The full corpus — beyond today's front page.
388 results · page 7 of 17
A hack involving OpenAI and the Australian government has drawn international coverage, with reporting linking the incident to a Medicare data breach. Details on the full scope and how the breach occurred remain limited based on available information.
Who should care: Cybersecurity · Privacy officers · Administrators
A data breach attributed to the hacking group ShinyHunters has exposed information about FBI employees, including details about their roles in intelligence and surveillance work focused on China, Russia, and electronic monitoring. The FBI has confirmed it is investigating the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Seyfarth Shaw, a major international law firm, has disclosed a data breach that exposed client documents. The firm has not publicly detailed the scope of the incident or how many clients were affected.
Who should care: Cybersecurity · Privacy officers · Administrators
Vasindas' Around the Clock Care, a California home care company, has reached a settlement in class action litigation stemming from a data breach. The case was reported by The HIPAA Journal, indicating the breach involved health-related information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A WBUR segment examined the risk posed by breaches involving driver's license images and identity document data, with a security expert noting that this category of exposure is meaningfully more dangerous than typical data breaches due to the forensic-level detail captured.
Who should care: Cybersecurity · Privacy officers · Administrators
Hacking group ShinyHunters claims to have breached FBI-related services and obtained personal data on FBI employees and job applicants, including agents' names, home addresses, phone numbers, and spousal information. The reported scope of the breach, if confirmed, would expose a large number of federal law enforcement personnel.
Who should care: Cybersecurity · Privacy officers · Administrators
Call-on-Doc, a telemedicine platform, has notified patients of a cyberattack and data breach that occurred in December 2025. The company disclosed the incident in line with breach notification requirements.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Albany College of Pharmacy and Health Sciences has agreed to settle a class action lawsuit related to a data breach at the New York institution. The settlement follows legal action brought against the college over the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
BigCommerce has notified merchants that attackers compromised credentials tied to third-party Ribon applications, then used that access to inject malicious scripts into online stores. The breach originated outside BigCommerce's own systems, through a connected app provider.
Who should care: Cybersecurity · Privacy officers · Administrators
United Language Group, a translation services vendor in Minnesota, has disclosed a data breach affecting members of UnitedHealthcare health plans. Two other healthcare providers, Desert Pulmonary & Sleep Consultants in Arizona and Azle, also announced separate breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Canada's Privacy Commissioner has opened a formal investigation into a data breach in which identification details were stolen. The announcement came in an official news release, with no further details about the scope or source of the breach yet made public.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Community Dental Care, a Minnesota nonprofit that provides Medicaid dental services, has agreed to settle a class action lawsuit stemming from a data breach. The settlement resolves claims brought against the organization, though specific terms were not disclosed in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Modernizing Medicine, a Florida company that provides cloud-based EHR and AI-powered software to healthcare providers, has agreed to a $3 million settlement over a data breach. The company serves medical practices, making the exposed data likely to include sensitive patient health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · AI governance · Policy
A data breach exposed approximately 9 million facial recognition images, according to a report by Woodlands Online. The scale of the leak points to a significant failure in securing one of the most sensitive categories of biometric data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
zHealth, a software company that provides practice management and electronic health records tools to medical practices, has disclosed a data breach affecting approximately 118,000 people.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Spain's data protection authority has published what it describes as its first data breach report tied to an AI agent, marking a notable regulatory moment for automated systems handling personal data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Multiple home health care providers, including Louisiana-based LHC Group, Provident Behavioral Health in Missouri, and Elixir, have reported data breaches affecting patient information. The incidents add to a growing pattern of cyberattacks targeting health care organizations that handle sensitive personal and medical data.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
CenterPoint Energy, a Houston-based electric and gas utility, has notified federal regulators of a data breach after customer data appeared on the dark web. The company disclosed the incident in a regulatory filing.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Revolut has disclosed a security breach in which attackers posed as a legitimate government agency to extract sensitive customer data. Those claiming responsibility are demanding 10,000 Bitcoin and have posted samples of the alleged data across Telegram.
Who should care: Cybersecurity · Privacy officers · Administrators
Japan's Digital Agency disclosed a data breach involving a vulnerability in a VPN system that may have exposed approximately 246,000 records containing personal information of government employees.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A hacking incident at Hawaii Family Dental has exposed the personal data of nearly 46,000 patients, according to a report from The HIPAA Journal, which also notes separate breach announcements from other healthcare organizations.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Federal Trade Commission has rescinded a 2021 policy statement that had extended the Health Breach Notification Rule to cover health apps and connected devices. The original statement had broadened consumer protections by requiring health technology companies outside traditional HIPAA coverage to notify users of data breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
Silent Ransom Group, a ransomware threat actor with a pattern of targeting law firms, breached Greenberg Traurig and leaked data affecting approximately 126,000 people. The incident is part of a broader campaign the group has run against dozens of law firms, with notification responsibilities for affected individuals still unresolved.
Who should care: Cybersecurity · Privacy officers · Administrators