Data breach exposes up to 14.2 million email logins at six ISPs

AssuranceAmerica breach may have affected more than 1.1 million people in seven states

Krys Shahin and Christopher Buchanan report: State officials are warning at least 1.1 million people across seven states may be impacted by an AssuranceAmerica data breach. Notices about the breach were sent to California, Massachusetts, Nebraska, South Carolina, Texas, Vermont, and Washington residents Friday. AssuranceAmerica Managing General Agency, LLC, said they detected “suspicious activity” on... Source

Who should care: Cybersecurity · Privacy officers · Administrators

NZ pharmacy scrambles to scrub internet of patients’ private messages

A Wellington pharmacy, Unichem Petone, inadvertently exposed private messages sent by 29 patients through its website's contact form, triggering an effort to remove the leaked data from the internet and directly notify those affected.

Why this matters: Even small-scale health data exposures carry outsized risk — medical communications are among the most sensitive personal information, and once accessible online, the harm to patients' privacy can outlast any technical fix.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

Russian Hackers Behind the $2.5 Billion Jaguar Land Rover Cyberattack, Investigators Say

Rex Edison reports A single cyberattack dented an entire country’s GDP. The Cyber Monitoring Centre estimates that the ransomware assault on Jaguar Land Rover cost the UK economy £1.9 billion — roughly $2.5 billion — rippling through more than 5,000 businesses and dragging car production to levels not seen since 1952. The Bank of England flagged the damage in its economic outlook. Now, after months... Source

Who should care: Cybersecurity · Privacy officers · Administrators

First Circuit Affirms Dismissal of Data Breach Class Action for Lack of Traceable Injury

Melanie Conroy of Pierce Atwood LLP writes: The First Circuit recently affirmed dismissal of a putative data breach class action against Bayamón Medical Center (BMC), holding that the plaintiff failed to plausibly allege that her injuries were traceable to the healthcare provider’s 2019 ransomware attack. In Santos-Pagán v. Bayamón Medical Center, the court concluded that allegations... Source

Who should care: Cybersecurity · Privacy officers · Administrators

Polymarket customers lose $3 million in supply-chain attack

Polymarket says it will fully reimburse customers who lost an estimated $3 million after hackers injected a malicious script into the platform's frontend following a breach at a third-party vendor. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

Online safety coalition urges House to reject KIDS Act compromise

Children’s online safety groups are pressing House lawmakers to oppose the bipartisan measure, arguing that it weakens safeguards.

Who should care: Cybersecurity · Privacy officers · Administrators