The full corpus — beyond today's front page.
1154 results · page 3 of 49
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
NSW Health in Australia has disclosed a cyber breach affecting an isolated server, with a criminal investigation now under way. Officials say patient data was not compromised, and Cyber Security NSW is actively responding.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Cryptocurrency exchange Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the company's wallet infrastructure and steal about $6.34 billion in digital assets. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A phishing attack on healthcare AI company Xsolis, discovered in January and disclosed in June, exposed data belonging to at least 1.4 million patients across nine health systems. Xsolis provides utilization management and care coordination tools to hospitals and health networks.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Maddie Baker reports: “Cybersecurity insurance normally covers compensation for costs arising from data breaches such as hacking, internally caused cyber leaks and, in some cases, IT security assessments to prevent similar data compromises from happening in the future. It also covers costs for conducting digital forensic analysis to identify cyberattackers and where vulnerabilities lie in...
Who should care: Cybersecurity · Privacy officers · Administrators
South Korea's presidential office convened an emergency meeting after personal data belonging to President Lee Jae Myung and members of his overseas travel party was leaked, reportedly traced to a computer file. The breach prompted a response led by the presidential chief of staff.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Binance, the world's largest cryptocurrency exchange, lost $6.3 billion after hackers ran a months-long operation that started with a malware download in June, escalated through fake job interviews in September, and ended with a raid on hot wallets holding billions in crypto-assets. The company says attackers also exploited an internal AI tool during the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Hackers targeted refrigeration systems in supermarkets and grocery stores across Europe, remotely disabling temperature controls and causing food stock to spoil. The attacks followed an earlier wave focused on France, suggesting a coordinated or repeated campaign against retail cold-chain infrastructure.
Who should care: Cybersecurity · Privacy officers · Administrators
New York City Mayor Zohran Mamdani has publicly criticized the owner of Madison Square Garden over the company's use of surveillance technology. His remarks follow a data breach last year that exposed details of how James Dolan's organization conducts surveillance.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A 3AM ransomware affiliate targeted a school estate in the UK and successfully encrypted around 37 of nearly 50 machines reached from an unmanaged host. [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Hospital Español Auxilio Mutuo de Puerto Rico has agreed to a settlement resolving class action litigation stemming from a data breach. The case follows a pattern of health system breaches that trigger collective legal action on behalf of affected patients.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Marathon Health has reported a data breach to state attorneys general that reportedly exposed the personal and protected health information of approximately 5.7 million individuals. The scale of the incident places it among the larger healthcare data breaches disclosed in recent years.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Cognitive Health Technologies, a New York-based company, disclosed a data breach affecting approximately 49,500 individuals. The breach was reported alongside separate incidents at City Ambulance Service in Texas and Baraga County Memorial Hospital.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A November 2025 breach of Harvard University's Alumni Affairs and Development systems exposed data tied to more than 850,000 unique email accounts, according to Have I Been Pwned. The incident affected a database connected to alumni and donor relations.
Who should care: Cybersecurity · Privacy officers · Administrators
Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet's access to more than 10 million additional compromised systems, including other Internet of Things (IoT) products such as Android-based healthcare devices and karaoke machines.
Who should care: Cybersecurity · Privacy officers · Administrators
The UK's National Cyber Security Centre has assessed it as highly likely that AI-powered malware will be used to attack critical national infrastructure — including power stations, airports, and hospitals — before 2028, with ransomware seen as a probable vector.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
In more than 20 years of blogging about breaches, DataBreaches has never seen ransomware threat actors offer monetary compensation to patients affected by their attack. We have seen threat actors regret hitting a hospital or a facility providing direct patient care and then offer them a free decryptor and drop the ransom demands, but this...
Who should care: Cybersecurity · Privacy officers · Administrators
HHS' Office for Civil Rights has reached a settlement with Lehigh Valley Health Network over a 2023 ransomware breach carried out by the BlackCat group. The attack became widely known after hackers published nude images of cancer patients, and a separate civil lawsuit brought by patients settled for $65 million.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A second Liverpool hospital, Liverpool Heart and Chest Hospital, is investigating two staff members suspected of improperly accessing medical records linked to the Southport terror attack. The cases were internally detected, adding to a pattern of insider snooping reported across the region following the attack.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Suntory Holdings, the Japanese beverage conglomerate, disclosed that unauthorized access to an external cloud service exposed personal data belonging to roughly 100,000 individuals, including employees. The company said it has not yet confirmed any misuse of the leaked information.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Hong Kong's privacy regulator has opened investigations into data breaches affecting multiple airlines, including Hong Kong Airlines, Cathay Pacific, and Malaysia Airlines, as well as electronics retailers Yoho Hong Kong and Broadway. By late October, the watchdog had recorded nearly 100 complaints and inquiries tied to these incidents.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
HYBE, the South Korean entertainment company known for managing BTS, disclosed a cyberattack that exposed sensitive personal data of employees and business partners, including resident registration numbers, credit card details, and medical records. The breach was discovered during an internal security review.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy