The full corpus — beyond today's front page.
1154 results · page 10 of 49
Nikkei Inc. has disclosed a third data breach within roughly a month, with the latest incident exposing approximately 1.83 million personal records. The repeated breaches at the Japanese media and financial information company point to persistent security problems rather than a single isolated incident.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a [...]
Who should care: Cybersecurity · Privacy officers · Administrators
OpenCode, an open-source AI coding project, disclosed a security breach that exposed API keys belonging to a subset of its users. The keys were connected to external AI service providers, meaning the exposure extended beyond OpenCode itself.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Florida's DMV suffered a data breach tied to the hacking group ShinyHunters after a police department stored login credentials insecurely, prompting statewide alerts. The incident exposed vulnerabilities in how law enforcement agencies handle access to government systems.
Who should care: Cybersecurity · Privacy officers · Administrators
WhatsApp's public help pages briefly exposed roughly 80 documents containing internal instructions for Meta's chatbot, including guidance on restricted topics. Meta attributed the exposure to a bug.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Federal investigators looking into the ShinyHunters hacking group, which recently breached FBI data, have focused on executives at two ransomware negotiation firms with unusually close ties to the group. One U.S.-based executive is suspected of helping ShinyHunters run a site used to pressure victims into paying ransoms.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
California has reached a $6 million settlement over claims stemming from a data breach at genetic testing company 23andMe. The settlement resolves state-level legal action connected to the exposure of users' personal and genetic data.
Who should care: Cybersecurity · Privacy officers · Administrators
The New York and Connecticut attorneys general reached a $2.7 million settlement with Boston Children's Health Physicians and its IT vendor XTIUM over a 2024 data breach. The agreement also requires both organizations to implement a corrective action plan to strengthen their data security practices.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
ConnectWise disabled customer access to its Cloud Backup service after attackers compromised application identities and used them to breach Microsoft 365 tenants. The incident is a supply-chain attack, meaning customers were exposed through their vendor, not through any action of their own.
Who should care: Cybersecurity · Privacy officers · Administrators
Hackers remotely took control of temperature systems in hundreds of French supermarket refrigerators and freezers, forcing temperatures from as low as -27°C up to over 50°C. The attack, described as unprecedented, spoiled large quantities of food and left the source and motive unclear.
Who should care: Cybersecurity · Privacy officers · Administrators
A Chinese espionage group tracked as Armoury Castle, or UNC5221, exploited a zero-day vulnerability in BeyondTrust, with researchers identifying the first known attack occurring roughly seven weeks before disclosure. The group has previously compromised customers of Ivanti and Citrix.
Who should care: Cybersecurity · Privacy officers · Administrators
German authorities have arrested a 28-year-old Russian national suspected of involvement in the 2024 ransomware attack on Synnovis, a pathology services firm whose systems support major London NHS hospitals. The hack disrupted blood-testing services and forced hospitals to cancel thousands of appointments and operations.
Who should care: Cybersecurity · Privacy officers · Administrators
Mid Florida Dermatology & Plastic Surgery has disclosed a data breach affecting approximately 85,000 patients, part of a wave of healthcare breach announcements that also includes Kannarr Eye Care in Kansas and Indiana University.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A $6.4 million settlement has been reached to partially resolve litigation arising from a cyberattack on American Medical Collection Agency (AMCA), a medical debt collection firm. The breach, which was one of the largest in healthcare history, exposed sensitive patient and financial data belonging to millions of people.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Ransomware groups are escalating their tactics beyond data theft and encryption, now incorporating real-world threats to pressure victims into paying. The shift represents a broader pattern of attackers layering coercion methods to make refusal increasingly costly.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Russian authorities have detained three people suspected of belonging to the DataSuckers hacking group, which is alleged to have carried out breaches affecting targets in both Russia and Ukraine, including a cyberattack on a restaurant chain that exposed customer data.
Who should care: Cybersecurity · Privacy officers · Administrators
Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators
A South Korean National Health Insurance Service employee was fired for illegally selling subscribers' personal health data to outside parties. Despite the breach being discovered, affected individuals had not been notified for at least three months, a lapse revealed during a parliamentary audit.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Burger King Japan disclosed a data breach in which attackers accessed a server holding over 11 million customer records. The breach affects the Japanese subsidiary of the global fast-food chain.
Who should care: Cybersecurity · Privacy officers · Administrators
An unprotected database linked to Vibetech, an India-based AI and IT services firm, left 13.7 million records exposed online with no password or authentication required. The data included credentials and sensitive information drawn from previous breaches, discovered by cybersecurity researcher Jeremiah Fowler.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The Federal Trade Commission is reportedly investigating Anthropic and OpenAI, according to a new report. The probe comes as the Trump administration has publicly dismissed concerns about AI risks, and potential fines could be comparable to penalties levied on companies that fail to promptly disclose data breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · AI governance · Policy
Guru Baran reports: Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force companies to pay. According to the Semperis 2026 Ransomware Risk Report, 37% of successful attacks included threats against workers’ friends or relatives. The findings show that ransomware is no longer only a... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A cyberattack on the UK's Legal Aid Agency, which occurred in April 2025, exposed data stretching back to 1978. The breach is significantly broader in historical scope than initially understood.
Who should care: Cybersecurity · Privacy officers · Administrators