The full corpus — beyond today's front page.
1154 results · page 6 of 49
Sony Network Communications, a Sony subsidiary that operates as an internet service provider, confirmed a data breach affecting roughly 2.5 million records belonging to current and former customers.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Security researchers have identified a covert infrastructure framework, called 'Silent Train,' used by the China-linked hacking group Volt Typhoon. The system relies on rapidly rotating compromised devices to move through networks quietly, and has reportedly reached hundreds of critical infrastructure targets.
Who should care: Cybersecurity · Privacy officers · Administrators
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Times Car, a Japanese car-sharing company, is reporting a ¥5.5 billion loss following a September data breach that exposed personal information — including driver's license data — of 1.46 million customers. The incident is prompting broader concern among Japanese companies about the financial consequences of weak cybersecurity practices.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach. [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
South Korean cryptocurrency exchange Bithumb is investigating a data leak after hackers breached an internal mobile system used for employee communications. The incident was one of three financial firm breaches disclosed in South Korea on the same day.
Who should care: Cybersecurity · Privacy officers · Administrators
Sead Fadilpašić reports: Japanese internet giant GMO Group has told its customers to scan their computers for viruses, back up all of their data, disconnect the devices from the internet and then shut them down. The announcement, which literally told customers, “unplug any cords connected to your PC,” was made in response to a cyberattack...
Who should care: Cybersecurity · Privacy officers · Administrators
The Northern Territory Health department has reversed its initial claim that only five patients were affected by a privacy breach at Royal Darwin Hospital, after journalists contacted multiple women whose confidential obstetric information was shared publicly on Instagram by a medical observer to an audience of 28,000 followers.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Courts are shifting how they evaluate standing in healthcare data breach lawsuits, with recent rulings suggesting plaintiffs no longer need to show their stolen data was actually misused to survive early dismissal. The change reflects evolving judicial thinking about what counts as a real injury after a breach.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A federal court has refused to dismiss litigation against PowerSchool stemming from a data breach, allowing claims that the education technology company qualifies as a healthcare provider under California's medical information privacy law to move forward.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A press release from the U.S. Department of Justice: Artem Stryzhak, 36, a Ukrainian national, was sentenced today to 70 months in prison for conspiracy to commit computer fraud in connection with a series of ransomware attacks that targeted hospitals, government entities, law firms, and other businesses around the world. “This sentence concludes a years-long, multi-continent...
Who should care: Cybersecurity · Privacy officers · Administrators
Nicholas Jones reports: A major cyber attack has caused delays to coronial investigations, with one grieving family wanting answers after their mother’s unexpected death telling Stuff the wait had been “incredibly stressful”. The family has waited nine months and counting for answers after the death and had been told the ransomware attack had contributed. “We...
Who should care: Cybersecurity · Privacy officers · Administrators
The European Data Protection Supervisor has published a FAQ document on personal data breach notification, covering risk assessment, mandatory notification forms, phased reporting, mitigation, and how to inform affected individuals. The guidance is aimed at helping data controllers and processors meet their notification obligations.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance · Compliance · General readers · Policy
The University of New Mexico Health System was hit by a ransomware attack that cut off access to critical electronic systems. The disruption was severe enough that the hospital had to divert ambulances away from its facilities.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A class action lawsuit against Baptist Health Medical Center-Drew County over a data breach has reached a preliminary settlement, with the agreement offering affected individuals financial reimbursement. A court has given the settlement its first approval, moving it closer to resolution.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Canada's Privacy Commissioner has launched an investigation into Navigate360, the company that manages the tip management platform used by Crime Stoppers programs across Canada, following a cybersecurity incident that exposed tips submitted to those programs.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a ransomware attack today. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The University of New Mexico Health Sciences Center suffered a ransomware attack that knocked out systems and disrupted patient care and academic operations. The incident forced changes to clinical and educational activities while the organization worked to recover.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Attackers compromised a shared analytics script belonging to Convertr, injecting code designed to capture payment card details from shoppers at the point of checkout. The supply-chain style attack means multiple e-commerce sites using the script may have exposed their customers' financial data.
Who should care: Cybersecurity · Privacy officers · Administrators
Ukrainian national Artem Stryzhak, 36, had pleaded guilty last year to charges related to participating in at least two well-known ransomware groups.
Who should care: Cybersecurity · Privacy officers · Administrators
Multiple Ontario Crime Stoppers organizations have suspended their Navigate360 tiplines following a data breach and what they describe as an inadequate incident response. U.S. state education departments are also coordinating to press the company for more information about the incident.
Who should care: Cybersecurity · Privacy officers · Administrators
A cyberattack on Moldovan government digital services may have exposed the personal data of around 750,000 people. Prime Minister Vasile Tofan has warned that similar attacks could increase and called for greater investment in government cybersecurity.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Kamalnayan Bajaj Hospital in India suffered a ransomware attack in which hackers breached all nine of its servers overnight, encrypted the data held on them, and appear to be demanding payment for its release.
Who should care: Cybersecurity · Privacy officers · Administrators