The full corpus — beyond today's front page.
388 results · page 12 of 17
Sunshine Health, a Florida-based Medicaid and health insurance agency, has reported a data breach involving the theft of protected health information following a vishing attack. Health Payment Systems has also disclosed a separate breach.
Who should care: Healthcare professionals · Privacy officers · Compliance
Child Care Resource Center, a California-based child care organization, disclosed a data breach that exposed employee data over a period of approximately nine years. The breach was attributed to internal employee practices rather than an outside attack.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Loma Linda University Health and UCLA Health have both disclosed data security incidents. Details of the scope, affected individuals, and nature of the breaches have not been specified in available reporting.
Who should care: Healthcare professionals · Privacy officers · Compliance
Valve is alerting Steam hardware customers in Europe that their personal data was stolen in a breach at CEVA Logistics, a third-party shipping partner. The incident affected customers who had physical hardware shipped through that logistics provider.
Who should care: Cybersecurity · Privacy officers · Administrators
South Korean financial media company E-Broadcasting confirmed that an external actor illegally accessed its systems, exposing over 460,000 records belonging to users of its 3Pro TV platform. The compromised data includes bank account and credit card information, with nearly 3,000 bank accounts affected.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Healthcare software company Unlimited Technology Systems disclosed a data breach from October 2025 that affected more than 3.8 million people. The company has reported the incident, though details about the type of data exposed have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators
Unlimited Technology Systems, an Ohio-based revenue cycle management company serving healthcare providers, suffered a data breach in October 2025 that exposed information belonging to approximately 3.8 million patients. The breach was discovered days after it occurred and publicly reported months later.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Class action lawsuits stemming from data breaches at McKenzie Health System in Michigan and Aspire Health Alliance have reached settlement agreements. Both cases involved healthcare organizations whose patient data was compromised, prompting litigation that has now been resolved outside of court.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Dutch online retailer Bol has notified customers of a data breach at one of its logistics partners, where unauthorized parties accessed systems and may have viewed or copied customer data. Bol stated its own systems were not compromised, but the leaked data has reportedly appeared on the dark web.
Who should care: Cybersecurity · Privacy officers · Administrators
Omni Healthcare Financial Holdings and Western Montana Clinic have each agreed to settle class action lawsuits stemming from separate data breaches. The settlements resolve claims brought by individuals whose personal or medical information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Federal lawmakers are pushing to extend identity theft protection services for victims of the 2015 Office of Personnel Management data breach before those services expire next month. Senator Mark Warner and Delegate Eleanor Holmes Norton are seeking to make the protections permanent for the millions of current and former federal employees affected.
Who should care: Cybersecurity · Privacy officers · Administrators
Brown Health Medical Group-MA, operating under Lifespan Physicians Group of Massachusetts, has confirmed a data breach involving the protected health information of approximately 312,000 individuals. The incident falls under HIPAA reporting requirements, indicating that sensitive patient data was exposed or compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Switzerland's Federal Office of Information Technology, Systems and Telecommunication reported a cyberattack on its SharePoint servers, resulting in roughly 200 compromised accounts and the blocking of external internet access to those systems. Authorities said there is currently no evidence of broader data exfiltration beyond the affected accounts.
Who should care: Cybersecurity · Privacy officers · Administrators
Amgen, a major biopharmaceutical company specializing in cancer, blood, and cardiovascular treatments, has disclosed a cyberattack that resulted in a breach of patient data. The company has not yet publicly detailed the scope of the breach or the specific types of information compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Seoul Facilities Corporation is facing political backlash over its proposed response to a data breach affecting approximately 4.62 million people. The company plans to offer each affected person roughly 5,000 won — about $3.50 USD — as compensation, a figure a Seoul city council member has publicly criticized as inadequate.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Guru Baran reports: Brinks Home, one of North America’s largest residential security providers, has confirmed that hackers breached its IT systems after the notorious ShinyHunters extortion group claimed responsibility for stealing nearly five million records tied to the company’s Salesforce environment. The confirmation comes after the threat actors listed “BH Security, LLC (brinkshome.com)” on their... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Sumner County Schools in Tennessee disclosed a network breach at a July 21 school board meeting, one day after the incident was reported. The breach was serious enough to delay the start of the 2026-27 school year, and officials have provided only limited public information as the investigation continues.
Who should care: Cybersecurity · Privacy officers · Administrators
UK Government Investments, the agency overseeing the state's stakes in public companies including Channel 4 and the Post Office, suffered a data breach that left sensitive management information and the personal details of more than 50 government officials publicly accessible for roughly 40 hours.
Who should care: Cybersecurity · Privacy officers · Administrators
The full Sixth Circuit will rehear a case that previously upheld the FCC's expanded data breach notification rules for telecommunications companies. The FCC, now under Republican leadership, has signaled it will likely roll back the rules regardless, but industry groups and Republican lawmakers are also pushing to eliminate the legal precedent the earlier ruling established.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Healthcare IT company CareCloud is notifying more than 350,000 people that their data was stolen after hackers accessed its AWS environment in March 2026, disrupting an electronic health record system within its CareCloud Health division. The company's investigation confirmed unauthorized access to patient and possibly provider information stored in that cloud environment.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Will Murray reports: Another medical clinic has revealed it has been targeted by hackers, less than a week after Partnered Health announced a major data breach. GO2 Health in Everton Park, in Brisbane’s north, said the clinic’s main email mailbox was accessed in April after a phishing attack. It wasn’t until almost three months later... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Amgen, the global biotechnology company, has disclosed a data breach that exposed patient health information. The company has not yet released detailed information about the scope or timeline of the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
South Korea's Consumer Dispute Settlement Committee has ruled that Coupang, a major e-commerce platform, must pay affected consumers 100,000 won (roughly $70) each — in cash or store credit — following a large-scale personal data breach. The case was brought by 50 consumers and resulted in a formal compensation order.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
South Korea's data protection authority has fined KT Corporation approximately $39 million for violations related to a customer data breach. The penalty, issued by the Personal Information Protection Commission, is one of the largest of its kind in the country.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy