🚨‼️ BREAKING: Adobe has been breached by threat actor Mr. Raccoon, leaking 13 million support tickets with personal data, 15,000 employee records, all HackerOne submissions, internal documents and more.
Mr. Raccoon gained access through an Indian BPO, first deploying a remote access tool on an employee, then phishing their manager.
Mr. Raccoon told us: "They allowed you to export all tickets in one request from an agent."
We've reviewed multiple files confirming the scope of the breach. Among the details: Mr. Raccoon gained webcam access on the targeted employee through a RAT delivered via email and also obtained private conversations through WhatsApp.
Mr. Raccoon gained access through an Indian BPO, first deploying a remote access tool on an employee, then phishing their manager.
Mr. Raccoon told us: "They allowed you to export all tickets in one request from an agent."
We've reviewed multiple files confirming the scope of the breach. Among the details: Mr. Raccoon gained webcam access on the targeted employee through a RAT delivered via email and also obtained private conversations through WhatsApp.
🤣24❤4🥴3🔥1🤯1
❗️ Tracker updated -> 4 new verified breaches added:
🇺🇸 S&P Global (verified)
🇺🇸 Mercor AI (verified)
🇺🇸 Lightning AI (verified)
🇩🇪 ownCloud (verified)
Total identified alleged victims: 61
teampcp.cyberdigest.international 👀
🇺🇸 S&P Global (verified)
🇺🇸 Mercor AI (verified)
🇺🇸 Lightning AI (verified)
🇩🇪 ownCloud (verified)
Total identified alleged victims: 61
teampcp.cyberdigest.international 👀
🔥6❤3💩1
European Commission has been added to the tracker and confirmed, bringing the total to 62 alleged victims.
https://cert.europa.eu/blog/european-commission-cloud-breach-trivy-supply-chain
Tracker: https://teampcp.cyberdigest.international/
https://cert.europa.eu/blog/european-commission-cloud-breach-trivy-supply-chain
Tracker: https://teampcp.cyberdigest.international/
🤣1
‼️ The axios lead maintainer has gone public on how he was socially engineered into installing the malware behind the npm supply chain attack.
We have example images showing exactly how the attack was staged.
We have example images showing exactly how the attack was staged.
😁8😭7🤯1🤣1
🚨‼️ Mercor has paid ransom to ShinyHunters following the LiteLLM supply chain breach compromise.
Mercor works with major AI companies including OpenAI and Anthropic to train AI models.
Mercor works with major AI companies including OpenAI and Anthropic to train AI models.
❤11😱1
❗️RANSOM-ISAC published a solid piece on TeamPCP — featuring several of our posts.
https://www.ransom-isac.com/blog/supply-chain-confidence/
https://www.ransom-isac.com/blog/supply-chain-confidence/
❤2
🚨‼️ BREAKING: The Crunchyroll breach data, leaked via an Indian outsourcing partner, has been sold.
1.2 million of 2 million customer records were purchased by a single buyer.
We've obtained the 1.2 million emails from Mr. Raccoon and will be sharing them with HaveIBeenPwned.
1.2 million of 2 million customer records were purchased by a single buyer.
We've obtained the 1.2 million emails from Mr. Raccoon and will be sharing them with HaveIBeenPwned.
❤19
‼️ We have just updated the TeamPCP supply chain attack tracker at https://teampcp.cyberdigest.international/ after TeamPCP supplied us with a small list.
89 Total affected orgs!
Bringing the total to 68 alleged victims:
🇺🇸 MedWork (medwork[.]io)
🇧🇷 Tuna Pagamentos (tunapagamentos[.]com[.]br) — [data sold]
🇨🇭 Sportradar (sportradar[.]com) — [data open for sale, NASDAQ ~$4.98B]
🇧🇷 Nuvidio (nuvidio[.]com[.]br)
🇨🇦 IDMelon / SecurityKey (idmelon[.]com)
89 Total affected orgs!
Bringing the total to 68 alleged victims:
🇺🇸 MedWork (medwork[.]io)
🇧🇷 Tuna Pagamentos (tunapagamentos[.]com[.]br) — [data sold]
🇨🇭 Sportradar (sportradar[.]com) — [data open for sale, NASDAQ ~$4.98B]
🇧🇷 Nuvidio (nuvidio[.]com[.]br)
🇨🇦 IDMelon / SecurityKey (idmelon[.]com)
International Cyber Digest
TeamPCP — Breach Tracker | International Cyber Digest
Active tracking of the TeamPCP supply chain campaign — 57 alleged victims, 19 countries, 4 confirmed attack vectors. Updated in real time.
🔥6
‼️🇫🇷 France just mandated digital ID for every citizen by banning social media for minors.
Under 15s will be blocked from IG, TikTok, FB, Snapchat and any platform allowing interactions, public broadcasts or user communities.
The banlist is determined by French regulator Arcom.
Under 15s will be blocked from IG, TikTok, FB, Snapchat and any platform allowing interactions, public broadcasts or user communities.
The banlist is determined by French regulator Arcom.
👏13😭8🤪6🤬3😁2😢1💩1
🚨🇰🇵 North Korean state-backed hackers had a great year, they have been 'paid' $2.02 billion in 'bug bounties' in 2025.
According to ChainAnalysis North Korean hackers stole $2.02 billion in crypto in 2025, a 51% year-over-year increase, bringing their all-time total to $6.75 billion.
They're doing fewer attacks, but bigger hauls. The DPRK is embedding IT workers inside crypto firms and using sophisticated impersonation tactics targeting executives.
After major thefts, laundering follows within 45 days — predominantly through Chinese-language services, bridges and mixing protocols.
According to ChainAnalysis North Korean hackers stole $2.02 billion in crypto in 2025, a 51% year-over-year increase, bringing their all-time total to $6.75 billion.
They're doing fewer attacks, but bigger hauls. The DPRK is embedding IT workers inside crypto firms and using sophisticated impersonation tactics targeting executives.
After major thefts, laundering follows within 45 days — predominantly through Chinese-language services, bridges and mixing protocols.
🔥12👏11
‼️ A BIZARRE copyright claim system abuse happened on YouTube. Italian TV channel La7 used Nvidia's DLSS 5 trailer footage in a broadcast, then filed copyright claims against Nvidia and other YouTubers using the same material. Their videos are now taken down.
🤣33❤2😭1