The full corpus — beyond today's front page.
388 results · page 4 of 17
Connecticut Attorney General William Tong settled with Frontier Communications for $625,000 following an investigation into an April 2024 data breach carried out by ransomware group RansomHub, which exposed sensitive personal information belonging to Frontier customers.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
The European Data Protection Supervisor held a half-day workshop called ARETE in June 2026, focused on how to assess the risk that personal data breaches pose to the individuals whose data is exposed.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
Nikkei Inc. has disclosed a third data breach within roughly a month, with the latest incident exposing approximately 1.83 million personal records. The repeated breaches at the Japanese media and financial information company point to persistent security problems rather than a single isolated incident.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Florida's DMV suffered a data breach tied to the hacking group ShinyHunters after a police department stored login credentials insecurely, prompting statewide alerts. The incident exposed vulnerabilities in how law enforcement agencies handle access to government systems.
Who should care: Cybersecurity · Privacy officers · Administrators
California has reached a $6 million settlement over claims stemming from a data breach at genetic testing company 23andMe. The settlement resolves state-level legal action connected to the exposure of users' personal and genetic data.
Who should care: Cybersecurity · Privacy officers · Administrators
The New York and Connecticut attorneys general reached a $2.7 million settlement with Boston Children's Health Physicians and its IT vendor XTIUM over a 2024 data breach. The agreement also requires both organizations to implement a corrective action plan to strengthen their data security practices.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Mid Florida Dermatology & Plastic Surgery has disclosed a data breach affecting approximately 85,000 patients, part of a wave of healthcare breach announcements that also includes Kannarr Eye Care in Kansas and Indiana University.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A $6.4 million settlement has been reached to partially resolve litigation arising from a cyberattack on American Medical Collection Agency (AMCA), a medical debt collection firm. The breach, which was one of the largest in healthcare history, exposed sensitive patient and financial data belonging to millions of people.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators
A South Korean National Health Insurance Service employee was fired for illegally selling subscribers' personal health data to outside parties. Despite the breach being discovered, affected individuals had not been notified for at least three months, a lapse revealed during a parliamentary audit.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Burger King Japan disclosed a data breach in which attackers accessed a server holding over 11 million customer records. The breach affects the Japanese subsidiary of the global fast-food chain.
Who should care: Cybersecurity · Privacy officers · Administrators
An unprotected database linked to Vibetech, an India-based AI and IT services firm, left 13.7 million records exposed online with no password or authentication required. The data included credentials and sensitive information drawn from previous breaches, discovered by cybersecurity researcher Jeremiah Fowler.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The Federal Trade Commission is reportedly investigating Anthropic and OpenAI, according to a new report. The probe comes as the Trump administration has publicly dismissed concerns about AI risks, and potential fines could be comparable to penalties levied on companies that fail to promptly disclose data breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · AI governance · Policy
A cyberattack on the UK's Legal Aid Agency, which occurred in April 2025, exposed data stretching back to 1978. The breach is significantly broader in historical scope than initially understood.
Who should care: Cybersecurity · Privacy officers · Administrators
The U.S. Department of Health received reports of 77 healthcare data breaches in July 2026, each involving 500 or more individuals. The figures come from mandatory disclosures tracked by the HIPAA Journal.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Twin Cities Pain Clinic, a pain management center in Edina, Minnesota, has reached a settlement in class action litigation stemming from a data breach that occurred in July 2025. Details of the settlement terms were not disclosed in the available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A threat actor called ByteToBreach claims to have stolen more than 80 million patient records from Ampath Laboratories, one of South Africa's largest pathology providers. The group has previously claimed attacks against other major organizations across Africa.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Photon Health, a New York-based healthcare technology company, and Healthcare Highways, a Texas-based medical provider network, have each disclosed data security incidents. Details on the scope, timing, and types of data affected have not been specified in available reporting.
Who should care: Healthcare professionals · Privacy officers · Compliance
Roseland Community Hospital Association, an Illinois hospital, has agreed to pay $650,000 to settle a class action lawsuit stemming from a data breach. The settlement resolves claims brought by individuals affected by the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Secure Healthcare Information Management, a Pennsylvania medical billing and management company, and Desert Orthopaedic Center have each disclosed data breaches. Both organizations operate in healthcare, where the data involved typically includes sensitive patient and financial records.
Who should care: Healthcare professionals · Privacy officers · Compliance
Icon Oncology Group has confirmed a data breach at Icon Cancer Centre, Australia's largest cancer care provider, involving unauthorized access to patient information held by a third-party supplier. The incident exposed data belonging to patients of the global cancer care network.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Etairos Health has agreed to settle a class action lawsuit tied to a ransomware attack and data breach that occurred in February 2024. The settlement resolves litigation brought against the healthcare company following the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
A breach of Denmark's Central Person Register, a national identity database, has been linked to an IT company called Pays where at least three accounts — including an administrator account — were secured with the password '123456'. The incident exposed data from one of Denmark's most sensitive government registries.
Who should care: Cybersecurity · Privacy officers · Administrators
A court has granted preliminary approval to a class action settlement stemming from a June 2023 data breach at Valley Oaks Health, a mental health provider, that affected more than 50,000 individuals. The case now moves toward final approval and distribution of relief to those affected.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals