The full corpus — beyond today's front page.
388 results · page 5 of 17
iRhythm, a company that makes wearable cardiac monitoring devices, has started notifying state authorities of a data breach that occurred earlier this year, with hundreds of thousands of people affected.
Who should care: Cybersecurity · Privacy officers · Administrators
The FBI announced another arrest connected to ShinyHunters, the hacking group responsible for a string of major data breaches. FBI Director Kash Patel signaled the agency is continuing to pursue remaining members of the group across borders.
Who should care: Cybersecurity · Privacy officers · Administrators
Bacon County Health Services in Georgia is investigating a cyber incident, and several other healthcare organizations — including Comprehensive Orthopaedics & Musculoskeletal Care in Connecticut — have also disclosed data breaches around the same time.
Who should care: Healthcare professionals · Privacy officers · Compliance
A hack and data breach affecting Trump Mobile has drawn scrutiny from a U.S. senator, who is questioning why the carrier appears to lack certain required FCC filings. The combination of a security incident and potential regulatory gaps has prompted calls for answers about the company's oversight.
Who should care: Cybersecurity · Privacy officers · Administrators
Casper Orthopedic Associates in Wyoming and Atlantic Digestive Specialists in New Hampshire have each disclosed data breaches. Both are healthcare providers, meaning the exposed information is likely to include sensitive patient medical records.
Who should care: Healthcare professionals · Privacy officers · Compliance
Sheppard Mullin, a major U.S. law firm, is facing a class action lawsuit after disclosing a data breach. The suit follows the firm's public acknowledgment that client or personal data was compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Laboratory Services Cooperative, a Seattle-based nonprofit lab serving Planned Parenthood affiliates, has agreed to pay $6.1 million to settle litigation stemming from a data breach. The organization provides clinical diagnostic and testing services, meaning the exposed data likely included sensitive health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
South Korea's largest online retailer, Coupang, is suing to challenge a roughly 620 billion won fine stemming from a data breach that exposed the records of more than 33 million customers. The incident, which has been in the news for nine months, has drawn sustained regulatory scrutiny.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Greece's data protection authority ruled against the Ministry of Social Cohesion and Family Affairs following a large-scale personal data breach, finding violations across multiple GDPR articles including security, breach notification, and data protection by design. The ministry's processor, E.E.T.A.A. S.A., was also implicated in the decision, which resulted in fines and a compliance order.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy
Sweden's data protection authority fined IT service provider Miljödata i Karlskrona roughly EUR 160,000 after a 2025 cyberattack exposed personal data belonging to 2.2 million individuals, with the stolen data later published on the darknet. The fine was issued under Article 32 of the GDPR for inadequate technical and organisational security measures.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
ASOS has begun notifying customers of a data breach in which hackers used social engineering and stolen credentials to access personal data. The fashion retailer confirmed the incident occurred earlier this week.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Asos has revised the scope of a recent data breach after cyber criminals contacted the BBC to say the stolen data went beyond the basic contact details the retailer initially disclosed. The full extent of what was taken has not yet been confirmed publicly.
Who should care: Cybersecurity · Privacy officers · Administrators
A 2025 data breach at Oracle Health's legacy Cerner servers exposed electronic protected health information belonging to nearly 20 million individuals. The incident ranks among the largest known breaches of medical data reported this year.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Arizona courts disclosed a data breach affecting more than 1.3 million people after hackers accessed the state's Fines/Fees and Restitution Enforcement Program, which collects debts tied to traffic and criminal violations.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A mental health authority serving Jefferson, Blount, and St. Clair counties has agreed to a $700,000 settlement to resolve a class action lawsuit tied to a 2025 data breach. The settlement follows a consolidated legal action brought by individuals affected by the security incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
UK fashion retailer ASOS confirmed a breach after attackers sent unauthorized push notifications through its mobile app announcing the hack. The attackers claim to have stolen customer data from ASOS's Snowflake cloud environment.
Who should care: Cybersecurity · Privacy officers · Administrators
The FBI has removed an Accenture contractor following a data breach that exposed personal information belonging to thousands of bureau employees. The FBI has not publicly identified the contractor or confirmed how many people were affected, though a senior official spoke to Reuters about the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Rescana’s new report on a breach affecting the Denmark Central Person Register (CPR) summarizes the situation: On October 5, 2026, Danish authorities publicly disclosed a significant data breach affecting the Central Person Register (CPR), Denmark’s national population database. Attackers exploited a legitimate company account to access the names, addresses, and CPR numbers of approximately 8.8... Source
Who should care: Cybersecurity · Privacy officers · Administrators
An Accenture contractor has been removed from work with the FBI following a data breach described as damaging, according to sources. The incident involves a third-party vendor relationship between the bureau and the consulting firm.
Who should care: Cybersecurity · Privacy officers · Administrators
WindRose Health Network, along with Advantage Home Health Care and Camden-on-Gauley Medical Center, has disclosed data breaches affecting patients across Indiana and West Virginia. The WindRose incident alone involves approximately 33,000 individuals.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Denmark's Central Population Register, which holds personal records for the country's entire registered population, has disclosed a data breach affecting approximately 8.8 million individuals. The CPR is the backbone of Danish public administration, linking citizens to health, tax, and government services.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Denmark is investigating a breach of its national population register after unauthorized access exposed data on approximately 8.8 million people, which is roughly the entire country's population.
Who should care: Cybersecurity · Privacy officers · Administrators
South Korean President Lee Jae Myung has ordered a formal investigation into a recent series of data breaches at financial and public institutions, amid growing concern about AI-powered cyberattacks targeting the sector.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers. [...]
Who should care: Cybersecurity · Privacy officers · Administrators