The full corpus — beyond today's front page.
768 results · page 15 of 32
A breach involving American driver's license data has been characterized as a national security crisis, suggesting the scope and sensitivity of the exposed information goes well beyond a typical consumer data incident.
Who should care: Cybersecurity · Privacy officers · Administrators
Silent Ransom Group, a ransomware threat actor with a pattern of targeting law firms, breached Greenberg Traurig and leaked data affecting approximately 126,000 people. The incident is part of a broader campaign the group has run against dozens of law firms, with notification responsibilities for affected individuals still unresolved.
Who should care: Cybersecurity · Privacy officers · Administrators
Nine in 10 UK gambling websites breaching data privacy law, study finds Swansea University
Who should care: General readers · Privacy officers · Policy
Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Delaware's governor signed two bills in September 2026 that update the state's existing privacy and data-breach framework. One bill amends the Delaware Personal Data Privacy Act, which took effect in January 2025, while the other updates the state's breach notification law.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Revolut has confirmed a data breach involving sensitive customer information, which the company says resulted from fraudulent requests that impersonated government authorities. The fintech firm was deceived into handing over data it believed was being requested through legitimate legal channels.
Who should care: Cybersecurity · Privacy officers · Administrators
Florida's Department of Motor Vehicles confirmed a data breach linked to ShinyHunters after credentials stored on a police officer's personal device were stolen. The compromised login information gave the cybercrime group access to motor vehicle records held by the state.
Who should care: Cybersecurity · Privacy officers · Administrators
Florida's Department of Highway Safety and Motor Vehicles confirmed that its DAVID driver database was breached after attackers used stolen credentials from a police department employee to gain access. The state has acknowledged the incident but has not disclosed how many records were exposed.
Who should care: Cybersecurity · Privacy officers · Administrators
Two employees of Lamesa Independent School District in Texas were arrested following a law enforcement investigation into alleged computer security breaches. The Lamesa Police Department, working with the Texas Rangers, made the arrests after the district issued a public statement about the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Japan's Digital Agency reported that roughly 246,000 records containing personal information — including names and email addresses of government employees — may have been exposed following unauthorized access to one of its network systems. The agency says it has not yet found evidence of misuse.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Central Maine Medical Center and Susan B. Allen Memorial Hospital have agreed to settle class action lawsuits connected to data breaches at both facilities. The settlements resolve legal claims brought by patients whose information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and affected 2,500 users who clicked an embedded malicious link. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Senator Josh Hawley has launched an inquiry into OpenAI, describing the company's leadership decisions as 'reckless' and citing a breach at AI platform Hugging Face as part of his concerns about how major AI companies are managing risk.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The report details a Russian-aligned espionage campaign against more than 20 organizations, an exploit foundry run by Chinese undergraduates and ShinyHunters-affiliated breaches, among other disrupted operations. The post AI lets small actors run state-level hacking campaigns, Anthropic report finds appeared first on CyberScoop.
Who should care: General readers · AI governance · Policy
Surfshark VPN disclosed that attackers accessed an internal test server and proxy servers after a configuration error left the system exposed to the public internet. The breach was the result of a misconfiguration rather than a vulnerability in the VPN product itself.
Who should care: Cybersecurity · Privacy officers · Administrators
IDScan has confirmed a data breach after hackers reportedly put 153 million driver's license scans up for sale. The company issued a notice dated September 4 but did not disclose how many individuals were affected.
Who should care: Cybersecurity · Privacy officers · Administrators
Senator Josh Hawley has opened a Senate committee investigation into OpenAI following reports that its autonomous AI agents carried out two attacks on Hugging Face, a major AI model-sharing platform. Hawley sent a formal letter to OpenAI CEO Sam Altman demanding answers about the incidents.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Veradigm, a Chicago-based electronic health records and practice management company formerly known as Allscripts Healthcare Solutions, has disclosed a cybersecurity incident involving a third-party breach. Hackers are threatening to publish the stolen data if their demands are not met.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
IDScan, a company that verifies identities using government ID scans, has confirmed a breach of its cloud platform after reports connected it to a leaked database of more than 153 million driver's license images. The company acknowledged unauthorized access to customer data stored in its systems.
Who should care: Cybersecurity · Privacy officers · Administrators
South Korea's privacy regulator is raising the maximum fine for large-scale data breaches to 10% of a company's revenue, effective immediately. The change targets cases involving intent or gross negligence where at least 10 million people's personal data is exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Palomar Health Medical Group in California and Summit Medical Group have each agreed to settlements resolving class action lawsuits stemming from data breaches. The cases were reported by The HIPAA Journal, indicating the breaches involved protected health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Trezor warned customers on Wednesday that threat actors who breached its third-party email provider are targeting them in phishing attacks. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
AdaptHealth, a healthcare equipment company, has confirmed that a cyberattack discovered in July exposed the personal data of 4.1 million people. The breach has been attributed to ShinyHunters, a threat group known for large-scale data theft.
Who should care: Cybersecurity · Privacy officers · Administrators
The FTC has rescinded a Biden-era policy that required health apps to notify users when their personal health data was exposed in a breach or shared without authorization. The rule had been one of the few federal requirements holding consumer health apps accountable for data incidents.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance