The full corpus — beyond today's front page.
764 results · page 26 of 32
A City of Calgary 911 employee has been charged with breach of trust after an investigation found she allegedly accessed and shared confidential information outside authorized channels. Calgary police say the investigation began in January following internal allegations about the unauthorized disclosure of sensitive data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A putative class action filed in federal court in Washington, D.C. accuses prominent law firm WilmerHale of negligence and breach of contract following a May data breach that allegedly exposed the personal information of thousands of clients. The plaintiffs are seeking millions of dollars in damages.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
A coalition of 42 state attorneys general has reached an $18 million settlement with genetic testing company 23andMe over cybersecurity failures that resulted in a large-scale data breach. The settlement resolves multistate legal action stemming from the company's failure to adequately protect user data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Munsif Vengattil and Aditya Kalra Ransomware group World Leaks has posted on the dark web a huge cache of files related to India’s largest nuclear plant, including purported blueprints of parts of its facilities and supplier details — information it labelled as coming from Reliance Group. The Kudankulam Nuclear Power Plant, located in the southern... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Financial services firms are deploying AI in ways that outpace their governance frameworks, creating accountability gaps in how automated systems make or influence decisions about loans, credit, fraud detection, and other high-stakes financial outcomes. The concern centers on whether institutions can explain, audit, or correct AI-driven decisions when something goes wrong.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Exposed cloud functions — small, event-driven pieces of code that run in environments like Google Cloud — can become serious security vulnerabilities when left without proper access controls. When misconfigured or publicly accessible, they can serve as entry points to broader cloud infrastructure and the data stored within it.
Who should care: Cybersecurity · Privacy officers · Administrators
Partnered Health, an Australian healthcare chain operating family medical clinics, has disclosed a cyberattack that exposed patient records across at least sixteen affected locations. The breach may include treatment information alongside personal data.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Physicians Primary Care of Southwest Florida has agreed to a settlement following a cyberattack in September 2024 that exposed patient data. The breach affected a primary care provider serving patients across Southwest Florida.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
U.S. federal prosecutors have unsealed charges against three Russian nationals, accusing them of providing bulletproof hosting (BPH) services to ransomware gangs that caused over $62 million in damages to victims worldwide. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Electric vehicle drivers in the UK are receiving parking fines after using charging points in private car parks, with many saying the signage failed to clearly disclose that parking fees or time restrictions applied while charging. The complaints suggest a gap between how charging infrastructure is advertised and the actual conditions attached to its use.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
xAI, Elon Musk's AI company, announced emergency measures after a tool called Grok Build CLI reportedly uploaded users' private code and confidential information to an external server without authorization. The company says it will permanently delete all data that was collected.
Who should care: Cybersecurity · Privacy officers · Administrators
Eduard Kovacs reports: A new ransomware group named D1R in recent days listed Synopsys and Bosch on its Tor-based leak website. The cybercriminals claimed to have exploited a vulnerability in Synopsys’ website to access a corporate client database containing 40,000 entries, and they are threatening to leak the stolen data unless a ransom is paid.... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Spanish authorities arrested four people and dismantled a criminal network accused of generating approximately €140 million through investment fraud schemes and business email compromise attacks. The group is also alleged to have laundered the proceeds of those crimes.
Who should care: Cybersecurity · Privacy officers · Administrators
Finnish authorities have issued a wanted notice for Julius Kivimäki, the hacker accused of breaching a psychotherapy provider's database and exposing the private session records of tens of thousands of patients. His lawyer has said he does not know his client's whereabouts but believes Kivimäki has left Finland.
Who should care: Cybersecurity · Privacy officers · Administrators
The designations hit 1VPNS, its alleged Ukrainian administrator and a Belarusian who allegedly sold “cryptors” to disguise ransomware and other malware. The post Treasury sanctions First VPN Service, others for abetting ransomware gangs appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
Dutch intelligence has issued an advisory warning that at least one Russian agency is actively compromising internet-connected cameras across Europe, using them to monitor NATO military logistics and track Ukrainian personnel.
Who should care: Cybersecurity · Privacy officers · Administrators
According to data from the HHS Office for Civil Rights breach portal, 61 healthcare data breaches were reported in May 2026, as tracked in the HIPAA Journal's monthly analysis. The report reflects ongoing disclosure activity logged by the federal agency responsible for HIPAA enforcement.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Lucent Health Solutions, a Nashville-based health plan administration company, has agreed to a settlement of up to $1.95 million to resolve a class action lawsuit stemming from a data breach. The case was brought against the company over its handling of personal health and administrative data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) sanctioned two individuals and one entity for enabling ransomware attacks against U.S. organizations. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
I need to work with what the headline and label imply — a WestJet news release announcing commitments to improve security following a data breach — without inventing specifics. ```json { "summary": "WestJet has issued a public statement committing to strengthen its security practices in the wake
Who should care: Cybersecurity · Privacy officers · Administrators
TriWest Healthcare Alliance has notified nearly 12,000 military Tricare beneficiaries that their protected health information may have been exposed in a data breach. The notification indicates the incident was significant enough to trigger formal disclosure requirements under federal health privacy rules.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ShinyHunters, including voice phishing (vishing), supply-chain compromise, and misconfigured guest access targeting SaaS-based applications. The post Defending SaaS-based applications against ShinyHunters OAuth abuse appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators
Nihon Kotsu, Japan's largest taxi operator, suffered a cyberattack that forced the company to take portions of its systems offline. The company has not disclosed the scope of the breach or what data may have been affected.
Who should care: Cybersecurity · Privacy officers · Administrators