The full corpus — beyond today's front page.
388 results · page 2 of 17
Cognitive Health Technologies, a New York-based company, disclosed a data breach affecting approximately 49,500 individuals. The breach was reported alongside separate incidents at City Ambulance Service in Texas and Baraga County Memorial Hospital.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A November 2025 breach of Harvard University's Alumni Affairs and Development systems exposed data tied to more than 850,000 unique email accounts, according to Have I Been Pwned. The incident affected a database connected to alumni and donor relations.
Who should care: Cybersecurity · Privacy officers · Administrators
Hong Kong's privacy regulator has opened investigations into data breaches affecting multiple airlines, including Hong Kong Airlines, Cathay Pacific, and Malaysia Airlines, as well as electronics retailers Yoho Hong Kong and Broadway. By late October, the watchdog had recorded nearly 100 complaints and inquiries tied to these incidents.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
HYBE, the South Korean entertainment company known for managing BTS, disclosed a cyberattack that exposed sensitive personal data of employees and business partners, including resident registration numbers, credit card details, and medical records. The breach was discovered during an internal security review.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
Connecticut's Department of Social Services disclosed a data incident affecting roughly 41,000 Medicaid recipients, part of a wave of breach announcements that also involved Public Partnerships LLC, Hattiesburg Eye Clinic, and at least one other organization.
Who should care: Healthcare professionals · Privacy officers · Compliance
Chainalysis, a blockchain analytics company that works closely with law enforcement and financial institutions, disclosed a breach in which attackers used AI-driven methods to access internal systems, exposing customer names, email addresses, user IDs, and organizational roles.
Who should care: Cybersecurity · Privacy officers · Administrators
The HIPAA Journal published an overview of HIPAA violation cases, covering the types of investigations that follow a reported data breach and the consequences organizations can face from the Department of Health and Human Services.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
The HIPAA Journal has published its monthly analysis of healthcare data breaches reported to the U.S. Department of Health and Human Services for August 2026, covering incidents affecting 500 or more individuals.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Florida's Department of Education disclosed a breach of its student financial aid website that exposed the Social Security numbers of approximately 4.9 million people. The agency said it learned of the incident on October 19.
Who should care: Cybersecurity · Privacy officers · Administrators
Japan Airlines disclosed that a breach at Amadeus's Passenger Service System exposed personal data belonging to roughly 92,000 customers. The incident originated with a third-party vendor, not JAL's own systems.
Who should care: Cybersecurity · Privacy officers · Administrators
A data breach at Crime Stoppers has left Sault Ste. Marie police unable to determine how many anonymous tips were exposed. Two local police services have suspended their relationship with the organization while the scope of the breach is assessed.
Who should care: Cybersecurity · Privacy officers · Administrators
The Florida Department of Education disclosed that unauthorized access to its student financial aid website, discovered on October 19, may have exposed personal information — including Social Security numbers — belonging to approximately 4.9 million people.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A federal court has granted preliminary approval to a revised $32 million settlement in a class action lawsuit over data privacy claims against GoodRx and advertising technology company Criteo. The case centers on alleged improper sharing of users' personal health and medication data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · Policy
Japan Airlines disclosed a data breach affecting roughly 2,000 customers, with hackers obtaining passport numbers, frequent flyer numbers, email addresses, and phone numbers. The incident is one of several recent cyberattacks hitting Japanese organizations.
Who should care: Cybersecurity · Privacy officers · Administrators
Sony Network Communications, a Sony subsidiary that operates as an internet service provider, confirmed a data breach affecting roughly 2.5 million records belonging to current and former customers.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Times Car, a Japanese car-sharing company, is reporting a ¥5.5 billion loss following a September data breach that exposed personal information — including driver's license data — of 1.46 million customers. The incident is prompting broader concern among Japanese companies about the financial consequences of weak cybersecurity practices.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Sead Fadilpašić reports: Japanese internet giant GMO Group has told its customers to scan their computers for viruses, back up all of their data, disconnect the devices from the internet and then shut them down. The announcement, which literally told customers, “unplug any cords connected to your PC,” was made in response to a cyberattack...
Who should care: Cybersecurity · Privacy officers · Administrators
Courts are shifting how they evaluate standing in healthcare data breach lawsuits, with recent rulings suggesting plaintiffs no longer need to show their stolen data was actually misused to survive early dismissal. The change reflects evolving judicial thinking about what counts as a real injury after a breach.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A federal court has refused to dismiss litigation against PowerSchool stemming from a data breach, allowing claims that the education technology company qualifies as a healthcare provider under California's medical information privacy law to move forward.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The European Data Protection Supervisor has published a FAQ document on personal data breach notification, covering risk assessment, mandatory notification forms, phased reporting, mitigation, and how to inform affected individuals. The guidance is aimed at helping data controllers and processors meet their notification obligations.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance · Compliance · General readers · Policy
A class action lawsuit against Baptist Health Medical Center-Drew County over a data breach has reached a preliminary settlement, with the agreement offering affected individuals financial reimbursement. A court has given the settlement its first approval, moving it closer to resolution.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Canada's Privacy Commissioner has launched an investigation into Navigate360, the company that manages the tip management platform used by Crime Stoppers programs across Canada, following a cybersecurity incident that exposed tips submitted to those programs.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Multiple Ontario Crime Stoppers organizations have suspended their Navigate360 tiplines following a data breach and what they describe as an inadequate incident response. U.S. state education departments are also coordinating to press the company for more information about the incident.
Who should care: Cybersecurity · Privacy officers · Administrators
A cyberattack on Moldovan government digital services may have exposed the personal data of around 750,000 people. Prime Minister Vasile Tofan has warned that similar attacks could increase and called for greater investment in government cybersecurity.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy