The full corpus — beyond today's front page.
388 results · page 9 of 17
Natural Resources Wales, a Welsh public body, accidentally published a spreadsheet on its website containing sensitive personal data about current and former employees. The exposed information reportedly included ethnicity, disability status, religion, sexual orientation, and caring responsibilities.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Identity verification company IDScan faces multiple lawsuits after hackers allegedly broke into its systems and offered to sell data from more than 153 million driver's licenses on the open market.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Ledger, the hardware cryptocurrency wallet company, is facing a $500 million class action lawsuit filed by a customer who alleges the company failed to adequately protect user data and did not take meaningful corrective steps after prior breaches.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
Turkey's data protection authority fined restaurant chain Baydöner after a breach exposed the personal data of over 500,000 customers, including names, phone numbers, email addresses, and location information. The investigation found the company had no system in place to detect unusual activity before the theft occurred.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy
Resource Center of Dallas has notified approximately 12,500 patients that their information was exposed in a cyber incident, joining several other healthcare organizations — including Kern Psychiatric Health and Wellness Center and The Asthma Center — in recently disclosing breaches.
Who should care: Healthcare professionals · Privacy officers · Compliance
Midwest Spine and Brain Institute, along with Brookhaven ENT Allergy and Facial Surgery and Digestive Disease Center, have disclosed data breaches stemming from a ransomware attack on a shared vendor. The incidents follow a pattern of healthcare providers being exposed through third-party service relationships.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The HIPAA Journal has published an updated compilation of healthcare data breach statistics drawing on records from the Department of Health and Human Services dating back to October 2009. The report tracks the scale and trend of reported breaches across the U.S. healthcare sector over more than fifteen years.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
France's data protection authority, the CNIL, fined the Loire Private Hospital €500,000 after an attacker gained unauthorized access to its electronic patient record system during the summer of 2025, exposing data belonging to patients and some of their family members.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Schools and universities increasingly tie student ID numbers to both digital systems and physical access controls — the same credential that logs a student into a portal may also open their dorm room. A breach of that central database can therefore compromise physical security across an entire campus, not just personal data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
A data breach affecting Thomson Reuters court software may have exposed Social Security numbers and sealed legal records, according to reports. The full scope of the incident has not been confirmed, but the nature of the data involved points to serious risks for individuals whose information passes through the legal system.
Who should care: Cybersecurity · Privacy officers · Administrators
Five healthcare providers across multiple states, including Alta Orthopaedics in California, Cornerstone Behavioral Healthcare in Maine, and Cameron Regional Medical Center, have confirmed data breaches tied to ransomware attacks. The disclosures signal another wave of criminal intrusions targeting medical organizations and the sensitive patient data they hold.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The North Dakota Supreme Court is among the victims of a data breach at C-Track, a third-party vendor used by court systems across the country. A criminal investigation is underway after the breach was disclosed to the court in late July.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Managed Care of North America has agreed to a multi-million dollar settlement to resolve class action litigation tied to a 2023 cybersecurity breach. The case was reported by The HIPAA Journal, indicating the incident involved health-related data covered under federal privacy rules.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
France's data protection authority, the CNIL, has fined Hôpital Privé de la Loire €500,000 following a health data breach at the private hospital. The penalty signals regulatory willingness to hold healthcare institutions financially accountable for failing to protect sensitive patient information.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
The FBI is investigating a reported data breach that allegedly exposed the personal information of millions of driver's license holders across the United States and Canada. Details about the source of the breach and the number of people affected remain limited.
Who should care: Cybersecurity · Privacy officers · Administrators
Novocure, a medical technology company focused on oncology, has confirmed a cyberattack that exposed data belonging to patients and employees. The company has not publicly detailed the scope of the breach or the type of information compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Aesto Health, a healthcare technology company, has disclosed a data breach affecting more than 9.5 million individuals. The company recently discovered the incident and has begun notifying those affected.
Who should care: Cybersecurity · Privacy officers · Administrators
Multiple rehabilitative care practices, senior living facilities, and skilled nursing providers in North Carolina have disclosed data breaches resulting from hacking incidents. The announcements follow a pattern of cyberattacks targeting healthcare organizations that handle sensitive patient information.
Who should care: Healthcare professionals · Privacy officers · Compliance
Novocure, a medical technology company, disclosed a cyberattack in mid-August that exposed the personal data of more than 1,400 cancer patients in the United States, along with data belonging to an undisclosed number of employees.
Who should care: Cybersecurity · Privacy officers · Administrators
Ireland's Data Protection Commission has fined the Health Service Executive €645,000 following an inquiry into how historical paper records were handled at two hospitals, St Loman's in Mullingar and St Conal's in Letterkenny.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
DaVita, a major kidney dialysis company, suffered a ransomware attack in 2025 that resulted in the theft of sensitive patient data. The company has agreed to pay $15 million to settle litigation stemming from the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The VA's White River Junction, Vermont healthcare facility disclosed that unencrypted communications containing veterans' personal health information were sent in error earlier this summer. The department acknowledged the incident in a public release, confirming the exposure was unintentional.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
Hackers have demanded 30 bitcoin from the Berlin city government following a breach of its administrative data network, with the attack occurring roughly two weeks ago. Berlin officials are declining to disclose what data was accessed, who is responsible, or how they are responding to the ransom demand.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance
India's Star Health Insurance faced a major data breach in 2024, resulting in a ₹3.39-crore regulatory fine and over 13,000 ombudsman complaints from affected policyholders. Despite court injunctions, leaked data continued to circulate, and executives faced threats, yet affected customers have seen little accountability from the company.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals