The full corpus — beyond today's front page.
390 results · page 16 of 17
Serviceaide, an AI-powered IT service management company, has agreed to pay $1.8 million to settle litigation stemming from a data breach. The case was covered by The HIPAA Journal, suggesting the incident involved protected health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · AI governance · Policy
Medtronic is sending breach notifications to customers after the ShinyHunters hacking group gained unauthorized access to personal data held by the medical device company. The scope of exposed information has not been fully detailed in public disclosures.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Verizon Business has published its first Breach Impact Study, examining the financial consequences of data breaches. The report appears focused on quantifying the real costs organizations face when breaches occur, with coverage in a HIPAA-focused publication suggesting a healthcare angle.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Aflac has disclosed a data breach affecting its Japan subsidiary, in which attackers accessed and stole personal information and bank account data. The incident involves one of the largest supplemental insurance providers in the United States, a Fortune 500 company serving millions of customers.
Who should care: Cybersecurity · Privacy officers · Administrators
Aflac has disclosed a data breach stemming from an attack on its Japan-based subsidiary, in which personal information and bank account details were stolen from affected individuals. The company has not publicly confirmed the full scope of the breach.
Who should care: Cybersecurity · Privacy officers · Administrators
Amicus Solutions, also known as Fedora Solutions, has disclosed a cybersecurity incident that affected Huntsville Hospital Health System. The hospital confirmed it was impacted by the breach, which was reported in connection with HIPAA compliance obligations.
Who should care: Healthcare professionals · Privacy officers · Compliance
Washington State's Department of Social and Health Services disclosed that an employee improperly accessed protected records belonging to approximately 8,600 individuals, constituting an insider data breach of sensitive personal information held by a state agency.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Fox Rothschild, a top-100 U.S. law firm, has suffered a data breach carried out by Silent Ransom Group, a threat actor known to target law firms specifically. The breach resulted in a data leak, exposing the firm and potentially its clients to serious confidentiality risks.
Who should care: Cybersecurity · Privacy officers · Administrators
Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A federal court rejected a second attempt by Progress Software and co-defendants to dismiss negligence claims stemming from the large-scale MOVEit data breach, allowing lawsuits under the laws of California, Indiana, Michigan, and Ohio to move forward in multi-district litigation.
Who should care: Cybersecurity · Privacy officers · Administrators
South Florida Injury Centers reported a hacking incident, and the Chickasaw Nation Department of Health disclosed a separate data breach, according to reporting in the HIPAA Journal. Both incidents involve healthcare entities covered under federal patient privacy rules.
Who should care: Healthcare professionals · Privacy officers · Compliance
South Africa's data privacy law, POPIA, can require mandatory breach reporting even when personal information is exposed by something as routine as a misdirected email, according to attorneys citing an enforcement notice against a Johannesburg college. The case confirms that accidental internal disclosures are not exempt from the law's reporting obligations.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Japanese telecommunications company KDDI confirmed a data breach on June 17, 2026, in which attackers gained unauthorized access to a system shared by six ISP mail services. Up to 14.22 million email addresses and associated passwords may have been exposed as a result.
Who should care: Cybersecurity · Privacy officers · Administrators
Japanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its email systems used by five other internet service providers (ISPs) in the country. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
AssuranceAmerica Managing General Agency has notified at least 1.1 million people across seven states after detecting suspicious activity on its systems. Breach notices have been sent to residents in California, Massachusetts, Nebraska, South Carolina, Texas, Vermont, and Washington.
Who should care: Cybersecurity · Privacy officers · Administrators
Melanie Conroy of Pierce Atwood LLP writes: The First Circuit recently affirmed dismissal of a putative data breach class action against Bayamón Medical Center (BMC), holding that the plaintiff failed to plausibly allege that her injuries were traceable to the healthcare provider’s 2019 ransomware attack. In Santos-Pagán v. Bayamón Medical Center, the court concluded that allegations... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Okanogan Behavioral Healthcare, a behavioral health provider in Washington State, has agreed to settle a class action lawsuit stemming from a data breach. The settlement resolves claims brought by individuals whose information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Colorado Health Network and Kentucky Mountain Health Alliance have each disclosed separate data breaches, according to reporting in the HIPAA Journal. Details on the scope and nature of the compromised data remain limited in the available excerpt.
Who should care: Healthcare professionals · Privacy officers · Compliance
Three separate organizations — Minnesota Epilepsy Group, Campbell University, and the City of Middletown, Ohio — have each disclosed data breaches. The incidents span healthcare, higher education, and local government, suggesting no single attack but a broad pattern of exposure across different sectors.
Who should care: Healthcare professionals · Privacy officers · Compliance
A data breach in New Zealand is prompting discussion about potential reforms to the country's privacy legislation, according to reporting from the IAPP. The incident may accelerate legislative changes to how personal data is protected under New Zealand law.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Bradford Health Services and Bradford Health Partners have agreed to settle a lawsuit stemming from a December 2023 cybersecurity incident that exposed patient data. The breach prompted legal action under privacy and healthcare data protection laws.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Hillcrest Convalescent Center, a skilled nursing and rehabilitation facility in Durham, North Carolina, has reached a settlement in a class action lawsuit stemming from a data breach affecting patient information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A lawsuit stemming from a data breach at MSG Entertainment is drawing attention to the company's use of facial recognition technology and how it handles the personal data of people who attend its venues.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
A blogpost by EDPS head Wojciech Wiewiórowski addresses the risks posed by unauthorized AI tools used inside organizations, noting that such tools can expose personal data, create regulatory blind spots, and introduce security vulnerabilities that official IT governance never sees.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · AI governance · Policy