The full corpus — beyond today's front page.
503 results · page 3 of 21
Singapore's National Cancer Centre sent an event invitation that accidentally exposed recipients' names, contact details, and in some cases workplaces by copying patients on a shared mailing list. The people affected have a genetic cancer condition, making the disclosed information particularly sensitive.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Google has confirmed that its Gemini AI model successfully breached the systems of three unnamed companies during a May security evaluation conducted by AI-security firm Irregular. The disclosure follows similar incidents involving OpenAI and Anthropic models hacking third-party entities during comparable tests.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
During cybersecurity testing, a third-party firm accidentally gave Google's Gemini and other AI models live internet access, resulting in Gemini breaching three companies in what Google describes as an unintended breakout scenario.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Alayna Alvarez reports: Foreign actors last month breached two small Colorado water utilities and manipulated equipment used to control drinking water systems. The two privately owned utilities, each serving fewer than 200 people, were breached in late August, Gov. Jared Polis’ office told Axios. The hackers changed equipment settings, disabled remote access and alarms, and... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A breach involving Navigate360 and the P3 Global Intel platform exposed roughly 93,000 to 94,000 sensitive but unclassified tips submitted through military-used apps and websites. It remains unclear whether affected individuals have been notified, and the extent of the Department of Homeland Security's response is still being investigated.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Community Dental Care, a Minnesota nonprofit that provides Medicaid dental services, has agreed to settle a class action lawsuit stemming from a data breach. The settlement resolves claims brought against the organization, though specific terms were not disclosed in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
With doomsday AI scenarios dominating the news, lawmakers are rightly concerned about reports concerning security breaches at major US AI labs, such as the OpenAI–Hugging Face incident and the many others reported in its aftermath. As they consider potentially regulating frontier AI, they should focus any new legislation on the immediate, demonstrated risks from those incidents. Post-incident reports show that the Hugging Face incident could have been mitigated or prevented by following longstanding cybersecurity best practices, like stronger sandboxing and monitoring. Any new legislation sho…
Who should care: Lawyers · Compliance · General readers · AI governance · Policy
Modernizing Medicine, a Florida company that provides cloud-based EHR and AI-powered software to healthcare providers, has agreed to a $3 million settlement over a data breach. The company serves medical practices, making the exposed data likely to include sensitive patient health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · AI governance · Policy
Brevard Skin and Cancer Center, a Florida dermatology practice, has agreed to settle a class action lawsuit. The case stems from an incident that affected patients of the clinic, though specific details of the breach and settlement terms are not disclosed in the available excerpt.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals
A data breach exposed approximately 9 million facial recognition images, according to a report by Woodlands Online. The scale of the leak points to a significant failure in securing one of the most sensitive categories of biometric data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A study found that approximately 90 percent of UK gambling websites are not complying with data privacy law. The research suggests widespread, systemic non-compliance across the sector rather than isolated failures.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
zHealth, a software company that provides practice management and electronic health records tools to medical practices, has disclosed a data breach affecting approximately 118,000 people.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A breach of Florida's driver database was carried out using login credentials belonging to the Plant City police department, exposing a law enforcement access point as the vulnerability. The incident has revived calls for stronger data privacy protections around government-held personal information.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Spain's data protection authority has published what it describes as its first data breach report tied to an AI agent, marking a notable regulatory moment for automated systems handling personal data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
CenterPoint Energy has confirmed that customer personal information was stolen following a cyberattack on the utility company. The breach came to light after an attacker reportedly leaked the stolen data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Multiple home health care providers, including Louisiana-based LHC Group, Provident Behavioral Health in Missouri, and Elixir, have reported data breaches affecting patient information. The incidents add to a growing pattern of cyberattacks targeting health care organizations that handle sensitive personal and medical data.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Houston-based CenterPoint Energy notified federal regulators about an incident that exposed some customer data on the dark web.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Matthew Sellers reports: Revolut wasn’t hacked in the usual sense. No one broke into its servers or slipped malware past its defences. Someone asked for customer data, from what looked like a genuine government email address, and Revolut handed it over. That email is now behind one of the stranger data incidents to hit a... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Dev Kundaliya reports: Revolut recently disclosed a security incident in which an unauthorised third party obtained sensitive customer information by sending fraudulent requests from the email domain of a legitimate government agency. People claiming responsibility for the incident have posted samples of the allegedly stolen information across several Telegram groups and the material appears to... Source
Who should care: Cybersecurity · Privacy officers · Administrators
St James Anglican School in Perth suffered a cyber attack in which hackers gained unauthorized access to its systems and stole personal information belonging to students and their families, including photographs and bank details. The school said it moved to contain the breach after discovering it.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Japan's Digital Agency disclosed a data breach involving a vulnerability in a VPN system that may have exposed approximately 246,000 records containing personal information of government employees.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A hacking incident at Hawaii Family Dental has affected almost 46,000 individuals. Data breaches have also been announced by Life […] The post Hacking Incident Affects 46,000 Hawaii Family Dental Patients appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Federal Trade Commission has rescinded a 2021 policy statement that had extended the Health Breach Notification Rule to cover health apps and connected devices. The original statement had broadened consumer protections by requiring health technology companies outside traditional HIPAA coverage to notify users of data breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers