OnTrac notifies customers of data breach after network hack
2026-07-25T01:23:30Z•27567062e6197d17e87f9efc62841aef9abf9b2a3223a2d0e321636929faaf12
AI-driven malwareClopDNS hijackingDolphin XEuropol-takedownFlexPLMHermes AI agentLaundry BearLunchPokeMicrosoft 365 outageNotepad++ pluginPTC WindchillSectopRATVoid BlizzardZimbracredential-stuffingdata-breachfake-apphotel Wi-Fimaintenance-bugmalvertisingransomwareslopsquattingsupply-chain-attack
What happened
Multiple high-impact security events reported: several data breaches (OnTrac, Origin Energy) and a credential-stuffing incident impacting 13,000+ Chick-fil-A customers; Clop ransomware is actively targeting internet-exposed PTC Windchill and FlexPLM instances in a data theft/extortion campaign. Advanced threats include Russian state-linked Laundry Bear (Void Blizzard) exploiting a now-patched Zimbra zero-click vulnerability to steal email, use of the open-source Hermes AI agent in unattended mode to automate post-exploitation against Thailand's Finance Ministry, and a new Dolphin X RAT that AI
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 27567062e6197d17e87f9efc62841aef9abf9b2a3223a2d0e321636929faaf12
- Enrichment time
- 2026-07-25T01:23:30Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.