PrivacySignal
← Front page

Search & browse the archive

The full corpus — beyond today's front page.

Reset

1163 results · page 16 of 49

Breach
DataBreaches.net · · International

‘A treasure trove of information:’ Cybersecurity specialist says sensitive McMinnville records exposed online

A cybersecurity specialist discovered that sensitive city records from McMinnville, Oregon were exposed on the dark web and accessible in just a few clicks. The researcher described the breach as unusually easy to access, suggesting the exposed data was broad in scope.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
BleepingComputer · · International

Police dismantle KillSec ransomware gang allegedly led by 16-year-old

An international law enforcement operation called Operation KillSwitch dismantled the KillSec ransomware group, seizing its data leak site and servers and making three arrests. Investigators identified a 16-year-old as the group's alleged administrator.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement#security Read original →
Breach
The Record · · International

Cyberattack on major Polish invoicing platform exposes customer data

A significant cyberattack hit one of Poland's leading online invoicing platforms, potentially exposing data belonging to users, their customers, and business partners. The full scope of the breach has not been confirmed.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
DataBreaches.net · · International

Suspected State Hackers Exploited Citrix NetScaler for Weeks. 50,000 Devices May Still Be Exposed.

Datawater reports: Two critical NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, were used against organizations worldwide before a patch existed. CISA’s deadline is today. Patching alone will not tell you whether you were already breached. Threat level: Critical What: Two unauthenticated remote-code-execution flaws in Citrix NetScaler ADC and NetScaler Gateway, both CVSS 9.5. Status: Exploited as zero-days.... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
HIPAA Journal · · US Federal

CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit

CPAP Medical Supplies and Services, a Jacksonville-based provider of durable medical equipment for sleep apnea patients, has agreed to pay up to $500,000 to settle a lawsuit stemming from a data breach. The Florida company supplies equipment to patients managing a chronic medical condition.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →
Breach
EFF — Deeplinks · · International

Victory! California Appeals Court Refuses to Revive Surveillance Tech CEO’s Meritless Lawsuit Against Journalist

A California appeals court upheld the dismissal of a lawsuit filed by the former CEO of surveillance data company Premise Data against journalist Jack Poulson, who had reported on the CEO's felony domestic violence arrest. The court rejected the attempt to use litigation to suppress the story.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy

#breach#enforcement#surveillance#privacy Read original →
Breach
The Record · · International

Automakers routinely share personally identifiable connected-car data with third parties, report says

A new report finds that automakers regularly share personally identifiable data collected from connected cars with third-party companies tied to the digital advertising industry. The findings add detail to what is known about how driver data flows beyond the vehicle manufacturer.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach Critical
BleepingComputer · · International

DIVD says Zammad zero-days enabled AI-driven network breach

The Dutch Institute for Vulnerability Disclosure (DIVD) has confirmed that attackers breached its network by chaining two previously unknown zero-day vulnerabilities in Zammad, an open-source ticketing system, and that AI played a role in carrying out the attack.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai#security Read original →
Breach
BleepingComputer · · International

Over 543,000 valid credentials exposed in public GitHub repositories

Researchers found more than 543,000 still-active credentials sitting in public GitHub repositories as of July, meaning the exposed secrets could be used by anyone who found them. This happened despite GitHub's own tools designed to detect and flag leaked sensitive data before it causes harm.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
DataBreaches.net · · International

Radford experiencing outage after potential data incident

The City of Radford, Virginia announced a potential data breach that has taken its internet systems offline. City officials have engaged cybersecurity experts and legal counsel, and have notified both state and federal law enforcement.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement Read original →
Breach
HIPAA Journal · · US Federal

H1 2026 Healthcare Data Breach Report

A new report covering the first half of 2026 shows healthcare data breaches dropped roughly 6% compared to the same period in 2025, according to the HIPAA Journal's mid-year analysis.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
HIPAA Journal · · US Federal

The Mental Health Association Data Breach Settlement Agreed

The Mental Health Association, a Massachusetts-based agency providing substance use recovery and developmental support services, has agreed to a settlement following a data breach. The organization is based in Chicopee and falls under HIPAA obligations as a human services provider.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →
Breach
HIPAA Journal · · US Federal

DC Medicaid Agency Notifies 400,000 Beneficiaries About Data Exposure

Washington DC's Medicaid agency has notified nearly 400,000 beneficiaries that their personal and protected health information was exposed online. The agency has not yet disclosed how the exposure occurred or how long the data was accessible.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach Critical
BleepingComputer · · International

Bitget hacked via zero-day in third-party security products

Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploiting a zero-day flaw in third-party security products. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
CyberScoop · · US Federal

WaterISAC reckons with range of threats after summer of cyberattacks

WaterISAC, the water sector's cybersecurity information-sharing body, is tracking a broad set of vulnerabilities after a wave of attacks over the summer, including internet-exposed systems, programmable logic controllers, third-party integrators, and gaps in internal defenses.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
DataBreaches.net · · International

Data breach incident targets prisoner medical records at 2 Mass. jails

A cybersecurity incident has compromised the electronic health record system used at two Suffolk County jails in Massachusetts. The system provider, Computer Systems Integrated Inc., confirmed it is investigating the breach, which exposed prisoner medical and health data stored on its EHRs-C platform.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
BleepingComputer · · International

Former US Air Force members sent to prison over BEC attacks

Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
BleepingComputer · · International

New Spectre v2 attack variant leaks Linux root password hash in minutes

Researchers have developed a new variant of the Spectre v2 hardware vulnerability, called Branch Target Reuse, that can extract a Linux system's root password hash from Intel processors in as little as three to five minutes.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
Microsoft Threat Intelligence · · International

​​Beyond source code: A path to the keys to the kingdom

Microsoft's Security Blog details how a threat actor tracked as Storm-3068 used a single compromised identity to move from source code access into broader cloud infrastructure. The post outlines the attack path and defensive steps organizations can take to protect identities, development pipelines, and cloud environments.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
BleepingComputer · · International

Automated AI agent used to breach cybersecurity nonprofit DIVD

The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as "loud and very, very messy." [...]

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai#security Read original →
Breach
CyberScoop · · US Federal

Alleged ShinyHunters leader arrested in the Netherlands

Dutch authorities arrested a 24-year-old Amsterdam man alleged to be a leader of the ShinyHunters hacking group. The arrest came roughly one week before the group carried out a separate hack against the FBI.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement Read original →
Breach
Microsoft Threat Intelligence · · International

Star Blizzard refines phishing and malware delivery with the RedFlick technique

Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing campaigns, the use of accounts on compromised websites, and a novel malware delivery technique, tracked by Microsoft as “RedFlick”. The post Star Blizzard refines phishing and malware delivery with the RedFlick technique appeared first on Microsoft Security Blog.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

FBI Hackers Say They Won’t Publish Massive Trove of FBI Employee Data

Hackers who breached FBI systems and stole personal data on all FBI employees and applicants — including home addresses, job roles, spouse names, and medical records — say they do not plan to publish the stolen information, according to a report from 404 Media.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy

#breach#healthcare#privacy Read original →
← Prev Page 16 of 49 Next →