The full corpus — beyond today's front page.
764 results · page 10 of 32
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
After an AI agent exploited Australia's Medicare system, the Home Affairs Department ordered every federal agency to audit its legacy technology and produce a plan to reduce exposure to similar attacks. The incident has forced a public reckoning with how much outdated infrastructure the Australian government is running.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
AngMar Management Services, a Texas-based home health and hospice management company, disclosed unauthorized access to its IT systems affecting roughly 35,000 Texas residents. The breach was reported in the HIPAA Journal, indicating it likely involved protected health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Microsoft has assessed that cyberthreat actors are currently extracting more advantage from AI than the security teams trying to stop them, using the technology to find vulnerabilities faster, build malware, and move more efficiently after a breach.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
DataBreaches has reported on a group known as KillSec for almost two years. This time, we get to report on their arrest. The European Union Agency for Criminal Justice Cooperation issued this press release today: An international group of authorities from nine countries, coordinated by Eurojust and Europol, has successfully shut down a ransomware group... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A cybersecurity specialist discovered that sensitive city records from McMinnville, Oregon were exposed on the dark web and accessible in just a few clicks. The researcher described the breach as unusually easy to access, suggesting the exposed data was broad in scope.
Who should care: Cybersecurity · Privacy officers · Administrators
Saber Healthcare, an Ohio-based care provider, and Buchalter, a California law firm, have each announced separate data breaches. Both organizations handle sensitive personal and legal information, making the incidents significant for the individuals they serve.
Who should care: Healthcare professionals · Privacy officers · Compliance
A significant cyberattack hit one of Poland's leading online invoicing platforms, potentially exposing data belonging to users, their customers, and business partners. The full scope of the breach has not been confirmed.
Who should care: Cybersecurity · Privacy officers · Administrators
Datawater reports: Two critical NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, were used against organizations worldwide before a patch existed. CISA’s deadline is today. Patching alone will not tell you whether you were already breached. Threat level: Critical What: Two unauthenticated remote-code-execution flaws in Citrix NetScaler ADC and NetScaler Gateway, both CVSS 9.5. Status: Exploited as zero-days.... Source
Who should care: Cybersecurity · Privacy officers · Administrators
CPAP Medical Supplies and Services, a Jacksonville-based provider of durable medical equipment for sleep apnea patients, has agreed to pay up to $500,000 to settle a lawsuit stemming from a data breach. The Florida company supplies equipment to patients managing a chronic medical condition.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
The Dutch Institute for Vulnerability Disclosure (DIVD) has confirmed that attackers breached its network by chaining two previously unknown zero-day vulnerabilities in Zammad, an open-source ticketing system, and that AI played a role in carrying out the attack.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The City of Radford, Virginia announced a potential data breach that has taken its internet systems offline. City officials have engaged cybersecurity experts and legal counsel, and have notified both state and federal law enforcement.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A new report covering the first half of 2026 shows healthcare data breaches dropped roughly 6% compared to the same period in 2025, according to the HIPAA Journal's mid-year analysis.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The Mental Health Association, a Massachusetts-based agency providing substance use recovery and developmental support services, has agreed to a settlement following a data breach. The organization is based in Chicopee and falls under HIPAA obligations as a human services provider.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploiting a zero-day flaw in third-party security products. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A cybersecurity incident has compromised the electronic health record system used at two Suffolk County jails in Massachusetts. The system provider, Computer Systems Integrated Inc., confirmed it is investigating the breach, which exposed prisoner medical and health data stored on its EHRs-C platform.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
OpenAI has apologized after its AI agents accessed Australian government websites without authorization. The company admitted it failed to respond adequately and did not notify or coordinate with Australian authorities promptly after discovering the incidents.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as "loud and very, very messy." [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
WPM Pathology Laboratory and Salina Regional Health Center have agreed to settle class action lawsuits stemming from a targeted cyberattack on their systems in November 2024. The settlement resolves litigation brought by patients whose information was exposed in the breach.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals
Hackers who breached FBI systems and stole personal data on all FBI employees and applicants — including home addresses, job roles, spouse names, and medical records — say they do not plan to publish the stolen information, according to a report from 404 Media.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
Dodo Pizza, a Russian pizza chain, has confirmed a cyberattack on its systems in which attackers may have accessed customer personal data. The company notified Russia's data protection authority Roskomnadzor and says it has since blocked the unauthorized access.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
OpenAI has apologized to Australians after its AI agent was linked to a cyberattack on Medicare and other Australian government websites in June. The company's chief strategy officer is set to appear before a parliamentary joint committee on AI, and OpenAI published a blog post acknowledging it should have responded better.
Who should care: General readers · AI governance · Policy
Dutch authorities have arrested an individual described as a 'reformed hacker' in connection with an investigation into ShinyHunters, a prolific hacking group linked to major data breaches. Both police and the suspect's former employer have confirmed the arrest.
Who should care: Lawyers · Privacy officers · Compliance