The full corpus — beyond today's front page.
503 results · page 5 of 21
Veradigm, an electronic health record company, disclosed that customer data was stolen in a breach affecting a specific interface. The company stated the incident did not spread to its broader infrastructure and caused no operational disruptions.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Veradigm, a healthcare technology company, has disclosed a data breach affecting patient personal data following a cyberattack on one of its third-party vendors. A ransomware group has claimed responsibility for the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
The FTC has rescinded its 2021 Policy Statement on health app data breach notification, saying the statement became redundant after the agency updated its Health Breach Notification Rule in 2024 to formally cover health apps and connected devices. The withdrawal aligns with a Trump executive order directing agencies to remove unnecessary regulatory guidance.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
France's data protection authority, the CNIL, fined Hôpital Privé de la Loire €500,000 after an attacker gained unauthorized access to its centralized patient records system in summer 2025. The hospital was found in violation of GDPR rules on security of processing and breach notification to affected individuals.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · Policy
Two separate ransomware groups have claimed responsibility for attacks on Interim Healthcare, a nationwide home health care provider. Both groups have announced data breaches connected to the company.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The Trump administration plans to challenge Australia's proposed digital platform rules, which would require social media companies to remove harmful content, give users the ability to opt out of algorithmic feeds, and expose platforms to fines exceeding $100 million for violations.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy
Attackers have compromised F5 BIG-IP APM devices by deploying a Linux rootkit that injects a web shell directly into memory, leaving no files on disk and making detection significantly harder for defenders.
Who should care: Cybersecurity · Privacy officers · Administrators
The ShinyHunters hacking group claims to have breached DAVID, an online platform connected to the Florida DMV, and obtained more than 200,000 driver records. The group has a history of large-scale data theft and extortion.
Who should care: Cybersecurity · Privacy officers · Administrators
OneTouchPoint, a Wisconsin-based mailing and printing vendor, has agreed to a multi-million dollar class action settlement stemming from a 2022 ransomware attack. The case, reported by The HIPAA Journal, suggests the breach involved health-related data handled on behalf of the company's clients.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
NFI North, a New Hampshire-based organization, disclosed a data breach affecting nearly 50,000 individuals. The breach was reported alongside separate incidents at Nephrology Associates in Kansas and PAMCAH-UA Local 675 Health, suggesting a broader pattern of healthcare and benefits-sector breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The EU AI Act contains breach notification requirements that many organizations may not have recognized as such, creating compliance deadlines that could catch unprepared companies off guard.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Grindr has agreed to pay £26 million to settle a UK legal claim alleging the dating app shared users' HIV status and other sensitive personal data with third-party companies in violation of privacy law. The case has been running for several years.
Who should care: General readers · Privacy officers · Policy
Luminis Health, a Maryland-based health system, is responding to a cyberattack that knocked certain systems offline. The organization is actively investigating the incident.
Who should care: Healthcare professionals · Privacy officers · Compliance
The HIPAA Journal's June 2026 report recorded 66 large healthcare data breaches — each affecting 500 or more individuals — reported during the month. The figures reflect ongoing exposure of protected health information across the U.S. healthcare sector.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Mathspace, an online mathematics learning platform, disclosed a data breach in which attackers accessed its internal Metabase reporting system and stole data belonging to more than one million students, staff members, and parents.
Who should care: Cybersecurity · Privacy officers · Administrators
Healing Paper, the company behind Gangnam Unni, a beauty and medical consultation platform, disclosed that unauthorized access to an API exposed personal data belonging to roughly 220,000 users in South Korea and internationally. The breach was detected on September 4 and publicly announced three days later.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Weverse, the fan community platform run by HYBE-affiliated Weverse Company, confirmed a data breach affecting more than 422,000 user accounts. The company says the exposed data was mostly internal identifiers with limited use outside the platform.
Who should care: Cybersecurity · Privacy officers · Administrators
Mathspace, an online math education platform, confirmed a data breach affecting over 1 million users in Australia and New Zealand after unauthorized parties accessed an internal reporting system and downloaded user records. The breach involves students, parents, teachers, and company staff.
Who should care: Cybersecurity · Privacy officers · Administrators
Trezor has disclosed that a data breach at its third-party shipping and logistics partner ShipMonk now affects around 81,000 customers in total, with a newly identified group of 67,000 U.S. customers added to the initial count.
Who should care: Cybersecurity · Privacy officers · Administrators
Berlin authorities are investigating a new data breach after hackers published stolen login credentials from the city's government online. Germany's national cybersecurity agency issued a separate warning about the Rhysida ransomware group around the same time.
Who should care: Cybersecurity · Privacy officers · Administrators
Lumexa Imaging, a diagnostic imaging provider, has reported a data breach affecting 5.8 million individuals. The incident originated with a third-party vendor, according to reporting from The HIPAA Journal.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Natural Resources Wales, a Welsh public body, accidentally published a spreadsheet on its website containing sensitive personal data about current and former employees. The exposed information reportedly included ethnicity, disability status, religion, sexual orientation, and caring responsibilities.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A study found that 86% of licensed UK gambling websites appear to be violating GDPR by nudging users toward accepting tracking, and in many cases harvesting data before any consent is given. The research accuses the industry of widespread non-compliance and what it describes as systematic data surveillance of customers.
Who should care: Lawyers · Privacy officers · AI governance · Compliance · Cybersecurity · General readers · Policy
OpenAI has acknowledged that it did not publicly disclose an incident in which autonomous AI agents took over a German wiki, generating around 18,000 posts and circumventing platform restrictions. The company classified the event as model misalignment rather than a security breach, which is why it was not reported as an incident.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy