The full corpus — beyond today's front page.
388 results · page 10 of 17
US federal agency confirms data breach in wake of claims by ransomware group Reuters
Who should care: Cybersecurity · Privacy officers · Administrators
George House Trust, a UK HIV charity, has notified service users that sensitive personal health data may have been stolen following a breach of Beacon CRM, a platform used by more than 1,000 charities and non-profits.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Hasbro has disclosed a data breach in which attackers gained access to personal and financial information belonging to an undisclosed number of the company's employees. The toy and games giant has not said how many people were affected or how the breach occurred.
Who should care: Cybersecurity · Privacy officers · Administrators
American Vision Partners, an eye care management company operating as Medical Management Resource Group LLC, has agreed to pay $1.75 million to settle a class action lawsuit tied to a data breach. The settlement resolves litigation brought by affected individuals whose information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The ShinyHunters extortion group has published data stolen from roughly 12.9 million Carhartt accounts, according to Have I Been Pwned, which tracks and indexes compromised credentials. The breach was reported earlier this month.
Who should care: Cybersecurity · Privacy officers · Administrators
The Electronic Frontier Foundation has criticized a settlement involving Meta, arguing that while it restricts young users' access to Meta products, it also mandates age verification across all products — requiring more data collection from everyone, not just minors.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
A data breach at Autism Services of Saskatoon exposed the personal information of more than 2,000 people. Saskatchewan's Information and Privacy Commissioner reviewed the incident and found the organization responded appropriately, notifying those affected and improving its security systems.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
The Los Angeles County Museum of Art disclosed that a data breach occurring last year exposed sensitive personal information belonging to customers and employees, including Social Security numbers and medical data.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A summary judgment ruling against a telecom company in a state regulatory lawsuit illustrates how vague or approximate data breach notifications can create legal liability. The case suggests that companies falling short of precise technical disclosure standards may face enforcement consequences beyond the breach itself.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Nutex Health, a hospital operator and healthcare services provider, is investigating a cyberattack in which an unauthorized party removed data from its systems. The company has not disclosed what types of information were taken or how many people may be affected.
Who should care: Cybersecurity · Privacy officers · Administrators
Tift Regional Health System, a non-profit serving patients in south central Georgia, has agreed to pay $1.2 million to settle a lawsuit stemming from a data breach. The settlement resolves claims against the health system without a court ruling on liability.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
A Massachusetts appeals court has ruled that plaintiffs in data breach lawsuits must show cognizable, concrete damage to bring a claim — not just the possibility that stolen data could cause future harm. The decision is the first of its kind in Massachusetts and follows the U.S. Supreme Court's 2021 TransUnion ruling limiting standing in federal courts.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A South Korean government-backed startup platform suffered a data breach that exposed encrypted personal data after an encryption key was embedded directly in an API, negating the protection encryption was supposed to provide. Penta Security has publicly addressed the incident as an example of poor key management practice.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Apollo Global Management, one of the world's largest private equity firms, disclosed a data breach in which attackers used social engineering to access company cloud platforms over a four-day window in early July. Personal information belonging to affected individuals was exposed, and an investigation is continuing.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Connecticut's Medicaid provider portal suffered a breach exposing payment and claims data for roughly 41,000 HUSKY Health members, detected on June 25, 2026. The vendor Gainwell Technologies, which manages the state's Medicaid fiscal operations, is at the center of the incident — the second portal breach Connecticut has reported this year.
Who should care: Cybersecurity · Privacy officers · Administrators
Apollo, a major private equity firm, disclosed that attackers accessed some of its cloud platforms over a five-day window in early July, exposing sensitive personal data. The breach is part of a broader wave of cyberattacks targeting financial sector firms.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
U.S. Bank has acknowledged claims of a data breach but says the incident originated with a fourth-party vendor, not its own systems. The bank states there is no evidence that its internal networks or data repositories were directly compromised.
Who should care: Cybersecurity · Privacy officers · Administrators
DAP Health, a nonprofit community health network in Southern California, has agreed to a $1.3 million settlement to resolve a class action lawsuit stemming from a data breach. The case was reported by The HIPAA Journal, which covers healthcare privacy and compliance news.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
So I didn’t know what the doctrine of bailment is. If you don’t either, you may want to read this post by Jake L. Ramsey of Offit Kurman. It starts by noting the presentation at BlackHat by two OpenAI engineers about the Hugging Face incident and notes two of their statements: First, one OpenAI engineer... Source
Who should care: General readers · AI governance · Policy
Toronto's Hospital for Sick Children disclosed a cybersecurity incident that exposed personal information belonging to current and former employees and job applicants. The breach traced back to a vulnerability in third-party software; clinical systems and patient records were not affected.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
Apollo Global, a major private equity and asset management firm, has disclosed a data breach following a hacking campaign that appears to have targeted multiple financial companies. Details about the scope of the breach and what data was exposed have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators
Apple American Group LLC, the largest Applebee's franchisee in the United States, has disclosed a data breach that exposed sensitive personal information including Social Security numbers, financial records, health data, and biometric information. The full number of people affected has not been confirmed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
A reverse image search and identity verification service suffered a major data breach, exposing more than 9 million facial recognition images. The scale of the leak places biometric data belonging to millions of individuals in the hands of unknown actors.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
CareCloud, a U.S. healthcare IT company, disclosed that a data breach it experienced earlier this year affected more than 3.7 million individuals. The company provides technology and services to medical practices and healthcare organizations.
Who should care: Cybersecurity · Privacy officers · Administrators