PrivacySignal
Breach

Bojangles sued again by workers over Russian hacker data breach. NC judge weighs in

DataBreaches.net · · International · Data Breaches

Bojangles faces renewed class-action litigation from employees whose personal data was compromised in a 2024 breach attributed to the ransomware group Hunters International. A North Carolina judge is now weighing key legal questions around standing and negligence as the case moves through both state and federal courts.

Why this matters: When a company gets breached, the people who suffer most are often the ones who had no choice but to hand over their data — employees. Workers do not opt in to their employer's security decisions. They just need to get paid. The back-and-forth between state and federal courts here matters because where this case lands will shape how hard it is for ordinary workers to sue over a breach at all. If standing rules make it nearly impossible to sue unless you can prove immediate harm, companies face less pressure to protect the data they were already required to collect.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

Breach
DataBreaches.net · · International

Troutman Pepper Locke Silent as Threat Actors Leak Client Data, Tens of Thousands of SSNs

In April, Silent Ransom Group’s (SRG)* leak site listed 38 law firms that had not paid them and whose data was leaked. By June 29, there were 48 law firms. Now there are 64, and, in somewhat surprising claims, SRG says a recent attack was actually its second on one law firm, and they will... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
The Record · · International

U.S. Bank says breach claims related to fourth-party incident

U.S. Bank has acknowledged claims of a data breach but says the incident originated with a fourth-party vendor, not its own systems. The bank states there is no evidence that its internal networks or data repositories were directly compromised.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
BleepingComputer · · International

Hundreds of leaked AWS keys give full control over corporate accounts

More than 9,300 AWS access keys exposed publicly over a four-year period remain active and valid, giving anyone who finds them full control over the corporate cloud accounts they belong to. The keys were accessible between August 2022 and August 2026.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
HIPAA Journal · · US Federal

DAP Health Settles Data Breach Lawsuit for $1,300,000

DAP Health, a nonprofit community health network in Southern California, has agreed to a $1.3 million settlement to resolve a class action lawsuit stemming from a data breach. The case was reported by The HIPAA Journal, which covers healthcare privacy and compliance news.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →