iiinova — where your digital self keeps evolving

DO WE REALLY NEED TO COPYRIGHT OUR OWN FACES? Denmark has just proposed giving every citizen copyright over their own face, voice and body in order to protect against AI-generated deepfakes. 1/3

111

Hackmanac @hackmanac.com · 12h

🚨Cyber Alert ‼️ 🇨🇴Colombia - 𝗣𝗼𝗹𝗶𝗸𝗲𝗺 𝗦.𝗔.𝗦 EMPERADOR hacking group claims to have breached Polikem S.A.S and allegedly exfiltrated sensitive company information.

110

Hackmanac @hackmanac.com · 12h

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗛𝗼𝘁𝗲𝗹 𝗚𝗿𝗮𝗻𝗱 𝗛𝗶𝗹𝗹 𝗜𝗰𝗵𝗶𝗴𝗮𝘆𝗮 Hotel Grand Hill Ichigaya warned guests of possible data exposure following unauthorised access to its third-party reservation-management provider, Temairazu.

100

Hackmanac @hackmanac.com · 29/09/2026

🚨Cyber Alert ‼️ 🇮🇹Italy - 𝗖𝗼𝗺𝘂𝗻𝗲 𝗱𝗶 𝗟𝗼𝗺𝗮𝘇𝘇𝗼 The Municipality of Lomazzo said attackers compromised its technical office’s email account between September 26 and 28, 2026, and used it to send fraudulent speeding-fine payment requests to recipients across Italy.

111

Hackmanac @hackmanac.com · 28/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗝𝘂𝗻𝘁𝗮 𝗱𝗲 𝗔𝗻𝗱𝗮𝗹𝘂𝗰í𝗮 Meduza Locker hacking group claims to have breached Junta de Andalucía. According to the threat actor, the compromised data includes client, confidential, financial, HR, legal, marketing and technical data.

129

Hackmanac @hackmanac.com · 28/09/2026

🚨Cyber Alert ‼️ 🇨🇭Switzerland - 𝗠𝘂𝗻𝗶𝗰𝗶𝗽𝗶𝗼 𝗱𝗶 𝗠𝗮𝗻𝗻𝗼 SafePay claims to have breached Municipio di Manno. Threat actor: SafePay Sector: Gov / Mil / LE Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 28, 2026

100

Hackmanac @hackmanac.com · 28/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗥𝗲𝘃𝗲𝗻𝗴𝗮 𝗦𝗺𝗮𝗿𝘁 𝗦𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝘀 Qilin hacking group claims to have breached Revenga Smart Solutions. Threat actor: Qilin Sector: Telco Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 27, 2026

100

Hackmanac @hackmanac.com · 26/09/2026

🚨Cyber Alert ‼️ 🇮🇹Italy - 𝗔.𝗣.𝗦.𝗣. 𝗦𝗮𝗻 𝗚𝗮𝗲𝘁𝗮𝗻𝗼 A.P.S.P. San Gaetano suffered a cyberattack involving a ransom demand that disrupted access to IT systems, medical records, treatment information and telephone services, forcing staff to temporarily manage clinical records and prescriptions manually.

111

Hackmanac @hackmanac.com · 25/09/2026

🚨Cyber Alert ‼️ 🇸🇨Seychelles - 𝗕𝗶𝘁𝗴𝗲𝘁 𝗛𝗮𝗰𝗸𝗲𝗱 𝗳𝗼𝗿 $𝟯𝟱𝟭.𝟲 𝗠𝗶𝗹𝗹𝗶𝗼𝗻 𝗶𝗻 𝗖𝗿𝘆𝗽𝘁𝗼𝗰𝘂𝗿𝗿𝗲𝗻𝗰𝘆, 𝗦𝘂𝘀𝗽𝗲𝗻𝗱𝘀 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗪𝗶𝘁𝗵𝗱𝗿𝗮𝘄𝗮𝗹𝘀 Bitget temporarily suspended withdrawals after unauthorized transfers from its wallets on September 24, 2026 led to the theft of about $351.6 million in crypto assets.

100

Hackmanac @hackmanac.com · 25/09/2026

🚨Cyber Alert ‼️ 🇲🇦Morocco - 𝗣𝗵𝗮𝗿𝗺𝗮 𝟱 INC Ransom claims to have breached Pharma 5, allegedly exfiltrating 50 GB of data related to corporate and financial information, products and supply, quality control and certification, drug testing, employee personal data and counterparties.

110

Hackmanac @hackmanac.com · 25/09/2026

🔶#RiskFriday 𝟏𝟔-𝟐𝟐/𝟎𝟗/𝟐𝟎𝟐𝟔🔶 Here's this week's snapshot from hackrisk.io based on our proprietary 𝐄𝐒𝐈𝐗© (𝐸𝑠𝑡𝑖𝑚𝑎𝑡𝑒𝑑 𝑆𝑒𝑣𝑒𝑟𝑖𝑡𝑦 𝐼𝑛𝑑𝑒𝑥) metric that measures operational, financial (direct & indirect), technical and reputational impact of cyber attacks. Severity levels: 🟠 𝐇𝐢𝐠𝐡, 🔴 𝐂𝐫𝐢𝐭𝐢𝐜𝐚𝐥. 1/8

100

Hackmanac @hackmanac.com · 25/09/2026

🚨Cyber Alert ‼️ 🇮🇹Italy - 𝗡𝗘𝗔𝗗 𝗣𝗿𝗼 – 𝗣𝗿𝗼𝗳𝗲𝘀𝘀𝗶𝗼𝗻𝗶𝘀𝘁𝗶 𝗿𝗶𝘂𝗻𝗶𝘁𝗶 The Rhysida ransomware group claims to have breached NEAD Pro, a professional network based in Gorizia and Udine, Italy, providing legal, accounting, tax and bankruptcy services.

111

Hackmanac @hackmanac.com · 25/09/2026

🚨Cyber Alert ‼️ 🇦🇪United Arab Emirates - 𝗝𝗼𝗻𝗲𝘀 𝗧𝗵𝗲 𝗚𝗿𝗼𝗰𝗲𝗿 Krybit claims to have breached Jones The Grocer, allegedly exfiltrating 135.46 GB of data. Threat actor: Krybit Sector: Hospitality Data exposure (claimed): 135.46 GB Data type: Not specified Observed: Sep 24, 2026

101

Hackmanac @hackmanac.com · 24/09/2026

🚨Cyber Alert ‼️ 🇹🇿Tanzania - 𝗔𝗶𝗿 𝗧𝗮𝗻𝘇𝗮𝗻𝗶𝗮 Krybit hacking group claims to have breached Air Tanzania. According to the threat actor’s claim, approximately 134.76 GB of data was allegedly exfiltrated from the airline’s environment.

100

Hackmanac @hackmanac.com · 24/09/2026

🚨Cyber Alert Update‼️ 🇮🇹Italy - 𝗥𝗲𝘃𝗼𝗹𝘂𝘁 𝗕𝗿𝗲𝗮𝗰𝗵 𝗖𝗹𝗮𝗶𝗺𝗮𝗻𝘁 𝗜𝗮𝗺𝗡𝗼𝘁𝗔𝗩𝗶𝗹𝗹𝗮𝗶𝗻 𝗕𝗲𝗴𝗶𝗻𝘀 𝗣𝘂𝗯𝗹𝗶𝘀𝗵𝗶𝗻𝗴 "𝗧𝗵𝗲 𝗜𝘁𝗮𝗹𝘆 𝗙𝗶𝗹𝗲𝘀"

100

Hackmanac @hackmanac.com · 24/09/2026

🚨Cyber Alert ‼️ 🇵🇰Pakistan - 𝗔𝗯𝘁𝗮𝗰𝗵 𝗟𝘁𝗱 (𝗿𝗲𝗯𝗿𝗮𝗻𝗱𝗲𝗱 𝗮𝘀 𝗜𝗻𝘁𝗲𝗿𝘀𝘆𝘀 𝗟𝘁𝗱.) BARRACUDA hacking group claims to have breached Abtach Ltd. (now Intersys Ltd.).

100

Hackmanac @hackmanac.com · 23/09/2026

🚨Cyber Alert ‼️ 🇸🇮Slovenia - 𝗛𝗜𝗧 𝗱.𝗱. 𝗡𝗼𝘃𝗮 𝗚𝗼𝗿𝗶𝗰𝗮 Akira claims to have breached HIT and stolen 367 GB of data, allegedly including employee PII, financial records, confidential agreements, client data, NDAs and casino-related files.

100

Hackmanac @hackmanac.com · 23/09/2026

🚨Cyber Alert ‼️ 🇮🇹Italy: 𝗖𝗢𝗦𝗘𝗙 - 𝗖𝗼𝗻𝘀𝗼𝗿𝘇𝗶𝗼 𝗱𝗶 𝗦𝘃𝗶𝗹𝘂𝗽𝗽𝗼 𝗘𝗰𝗼𝗻𝗼𝗺𝗶𝗰𝗼 𝗱𝗲𝗹 𝗙𝗿𝗶𝘂𝗹𝗶 Booba Team claims to have breached COSEF - Consorzio di Sviluppo Economico del Friuli. According to the threat actor’s claim, approximately 200 GB of data was allegedly exfiltrated.

100

Hackmanac @hackmanac.com · 23/09/2026

🚨Cyber Alert ‼️ 🇧🇷Brazil - 𝗥𝗲𝗰𝗲𝗶𝘁𝗮 𝗙𝗲𝗱𝗲𝗿𝗮𝗹 𝗱𝗼 𝗕𝗿𝗮𝘀𝗶𝗹 EMPERADOR hacking group claims to have breached Receita Federal do Brasil (RFB), part of Brazil’s Ministry of Finance.

100

Hackmanac @hackmanac.com · 22/09/2026

‼️ShinyHunters Claims FBI Breach Using Oracle PeopleSoft Zero-Day The ShinyHunters hacking group claims to have breached several FBI-related systems, including its jobs portal and Special Agent applicant infrastructure, allegedly compromising data on all FBI employees and applicants.

131

Hackmanac @hackmanac.com · 22/09/2026

🚨Cyber Alert ‼️ 🇮🇹Italy - 𝗖𝗼𝗹𝘂𝗺𝗯𝘂𝘀 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗰𝗮 𝗦𝗿𝗹 Qilin hacking group claims to have breached Columbus Informatica Srl.

111

Hackmanac @hackmanac.com · 22/09/2026

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗔𝘀𝘁𝗲𝗺𝗼 Metaencryptor hacking group claims to have breached Astemo. According to the threat actor’s claim, approximately 18.1 TB of data was allegedly exfiltrated. Threat actor: Metaencryptor Sector: Manufacturing Data exposure (claimed): 18.1 TB of data

121

Hackmanac @hackmanac.com · 21/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗚𝗿𝘂𝗽𝗼 𝗠𝗔𝗥𝗦𝗔𝗡 The Gentlemen hacking group claims to have breached Grupo MARSAN. Threat actor: The Gentlemen Sector: Manufacturing Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 21, 2026 Status: Pending verification ESIX©: 5.23

131

Hackmanac @hackmanac.com · 21/09/2026

🚨Cyber Alert ‼️ 🇪🇹Ethiopia - 𝗦𝗶𝗶𝗻𝗾𝗲𝗲 𝗕𝗮𝗻𝗸 LockBit 5.0 hacking group claims to have breached Siinqee Bank. According to the post, the allegedly compromised material appears to include customer and banking records related to accounts, branches, loans, balances and financial transactions.

111

Hackmanac @hackmanac.com · 18/09/2026

🚨Cyber Alert ‼️ 🇦🇷Argentina - 𝗖𝗲𝗿𝗲𝘀 𝗧𝗼𝗹𝘃𝗮𝘀 Qilin hacking group claims to have breached Ceres Tolvas. Threat actor: Qilin Sector: Agriculture / Forestry / Fishing Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 18, 2026 Status: Pending verification ESIX©: 5.40

100

Hackmanac @hackmanac.com · 18/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗚𝗿𝘂𝗽𝗼 𝗝𝘂𝘀𝘁𝗲 Qilin hacking group claims to have breached Grupo Juste. Threat actor: Qilin Sector: Healthcare Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 18, 2026 Status: Pending verification ESIX©: 5.58

123

Hackmanac @hackmanac.com · 18/09/2026

🚨Cyber Alert ‼️ 🇩🇪Germany - 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝘆 𝗼𝗳 𝗛𝗮𝗺𝗯𝘂𝗿𝗴 Panzer hacking group claims to have breached the University of Hamburg. According to the sample shared by the group, the exposed files appear to include student and academic documents.

120

Hackmanac @hackmanac.com · 18/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗫𝗮𝗿𝘅𝗮 𝗦𝗮𝗻𝘁𝗮 𝗧𝗲𝗰𝗹𝗮, 𝗜𝗻𝘁𝗲𝗴𝗿𝗮 𝗘𝗻𝗲𝗿𝗴𝗶́𝗮, 𝗘𝘂𝘀𝗸𝗮𝗹𝘁𝗲𝗹 Three threat actors claim breaches affecting spanish healthcare, energy and telecommunications entities.

102

Hackmanac @hackmanac.com · 17/09/2026

🚨Cyber Alert ‼️ 🇮🇩Indonesia - 𝗣𝗲𝗿𝘁𝗮𝗺𝗶𝗻𝗮 RansomHouse hacking group claims to have breached Pertamina. Threat actor: RansomHouse Sector: Energy / Utilities Data exposure (claimed): Not specified

111

Hackmanac @hackmanac.com · 17/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗚𝗿𝗮𝗻 𝗛𝗼𝘁𝗲𝗹 𝗜𝗻𝗴𝗹𝗲́𝘀 Qilin claims to have breached Gran Hotel Inglés. Threat actor: Qilin Sector: Hospitality Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 17, 2026 Status: Pending verification ESIX©: 5.05

111

Hackmanac @hackmanac.com · 17/09/2026

🚨Cyber Alert ‼️ 🇺🇸USA - 𝗔𝗘𝗖𝗢𝗠 Metaencryptor hacking group claims to have breached AECOM and to have exfiltrated approximately 1.2 TB of data. Threat actor: Metaencryptor Sector: Construction Data exposure (claimed): 1.2 TB Data type: Not specified Observed: Sep 17, 2026 Status: Pending verification

122

Hackmanac @hackmanac.com · 17/09/2026

🚨Cyber Alert ‼️ 🇦🇷Argentina - 𝗗𝗶𝗮𝗿𝗰𝗼 INC Ransom claims responsibility for a cyberattack against Diarco. According to a sample published by the threat actor, the allegedly compromised data spans multiple internal departments and business functions.

111

Hackmanac @hackmanac.com · 17/09/2026

🚨Cyber Alert ‼️ 🇳🇦Namibia - 𝗡𝗮𝗺𝗶𝗯𝗶𝗮𝗻 𝗗𝗲𝗳𝗲𝗻𝗰𝗲 𝗙𝗼𝗿𝗰𝗲 Ransomhouse claims to have breached the Namibian Defence Force. Threat actor: Ransomhouse Sector: Gov / Mil / LE Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 16, 2026 Status: Pending verification ESIX©: 6.17

111

Hackmanac @hackmanac.com · 17/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗖𝗮𝗿𝗿𝗲𝗳𝗼𝘂𝗿 𝗣𝗔𝗦𝗦 Threat actor mor3nako claims to have breached Carrefour PASS Spain. As purported evidence, mor3nako published a sample containing customer records that include DNI, names, DoB, IBANs, number of children, physical addresses, phone numbers, and email addresses.

123

Hackmanac @hackmanac.com · 15/09/2026

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗡𝗶𝗽𝗽𝗼𝗻 𝗦𝘁𝗲𝗲𝗹 𝗖𝗼𝗿𝗽𝗼𝗿𝗮𝘁𝗶𝗼𝗻 Metaencryptor hacking group claims to have breached Nippon Steel Corporation and to have exfiltrated 109 GB of data. Threat actor: Metaencryptor Sector: Manufacturing Data exposure (claimed): 109 GB Data type: Not specified Observed: Sep 15, 2026

110

Hackmanac @hackmanac.com · 15/09/2026

🚨Cyber Alert ‼️ 🇮🇹Italy - 𝗕𝗿𝗮𝘃𝗼 𝗧𝗮𝗻𝗸𝗲𝗿𝘀 𝗦.𝗽.𝗔 Qilin claims to have breached Bravo Tankers S.p.A. Threat actor: Qilin Sector: Transportation / Storage Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 15, 2026 Status: Pending verification ESIX©: 5.76

100

Hackmanac @hackmanac.com · 15/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗚𝗘𝗶𝗘𝗚 Qilin claims to have breached GEiEG.

100

Hackmanac @hackmanac.com · 11/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗔𝗘𝗠𝗘𝗧 - 𝗔𝗴𝗲𝗻𝗰𝗶𝗮 𝗘𝘀𝘁𝗮𝘁𝗮𝗹 𝗱𝗲 𝗠𝗲𝘁𝗲𝗼𝗿𝗼𝗹𝗼𝗴í𝗮 Panzer claims to have breached AEMET - Agencia Estatal de Meteorología. The group claims to have exfiltrated 5 GB of data. Threat actor: Panzer Sector: Professional / Scientific / Technical Data exposure (claimed): 5 GB

159

Hackmanac @hackmanac.com · 10/09/2026

🚨Cyber Alert ‼️ 🇧🇷Brazil - 𝗔𝗺𝗼𝗿𝘀𝗮𝘂́𝗱𝗲 LockBit 5.0 claims to have breached Amorsaúde, allegedly resulting in the exfiltration of medical records and personal data. Threat actor: LockBit 5.0 Sector: Healthcare Data exposure (claimed): Not specified Data type: Medical records, personal data

100

Hackmanac @hackmanac.com · 09/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗥𝗲𝗱𝘆𝘁𝗲𝗹 Redytel suffered a DDoS attack that disrupted internet connectivity for some customers in El Bierzo and Valdeorras, Spain. Threat actor: Not specified Sector: Telco Data exposure (claimed): None reported Data type: Not specified Observed: Sep 7, 2026

106

Hackmanac @hackmanac.com · 09/09/2026

🚨Cyber Alert ‼️ 🇮🇹Italy - 𝗔𝘀𝘀𝗶𝗽𝗿𝗶𝗺𝗲 Safepay ransomware gang claims an attack on Assiprime. Threat actor: Safepay Sector: Financial / Insurance Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 8, 2026 Status: Pending verification ESIX©: 5.76

100

Hackmanac @hackmanac.com · 08/09/2026

🚨Cyber Alert ‼️ 🇫🇷France - 𝗦𝗔𝗗'𝗦 𝗜𝗻𝘁𝗲𝗿𝗶𝗺 Rhysida ransomware group claims to have breached SAD'S Interim and stolen sensitive corporate, financial, payroll, and employee information. Threat actor: Rhysida Sector: Other Services Data exposure (claimed): Not specified

100

Hackmanac @hackmanac.com · 08/09/2026

🚨Cyber Alert ‼️ 🇪🇬Egypt - 𝗡𝗶𝗹𝗲 𝗣𝗿𝗼𝗷𝗲𝗰𝘁𝘀 & 𝗧𝗿𝗮𝗱𝗶𝗻𝗴 𝗖𝗼𝗺𝗽𝗮𝗻𝘆 The Gentlemen hacking group claims to have breached Nile Projects & Trading Company.

122

Hackmanac @hackmanac.com · 08/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗭𝗮𝗻𝗶𝗻𝗶 𝗔𝘂𝘁𝗼 𝗚𝗿𝗼𝘂𝗽 The Gentlemen hacking group claims to have breached Zanini Auto Group. Threat actor: The Gentlemen Sector: Manufacturing Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 7, 2026 Status: Pending verification ESIX©: 5.23

111

Hackmanac @hackmanac.com · 07/09/2026

🚨Cyber Alert ‼️ 🇸🇬Singapore - 𝗦𝗧 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝗶𝗻𝗴 Metaencryptor Team claims to have breached ST Engineering. According to the threat actor, the attack resulted in the exfiltration of 1.1 TB of data.

111

Hackmanac @hackmanac.com · 07/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗝𝗕𝗖 𝗦𝗼𝗹𝗱𝗲𝗿𝗶𝗻𝗴 Qilin hacking group claims to have breached JBC Soldering.

124

Hackmanac @hackmanac.com · 07/09/2026

🚨Cyber Alert ‼️ 🇨🇭Switzerland - 𝗠𝗲𝗱𝗲𝗹𝗮 ShinyHunters hacking group claims to have breached Medela. Threat actor: ShinyHunters Sector: Manufacturing Data exposure (claimed): Not specified Data type: Not specified Observed: Sep 7, 2026 Status: Pending verification ESIX©: 5.98

131

Hackmanac @hackmanac.com · 07/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗧𝗵𝗿𝗲𝗮𝘁 𝗔𝗰𝘁𝗼𝗿 𝗖𝗹𝗮𝗶𝗺𝘀 𝟰𝟬 𝗠𝗶𝗹𝗹𝗶𝗼𝗻 𝗦𝗽𝗮𝗻𝗶𝘀𝗵 𝗘𝗻𝗲𝗿𝗴𝘆 𝗦𝘂𝗽𝗽𝗹𝘆 𝗥𝗲𝗰𝗼𝗿𝗱𝘀 𝗦𝗼𝘂𝗿𝗰𝗲𝗱 𝗳𝗿𝗼𝗺 𝗦𝗜𝗣𝗦 The threat actor spain claims to possess a large Spanish energy-sector database allegedly sourced from SIPS (Sistema de Información de Puntos de Suministro).

112

Hackmanac @hackmanac.com · 07/09/2026

🚨Cyber Alert ‼️ 🇸🇦Saudi Arabia - 𝗞𝗵𝗮𝗹𝗲𝗱 𝗔𝗹𝗳𝗮𝗴𝗶𝗵 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝗶𝗻𝗴 𝗖𝗼𝗻𝘀𝘂𝗹𝘁𝗮𝗻𝗰𝘆 𝗖𝗼. Panzer hacking group claims to have breached Khaled Alfagih Engineering Consultancy Co. and allegedly exfiltrated 22 GB of data.

121

Hackmanac @hackmanac.com · 07/09/2026

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗛𝗧 𝗠𝗲́𝗱𝗶𝗰𝗮 (𝗛𝗲𝗮𝗹𝘁𝗵 𝗧𝗶𝗺𝗲) The threat actor Kazu claims to have breached HT Médica (Health Time). A database containing 2,253,981 user records was allegedly stolen.

111