The full corpus — beyond today's front page.
764 results · page 5 of 32
The University of Copenhagen confirmed that attackers gained access to a test environment holding personal data on 525,000 people. The university disclosed the breach after the intrusion was discovered.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
South Korean authorities identified seven suspects behind a cybercrime campaign that hit more than 90 organizations and exposed 8.2 million records. The attackers reportedly used ARTEX AI, a penetration testing framework, as a primary tool across most of the breaches.
Who should care: General readers · AI governance · Policy
Anthropic discloses month-long training pause, AI security breaches in IPO filing Reuters
Who should care: General readers · AI governance · Policy
Denver Health Medical Plan has notified over 238,000 members that their data was exposed through a breach at a third-party vendor. The incident adds to a pattern of healthcare data breaches originating outside the covered entity itself.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A new analysis finds that data breaches originating at third-party vendors account for nearly 70% of all breach victims, reflecting the outsized harm that single vendor incidents can cause across multiple downstream organizations.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Loblaw, one of Canada's largest retail chains, has publicly committed to strengthening its security measures following a privacy breach. The company issued a news release announcing the pledge, though specific details about the breach's scope or affected individuals were not provided.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Quest Diagnostics disclosed that a threat actor gained unauthorized access to its Quanum LSM system, exposing patient records. The clinical laboratory company confirmed the breach, though the full scope of affected individuals has not been detailed in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Quest Diagnostics has disclosed that a system used in its laboratory services may have been compromised, potentially exposing patient data. The nationwide diagnostics company has not confirmed the full scope of what was taken.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Washington Gastroenterology has agreed to a $4.6 million settlement to resolve a class action lawsuit arising from a cybersecurity incident at the medical practice. The settlement follows litigation brought by patients affected by the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
UltraMobile Imaging, a New York-based medical imaging provider, disclosed a data breach affecting approximately 75,000 individuals. The announcement is part of a wave of healthcare-related breach disclosures also involving Artistic Smiles in Colorado and Parkview Health in Indiana.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Manhattan law firm Tarter Krinsky & Drogin has reported a data breach affecting the protected health information of nearly 197,000 individuals. The incident was reported to HIPAA authorities, indicating the compromised data belongs to patients of a healthcare client the firm represented.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Cloud hosting platform Railway detected suspicious activity affecting the systems where it stores customer environment variables, and issued an urgent notice urging developers to rotate their secrets immediately.
Who should care: Cybersecurity · Privacy officers · Administrators
Toronto Crime Stoppers has suspended its operations after disclosing details of a data breach, including a timeline of when the organization learned of the incident. The local chapter broke with the national association to make the disclosure public.
Who should care: Cybersecurity · Privacy officers · Administrators
Capcom has confirmed a breach of its CAPCOM ID membership service, with attackers exposing email addresses and related data belonging to more than 11.7 million customers.
Who should care: Cybersecurity · Privacy officers · Administrators
Ridgeway Pharmacy, based in Montana, has disclosed a data breach affecting nearly 259,000 individuals. The incident was reported by The HIPAA Journal alongside other breach announcements.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Innovative Renal Care, a kidney dialysis provider operating more than 200 locations, has agreed to pay $900,000 to settle litigation stemming from a data breach. The company, formally known as American Renal Management LLC, reached the settlement without details of the breach terms made public in the available excerpt.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Two Marines have filed a class-action lawsuit against the Pentagon, alleging that the Defense Manpower Data Center suffered a data breach that the Department of Defense could have prevented by addressing known cybersecurity vulnerabilities.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft has linked a nation-state threat actor, tracked as Storm-0940, to a supply chain attack on ConnectWise that used an agentic AI tool called ARTEX to accelerate the compromise. The campaign targeted Microsoft 365 environments by abusing application credentials stolen through the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Jefferson County Health Department in Hillsboro, Missouri has agreed to pay $2.25 million to settle a class action lawsuit stemming from a data breach. The public health agency's settlement resolves claims brought by individuals whose information was compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
A class action lawsuit has been filed against the Pentagon following a data breach that reportedly affected millions of military members. The suit targets the Department of Defense over its handling of the incident.
Who should care: Cybersecurity · Privacy officers · Administrators
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Zeabur, a development platform, suffered a second security breach within two months after an attacker accessed internal credentials stored in plaintext, exposing over 3.2 million environment variable records and data from more than 321,000 accounts. The company is shutting down following the incident.
Who should care: Cybersecurity · Privacy officers · Administrators