The full corpus — beyond today's front page.
408 results · page 16 of 17
AssuranceAmerica Managing General Agency has notified at least 1.1 million people across seven states after detecting suspicious activity on its systems. Breach notices have been sent to residents in California, Massachusetts, Nebraska, South Carolina, Texas, Vermont, and Washington.
Who should care: Cybersecurity · Privacy officers · Administrators
A Wellington pharmacy, Unichem Petone, inadvertently exposed private messages sent by 29 patients through its website's contact form, triggering an effort to remove the leaked data from the internet and directly notify those affected.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Rex Edison reports A single cyberattack dented an entire country’s GDP. The Cyber Monitoring Centre estimates that the ransomware assault on Jaguar Land Rover cost the UK economy £1.9 billion — roughly $2.5 billion — rippling through more than 5,000 businesses and dragging car production to levels not seen since 1952. The Bank of England flagged the damage in its economic outlook. Now, after months... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Melanie Conroy of Pierce Atwood LLP writes: The First Circuit recently affirmed dismissal of a putative data breach class action against Bayamón Medical Center (BMC), holding that the plaintiff failed to plausibly allege that her injuries were traceable to the healthcare provider’s 2019 ransomware attack. In Santos-Pagán v. Bayamón Medical Center, the court concluded that allegations... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Polymarket, a prediction market platform, will reimburse roughly $3 million to customers after attackers compromised a third-party vendor and injected malicious code into the platform's frontend, draining user funds. The company says it will cover all losses from the incident.
Who should care: Cybersecurity · Privacy officers · Administrators
A coalition of children's online safety advocates is lobbying House members to vote against a bipartisan compromise bill known as the KIDS Act, contending that the negotiated version dilutes protections it was meant to strengthen.
Who should care: Cybersecurity · Privacy officers · Administrators
Ukraine's security service, the SBU, has detailed a sustained Russian intelligence operation in which operatives posed as technical support staff to trick targets into surrendering login credentials for their messaging accounts. The campaign gave attackers direct access to private communications.
Who should care: Cybersecurity · Privacy officers · Administrators
Okanogan Behavioral Healthcare, a behavioral health provider in Washington State, has agreed to settle a class action lawsuit stemming from a data breach. The settlement resolves claims brought by individuals whose information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
A database of nearly one million passport images, collected by an ID verification system used by cannabis dispensaries, was exposed online. The breach illustrates how sensitive government-issued credentials end up stored in peripheral, lower-security systems far removed from the original purpose of the document.
Who should care: Cybersecurity · Privacy officers · Administrators
A phone scam inadvertently revealed that Madison Square Garden Entertainment had compiled detailed internal dossiers on individuals who publicly criticized its facial recognition program, exposing the scope of the company's tracking of its opponents.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Time and time again, researchers have found numerous compromised Android devices for sale at large online retailers like Amazon. When these devices get individually reported, we have seen some noted efforts to take them down. But this is a systemic problem and Amazon and other major online retailers must make a corresponding systemic and intentional effort to stop these devices from entering people’s homes and ultimately their networks. As a refresher: Last year, Google wrote that one major campaign, deemed BADBOX, affected 10 million uncertified devices that were running Android’s open-sourc…
Who should care: Cybersecurity · Privacy officers · Administrators
Two teenagers, Owen Flowers and Thalha Jubair, were convicted for a cyberattack on Transport for London that caused significant financial damage. Reporting now reveals that both individuals had come to the attention of law enforcement well before the attack took place.
Who should care: Cybersecurity · Privacy officers · Administrators
Amazon's MGM Studios has shelved a planned film about OpenAI, reflecting the growing and complicated entanglement between the AI industry and Hollywood. Separately, data center workers are organizing in response to labor concerns, and Meta experienced a leak exposing employee data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
In August 2025, DataBreaches added the Colorado Health Network (CHN) to our non-public worksheets after threat actors called Cephalus added the provider to its’ dark web leak site with a claim that they had acquired 900 GB of data. Cephalus disappeared from public view days later, and never leaked the data on any server that... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A data breach in New Zealand is prompting discussion about potential reforms to the country's privacy legislation, according to reporting from the IAPP. The incident may accelerate legislative changes to how personal data is protected under New Zealand law.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A data exposure at Dialog, described as an exclusive, invite-only organization, left membership information accessible without any breach in the conventional sense. The organization reportedly framed the incident as a hack, though the data appears to have been leaking rather than stolen through an intrusion.
Who should care: Cybersecurity · Privacy officers · Administrators
Ukraine's state postal service Ukrposhta disclosed that its IT systems were hit by a cyberattack overnight, causing service disruptions including outages to its app. The organization confirmed it is working to restore operations and said updates would follow.
Who should care: Cybersecurity · Privacy officers · Administrators
Bradford Health Services and Bradford Health Partners have agreed to settle a lawsuit stemming from a December 2023 cybersecurity incident that exposed patient data. The breach prompted legal action under privacy and healthcare data protection laws.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Security researchers found evidence that Russian authorities used a Cellebrite phone-unlocking device to access a political opponent's iPhone, despite Cellebrite's stated policy of cutting off sales to Russia following its invasion of Ukraine. The findings suggest the tools reached Russian law enforcement through channels the company either did not control or did not stop.
Who should care: Cybersecurity · Privacy officers · Administrators
A malicious Microsoft Edge extension dubbed 'Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Hillcrest Convalescent Center, a skilled nursing and rehabilitation facility in Durham, North Carolina, has reached a settlement in a class action lawsuit stemming from a data breach affecting patient information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Bill Toulas reports: Tata Electronics has confirmed in a statement to BleepingComputer that it was the target of a cyberattack that impacted parts of its IT infrastructure. The company emphasizes that its operations continued to run normally and were not affected by the incident. […] While Tata Electronics has not disclosed the threat actor’s identity,... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A bribery scandal tied to the AgustaWestland helicopter contract ruptured the India-Italy defense relationship in 2014, triggering nearly a decade of diplomatic and military fallout. The two countries have since rebuilt ties they now treat as strategically irreplaceable, with the damage exposing how deeply Italian defense suppliers were embedded in India's military supply chain.
Who should care: Cybersecurity · Privacy officers · Administrators
Tata Electronics, a major supplier to companies including Apple and Tesla, has reportedly suffered a cyberattack in which threat actors claim to have obtained sensitive trade secrets tied to those client relationships. The full scope of the breach and the validity of the claims have not been independently confirmed.
Who should care: Cybersecurity · Privacy officers · Administrators