The full corpus — beyond today's front page.
390 results · page 14 of 17
South Korea's National Diplomatic Academy suffered a cyberattack that went undetected for ten months, exposing personal data belonging to current and former Ministry of Foreign Affairs employees, including diplomats stationed abroad.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
TriWest Healthcare Alliance has disclosed a data breach affecting nearly 12,000 Tricare beneficiaries, with additional breaches reported around the same time by Texas Medicaid and Healthcare Partnership and the Minnesota Health Insurance Network.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Healthcare Services Group has agreed to a $3 million settlement to resolve litigation stemming from a cybersecurity incident that occurred in September 2024. The settlement resolves claims connected to the breach of data held by the company, which provides housekeeping and dietary services to healthcare facilities.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Chick-fil-A is notifying customers that their accounts were compromised through credential stuffing attacks, in which attackers used previously leaked username and password combinations to gain unauthorized access. The breach affected an unspecified number of customer accounts.
Who should care: Cybersecurity · Privacy officers · Administrators
AI music generation platform Suno suffered a data breach in November 2025, but the incident only became public knowledge in July 2026 when it was reported by 404 Media and catalogued by breach-tracking service Have I Been Pwned. The roughly eight-month gap between the breach and its disclosure is drawing attention.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Seoul's municipal government is notifying approximately 4.62 million residents that their personal data was exposed in a breach of Ttareungyi, the city's public bike-sharing program. Affected users will receive text alerts detailing what was leaked, along with a 30-day free pass as compensation.
Who should care: Cybersecurity · Privacy officers · Administrators
ApolloMD Business Services, a healthcare staffing and practice management company, has agreed to pay $4.02 million to settle a lawsuit stemming from a data breach. As a business associate under HIPAA, ApolloMD handles patient data on behalf of healthcare providers.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
23andMe, now operating as Chrome Holding Co., has reached an $18 million settlement with a coalition of 42 state attorneys general stemming from a data breach lawsuit. The agreement resolves multistate legal action against the genetic testing company.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Centers Lab NJ LLC, a New Jersey diagnostic testing laboratory, has disclosed a data breach affecting approximately 542,000 individuals. The breach involves personal and potentially medical information held by the healthcare services provider.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Ernst & Young has begun notifying customers of a data breach stemming from the compromise of a third-party support ticket system used by its IT staff. The breach originated outside EY's own infrastructure, in a vendor tool the firm relied on for internal technical support.
Who should care: Cybersecurity · Privacy officers · Administrators
All About Women's Care, a Colorado-based healthcare provider, has notified approximately 12,000 patients that their personal information was exposed in a data breach. The incident was reported in the HIPAA Journal, which covers healthcare data security and compliance.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Italy's data protection authority fined telecom operator WINDTRE €1.7 million after finding serious security failures that led to two separate unauthorized breaches, exposing personal data belonging to more than 365,000 customers. The investigation was triggered by the company's own breach notification.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
23andMe has agreed to an $18 million settlement with a coalition of 43 state attorneys general over its failure to adequately protect customers' genetic data from a breach. The settlement resolves multistate claims that the company did not take sufficient steps to secure some of the most sensitive personal information people can share.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Australia's privacy regulator conducted a preliminary inquiry into a 2025 Qantas data breach that exposed 5.67 million customer records and found no indication the airline likely violated the country's privacy obligations. The Office of the Australian Information Commissioner has not issued a final determination.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Two vision care providers, Total Vision in California and Naperville-area provider Naper Vision, have agreed to settlements resolving class action lawsuits stemming from data breaches. The cases were brought under health data privacy frameworks, with affected patients seeking compensation for the exposure of their personal and medical information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Three healthcare organizations — Ohio Living, a senior living provider, Erlanger Health System in Tennessee, and Heart of America Eye Care — have each disclosed separate data breaches. All three operate in sectors covered by HIPAA, meaning the compromised data likely includes sensitive medical and personal information.
Who should care: Healthcare professionals · Privacy officers · Compliance
A putative class action filed in federal court in Washington, D.C. accuses prominent law firm WilmerHale of negligence and breach of contract following a May data breach that allegedly exposed the personal information of thousands of clients. The plaintiffs are seeking millions of dollars in damages.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
A coalition of 42 state attorneys general has reached an $18 million settlement with genetic testing company 23andMe over cybersecurity failures that resulted in a large-scale data breach. The settlement resolves multistate legal action stemming from the company's failure to adequately protect user data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Munsif Vengattil and Aditya Kalra Ransomware group World Leaks has posted on the dark web a huge cache of files related to India’s largest nuclear plant, including purported blueprints of parts of its facilities and supplier details — information it labelled as coming from Reliance Group. The Kudankulam Nuclear Power Plant, located in the southern... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Partnered Health, an Australian healthcare chain operating family medical clinics, has disclosed a cyberattack that exposed patient records across at least sixteen affected locations. The breach may include treatment information alongside personal data.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Community Health Center of Buffalo and New Jersey law firm Greenbaum Rowe Smith & Davis have each disclosed separate data breaches. The incidents, reported via The HIPAA Journal, involve organizations that handle sensitive medical and legal information respectively.
Who should care: Healthcare professionals · Privacy officers · Compliance
Physicians Primary Care of Southwest Florida has agreed to a settlement following a cyberattack in September 2024 that exposed patient data. The breach affected a primary care provider serving patients across Southwest Florida.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Eduard Kovacs reports: A new ransomware group named D1R in recent days listed Synopsys and Bosch on its Tor-based leak website. The cybercriminals claimed to have exploited a vulnerability in Synopsys’ website to access a corporate client database containing 40,000 entries, and they are threatening to leak the stolen data unless a ransom is paid.... Source
Who should care: Cybersecurity · Privacy officers · Administrators