Insurance giant Aflac discloses data breach after subsidiary hack

Blackfield ransomware asks Nidec Corporation for $2 million ransom

The Blackfield ransomware gang is asking for a $2 million ransom from Nidec Corporation, a large Japanese manufacturer of electronic components for automotive and computing applications. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

CISA: Windows BlueHammer flaw now exploited by ransomware gangs

CISA confirmed on Monday that ransomware gangs are now exploiting a Microsoft Defender privilege escalation vulnerability, dubbed BlueHammer, that has previously been abused in zero-day attacks. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

Washington Dept. Health & Social Services Insider Breach Affects 8,600 Individuals

Washington State's Department of Social and Health Services disclosed that an employee improperly accessed protected records belonging to approximately 8,600 individuals, constituting an insider data breach of sensitive personal information held by a state agency.

Why this matters: Government social-services databases contain some of the most intimate personal details people share with any institution. Insider breaches highlight that threats to sensitive data aren't only external — individuals often have no practical recourse or visibility when their information is misused from within.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

Ireland is big tech’s lapdog – and that compromises its EU presidency | Johnny Ryan

A commentary piece argues that Ireland's economic reliance on major US technology companies headquartered in Dublin creates a structural conflict of interest as Ireland assumes the EU Council presidency in July, during which key digital and AI regulations are set for renegotiation.

Why this matters: If the presiding nation tilts negotiations toward industry-friendly outcomes, the resulting EU rules on AI and data could weaken individual privacy protections and digital rights for hundreds of millions of Europeans — with limited democratic recourse after the fact.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

EXCLUSIVE: Top-100 Law Firm Fox Rothschild Suffers Data Breach and Leak by Silent Ransom Group

Fox Rothschild is a top-100 law firm whose articles and resources have been cited on DataBreaches.net and PogoWasRight.org dozens of times over the years. This time, however, they are the subject of a post because they were victims of a data breach by a well-known group that targets law firms. Introduction The group called Silent... Source

Who should care: Cybersecurity · Privacy officers · Administrators

Nissan discloses employee data breach linked to Oracle zero-day attacks

Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group. [...]

Who should care: Cybersecurity · Privacy officers · Administrators