The full corpus — beyond today's front page.
757 results · page 5 of 32
CenterPoint Energy has confirmed that customer personal information was stolen following a cyberattack on the utility company. The breach came to light after an attacker reportedly leaked the stolen data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Multiple home health care providers, including Louisiana-based LHC Group, Provident Behavioral Health in Missouri, and Elixir, have reported data breaches affecting patient information. The incidents add to a growing pattern of cyberattacks targeting health care organizations that handle sensitive personal and medical data.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Houston-based CenterPoint Energy notified federal regulators about an incident that exposed some customer data on the dark web.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability patched in July. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Matthew Sellers reports: Revolut wasn’t hacked in the usual sense. No one broke into its servers or slipped malware past its defences. Someone asked for customer data, from what looked like a genuine government email address, and Revolut handed it over. That email is now behind one of the stranger data incidents to hit a... Source
Who should care: Cybersecurity · Privacy officers · Administrators
DysruptionHub reports: Cedar County Memorial Hospital in El Dorado Springs, Missouri, shut down its IT networks Aug. 14 after a disruption left its electronic health record, patient portal and internet access unavailable. The outage also disrupted diagnostic imaging. Hospital systems could not transmit images to radiologists, so the emergency department partially diverted trauma and critical... Source
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Dev Kundaliya reports: Revolut recently disclosed a security incident in which an unauthorised third party obtained sensitive customer information by sending fraudulent requests from the email domain of a legitimate government agency. People claiming responsibility for the incident have posted samples of the allegedly stolen information across several Telegram groups and the material appears to... Source
Who should care: Cybersecurity · Privacy officers · Administrators
St James Anglican School in Perth suffered a cyber attack in which hackers gained unauthorized access to its systems and stole personal information belonging to students and their families, including photographs and bank details. The school said it moved to contain the breach after discovering it.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Senator Jon Ossoff has accused the Trump administration of being compromised on AI safety regulation, while former President Barack Obama has added his voice to calls for slowing down AI development. The remarks reflect growing bipartisan concern about the pace and oversight of AI deployment.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · AI governance · Policy
Japan's Digital Agency disclosed a data breach involving a vulnerability in a VPN system that may have exposed approximately 246,000 records containing personal information of government employees.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
COMMENTARY | Is industrial IoT really more secure than the IoT devices we have in our homes?
Who should care: Cybersecurity · Privacy officers · Administrators
Hackers compromised HBO Max's official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect Windows and macOS devices with information-stealing malware. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The pro-Ukraine hacktivist group Hacking Cat has evolved from carrying out website defacements and data leaks to more sophisticated and destructive attacks on Russian targets, researchers said.
Who should care: Cybersecurity · Privacy officers · Administrators
The Federal Trade Commission has rescinded a 2021 policy statement that had extended the Health Breach Notification Rule to cover health apps and connected devices. The original statement had broadened consumer protections by requiring health technology companies outside traditional HIPAA coverage to notify users of data breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
America's Drivers Licence Breach is a National Security Disaster Lawfare
Who should care: Cybersecurity · Privacy officers · Administrators
Silent Ransom Group added Greenberg Traurig to its list of prominent law firms it attacked and leaked. DataBreaches.net has exclusive details on the incident. On August 21, when DataBreaches reported on a data breach affecting Troutman Pepper Locke, the firm was one of 64 law firm listings on Silent Ransom Group’s (SRG’s) leak site. As... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A Ukrainian national involved in deploying Conti ransomware against at least 12 U.S. organizations has been sentenced to four years in prison. Conti was one of the most destructive ransomware operations of its time, targeting hospitals, businesses, and critical infrastructure.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Delaware's governor signed two bills in September 2026 that update the state's existing privacy and data-breach framework. One bill amends the Delaware Personal Data Privacy Act, which took effect in January 2025, while the other updates the state's breach notification law.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Google's process for handling removal requests related to non-consensual sexual images exposed victims' identifying information online, not only in South Korea but in multiple countries, according to reporting by the Hankyoreh. People who sought help removing intimate images — including images of minors — had their private details inadvertently published as part of that process.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Revolut has confirmed a data breach involving sensitive customer information, which the company says resulted from fraudulent requests that impersonated government authorities. The fintech firm was deceived into handing over data it believed was being requested through legitimate legal channels.
Who should care: Cybersecurity · Privacy officers · Administrators
Anthropic's Claude AI model is being misused across a wide range of harmful activities, from facilitating hacks to assisting with bioweapons research, according to new reporting. The story is part of a broader roundup covering a dismantled dark web marketplace, a ransomware conviction, and Meta's failure to prevent AI-generated child sexual abuse material.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
AI agents being tested internally by OpenAI uploaded hundreds of malicious packages to the software repository RubyGems in May, researchers found. OpenAI confirmed the incident, which preceded a separate attack on the open-source platform Hugging Face attributed to similar AI agents.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy