Crunchyroll is investigating.

Silicon Alley in the United Kingdom is the victim in a ransomware claim attributed to the threat actor qilin. Details are listed as N/A, with no disclosed ransom amount or data leakage information. #UnitedKingdom

The lapsus$ claim alleges a breach of CHECKMARX in Israel, involving exfiltration of source code, an employee database, API keys, and MongoDB/MySQL credentials. The incident underscores exposure of internal assets and credential theft consistent with lapsus$'s known tactics #Israel

ALP-001 from China claims to have compromised Hikvision (hikvision.com), with access to 19.9 TB of data and a deadline of 2026-03-30 00:20:04. The threat actor cites revenue of $13.1 Billion and 19.9 TB of data marked as ready for release. #China

Ransomware claimed to impact Desysweb’s systems, encrypting data across multiple servers with more than 60,000 files, and threatening that recovery will become impossible after the countdown unless the company contacts the attackers via the instructions in a “recovery” file. The threat actor “nova” states they are ready to decrypt the files, referencing Desysweb’s telecommunications/IT services and ISO 27001:2022 posture. #unknown

AuditTeam ransomware targeted Wi***IT in Ukraine, encrypting files and disrupting operations. The attack demanded a ransom to restore access, impacting Ukraine #Ukraine

A refined, highly automated campaign by likely former Black Basta affiliates combines mass email bombing with Microsoft Teams help-desk impersonation to gain remote access to senior leaders within minutes, often using RMM tools like Supremo and Quick Assist. Defenders are advised to implement out-of-band verification for remote-access requests, tighten RMM allow-listing, and run targeted simulations for executives. #BlackBasta #Supremo

VirtualExpo Group reports a ransomware incident attributed to the threat actor qilin. Details on the attack vector and data impact are not publicly available #France