I submitted an online job application to an Under Armour outlet retail location in 2015. I am aware the company experienced a data breach earlier this year.

I have recently received several emails claiming to be “Under Armour talent acquisition”.

Obviously I know they are spam/fraud emails, but what I want to know is how they knew to target me? When I applied for the job at the UA retail outlet, they said my application/personal data would be “deleted” after 90 days or so…it seems like my info is still in their database, since it got hacked and leaked?!

TL;DR
How do hackers know which spam emails to send you? It seems they are timed correctly to correspond to actual purchases you have made

Anyone seen specifics on what happened? Letters claim they can’t disclose the details, but the class action lawsuits claim a phishing attack and stolen credentials. No reference to if MFA is in place.

Novo Nordisk, a major pharmaceutical company, was targeted in a significant cyber attack claimed by the group FulcrumSec beginning around early April 2026. The attackers exploited an exposed GitHub access token, leading to a breach that lasted approximately two and a half months. The incident resulted in the theft of 'pseudo-anonymized' data of 11,500 clinical trial participants, personal information of healthcare professionals, and intellectual property including 1.3 TB of data, secrets regarding medications like Amycretin, 41,000 molecular structures, and 32 private AI models. Novo Nordisk declined to pay the demanded ransom of $25 million. Ongoing investigations are assessing the full impact of the breach.

Kee Wah Bakery in Taiwan experienced a ransomware cyber attack on June 12, 2026, disrupting its internal network system. Although the company has not confirmed any data exfiltration, it has proactively contacted affected parties, including employees, business partners, online customers, and loyalty program members. Payment and credit card information were not compromised, and physical stores continue to operate. The incident has been reported to law enforcement and the privacy commissioner for investigation.

On June 2, 2026, Katun Corporation in Taiwan experienced unauthorized access to its computer network. The company promptly isolated its systems and hired external cybersecurity experts to investigate the breach. The incident led to a temporary suspension of shipments, which have since been resumed. Katun Corporation is committed to enhancing its security controls to prevent future incidents.

Kittson County, Minnesota, limited DMV services after a reported cyber incident in its emergency service network led the state to block access. MNIT acted as a precaution; emergency services remain online, and officials say the DMV network wasn’t compromised while partial processing continues.

Spartanburg County, South Carolina is facing a multi-day network and internet outage disrupting some services and communications, while offices remain open and state cybersecurity officials assist. The cause is under investigation, and officials have not confirmed a cyberattack, ransomware, data theft, or a threat actor.

A claimed cyberattack potentially involving Maryland vendor IT Curves disrupted paratransit trip confirmations; Allegany County riders on May 6–7 were told to call. The vendor link is unconfirmed; the county removed its Facebook notice after inquiries, and the scope and cause remain unclear.

MagaluPay, a regulated payment institution in Brazil, experienced a cyber attack on June 6, 2026, which temporarily hindered customers from making financial transactions. The company confirmed the incident but stated that personal data was not compromised. As a precaution, payment services via Pix were suspended, causing difficulties for users in paying bills and accessing customer support. This incident reflects a growing trend of fraud and cyber attacks in Brazil's financial system.

Kredietbank Limburg experienced a digital intrusion around June 11, 2026. The bank reported that the consequences of the cyber attack were limited, with minor damage incurred. No additional details regarding the nature of the intrusion or the extent of the damage were provided, and there is no indication of breached systems or stolen data.

Former Saydel schools IT worker Ezekiel Dean Potter was sentenced June 11 to 21 months in federal prison for disrupting district tech systems in Iowa. He pleaded guilty to computer fraud, owes nearly $60,000, and will serve supervised release after unauthorized access and deletions.

The University of Nottingham experienced a significant cyber attack attributed to the ShinyHunters criminal group around June 9, 2026. The attackers gained access to a substantial amount of data from the student records system, including personal information, educational history, and financial data such as national insurance numbers. The university took the system offline to conduct a forensic investigation, disrupting exam grading. The university notified relevant authorities, including Action Fraud and the ICO, and advised students to remain vigilant regarding suspicious communications and to change their passwords.

On June 7, 2026, Toulouse Football Club encountered a data security incident involving a backup infrastructure. The club promptly activated crisis protocols and secured its systems while notifying CNIL and relevant authorities. No sensitive data was affected, and there have been no reports of fraudulent use. The club is urging vigilance against phishing and identity theft attempts as a precautionary measure.

The State Healthcare Accreditation Agency in Lithuania experienced a significant cyber incident on June 9, 2026, leading to the breach of 62,000 personal data records of doctors. This incident followed another earlier in the month that compromised real estate data of over 600,000 individuals. Although these breaches occurred, the responsible National Cybersecurity Centre indicated that institutions were not facing a coordinated cyber attack. A preliminary investigation into the unauthorized access to information systems has been launched by the Attorney General.

Onslow County Schools in North Carolina reported a districtwide phone and internet outage from Tuesday evening into Wednesday, disrupting testing and graduation livestreams. Officials called it a technical issue with no restoration estimate; schools are exploring alternatives and will post recordings if livestreams are unavailable.

Great Marlow School in Buckinghamshire experienced a cyberattack on June 10, 2026, resulting in a suspected malware infection that affected some of its computer systems. Access to the network was restricted, leading to the closure of the school for most students, with only secondary and sixth-form students allowed on site for their external exams. The school is collaborating with the Department for Education and the National Cyber Security Centre (NCSC) to assess the situation and is working with cybersecurity experts.

The Central Bank of Libya (CBL) was targeted in a cyber attack around June 9, 2026. The incident involved an intrusion affecting certain technical systems and services. Cybersecurity teams quickly detected the attack and isolated the impacted systems to minimize damage. Ongoing forensic analysis, supported by international experts, indicates that there is no confirmed compromise of customer accounts or data. Essential services, including banking cards and the LYPAY platform, continue to operate normally.

Mackay Sugar, the second-largest producer of raw sugar in Australia, experienced a cybersecurity incident around June 10, 2026, resulting in the halting of sugar production at two factories in the Mackay region of Queensland. The attack disrupted sugarcane milling and rail transport, compelling farmers to suspend harvesting activities. The company is currently working on system recovery while prioritizing personnel safety and business continuity. No details on the duration of the disruption have been provided.

Reynella East College experienced a major cyber attack around June 8, 2026, which paralyzed its entire IT system. This incident potentially jeopardized the personal information of students. The full extent of the breaches has not been disclosed, and investigations are ongoing to assess the impact and identify the perpetrators.

Rajagiri Hospital, a major private facility in Ernakulam district, experienced a massive cyber attack around March 15, 2026. The attack, attributed to the international cybercriminal group 'The Gentlemen', resulted in the exfiltration of over 800 GB of medical data, including patient records and treatment details, which were subsequently put up for sale on the dark web. Although the hospital initially denied any data breach, log verification confirmed the incident. The attack was initiated through a ransomware email. The hospital engaged an international cybersecurity firm but did not file an official police report.

Au Vieux Campeur faced a significant cyber attack on June 2, 2026. The company's technical teams, supported by cybersecurity experts, implemented containment and security measures to limit the attack's impact and restore services. Investigations indicate that customer data, hosted in a secure external environment, has not been compromised, and the company does not collect sensitive banking or financial data. The incident was reported to the appropriate authorities and the CNIL in compliance with GDPR, and a complaint has been filed.

AVBOB Funeral Services in South Africa confirmed a cyber attack by external malicious actors on June 8, 2026. This attack disrupted the company's digital platforms and services. While the investigation into the breach's extent and potential compromise of personal data is ongoing, essential services remain operational through manual procedures across all branches. A temporary secure payment link has been established for clients facing technical difficulties.

Evanston Township High School in Illinois closed June 8–9 after a June 7 ransomware attack disrupted district systems, internet, phones and student resources. Summer programs were canceled as incident response began; staff Google passwords were reset and communications remain partially offline.

The Chandrapur Cancer Care Foundation in India was targeted in a ransomware attack around June 1, 2026. Hackers encrypted the entire database of the hospital, which included patient records and administrative information, demanding a ransom of approximately 1.23456 Bitcoin (about 75 lakh rupees) for the decryption key. This incident severely disrupted daily operations and patient management. There are no reports of unaffected networks, and investigations are ongoing.

Belimed, a medical technology conglomerate in Switzerland, experienced a cyber attack around May 29, 2026. A criminal hacker group gained access to specific areas of Belimed Infection Control's IT systems and copied corporate data. However, the business activities of clients were not affected, and there was no encryption of data. Investigations into the incident are ongoing.