The full corpus — beyond today's front page.
503 results · page 9 of 21
Apollo, a major private equity firm, disclosed that attackers accessed some of its cloud platforms over a five-day window in early July, exposing sensitive personal data. The breach is part of a broader wave of cyberattacks targeting financial sector firms.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
U.S. Bank has acknowledged claims of a data breach but says the incident originated with a fourth-party vendor, not its own systems. The bank states there is no evidence that its internal networks or data repositories were directly compromised.
Who should care: Cybersecurity · Privacy officers · Administrators
DAP Health, a nonprofit community health network in Southern California, has agreed to a $1.3 million settlement to resolve a class action lawsuit stemming from a data breach. The case was reported by The HIPAA Journal, which covers healthcare privacy and compliance news.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Using the same email, phone number, payment method, and other identifiers makes it easier for data brokers and attackers to profile your activity. Anonyome Labs explains how separate digital personas can reduce correlation and limit the impact of breaches, spam, and identity theft. [...]
Who should care: General readers · Privacy officers · Policy
So I didn’t know what the doctrine of bailment is. If you don’t either, you may want to read this post by Jake L. Ramsey of Offit Kurman. It starts by noting the presentation at BlackHat by two OpenAI engineers about the Hugging Face incident and notes two of their statements: First, one OpenAI engineer... Source
Who should care: General readers · AI governance · Policy
Konami has released Metal Gear Solid: Master Collection Vol. 2, a remastered compilation of three entries from the long-running stealth espionage franchise, available across PC, Switch, PS5, and Xbox Series X/S.
Who should care: Cybersecurity · Privacy officers · Administrators
Toronto's Hospital for Sick Children disclosed a cybersecurity incident that exposed personal information belonging to current and former employees and job applicants. The breach traced back to a vulnerability in third-party software; clinical systems and patient records were not affected.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
Apollo Global, a major private equity and asset management firm, has disclosed a data breach following a hacking campaign that appears to have targeted multiple financial companies. Details about the scope of the breach and what data was exposed have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators
A facial recognition platform has exposed approximately 9 million images in what appears to be a significant data security failure. The breach involves biometric image data, which is among the most sensitive personal information a company can hold.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Apple American Group LLC, the largest Applebee's franchisee in the United States, has disclosed a data breach that exposed sensitive personal information including Social Security numbers, financial records, health data, and biometric information. The full number of people affected has not been confirmed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
A reverse image search and identity verification service suffered a major data breach, exposing more than 9 million facial recognition images. The scale of the leak places biometric data belonging to millions of individuals in the hands of unknown actors.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
CareCloud, a U.S. healthcare IT company, disclosed that a data breach it experienced earlier this year affected more than 3.7 million individuals. The company provides technology and services to medical practices and healthcare organizations.
Who should care: Cybersecurity · Privacy officers · Administrators
U.S. authorities have issued a warning that certain Siemens devices are vulnerable to cyberattacks, amid reported concerns that Iranian actors may be targeting water treatment facilities.
Who should care: Cybersecurity · Privacy officers · Administrators
CareCloud, a healthcare software company, reported a data breach affecting nearly 3.8 million people after an unauthorized party accessed one of its electronic health record systems for approximately eight hours. The company disclosed the incident to the Department of Health and Human Services.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Baylor Genetics, a company specializing in clinical diagnostic genomics, has disclosed a cybersecurity incident that exposed data belonging to both patients and employees. The company has not publicly detailed the scope of the breach or the types of information compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The FBI said Tuesday that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the United States since June 2021. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Berlin disconnected two state ministries — one covering urban development and housing, the other transport and climate — from government networks following a security breach discovered last Friday. The isolation is described as a precautionary measure while the incident is investigated.
Who should care: Cybersecurity · Privacy officers · Administrators
American Addiction Centers in Tennessee and Oculus Pathology in Texas have each disclosed separate hacking incidents. Both organizations operate in healthcare, meaning the breached data likely includes sensitive medical and personal information covered under HIPAA.
Who should care: Healthcare professionals · Privacy officers · Compliance
A data breach at a South Carolina loan company exposed the financial information and Social Security numbers of nearly 750,000 people. The incident affected both borrowers and people who had only inquired about a loan through a third-party channel.
Who should care: Cybersecurity · Privacy officers · Administrators
Pokémon Center has notified customers in the United Kingdom and Germany of a data breach originating at CEVA Logistics, a third-party logistics provider. The incident exposed customer personal and order information and resulted in some orders being cancelled.
Who should care: Cybersecurity · Privacy officers · Administrators
SafePal, a company that makes cryptocurrency hardware wallets, confirmed a data breach affecting nearly 40,000 customers. Personal information was stolen in the incident, which SafePal disclosed on Sunday.
Who should care: Cybersecurity · Privacy officers · Administrators
Polish authorities are investigating a breach at MyDr, a healthcare software provider serving doctors and clinics across the country. The company says it has identified and resolved the cause and put additional security measures in place, but the incident may have exposed data tied to as many as 19 million people.
Who should care: Cybersecurity · Privacy officers · Administrators
An anonymous source contacted DataBreaches in August claiming to have obtained more than 2 million records from TaxAct, including usernames, email addresses, and phone numbers. Around 450,000 of those records have reportedly already been published or shared.
Who should care: Cybersecurity · Privacy officers · Administrators
Bits of Gold, Israel's largest cryptocurrency broker, disclosed that a hacker accessed a third-party data analytics system and stole personal data on roughly 200,000 customers, including names, national ID numbers, and email addresses.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy