The full corpus — beyond today's front page.
503 results · page 6 of 21
Identity verification company IDScan faces multiple lawsuits after hackers allegedly broke into its systems and offered to sell data from more than 153 million driver's licenses on the open market.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
DaVita, a national kidney dialysis company, has agreed to a $15 million class action settlement following a 2025 ransomware attack that exposed patient data, much of which was subsequently leaked on the dark web.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Ledger, the hardware cryptocurrency wallet company, is facing a $500 million class action lawsuit filed by a customer who alleges the company failed to adequately protect user data and did not take meaningful corrective steps after prior breaches.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
A dark web service called Nexus began offering searchable access to more than 153 million scanned driver's licenses from the US and Canada, with IDScan.net suspected as the source of the breach. The FBI's New Orleans field office opened a formal investigation on the same day the service appeared.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Turkey's data protection authority fined restaurant chain Baydöner after a breach exposed the personal data of over 500,000 customers, including names, phone numbers, email addresses, and location information. The investigation found the company had no system in place to detect unusual activity before the theft occurred.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy
Resource Center of Dallas has notified approximately 12,500 patients that their information was exposed in a cyber incident, joining several other healthcare organizations — including Kern Psychiatric Health and Wellness Center and The Asthma Center — in recently disclosing breaches.
Who should care: Healthcare professionals · Privacy officers · Compliance
Midwest Spine and Brain Institute, along with Brookhaven ENT Allergy and Facial Surgery and Digestive Disease Center, have disclosed data breaches stemming from a ransomware attack on a shared vendor. The incidents follow a pattern of healthcare providers being exposed through third-party service relationships.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The HIPAA Journal has published an updated compilation of healthcare data breach statistics drawing on records from the Department of Health and Human Services dating back to October 2009. The report tracks the scale and trend of reported breaches across the U.S. healthcare sector over more than fifteen years.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A new congressional bill targeting AI agents is in the works, reportedly prompted in part by a security breach at Hugging Face. The legislation appears aimed at tightening oversight or regulation of autonomous AI systems.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
France's data protection authority, the CNIL, fined the Loire Private Hospital €500,000 after an attacker gained unauthorized access to its electronic patient record system during the summer of 2025, exposing data belonging to patients and some of their family members.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
France's data protection authority, CNIL, fined a private Loire hospital €500,000 after a breach exposed personal data belonging to 727,000 patients and their relatives. The penalty reflects a failure to maintain adequate data security standards.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy
Schools and universities increasingly tie student ID numbers to both digital systems and physical access controls — the same credential that logs a student into a portal may also open their dorm room. A breach of that central database can therefore compromise physical security across an entire campus, not just personal data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Attackers breached Coder's Cloudflare infrastructure and inserted unauthorized registry servers that served up malicious Terraform modules designed to steal credentials. The compromise affected the supply chain for infrastructure code that organizations use to build and manage cloud environments.
Who should care: Cybersecurity · Privacy officers · Administrators
A data breach affecting Thomson Reuters court software may have exposed Social Security numbers and sealed legal records, according to reports. The full scope of the incident has not been confirmed, but the nature of the data involved points to serious risks for individuals whose information passes through the legal system.
Who should care: Cybersecurity · Privacy officers · Administrators
Five healthcare providers across multiple states, including Alta Orthopaedics in California, Cornerstone Behavioral Healthcare in Maine, and Cameron Regional Medical Center, have confirmed data breaches tied to ransomware attacks. The disclosures signal another wave of criminal intrusions targeting medical organizations and the sensitive patient data they hold.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A breach of a Thomson Reuters records platform exposed sealed court information and sensitive personal data from courts across at least 12 U.S. states, the U.S. Virgin Islands, and Canada.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
The North Dakota Supreme Court is among the victims of a data breach at C-Track, a third-party vendor used by court systems across the country. A criminal investigation is underway after the breach was disclosed to the court in late July.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Managed Care of North America has agreed to a multi-million dollar settlement to resolve class action litigation tied to a 2023 cybersecurity breach. The case was reported by The HIPAA Journal, indicating the incident involved health-related data covered under federal privacy rules.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
France's data protection authority, the CNIL, has fined Hôpital Privé de la Loire €500,000 following a health data breach at the private hospital. The penalty signals regulatory willingness to hold healthcare institutions financially accountable for failing to protect sensitive patient information.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Data at law firms Quinn Emanuel, McDermott exposed in cyber breaches Reuters
Who should care: Cybersecurity · Privacy officers · Administrators
The FBI is investigating a reported data breach that allegedly exposed the personal information of millions of driver's license holders across the United States and Canada. Details about the source of the breach and the number of people affected remain limited.
Who should care: Cybersecurity · Privacy officers · Administrators
Aesto, a healthcare data company, disclosed to federal regulators that a cyberattack last December exposed sensitive information belonging to more than 9.5 million people. The breach was reported this week.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
Uber drivers from the UK, the Netherlands, and other European countries have filed a class action lawsuit alleging that Uber's AI-driven system for setting pay and allocating jobs violates data protection laws and suppresses their earnings. The claim, which could run into billions of dollars, is one of the largest legal challenges yet to algorithmic pay management in the gig economy.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy
Nutex Health, a Houston-based healthcare company operating dozens of micro-hospitals and specialty facilities, has confirmed that sensitive data was stolen during a cyberattack in August. The company manages care across 27 locations, meaning the breach likely affects patients across multiple sites.
Who should care: Healthcare professionals · Privacy officers · Compliance