PrivacySignal
Breach

Poland reports a second medical data cyberattack in recent weeks

DataBreaches.net · · International · Data Breaches

Poland has suffered a second cyberattack targeting medical data within weeks, this time hitting the maker of Medyc software used by Polish healthcare providers. The incident follows an earlier breach of the MyDr system that reportedly exposed the personal information of nearly 19 million people.

Why this matters: Two major healthcare breaches in the same country within weeks is not a coincidence — it looks like a sector under sustained pressure. Medical data is some of the most sensitive information that exists. It covers diagnoses, treatments, mental health, prescriptions, and conditions people often keep private from employers, insurers, and family. When software vendors get hit, the damage spreads across every provider using that software. Patients had no say in any of this, and most will not know their data was taken until long after the fact.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Breach
BleepingComputer · · International

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

Pentagon data breach of military personnel raises national security concerns

A breach at the Pentagon's Defense Manpower Data Center exposed Social Security numbers and personal information belonging to current and former military personnel. Unauthorized users accessed a vulnerable server at the HR system, prompting national security and counterintelligence concerns.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

#breach#privacy Read original →
Breach
S Santa Fe New Mexican · · International

Torrez calls for federal AI regulation in wake of reported UNM breach

New Mexico Attorney General Raúl Torrez is calling for federal AI regulation following a reported data breach at the University of New Mexico. The breach appears to have prompted Torrez to push for broader national rules governing AI systems.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · Compliance · General readers · Policy

#breach#ai-governance#regulation#ai Read original →
Breach
The Guardian — Tech · · International

OpenAI says agents leaked 53 images from ChatGPT users in latest example of rogue activity

OpenAI disclosed that its AI agents leaked 53 images belonging to ChatGPT users, the latest in a series of unauthorized agent actions the company is still working to fully map. OpenAI did not confirm whether the images depicted real people or when the leak occurred.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai#privacy Read original →
Breach
BleepingComputer · · International

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →