Breach

National Kidney Registry allegedly hacked by DireWolf ransomware group

DataBreaches.net · August 26, 2026 · International · Data Breaches

Since its emergence in May 2025, DireWolf has attacked several U.S. healthcare entities, as listed among its more than 100 targets on its dedicated leak site. As early analysts reporting on the group have noted, DireWolf encrypts victims’ files as part of their double-extortion attacks. Their “About” statement describes them as financially motivated: We are... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach #security

Read the original at DataBreaches.net → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Law Protects the Searcher, Not the Searched

A face-search site left millions of photos open. For many of the people in those photos, the law offers remarkably little recourse.

August 23, 2026· 6 min read Read →

Nobody Sees the Decision. Nobody Checks the Buyer.

Most people shrug when told their data is collected. The shrug is rational. The harm arrives without a return address.

August 09, 2026· 8 min read Read →

A summary judgment ruling against a telecom company in a state regulatory lawsuit illustrates how vague or approximate data breach notifications can create legal liability. The case suggests that companies falling short of precise technical disclosure standards may face enforcement consequences beyond the breach itself.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement#regulation Read original →

Breach

DataBreaches.net · Aug 25, 2026 · International

Seoul National University Hospital skips cybersecurity disclosure for years despite breach affecting 830,000

Seoul National University Hospital did not file mandatory cybersecurity disclosures for years, even after a breach that affected 830,000 people. An investigation revealed the hospital had been operating under an exemption from the standard reporting requirements that apply to other large hospitals.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement Read original →

Breach

BleepingComputer · Aug 25, 2026 · International

Hospital operator Nutex Health says data stolen in cyberattack

Nutex Health, a hospital operator and healthcare services provider, is investigating a cyberattack in which an unauthorized party removed data from its systems. The company has not disclosed what types of information were taken or how many people may be affected.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →

National Kidney Registry allegedly hacked by DireWolf ransomware group

Analysis

The Law Protects the Searcher, Not the Searched

Nobody Sees the Decision. Nobody Checks the Buyer.

Related stories

A recommendation from the Saskatchewan Information and Privacy Commissioner caught our eye

LACMA data breach last year exposed social security and medical data

The GTA VI leaks are breaking the internet. Security researchers have seen this before.

‘Close Enough’ Data Breach Notifications Create Exposure

Seoul National University Hospital skips cybersecurity disclosure for years despite breach affecting 830,000

Hospital operator Nutex Health says data stolen in cyberattack