🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗞𝘆𝘂𝘀𝗵𝘂 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝘆 𝗛𝗼𝘀𝗽𝗶𝘁𝗮𝗹 Kyushu University Hospital disclosed a ransomware incident affecting a research laboratory endpoint following unauthorized access.

𝟑𝟎 𝐝𝐚𝐲𝐬. 𝐍𝐞𝐰 𝐭𝐨𝐩 𝐚𝐜𝐭𝐨𝐫. 𝐍𝐞𝐰 𝐭𝐨𝐩 𝐜𝐨𝐮𝐧𝐭𝐫𝐲. 𝐒𝐚𝐦𝐞 𝐛𝐥𝐢𝐧𝐝 𝐬𝐩𝐨𝐭𝐬. In April, Handala was the most impactful threat actor in our dataset. In May, it dropped out of the top four. 1/6

🚨Cyber Alert ‼️ 🇯🇲Jamaica - 𝗡𝗮𝘁𝗶𝗼𝗻𝗮𝗹 𝗛𝗲𝗮𝗹𝘁𝗵 𝗙𝘂𝗻𝗱 𝗝𝗮𝗺𝗮𝗶𝗰𝗮 (𝗡𝗛𝗙) Pear claims to have breached National Health Fund. Allegedly, the attack led to the exfiltration of 3 TB of data, including data related to financial records, HR files, medical records, personal data, emails, customer data.

🚨Cyber Alert ‼️ 🇬🇧UK - 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝘆 𝗼𝗳 𝗡𝗼𝘁𝘁𝗶𝗻𝗴𝗵𝗮𝗺 ShinyHunters hacking group claim to have breached University of Nottingham.

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗪𝗶𝘀𝗲 [𝗦𝗽𝗮𝗶𝗻] Threat actor "giorggios" claimed to be selling a database allegedly linked to Wise Spain containing 4.9 million user records. The leaked data allegedly includes Personal data, KYC/AML verification information

🚨Cyber Alert ‼️ 🇺🇸USA - 𝗦𝗲𝗿𝘃𝗶𝗰𝗲𝗡𝗼𝘄 ServiceNow disclosed a security incident in which attackers exploited an unauthenticated REST API vulnerability to access customer instances and query customer data.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 03 - 09 Jun 2026 ⚠️525 cyber attacks across 73 countries ⚠️ More details: hackmanac.com/news/hack-tu...

🚨Cyber Alert ‼️ 🇺🇸USA - 𝗘𝘃𝗮𝗻𝘀𝘁𝗼𝗻 𝗧𝗼𝘄𝗻𝘀𝗵𝗶𝗽 𝗛𝗶𝗴𝗵 𝗦𝗰𝗵𝗼𝗼𝗹 (𝗘𝗧𝗛𝗦) Evanston Township High School (ETHS) in Illinois was forced to close for at least two days following a ransomware attack that disrupted critical IT systems and network services.

🚨Cyber Alert ‼️ 🇮🇹Italy - 𝗘𝗮𝘁𝗮𝗹𝘆 Eataly disclosed a cyberattack targeting its e-commerce infrastructure. The company stated that no evidence of data theft was identified, but customer account data may have been exposed.

🚨Cyber Alert ‼️ 🇨🇳China - 𝗙𝗘𝗦𝗖𝗢 𝗔𝗱𝗲𝗰𝗰𝗼 The Gentlemen hacking group claims to have breached FESCO Adecco. Threat actor: The Gentlemen Sector: Other Services Data exposure (claimed): Not specified Data type: Not specified Observed: Jun 8, 2026 Status: Pending verification ESIX©: 5.41

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗘𝗺𝗽𝘁𝘆 The Gentlemen hacking group claims to have breached Empty. Threat actor: The Gentlemen Sector: Construction Data exposure (claimed): Not specified Data type: Not specified Observed: Jun 8, 2026 Status: Pending verification ESIX©: 5.05

🚨Cyber Alert ‼️ Meta AI Support Flaw Used to Hijack 20,000+ Instagram Accounts Meta disclosed that attackers hijacked over 20,000 Instagram accounts by exploiting a flaw in its AI-powered High Touch Support (HTS) recovery system.

🚨Cyber Alert ‼️ 🇮🇩Indonesia - 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝗮𝘀 𝗡𝗮𝘀𝗶𝗼𝗻𝗮𝗹 (𝗨𝗡𝗔𝗦) Nova claims to have breached Universitas Nasional. Allegedly, the attack led to the exfiltration of 40 GB of data. Threat actor: Nova Sector: Education Data exposure (claimed): 40 GB of data Data type: Not specified Observed: Jun 6, 2026

🔶#RiskFriday 𝟐𝟕/𝟎𝟓-𝟎𝟐/𝟎𝟔/𝟐𝟎𝟐𝟔🔶 Here’s this week’s snapshot from hackrisk.io based on our proprietary 𝐄𝐒𝐈𝐗© (𝐸𝑠𝑡𝑖𝑚𝑎𝑡𝑒𝑑 𝑆𝑒𝑣𝑒𝑟𝑖𝑡𝑦 𝐼𝑛𝑑𝑒𝑥) metric that measures operational, financial (direct & indirect), technical and reputational impact of cyber attacks. 1/7

🚨Cyber Alert ‼️ 🇳🇱Netherlands - 𝗪𝗲𝘀𝘀𝗲𝗹𝘀 𝗟𝗼𝗴𝗶𝘀𝘁𝗶𝗰𝘀 𝗕.𝗩. LockBit 5.0 hacking group claims to have breached Wessels Logistics B.V. Threat actor: LockBit 5.0 Sector: Transportation / Storage Data exposure (claimed): Not specified Data type: Not specified Observed: Jun 5, 2026

🚨Cyber Alert ‼️ 🇧🇷Brazil - 𝗦𝗶𝗰𝗼𝗹 𝗝𝘀 𝗖𝗼𝗯𝗿𝗮𝗻ç𝗮𝘀 𝗲 𝗦𝗲𝗿𝘃𝗶ç𝗼𝘀 Space Bears hacking group claims to have breached Sicol Js Cobranças e Serviços.

🚨Cyber Alert ‼️ 🇻🇳Vietnam - 𝗛𝗼𝗽𝗹𝗼𝗻𝗴𝘁𝗲𝗰𝗵 ThreeAM ransomware group claimed a cyberattack against Hop Long Technology Corporation (Hoplongtech), allegedly gaining access to internal company systems and compromising company data.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 27 May - 02 Jun 2026 ⚠️475 cyber attacks across 63 countries ⚠️ More details: hackmanac.com/news/hack-tu...

🚨Cyber Alert ‼️ 🇭🇷Croatia - 𝗚𝗡𝗞 𝗗𝗶𝗻𝗮𝗺𝗼 Threat actor "vvvv" claimed to have breached GNK Dinamo Zagreb's website and released a database allegedly containing personal information of around 50,000 individuals.

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗜𝗯𝗲𝗿𝗱𝗿𝗼𝗹𝗮 Threat actor "spain" claimed to be selling a database allegedly stolen from Iberdrola. The dataset is said to contain records belonging to more than 7 million customers.

𝐀𝐠𝐞𝐧𝐭𝐢𝐜 𝐀𝐈 𝐈𝐬 𝐑𝐞𝐰𝐫𝐢𝐭𝐢𝐧𝐠 𝐭𝐡𝐞 𝐑𝐮𝐥𝐞𝐬 𝐨𝐟 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 Agentic AI is already 𝐫𝐞𝐬𝐡𝐚𝐩𝐢𝐧𝐠 𝐡𝐨𝐰 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐨𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬 𝐰𝐨𝐫𝐤, from SOC automation to threat intelligence and vulnerability management. 1/4

🚨Cyber Alert ‼️ 🇧🇷Brazil - 𝗚𝗿𝘂𝗽𝗼 𝗠𝗮𝘂𝗮́ BravoX hacking group claims to have breached Grupo Mauá and allegedly exfiltrated 427.3 GB of data.

🔶#RiskFriday 𝟐𝟎-𝟐𝟔/𝟎𝟓/𝟐𝟎𝟐𝟔🔶 Here’s this week’s snapshot from hackrisk.io based on our proprietary 𝐄𝐒𝐈𝐗© (𝐸𝑠𝑡𝑖𝑚𝑎𝑡𝑒𝑑 𝑆𝑒𝑣𝑒𝑟𝑖𝑡𝑦 𝐼𝑛𝑑𝑒𝑥) metric that measures operational, financial (direct & indirect), technical and reputational impact of cyber attacks. 1/6

🚨Cyber Alert ‼️ 🇨🇴Colombia - 𝗘𝗺𝗽𝗿𝗲𝘀𝗮𝘀 𝗣𝘂́𝗯𝗹𝗶𝗰𝗮𝘀 𝗱𝗲 𝗠𝗲𝗱𝗲𝗹𝗹𝗶́𝗻 (𝗘𝗣𝗠) Everest hacking group claimed to have breached Empresas Públicas de Medellín (EPM) and CHEC, allegedly stealing 20.4 GB of data.

🚨Cyber Alert ‼️ 🇫🇷France - 𝗠𝗮𝗶𝗿𝗶𝗲 𝗧𝗵𝗶𝘃𝗲𝗿𝘃𝗮𝗹 𝗚𝗿𝗶𝗴𝗻𝗼𝗻 Bavacai hacking group claims to have breached Mairie Thiverval Grignon.

🚨Cyber Alert ‼️ 🇰🇼Kuwait - 𝗦𝗶𝗱𝗿𝗮 𝗞𝘂𝘄𝗮𝗶𝘁 𝗛𝗼𝘀𝗽𝗶𝘁𝗮𝗹 Sidra Kuwait Hospital was allegedly breached by the Everest ransomware group, which claimed to have stolen 149.76 GB of data containing 23,279 files.

𝐀𝐠𝐞𝐧𝐭𝐢𝐜 𝐀𝐈 𝐈𝐬 𝐑𝐞𝐰𝐫𝐢𝐭𝐢𝐧𝐠 𝐭𝐡𝐞 𝐑𝐮𝐥𝐞𝐬 𝐨𝐟 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 Agentic AI is already 𝐫𝐞𝐬𝐡𝐚𝐩𝐢𝐧𝐠 𝐡𝐨𝐰 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐨𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬 𝐰𝐨𝐫𝐤, from SOC automation to threat intelligence and vulnerability management. 1/4

🚨Cyber Alert ‼️ 🇳🇬Nigeria - 𝗫𝗟 𝗔𝗳𝗿𝗶𝗰𝗮 𝗚𝗿𝗼𝘂𝗽 0 Day ransomware group claimed a cyberattack against XL Africa Group, allegedly exfiltrating 1.5 TB of data, including SQL databases and other files. The group stated the stolen data was encrypted with AES-256-GCM.

🚨Cyber Alert ‼️ 🇮🇱Israel - 𝗙𝗪𝗠𝗞 𝗟𝗮𝘄 𝗢𝗳𝗳𝗶𝗰𝗲𝘀 DragonForce hacking group claims to have breached FWMK Law Offices and allegedly obtained 585.5 GB of data.

🚨Cyber Alert ‼️ 🇺🇸USA - 𝗥𝗶𝗱𝗴𝗲 𝗟𝗮𝘄 𝗙𝗶𝗿𝗺 Space Bears ransomware gang claims to have breached Ridge Law Firm, alleging the exfiltration of 1.6 TB of data, including client medical records, financial records, and expert witness reports.

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗚𝗲𝘀𝘁𝗼𝗿𝗱𝗲𝘀 𝗚𝗲𝘀𝘁𝗶ó𝗻 𝗔𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗶𝘃𝗮 (𝗚𝗘𝗦𝗧𝗢𝗥𝗗𝗘𝗦) Space Bears ransomware gang claims to have breached Gestordes Gestión Administrativa (GESTORDES), alleging the exfiltration of personal information, financial documents, and additional files.

🚨Cyber Alert Update‼️ 🇳🇱Netherlands - 𝗦𝗮𝘃𝗲𝗿 𝗡.𝗩. DragonForce ransomware group claimed responsibility for the Saver N.V. cyber attack.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 20 - 26 May 2026 ⚠️416 cyber attacks across 62 countries ⚠️ More details: hackmanac.com/news/hack-tu...

🚨Cyber Alert ‼️ 🇦🇪UAE - 𝗠𝗲𝗶𝗿𝗰 𝗧𝗿𝗮𝗶𝗻𝗶𝗻𝗴 & 𝗖𝗼𝗻𝘀𝘂𝗹𝘁𝗶𝗻𝗴 INC Ransom ransomware group claimed to have breached Meirc Training and Consulting, allegedly gaining access to its entire network and exfiltrating 1 TB of data, including accounting records, emails, planning and budget documents, and employee data

🚨Cyber Alert ‼️ 🇹🇼Taiwan - 𝗔𝗿𝘁𝘀𝗼 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝘁𝗶𝗼𝗻𝗮𝗹, 𝗜𝗡𝗖. AiLock hacking group claims to have breached Artso International, INC. The group alleges that 5.4 TB of the organisation’s data was obtained.

🚨Cyber Alert ‼️ 🇧🇷Brazil - 𝗦𝗲𝗰𝗿𝗲𝘁𝗮𝗿𝗶𝗮𝘁 𝗼𝗳 𝗖𝗼𝗻𝘁𝗿𝗼𝗹 𝗮𝗻𝗱 𝗧𝗿𝗮𝗻𝘀𝗽𝗮𝗿𝗲𝗻𝗰𝘆 Nova hacking group claims to have breached Secretariat of Control and Transparency. The group alleges that 100 GB of the organisation’s data was obtained.

‼️𝗠𝗲𝘁𝗮 𝗮𝗻𝗱 𝗪𝗵𝗮𝘁𝘀𝗔𝗽𝗽 𝘀𝘂𝗲𝗱 𝗼𝘃𝗲𝗿 𝗮𝗹𝗹𝗲𝗴𝗲𝗱 𝗺𝗶𝘀𝗹𝗲𝗮𝗱𝗶𝗻𝗴 𝗲𝗻𝗰𝗿𝘆𝗽𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝗽𝗿𝗶𝘃𝗮𝗰𝘆 𝗰𝗹𝗮𝗶𝗺𝘀 Texas Attorney General Ken Paxton sued Meta and WhatsApp, alleging they misled users about WhatsApp’s encryption and privacy protections.

📢𝐇𝐚𝐜𝐤𝐑𝐢𝐬𝐤 𝐡𝐚𝐬 𝐀𝐈 𝐧𝐨𝐰. 𝐀𝐧𝐝 𝐢𝐭'𝐬 𝐟𝐫𝐞𝐞! We've introduced 𝐀𝐈-𝐩𝐨𝐰𝐞𝐫𝐞𝐝 𝐓𝐡𝐫𝐞𝐚𝐭 𝐇𝐢𝐠𝐡𝐥𝐢𝐠𝐡𝐭𝐬 on the HackRisk Dashboard — distilling the noise into what actually matters: ✅ Key Trends ✅ Geopolitical Focus ✅ Critical Threats. 1/4

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗞𝗼𝗮 𝗚𝗹𝗮𝘀𝘀 𝗖𝗼., 𝗟𝘁𝗱. The Gentlemen hacking group claims to have breached Koa Glass Co., Ltd.

🚨Cyber Alert ‼️ 🇪🇬Egypt - 𝗥𝗮𝘄𝗮𝗷 𝗖𝗼𝗻𝘀𝘂𝗺𝗲𝗿 𝗙𝗶𝗻𝗮𝗻𝗰𝗲 NightSpire hacking group claims to have breached Rawaj Consumer Finance. The compromised data reportedly includes sales-related documents, HR data, sensitive employee records, and email/SMS data.

🚨Cyber Alert ‼️ 🇺🇸USA - 𝗛𝗲𝗹𝗶𝘅 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝘁𝗶𝗼𝗻𝗮𝗹 DragonForce hacking group claims to have breached Helix International. Threat actor: DragonForce Sector: ICT Data exposure (claimed): 23.2 GB of data Data type: Not specified Observed: May 25, 2026 Status: Pending verification ESIX©: 5.40

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝘆 𝗼𝗳 𝗩𝗮𝗹𝗲𝗻𝗰𝗶𝗮 Nova ransomware group claimed to have breached the University of Valencia, allegedly exfiltrating 300 GB of data, including sensitive student and staff data and personal photos involving children.

🔶#RiskFriday 𝟏𝟑-𝟏𝟗/𝟎𝟓/𝟐𝟎𝟐𝟔🔶 Here’s this week’s snapshot from hackrisk.io based on our proprietary 𝐄𝐒𝐈𝐗© (𝐸𝑠𝑡𝑖𝑚𝑎𝑡𝑒𝑑 𝑆𝑒𝑣𝑒𝑟𝑖𝑡𝑦 𝐼𝑛𝑑𝑒𝑥) metric that measures operational, financial (direct & indirect), technical and reputational impact of cyber attacks. 1/8

🚨Cyber Alert ‼️ 🇬🇧UK - 𝗦𝗵𝗼𝘁𝘁𝗲𝗿𝗺𝗶𝗹𝗹 𝗝𝘂𝗻𝗶𝗼𝗿 𝗦𝗰𝗵𝗼𝗼𝗹 LockBit 5.0 hacking group claims to have breached Shottermill Junior School. Threat actor: LockBit 5.0 Sector: Education Data exposure (claimed): Not specified Data type: Not specified Observed: May 20, 2026 Status: Pending verification ESIX©: 5.23

🚨Data Breach Alert Update ‼️ GitHub Confirms Internal Repository Breach via Malicious VS Code Extension GitHub confirmed unauthorized access to internal repositories after an employee device was compromised through a malicious VS Code extension.

🚨Data Breach Alert ‼️ 𝗧𝗲𝗮𝗺𝗣𝗖𝗣 𝗖𝗹𝗮𝗶𝗺𝘀 𝗦𝗮𝗹𝗲 𝗼𝗳 𝗚𝗶𝘁𝗛𝘂𝗯 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝗹 𝗦𝗼𝘂𝗿𝗰𝗲 𝗖𝗼𝗱𝗲 TeamPCP hacking group claimed the compromise and sale of GitHub internal data, allegedly including around 4,000 private repositories containing source code related to GitHub’s main platform and internal organizations.

🟧 #HackTuesday 🟧 Hack Tuesday: Week 13 - 19 May 2026 ⚠️386 cyber attacks across 64 countries ⚠️ More details: hackmanac.com/news/hack-tu...

🚨Cyber Alert ‼️ 🇬🇧UK - 𝗡𝗼𝘁𝗵𝗶𝗻𝗴 The INC Ransom group claimed an attack against Nothing, alleging the theft of 52 GB of data, including confidential documents, customer information, NDAs, financial records, operational data, corporate files, business agreements, and technology-related information.

🚨Cyber Alert ‼️ 🇮🇩Indonesia - 𝗣𝗧 𝗕𝗮𝗻𝗸 𝗡𝗲𝗴𝗮𝗿𝗮 𝗜𝗻𝗱𝗼𝗻𝗲𝘀𝗶𝗮 Triple X hacking group claimed a breach of Bank Negara Indonesia (BNI), alleging the theft of customer data from 2024–2026, including contracts, passports, and ID cards. The group claimed the full dataset is about 2 TB.

🚨Cyber Attack Alert ‼️ 🇩🇪Germany - 𝗟𝗮𝗻𝗱𝗲𝘀𝗵𝗮𝘂𝗽𝘁𝘀𝘁𝗮𝗱𝘁 𝗦𝘁𝘂𝘁𝘁𝗴𝗮𝗿𝘁 Rhysida hacking group claims to have breached Landeshauptstadt Stuttgart and is demanding a ransom of 5 BTC.