The full corpus — beyond today's front page.
504 results · page 19 of 21
AssuranceAmerica, a U.S. auto insurance provider, has disclosed a data breach affecting approximately 6.9 million drivers following unauthorized access to its systems earlier this year. The company has not yet detailed what specific types of personal information were exposed.
Who should care: Cybersecurity · Privacy officers · Administrators
Mount Royal University in Calgary has confirmed that attackers breached its network, stole data from file storage systems, and then deleted it. The university disclosed the incident after hackers publicly claimed responsibility for the attack.
Who should care: Cybersecurity · Privacy officers · Administrators
A wave of class action lawsuits filed in state and federal courts is targeting large healthcare corporations for allegedly exposing or sharing patients' personal and protected health information. One suit, filed in Davidson County Circuit Court, names CareNow as a defendant, brought by three anonymous plaintiffs.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · General readers · Policy
Japanese telecom company KDDI disclosed a data breach affecting more than 12 million people, after attackers compromised an email platform shared by five ISPs operating in Japan. The exposed data includes email addresses and passwords.
Who should care: Cybersecurity · Privacy officers · Administrators
Park Dental Research Corporation in Oklahoma and Wabi Sabi Behavioral Health Center have each disclosed data security incidents involving employee data. Both organizations operate in healthcare-adjacent sectors, placing the breaches within the scope of HIPAA reporting obligations.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Washington's Department of Social and Health Services disclosed that a former employee accessed personal data belonging to roughly 8,600 people without authorization in March. The agency launched an internal investigation and is now notifying those whose information may have been compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A major Japanese telecommunications company disclosed a cyberattack that exposed roughly 12 million email accounts across five domestic internet service providers. The breach affected systems handling customer email accounts, webmail services, and stored messages.
Who should care: Cybersecurity · Privacy officers · Administrators
Calibrated Healthcare has agreed to settle a class action lawsuit arising from a data breach that occurred in February. The settlement resolves claims brought against two related entities, Calibrated Healthcare Systems and Calibrated Healthcare.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Bojangles faces renewed class-action litigation from employees whose personal data was compromised in a 2024 breach attributed to the ransomware group Hunters International. A North Carolina judge is now weighing key legal questions around standing and negligence as the case moves through both state and federal courts.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
North Los Angeles County Regional Center is notifying individuals whose data was exposed in a ransomware attack that occurred in November 2024. The organization has begun mailing breach notification letters to those affected, months after the incident took place.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A major medical device manufacturer has disclosed a data breach affecting nearly 4 million people, with Social Security numbers and health-related information among the data accessed. The company stated it has not found evidence that the exposed data has appeared publicly online.
Who should care: Cybersecurity · Privacy officers · Administrators
A retired class-action lawyer has filed a lawsuit against the Alberta government, its Chief Electoral Officer, and two pro-secession organizations over an alleged data breach affecting roughly 2.9 million provincial residents. The suit targets the Centurion Project, claiming it unlawfully obtained voter data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The Texas Hearing Institute has reported a data breach to the Texas Attorney General affecting more than 29,000 residents. The organization, which provides hearing-related services, filed the notification as required under applicable law.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
Hong Kong conglomerate Shun Hing Group confirmed that a March cyberattack compromised its systems, exposing data belonging to roughly 920,000 customers and resulting in more than one million files being encrypted by the attackers.
Who should care: Cybersecurity · Privacy officers · Administrators
AdaptHealth, a publicly traded home medical equipment and supplies company, has disclosed a cybersecurity incident it has classified as material, involving the theft of patient data. The breach affects customers who rely on the company for home health products including diabetes supplies and sleep therapy equipment.
Who should care: Healthcare professionals · Privacy officers · Compliance
Two women's health clinics — one in Delaware, one in Florida — have disclosed separate data breach incidents involving unauthorized access to or retention of patient information. Both providers are covered under HIPAA, which governs the handling of sensitive health data.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
The U.S. Department of Homeland Security has confirmed it is investigating a cyberattack targeting an information-sharing network. Details about the scope, the attacker, or what data may have been accessed have not been disclosed.
Who should care: Cybersecurity · Privacy officers · Administrators
Greater Rochester Independent Practice Association has reached a settlement to resolve litigation stemming from a May 2023 data breach tied to the MOVEit file-transfer vulnerability. The case follows a wave of similar claims against organizations that used the widely exploited software.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Serviceaide, an AI-powered IT service management company, has agreed to pay $1.8 million to settle litigation stemming from a data breach. The case was covered by The HIPAA Journal, suggesting the incident involved protected health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · AI governance · Policy
Medtronic is sending breach notifications to customers after the ShinyHunters hacking group gained unauthorized access to personal data held by the medical device company. The scope of exposed information has not been fully detailed in public disclosures.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A 19-year-old suspect linked to the Scattered Spider hacking group has been extradited to the United States, where an unsealed complaint accuses him of involvement in multiple intrusions, including a 2025 breach of a luxury jewelry retailer.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The Department of Homeland Security is investigating a breach of the Homeland Security Information Network, a platform used to share sensitive information across federal, state, local, and private-sector partners. The scope of the compromise has not been publicly detailed.
Who should care: Cybersecurity · Privacy officers · Administrators
Verizon Business has published its first Breach Impact Study, examining the financial consequences of data breaches. The report appears focused on quantifying the real costs organizations face when breaches occur, with coverage in a HIPAA-focused publication suggesting a healthcare angle.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance