The full corpus — beyond today's front page.
388 results · page 8 of 17
Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Revolut has confirmed a data breach involving sensitive customer information, which the company says resulted from fraudulent requests that impersonated government authorities. The fintech firm was deceived into handing over data it believed was being requested through legitimate legal channels.
Who should care: Cybersecurity · Privacy officers · Administrators
Florida's Department of Motor Vehicles confirmed a data breach linked to ShinyHunters after credentials stored on a police officer's personal device were stolen. The compromised login information gave the cybercrime group access to motor vehicle records held by the state.
Who should care: Cybersecurity · Privacy officers · Administrators
Florida's Department of Highway Safety and Motor Vehicles confirmed that its DAVID driver database was breached after attackers used stolen credentials from a police department employee to gain access. The state has acknowledged the incident but has not disclosed how many records were exposed.
Who should care: Cybersecurity · Privacy officers · Administrators
Central Maine Medical Center and Susan B. Allen Memorial Hospital have agreed to settle class action lawsuits connected to data breaches at both facilities. The settlements resolve legal claims brought by patients whose information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
IDScan has confirmed a data breach after hackers reportedly put 153 million driver's license scans up for sale. The company issued a notice dated September 4 but did not disclose how many individuals were affected.
Who should care: Cybersecurity · Privacy officers · Administrators
Veradigm, a Chicago-based electronic health records and practice management company formerly known as Allscripts Healthcare Solutions, has disclosed a cybersecurity incident involving a third-party breach. Hackers are threatening to publish the stolen data if their demands are not met.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
South Korea's privacy regulator is raising the maximum fine for large-scale data breaches to 10% of a company's revenue, effective immediately. The change targets cases involving intent or gross negligence where at least 10 million people's personal data is exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Palomar Health Medical Group in California and Summit Medical Group have each agreed to settlements resolving class action lawsuits stemming from data breaches. The cases were reported by The HIPAA Journal, indicating the breaches involved protected health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Veradigm, a healthcare technology company, has disclosed a data breach affecting patient personal data following a cyberattack on one of its third-party vendors. A ransomware group has claimed responsibility for the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
France's data protection authority, the CNIL, fined Hôpital Privé de la Loire €500,000 after an attacker gained unauthorized access to its centralized patient records system in the summer of 2025. The hospital was found to have violated GDPR rules on both security of processing and notifying affected patients of the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · Policy
The FTC has rescinded its 2021 Policy Statement on health app data breach notification, saying the statement became redundant after the agency updated its Health Breach Notification Rule in 2024 to formally cover health apps and connected devices. The withdrawal aligns with a Trump executive order directing agencies to remove unnecessary regulatory guidance.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
France's data protection authority, the CNIL, fined Hôpital Privé de la Loire €500,000 after an attacker gained unauthorized access to its centralized patient records system in summer 2025. The hospital was found in violation of GDPR rules on security of processing and breach notification to affected individuals.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · Policy
Two separate ransomware groups have claimed responsibility for attacks on Interim Healthcare, a nationwide home health care provider. Both groups have announced data breaches connected to the company.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
OneTouchPoint, a Wisconsin-based mailing and printing vendor, has agreed to a multi-million dollar class action settlement stemming from a 2022 ransomware attack. The case, reported by The HIPAA Journal, suggests the breach involved health-related data handled on behalf of the company's clients.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
NFI North, a New Hampshire-based organization, disclosed a data breach affecting nearly 50,000 individuals. The breach was reported alongside separate incidents at Nephrology Associates in Kansas and PAMCAH-UA Local 675 Health, suggesting a broader pattern of healthcare and benefits-sector breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Luminis Health, a Maryland-based health system, is responding to a cyberattack that knocked certain systems offline. The organization is actively investigating the incident.
Who should care: Healthcare professionals · Privacy officers · Compliance
The HIPAA Journal's June 2026 report recorded 66 large healthcare data breaches — each affecting 500 or more individuals — reported during the month. The figures reflect ongoing exposure of protected health information across the U.S. healthcare sector.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Mathspace, an online mathematics learning platform, disclosed a data breach in which attackers accessed its internal Metabase reporting system and stole data belonging to more than one million students, staff members, and parents.
Who should care: Cybersecurity · Privacy officers · Administrators
Weverse, the fan community platform run by HYBE-affiliated Weverse Company, confirmed a data breach affecting more than 422,000 user accounts. The company says the exposed data was mostly internal identifiers with limited use outside the platform.
Who should care: Cybersecurity · Privacy officers · Administrators
Mathspace, an online math education platform, confirmed a data breach affecting over 1 million users in Australia and New Zealand after unauthorized parties accessed an internal reporting system and downloaded user records. The breach involves students, parents, teachers, and company staff.
Who should care: Cybersecurity · Privacy officers · Administrators
Trezor has disclosed that a data breach at its third-party shipping and logistics partner ShipMonk now affects around 81,000 customers in total, with a newly identified group of 67,000 U.S. customers added to the initial count.
Who should care: Cybersecurity · Privacy officers · Administrators
Berlin authorities are investigating a new data breach after hackers published stolen login credentials from the city's government online. Germany's national cybersecurity agency issued a separate warning about the Rhysida ransomware group around the same time.
Who should care: Cybersecurity · Privacy officers · Administrators
Lumexa Imaging, a diagnostic imaging provider, has reported a data breach affecting 5.8 million individuals. The incident originated with a third-party vendor, according to reporting from The HIPAA Journal.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance