NeuralStackRansomware Group Qilin Exfiltrates 2.3 Million Records from German Bank
Qilin ransomware operators claimed responsibility for a July 18 2026 breach of Deutsche Bank subsidiary Postbank. The group published 2.3 million customer records including account numbers and transaction histories. This marks the largest financial sector incident in Europe since the 2024 MOVEit attacks.
Ransomware Group Akira Claims Breach of 1.4 Million Records from US Retailer
Akira ransomware operators posted 1.4 million customer records from a major US retailer on July 23 2026. The stolen data includes names, addresses, payment card tokens, and loyalty program details. The retailer confirmed the incident began June 28 and has engaged federal authorities.
LockBit Affiliates Breach 1.9 Million Records from European Hospital Network
LockBit affiliates claimed responsibility for a July 19 2026 breach of a 12-hospital network in Germany exposing 1.9 million patient records. The group demanded 12 million euros in ransom. German authorities confirmed the incident on July 21.
Ransomware Group Qilin Exfiltrates 2.8 Million Records from UnitedHealth
Qilin ransomware operators claimed theft of 2.8 million patient records from UnitedHealth Group on July 20. The group demands 50 million dollars in Bitcoin. UnitedHealth confirmed the intrusion began on July 12 via a compromised VPN credential.
Deloitte Reports 12 Million Records Exposed in MOVEit Supply Chain Attack
Deloitte confirmed a breach of 12 million records via the MOVEit file transfer tool on July 20. The Clop ransomware group claimed responsibility. It matters because it highlights persistent supply chain vulnerabilities in professional services.
LockBit Claims Breach of 3.1 Million Bank of America Records
LockBit published 3.1 million Bank of America customer records on July 17 claiming a May 2026 intrusion. The data includes account numbers and partial Social Security numbers. Bank of America stated it detected and contained the intrusion on June 4.
Ransomware Group Claims Breach of 4.2 Million Apple iCloud Accounts
A ransomware group posted 4.2 million alleged Apple iCloud records on July 20 2026. Apple confirmed the data came from a third-party developer portal not its core systems. The incident affects users who enabled advanced data protection before June 2026.
CrowdStrike Identifies July 15 Ransomware Attack on 12000 Healthcare Endpoints
CrowdStrike detected a ransomware campaign on July 15 2026 that encrypted data on 12000 healthcare endpoints across 47 hospitals. The attack used a previously unknown loader targeting unpatched Windows systems. No patient data exfiltration has been confirmed as of July 19 2026.
Microsoft Discloses July 10 Azure Key Leak Affecting 18000 Tenants
Microsoft confirmed on July 16 that an internal key management error exposed storage account keys for 18000 Azure tenants. The exposure lasted 11 days before detection. No customer data exfiltration has been confirmed yet.
CrowdStrike Detects July 13 Supply Chain Attack on 420,000 Endpoints
CrowdStrike identified a supply chain compromise on July 13 2026 affecting 420,000 endpoints. The attackers inserted malicious code into a third party driver update. No data exfiltration has been confirmed yet.
Salesforce Confirms July 12 Breach Exposed 1.1 Million CRM Records
Salesforce confirmed a July 12 breach that exposed 1.1 million customer CRM records. The incident involved unauthorized access to a legacy integration API. Affected organizations include mid-market retailers and professional services firms.
Cloudflare Mitigates July 10 DDoS Attack on 1.2 Million Sites
Cloudflare blocked a record 3.8 Tbps DDoS attack on July 10 targeting 1.2 million customer sites. The assault originated from compromised IoT devices across 140 countries. No customer data was accessed during the six-hour event.