OnTrac notifies customers of data breach after network hack

Multiple high-impact incidents reported: OnTrac and Origin Energy disclosed data breaches exposing customer PII; Chick‑fil‑A suffered credential‑stuffing attacks impacting >13,000 accounts. Clop ransomware is actively targeting Internet‑exposed PTC Windchill and FlexPLM instances for data theft/extortion. Threat actors abused hotel Wi‑Fi DNS to phish Microsoft 365 credentials and used malvertising (fake Claude app) to deliver SectopRAT. A Russian state‑aligned group (Laundry Bear/Void Blizzard) exploited a now‑patched Zimbra zero‑click vulnerability for email theft. Additional notable activity