The full corpus — beyond today's front page.
764 results · page 8 of 32
The FBI has arrested another suspect linked to ShinyHunters, the hacking group connected to a breach of sensitive FBI employee data. The arrest is part of a broader international investigation that has already reached suspects in Jordan and the Netherlands.
Who should care: Cybersecurity · Privacy officers · Administrators
A court has granted preliminary approval to a class action settlement stemming from a June 2023 data breach at Valley Oaks Health, a mental health provider, that affected more than 50,000 individuals. The case now moves toward final approval and distribution of relief to those affected.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
iRhythm, a company that makes wearable cardiac monitoring devices, has started notifying state authorities of a data breach that occurred earlier this year, with hundreds of thousands of people affected.
Who should care: Cybersecurity · Privacy officers · Administrators
The FBI announced another arrest connected to ShinyHunters, the hacking group responsible for a string of major data breaches. FBI Director Kash Patel signaled the agency is continuing to pursue remaining members of the group across borders.
Who should care: Cybersecurity · Privacy officers · Administrators
Bacon County Health Services in Georgia is investigating a cyber incident, and several other healthcare organizations — including Comprehensive Orthopaedics & Musculoskeletal Care in Connecticut — have also disclosed data breaches around the same time.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Belarusian Cyber Partisans have confirmed they were behind a 2023 intrusion into the Moscow Department of Health's network, acknowledging they maintained access inside the system for an extended period. The admission came after Russian researchers had already attributed the breach to the group.
Who should care: Cybersecurity · Privacy officers · Administrators
The FBI seized seven domains linked to Flax Typhoon, a Chinese state-sponsored hacking group, disrupting two tools the group used to compromise critical infrastructure and other targets globally.
Who should care: Cybersecurity · Privacy officers · Administrators
A hack and data breach affecting Trump Mobile has drawn scrutiny from a U.S. senator, who is questioning why the carrier appears to lack certain required FCC filings. The combination of a security incident and potential regulatory gaps has prompted calls for answers about the company's oversight.
Who should care: Cybersecurity · Privacy officers · Administrators
ASOS confirmed a breach in which attackers used social engineering to access an employee account, then sent unauthorized push notifications. The incident exposed some customer personal information, including names and contact details, along with non-personal account data.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
Casper Orthopedic Associates in Wyoming and Atlantic Digestive Specialists in New Hampshire have each disclosed data breaches. Both are healthcare providers, meaning the exposed information is likely to include sensitive patient medical records.
Who should care: Healthcare professionals · Privacy officers · Compliance
Sheppard Mullin, a major U.S. law firm, is facing a class action lawsuit after disclosing a data breach. The suit follows the firm's public acknowledgment that client or personal data was compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Laboratory Services Cooperative, a Seattle-based nonprofit lab serving Planned Parenthood affiliates, has agreed to pay $6.1 million to settle litigation stemming from a data breach. The organization provides clinical diagnostic and testing services, meaning the exposed data likely included sensitive health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent Klue breach showed, attackers are taking notice and exploiting forgotten OAuth grants to gain access to corporate data. This article covers why OAuth risks are so hard [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
South Korea's largest online retailer, Coupang, is suing to challenge a roughly 620 billion won fine stemming from a data breach that exposed the records of more than 33 million customers. The incident, which has been in the news for nine months, has drawn sustained regulatory scrutiny.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Greece's data protection authority ruled against the Ministry of Social Cohesion and Family Affairs following a large-scale personal data breach, finding violations across multiple GDPR articles including security, breach notification, and data protection by design. The ministry's processor, E.E.T.A.A. S.A., was also implicated in the decision, which resulted in fines and a compliance order.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy
Sweden's data protection authority fined IT service provider Miljödata i Karlskrona roughly EUR 160,000 after a 2025 cyberattack exposed personal data belonging to 2.2 million individuals, with the stolen data later published on the darknet. The fine was issued under Article 32 of the GDPR for inadequate technical and organisational security measures.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
ASOS has begun notifying customers of a data breach in which hackers used social engineering and stolen credentials to access personal data. The fashion retailer confirmed the incident occurred earlier this week.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Asos has revised the scope of a recent data breach after cyber criminals contacted the BBC to say the stolen data went beyond the basic contact details the retailer initially disclosed. The full extent of what was taken has not yet been confirmed publicly.
Who should care: Cybersecurity · Privacy officers · Administrators
A 2025 data breach at Oracle Health's legacy Cerner servers exposed electronic protected health information belonging to nearly 20 million individuals. The incident ranks among the largest known breaches of medical data reported this year.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Internal chat logs from Silent Ransom Group appear to have leaked, potentially revealing how the cybercriminal operation generates hundreds of millions of dollars without using traditional ransomware encryption. The group has been active since at least 2022 and has drawn sustained coverage for its unconventional extortion methods.
Who should care: Cybersecurity · Privacy officers · Administrators
Attackers breached third-party operators managing country-code top-level domains for Ghana, American Samoa, and Sierra Leone, then altered DNS records and obtained unauthorized HTTPS certificates to hijack several Google domains.
Who should care: Cybersecurity · Privacy officers · Administrators
The U.S. government has posted a $10 million bounty for Zhang Yu, whom officials identify as a key actor in the Hafnium hacking campaign, a Chinese state-linked operation that breached thousands of computers and exfiltrated large volumes of documents.
Who should care: Cybersecurity · Privacy officers · Administrators
Arizona courts disclosed a data breach affecting more than 1.3 million people after hackers accessed the state's Fines/Fees and Restitution Enforcement Program, which collects debts tied to traffic and criminal violations.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A mental health authority serving Jefferson, Blount, and St. Clair counties has agreed to a $700,000 settlement to resolve a class action lawsuit tied to a 2025 data breach. The settlement follows a consolidated legal action brought by individuals affected by the security incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals