Global Cyber Pulse: 26 May 2025

May 26, 2025 | Cybersecurity
By Ashwani Mishra, Editor-Technology, 63SATS Cybertech

An Indore pharmaceutical lab was crippled by ransomware demanding payment to unlock stolen data. Adidas confirmed a data leak via a third-party provider, while Nova Scotia Power reported a ransomware breach exposing 280,000 customer records. In Mumbai, hackers targeted a Kurla ad agency, demanding Bitcoin ransom.

Researcher Jeremiah Fowler uncovered 184 million leaked credentials online, highlighting massive global risk. Meanwhile, India’s Meteorological Department tightened cybersecurity after detecting suspicious access linked to Pakistan.

IMD Fortifies Cybersecurity Amid Rising Tensions

According to the Times of India,  the India Meteorological Department (IMD) has boosted its cybersecurity, adding firewalls and password-protected systems after detecting suspicious access attempts from Pakistani and Afghan IP addresses. Previously, IMD weather data was publicly accessible.

The move, while crucial for national cyber defense, has sparked concern among independent meteorologists and weather bloggers who relied on open access to AWS and RAPID systems for real-time analysis and weather updates.

Ransomware Hits Indore Pharma Lab

As reported by the Free Press Journal, hackers infiltrated Indore-based Choksi Laboratories, locking all systems and encrypting data in a ransomware attack. When IT head Nitin Khore noticed the breach, the server displayed a chilling message: “Your data has been stolen. Pay ransom, or it will be published.” Two suspicious emails—MichaelEhoseal1982@protonmail.com and @cock.li—were linked to the attack.

General Manager Vishal Tiwari has filed a police complaint, and investigators are probing how the attackers bypassed company defenses.

Adidas Confirms Customer Data Leak

Adidas reported a data breach involving consumer contact details accessed via a third-party customer service provider. The company assured no passwords or payment data were compromised. Upon discovery, Adidas swiftly launched an internal investigation, collaborating with cybersecurity experts to contain the incident.

The exposed data primarily includes past customer inquiries to the help desk. Adidas’ prompt response reflects growing industry vigilance as global brands navigate rising risks from vendor-linked cyber threats.

Nova Scotia Power Suffers Major Breach

Nova Scotia Power confirmed a ransomware attack that began in March and leaked data from around 280,000 customers. While the attack didn’t impact operations, stolen details—billing info and, for autopay users, bank accounts—were posted online.

The breach was first detected April 25, and cybersecurity experts were brought in. Notably, the power company refused to pay ransom, underscoring a critical challenge as ransomware gangs increasingly target infrastructure players worldwide.

Kurla Ad Agency Faces Bitcoin Ransom Demand

Mumbai police are investigating a ransomware attack on a Kurla-based advertising agency after hackers locked systems, stole sensitive data, and demanded ₹4.5 lakh in Bitcoin.

The breach was uncovered on May 3 when staff faced server login issues. A hacker note detailed the ransom threat, prompting the company to hire third-party IT investigators. Authorities warn that ransomware attacks, even on small firms, are rising sharply despite advanced security defenses.

Researcher Uncovers Massive Leaked Credentials Database

Cybersecurity researcher Jeremiah Fowler uncovered an unsecured online database holding over 184 million login credentials. The 47.4GB trove included usernames, passwords, emails, and login URLs for platforms like Google, Apple, Microsoft, Facebook, Instagram, banks, health portals, and government services.

Without encryption or password protection, the exposed data poses massive global security risks. Fowler’s discovery highlights the urgent need for organizations to audit and secure third-party databases storing sensitive user information.