The week in breach news Jul 1, 2026

Apple and Tesla supplier Tata Electronics confirmed a cybersecurity breach that reportedly exposed 630 GB of data, including alleged confidential documents related to Apple and Tesla.

Tata Electronics, a key manufacturing partner for Apple, said it detected the cybersecurity incident several weeks ago. The disclosure follows claims by the ransomware group World Leaks, which published more than 200,000 files on the dark web, including what it alleges are Apple and Tesla component design documents. The company said the breach affected parts of its IT infrastructure but did not disrupt manufacturing or business operations.

However, Tata Electronics has not disclosed what specific data was compromised or how many customers may have been affected by the incident.

Brazil’s mobile phone emergency alert system was taken offline after a fake emergency message was sent to millions of individuals across the country.

On June 20, Brazil’s National Civil Defense warning platform, managed by telecom regulator Anatel, was targeted in a cyberattack. As a result, people across several regions of the country received a fraudulent Extreme Alert message containing the word “misantropi4,” a variation of the Portuguese word “misantropia,” meaning hatred toward humanity. Brazil’s civil defense authority confirmed the incident was the result of a hacker attack and said millions of citizens received the false alert.

Following the incident, officials took the emergency alert system offline while the investigation continues. According to reports, the fake alert was sent by an individual using the name “mizanthropiaz,” who allegedly exploited weak security measures to compromise the system.

It is being reported that Russian hackers were behind the August 2025 cyberattack on Jaguar Land Rover (JLR), an incident estimated to have cost the British economy around $2.5 billion.

On August 31, 2025, JLR shut down systems across its global manufacturing operations in response to what became one of the costliest cyberattacks in U.K. history. Now, citing people familiar with the investigation, reports suggest that Russian threat actors were responsible for the breach. Microsoft reportedly tracked the group and alerted JLR to the attackers’ identities.

Surprisingly, the Russian hacking group was not the only threat actor to breach JLR’s network. Investigators reportedly discovered that a Jordanian hacker known as “Rey” had also gained unauthorized access to the company’s systems during the incident.

Nidec Corporation confirmed a ransomware attack on its Taiwanese subsidiary, Nidec Chaun Choung Technology, as a ransomware gang demands $2 million to not leak the stolen data.

Nidec Corporation, a leading Japanese manufacturer of electronic components for automotive and computing applications, said the attack occurred on its subsidiary’s servers on June 22. The company acknowledged that information may have been exposed, although it has not confirmed that any personal or confidential data has been leaked online. Nidec is continuing to assess the impact on production, shipping and other business operations, but said it does not expect the incident to affect other Nidec Corporation or Nidec Group companies.

Meanwhile, the Blackfield ransomware group has claimed responsibility for the attack and given Nidec more than 15 days to enter negotiations or risk the publication or sale of the allegedly stolen data. The group is demanding a $2 million ransom in exchange for deleting the data.

Two health care providers in San Antonio are facing multiple proposed class-action lawsuits following separate alleged ransomware attacks that occurred earlier June.

A ransomware group known as Gentlemen recently claimed responsibility for attacks on South Texas Spinal Clinic PA and Soniva Dental LLC, both based in San Antonio. The providers are now facing lawsuits from patients who allege the organizations failed to adequately protect sensitive personal and medical information and delayed notifying affected individuals after the breaches.

According to reports, the incidents may have affected tens of thousands of current and former patients and employees. The compromised information could include names, dates of birth, Social Security numbers, medical records and other sensitive personal information.