PrivacySignal
← Front page

Search & browse the archive

The full corpus — beyond today's front page.

Reset

764 results · page 6 of 32

Breach
The Record · · International

California warns all public school students of data stolen in contractor breach

California's Department of Education has warned public school students statewide that Educational Testing Service, a contractor that handles student assessments, experienced a data breach lasting several months. The department issued multiple statements over the past week notifying students that their information was affected.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
The Record · · International

23andMe successor settles with California for $6 million over cybersecurity failings

California's attorney general reached a $6 million settlement with 23andMe's successor company over claims that 23andMe failed to adequately secure customer data before a breach in 2023. The settlement resolves state allegations tied to the company's cybersecurity practices at the time of the incident.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement#state-privacy Read original →
Breach
HIPAA Journal · · US Federal

California Settles 23andMe Data Breach Lawsuit for $6 Million

California has reached a $6 million settlement with 23andMe over a data breach, separate from an $18 million multistate settlement that 42 attorneys general agreed to earlier. The agreements resolve legal claims stemming from the breach of the genetic testing company's customer data.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →
Breach
HIPAA Journal · · US Federal

Central Ohio Primary Care Physicians Data Breach Affects 1.4 Million Patients

Central Ohio Primary Care Physicians, one of the largest independent primary care groups in the country, has disclosed a data breach affecting approximately 1.4 million patients. The breach is significant in scale, touching a large share of the patient population served by the physician-owned group.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
HIPAA Journal · · US Federal

$80 Million Settlement Proposed to Resolve Conduent Data Breach Litigation

A proposed $80 million settlement has been put forward to resolve a consolidated class action lawsuit against Conduent Business Services over a data breach. The case was covered by The HIPAA Journal, suggesting the breach involved protected health or personal information handled by the business services company.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →
Breach
DataBreaches.net · · International

Welsh firms ‘Password1’ and ‘Test 2’ fails led to hackers stealing children’s data

Two Welsh organizations, Ogi Networks Limited and Data Cymru, were reprimanded by the UK's Information Commissioner's Office after a ransomware attack exposed personal data on roughly 3,300 people, most of them children. Weak passwords were identified as a key failure that allowed the breach to occur.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance · General readers · Policy

#breach#gdpr#privacy#security Read original →
Breach
DataBreaches.net · · International

Attorney General Tong Announces $625,000 Settlement with Frontier Over Data Breach

Connecticut Attorney General William Tong settled with Frontier Communications for $625,000 following an investigation into an April 2024 data breach carried out by ransomware group RansomHub, which exposed sensitive personal information belonging to Frontier customers.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy

#breach#enforcement#state-privacy#privacy Read original →
GDPR / Intl
EDPS · · EU

ARETE - Assessment of Risk to Individuals of Personal Data Breaches

The European Data Protection Supervisor held a half-day workshop called ARETE in June 2026, focused on how to assess the risk that personal data breaches pose to the individuals whose data is exposed.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →
Breach
The Record · · International

Defense contractors in two NATO allies hacked in recent Russia-linked campaign

Researchers say APT28, the Russian hacking group also known as Fancy Bear, used a newly documented backdoor to breach the networks of defense contractors and a law enforcement agency in two NATO member countries. The group maintained persistent access inside the targeted organizations before being detected.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement#security Read original →
Breach
BleepingComputer · · International

Nikkei discloses third data breach in a month, 1.8M records exposed

Nikkei Inc. has disclosed a third data breach within roughly a month, with the latest incident exposing approximately 1.83 million personal records. The repeated breaches at the Japanese media and financial information company point to persistent security problems rather than a single isolated incident.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

#breach#privacy Read original →
Breach
BleepingComputer · · International

OpenCode hack exposes API keys amid AI distillation attacks

OpenCode, an open-source AI coding project, disclosed a security breach that exposed API keys belonging to a subset of its users. The keys were connected to external AI service providers, meaning the exposure extended beyond OpenCode itself.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →
Breach
Ars Technica — Policy · · International

Florida DMV hacked after police dept insecurely stored login info

Florida's DMV suffered a data breach tied to the hacking group ShinyHunters after a police department stored login credentials insecurely, prompting statewide alerts. The incident exposed vulnerabilities in how law enforcement agencies handle access to government systems.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
Krebs on Security · · International

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

Federal investigators looking into the ShinyHunters hacking group, which recently breached FBI data, have focused on executives at two ransomware negotiation firms with unusually close ties to the group. One U.S.-based executive is suspected of helping ShinyHunters run a site used to pressure victims into paying ransoms.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement#security Read original →
Breach
R Reuters · · International

California settles 23andMe data breach claims for $6 million

California has reached a $6 million settlement over claims stemming from a data breach at genetic testing company 23andMe. The settlement resolves state-level legal action connected to the exposure of users' personal and genetic data.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
DataBreaches.net · · International

NY AG James and CT AG Tong Secure $2.7 Million from Boston Children’s Health Physicians and XTIUM for 2024 Data Breach

The New York and Connecticut attorneys general reached a $2.7 million settlement with Boston Children's Health Physicians and its IT vendor XTIUM over a 2024 data breach. The agreement also requires both organizations to implement a corrective action plan to strengthen their data security practices.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement#state-privacy Read original →
Breach
BleepingComputer · · International

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

ConnectWise disabled customer access to its Cloud Backup service after attackers compromised application identities and used them to breach Microsoft 365 tenants. The incident is a supply-chain attack, meaning customers were exposed through their vendor, not through any action of their own.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
HIPAA Journal · · US Federal

Mid Florida Dermatology & Plastic Surgery Data Breach Affects 85K Patients

Mid Florida Dermatology & Plastic Surgery has disclosed a data breach affecting approximately 85,000 patients, part of a wave of healthcare breach announcements that also includes Kannarr Eye Care in Kansas and Indiana University.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
HIPAA Journal · · US Federal

$6.4 Million Settlement Agreed in AMCA Customer Data Breach Litigation

A $6.4 million settlement has been reached to partially resolve litigation arising from a cyberattack on American Medical Collection Agency (AMCA), a medical debt collection firm. The breach, which was one of the largest in healthcare history, exposed sensitive patient and financial data belonging to millions of people.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →
Breach
The Record · · International

Moscow police detain suspected DataSuckers hackers linked to breaches in Ukraine and Russia

Russian authorities have detained three people suspected of belonging to the DataSuckers hacking group, which is alleged to have carried out breaches affecting targets in both Russia and Ukraine, including a cyberattack on a restaurant chain that exposed customer data.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
News
Just Security · · US Federal

Can the Law Stop AI Hackers?

Legal frameworks governing computer hacking were built around human intent, and AI agents that probe or breach systems may not fit that mold. Analysts are now questioning whether existing law can assign liability when no person deliberately directed the intrusion.

Who should care: General readers · AI governance · Policy

#ai Read original →
Breach
DataBreaches.net · · International

KR: NHIS Employee Sold Data, Victims Uninformed for Three Months

A South Korean National Health Insurance Service employee was fired for illegally selling subscribers' personal health data to outside parties. Despite the breach being discovered, affected individuals had not been notified for at least three months, a lapse revealed during a parliamentary audit.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

#breach#privacy Read original →
Breach
BleepingComputer · · International

Burger King Japan data breach exposes 11 million customer records

Burger King Japan disclosed a data breach in which attackers accessed a server holding over 11 million customer records. The breach affects the Japanese subsidiary of the global fast-food chain.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
DataBreaches.net · · International

Vibetech Database Exposes 13.7M Records Including Assortment of Old Breaches

An unprotected database linked to Vibetech, an India-based AI and IT services firm, left 13.7 million records exposed online with no password or authentication required. The data included credentials and sensitive information drawn from previous breaches, discovered by cybersecurity researcher Jeremiah Fowler.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →
← Prev Page 6 of 32 Next →