠️538 cyber attacks across 59 countries ⚠️ More details: hackmanac.com/news/hack-tu...

🚨Cyber Alert ‼️ 🇧🇭Bahrain - 𝗥𝗼𝘆𝗮𝗹 𝗕𝗮𝗵𝗿𝗮𝗶𝗻 𝗛𝗼𝘀𝗽𝗶𝘁𝗮𝗹 Payload hacking group claims to have breached Royal Bahrain Hospital. Threat actor: Payload Sector: Healthcare Data exposure (claimed): 110 GB Data type: Not specified Observed: Mar 15, 2026 Status: Pending verification ESIX©: 6.18

⚠️ 𝐌𝐢𝐝𝐝𝐥𝐞 𝐄𝐚𝐬𝐭 𝐂𝐲𝐛𝐞𝐫 𝐂𝐨𝐧𝐟𝐥𝐢𝐜𝐭 𝐌𝐨𝐧𝐢𝐭𝐨𝐫 ⚠️ Cyber activity continues to accompany the ongoing tensions in the Middle East. We have just published the 𝐬𝐞𝐜𝐨𝐧𝐝 𝐰𝐞𝐞𝐤𝐥𝐲 𝐮𝐩𝐝𝐚𝐭𝐞, tracking the evolution of cyber operations across the region. 1/6

🔶#RiskFriday 🔶 Here’s this week’s snapshot from hackrisk.io based on our proprietary 𝐄𝐒𝐈𝐗© (𝐸𝑠𝑡𝑖𝑚𝑎𝑡𝑒𝑑 𝑆𝑒𝑣𝑒𝑟𝑖𝑡𝑦 𝐼𝑛𝑑𝑒𝑥) metric that measures operational, financial (direct & indirect), technical and reputational impact of cyber attacks👇 1/7

🚨Cyber Alert ‼️ 🇸🇪Sweden - 𝗖𝗚𝗜 ByteToBreach claims to have breached CGI, allegedly accessing Sweden’s e-government source code and citizen PII databases after compromising a Jenkins environment.

🚨Cyber Alert ‼️ 🇺🇸US - 𝗦𝘁𝗿𝘆𝗸𝗲𝗿 Iran-linked Handala hacking group claims to have conducted a cyberattack against Stryker, allegedly wiping corporate devices and compromising the company’s Microsoft environment.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 04 - 10 March 2026 ⚠️659 cyber attacks across 66 countries ⚠️ More details: hackmanac.com/news/hack-tu...

🚨Cyber Alert ‼️ 🇦🇪UAE - 𝗚𝗲𝗿𝗺𝗮𝗻 𝗦𝘁𝗮𝗻𝗱𝗮𝗿𝗱 𝗚𝗿𝗼𝘂𝗽 Meduza Locker hacking group claims to have breached German Standard Group. Threat actor: Meduza Locker Sector: Veterinary activities Data exposure (claimed): 300 GB Data type: Work documents, contracts, passports, and banking information

Our 𝐅𝐞𝐛𝐫𝐮𝐚𝐫𝐲 𝟐𝟎𝟐𝟔 𝐇𝐚𝐜𝐤𝐦𝐚𝐧𝐚𝐜 𝐌𝐨𝐧𝐭𝐡𝐥𝐲 𝐂𝐲𝐛𝐞𝐫 𝐑𝐢𝐬𝐤 𝐑𝐞𝐩𝐨𝐫𝐭 is ready! This edition introduces several new analytical elements, including the 𝐈𝐧𝐝𝐮𝐬𝐭𝐫𝐲 𝐌𝐚𝐠𝐢𝐜 𝐐𝐮𝐚𝐝𝐫𝐚𝐧𝐭, designed to visualise how cyber risk distributes across sectors by combining attack exposure and impact severity by ESIX©. 1/6

For the past seven days we have been closely monitoring the cyber dimension of the ongoing tensions in the Middle East. Today we are introducing a new weekly intelligence snapshot: the 𝐇𝐚𝐜𝐤𝐦𝐚𝐧𝐚𝐜 𝐌𝐢𝐝𝐝𝐥𝐞 𝐄𝐚𝐬𝐭 𝐂𝐲𝐛𝐞𝐫 𝐂𝐨𝐧𝐟𝐥𝐢𝐜𝐭 𝐌𝐨𝐧𝐢𝐭𝐨𝐫. 1/7

Here’s this week’s snapshot from hackrisk.io based on our proprietary 𝐄𝐒𝐈𝐗© (𝐸𝑠𝑡𝑖𝑚𝑎𝑡𝑒𝑑 𝑆𝑒𝑣𝑒𝑟𝑖𝑡𝑦 𝐼𝑛𝑑𝑒𝑥) metric that measures operational, financial (direct & indirect), technical and reputational impact of cyber attacks👇 1/7

🚨Cyber Alert ‼️ 🇦🇪United Arab Emirates - 𝗔𝗵𝗺𝗲𝗱 𝗠𝘂𝗯𝗮𝗿𝗮𝗸 𝗗𝗲𝗯𝘁 𝗖𝗼𝗹𝗹𝗲𝗰𝘁𝗶𝗼𝗻 (𝗔𝗠𝗗𝗖) DragonForce ransomware group claims to have breached Ahmed Mubarak Debt Collection (AMDC) and listed the organisation on its dark web portal.

We shared with @wired.com Italia an overview of the current situation in the Middle East from a dual perspective: as residents and as professionals from a cyber standpoint. 1/5

🚨Cyber Alert ‼️ 🇩🇪Germany - 𝗠𝗽𝗮 𝗣𝗵𝗮𝗿𝗺𝗮 𝗚𝗠𝗕𝗛 Metaencryptor ransomware group claims to have breached Mpa Pharma GMBH and published the listing on its dark web portal.

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗜𝗻𝗱𝗶𝘃𝗶𝗱𝘂𝗮𝗹𝘀 𝗶𝗻 𝗝𝗮𝗽𝗮𝗻 A fake website impersonating the Prime Minister’s Office promotes a fraudulent “government-supported income project” to trick users into investing and submitting personal data.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 25 Feb - 03 Mar 2026 ⚠️556 cyber attacks across 57 countries ⚠️ More details: hackmanac.com/news/hack-tu...

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗘𝗵𝗼𝗹𝗼 𝗛𝗲𝗮𝗹𝘁𝗵 Threat actor XP95 claimed responsibility for breaching Eholo, a Spanish software provider offering practice management solutions for psychologists and psychological centres.

🚨Cyber Alert ‼️ 🇳🇱Netherlands - 𝗔𝗸𝘇𝗼𝗡𝗼𝗯𝗲𝗹 Anubis hacking group claims to have breached AkzoNobel. Samples have been provided Threat actor: Anubis Sector: Manufacturing Data exposure (claimed): 170 GB Data type: PII | incidents reports | confidential documents | financial documents | client's data