The full corpus — beyond today's front page.
504 results · page 17 of 21
The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity company Arctic Wolf. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Ostium, a crypto trading platform, lost nearly $23.75 million after an attacker compromised the off-chain system responsible for supplying price data to its protocol, draining funds from its liquidity provider vault. The breach did not target the blockchain directly but exploited the infrastructure connecting external data to the on-chain system.
Who should care: Cybersecurity · Privacy officers · Administrators
23andMe, now operating as Chrome Holding Co., has reached an $18 million settlement with a coalition of 42 state attorneys general stemming from a data breach lawsuit. The agreement resolves multistate legal action against the genetic testing company.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Unidentified hackers spent roughly nine months inside an online training system used by South Korea's diplomatic academy, extracting personal data belonging to current and former employees of the Ministry of Foreign Affairs. The breach was not detected for the duration of that access.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Centers Lab NJ LLC, a New Jersey diagnostic testing laboratory, has disclosed a data breach affecting approximately 542,000 individuals. The breach involves personal and potentially medical information held by the healthcare services provider.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Hugging Face disclosed that attackers used an autonomous AI agent to breach its production infrastructure, gaining access to internal datasets and credentials. The AI model hosting platform is a central resource for researchers and developers across the machine learning community.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Navigate360, a platform that powers anonymous school safety tip lines, suffered a breach exposing 8.3 million tips in March 2026. Four months later, the company and the programs relying on its platform have provided little public disclosure, prompting DataBreaches.net to file complaints with state and federal regulators.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A new report examines how period tracking apps collect and share sensitive reproductive health data, raising concerns about user exposure, particularly in jurisdictions where abortion access is legally restricted. The broader roundup also covers Russian cyber operations targeting infrastructure, repeated DHS security failures, and a breach revealing an AI music platform's data scraping practices.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Ernst & Young has begun notifying customers of a data breach stemming from the compromise of a third-party support ticket system used by its IT staff. The breach originated outside EY's own infrastructure, in a vendor tool the firm relied on for internal technical support.
Who should care: Cybersecurity · Privacy officers · Administrators
All About Women's Care, a Colorado-based healthcare provider, has notified approximately 12,000 patients that their personal information was exposed in a data breach. The incident was reported in the HIPAA Journal, which covers healthcare data security and compliance.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Months after a breach at Instructure, the company behind the Canvas learning management system, affected educational institutions are still waiting for individualized findings. As of early July, Instructure had only begun delivering the first wave of institution-specific data packets, with the forensic review dragging well past initial timelines.
Who should care: Cybersecurity · Privacy officers · Administrators
Italy's data protection authority fined telecom operator WINDTRE €1.7 million after finding serious security failures that led to two separate unauthorized breaches, exposing personal data belonging to more than 365,000 customers. The investigation was triggered by the company's own breach notification.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
23andMe has agreed to an $18 million settlement with a coalition of 43 state attorneys general over its failure to adequately protect customers' genetic data from a breach. The settlement resolves multistate claims that the company did not take sufficient steps to secure some of the most sensitive personal information people can share.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Australia's privacy regulator conducted a preliminary inquiry into a 2025 Qantas data breach that exposed 5.67 million customer records and found no indication the airline likely violated the country's privacy obligations. The Office of the Australian Information Commissioner has not issued a final determination.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Two vision care providers, Total Vision in California and Naperville-area provider Naper Vision, have agreed to settlements resolving class action lawsuits stemming from data breaches. The cases were brought under health data privacy frameworks, with affected patients seeking compensation for the exposure of their personal and medical information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Three healthcare organizations — Ohio Living, a senior living provider, Erlanger Health System in Tennessee, and Heart of America Eye Care — have each disclosed separate data breaches. All three operate in sectors covered by HIPAA, meaning the compromised data likely includes sensitive medical and personal information.
Who should care: Healthcare professionals · Privacy officers · Compliance
A City of Calgary 911 employee has been charged with breach of trust after an investigation found she allegedly accessed and shared confidential information outside authorized channels. Calgary police say the investigation began in January following internal allegations about the unauthorized disclosure of sensitive data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A putative class action filed in federal court in Washington, D.C. accuses prominent law firm WilmerHale of negligence and breach of contract following a May data breach that allegedly exposed the personal information of thousands of clients. The plaintiffs are seeking millions of dollars in damages.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
A coalition of 42 state attorneys general has reached an $18 million settlement with genetic testing company 23andMe over cybersecurity failures that resulted in a large-scale data breach. The settlement resolves multistate legal action stemming from the company's failure to adequately protect user data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Munsif Vengattil and Aditya Kalra Ransomware group World Leaks has posted on the dark web a huge cache of files related to India’s largest nuclear plant, including purported blueprints of parts of its facilities and supplier details — information it labelled as coming from Reliance Group. The Kudankulam Nuclear Power Plant, located in the southern... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Partnered Health, an Australian healthcare chain operating family medical clinics, has disclosed a cyberattack that exposed patient records across at least sixteen affected locations. The breach may include treatment information alongside personal data.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Community Health Center of Buffalo and New Jersey law firm Greenbaum Rowe Smith & Davis have each disclosed separate data breaches. The incidents, reported via The HIPAA Journal, involve organizations that handle sensitive medical and legal information respectively.
Who should care: Healthcare professionals · Privacy officers · Compliance
Physicians Primary Care of Southwest Florida has agreed to a settlement following a cyberattack in September 2024 that exposed patient data. The breach affected a primary care provider serving patients across Southwest Florida.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals