The full corpus — beyond today's front page.
232 results · page 9 of 10
Japanese telecom company KDDI disclosed a data breach affecting more than 12 million people, after attackers compromised an email platform shared by five ISPs operating in Japan. The exposed data includes email addresses and passwords.
Who should care: Cybersecurity · Privacy officers · Administrators
Washington's Department of Social and Health Services disclosed that a former employee accessed personal data belonging to roughly 8,600 people without authorization in March. The agency launched an internal investigation and is now notifying those whose information may have been compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Calibrated Healthcare has agreed to settle a class action lawsuit arising from a data breach that occurred in February. The settlement resolves claims brought against two related entities, Calibrated Healthcare Systems and Calibrated Healthcare.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Bojangles faces renewed class-action litigation from employees whose personal data was compromised in a 2024 breach attributed to the ransomware group Hunters International. A North Carolina judge is now weighing key legal questions around standing and negligence as the case moves through both state and federal courts.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A major medical device manufacturer has disclosed a data breach affecting nearly 4 million people, with Social Security numbers and health-related information among the data accessed. The company stated it has not found evidence that the exposed data has appeared publicly online.
Who should care: Cybersecurity · Privacy officers · Administrators
A retired class-action lawyer has filed a lawsuit against the Alberta government, its Chief Electoral Officer, and two pro-secession organizations over an alleged data breach affecting roughly 2.9 million provincial residents. The suit targets the Centurion Project, claiming it unlawfully obtained voter data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The Texas Hearing Institute has reported a data breach to the Texas Attorney General affecting more than 29,000 residents. The organization, which provides hearing-related services, filed the notification as required under applicable law.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
Hong Kong conglomerate Shun Hing Group confirmed that a March cyberattack compromised its systems, exposing data belonging to roughly 920,000 customers and resulting in more than one million files being encrypted by the attackers.
Who should care: Cybersecurity · Privacy officers · Administrators
Two women's health clinics — one in Delaware, one in Florida — have disclosed separate data breach incidents involving unauthorized access to or retention of patient information. Both providers are covered under HIPAA, which governs the handling of sensitive health data.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Greater Rochester Independent Practice Association has reached a settlement to resolve litigation stemming from a May 2023 data breach tied to the MOVEit file-transfer vulnerability. The case follows a wave of similar claims against organizations that used the widely exploited software.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Serviceaide, an AI-powered IT service management company, has agreed to pay $1.8 million to settle litigation stemming from a data breach. The case was covered by The HIPAA Journal, suggesting the incident involved protected health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · AI governance · Policy
Medtronic is sending breach notifications to customers after the ShinyHunters hacking group gained unauthorized access to personal data held by the medical device company. The scope of exposed information has not been fully detailed in public disclosures.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Verizon Business has published its first Breach Impact Study, examining the financial consequences of data breaches. The report appears focused on quantifying the real costs organizations face when breaches occur, with coverage in a HIPAA-focused publication suggesting a healthcare angle.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Aflac has disclosed a data breach affecting its Japan subsidiary, in which attackers accessed and stole personal information and bank account data. The incident involves one of the largest supplemental insurance providers in the United States, a Fortune 500 company serving millions of customers.
Who should care: Cybersecurity · Privacy officers · Administrators
Aflac has disclosed a data breach stemming from an attack on its Japan-based subsidiary, in which personal information and bank account details were stolen from affected individuals. The company has not publicly confirmed the full scope of the breach.
Who should care: Cybersecurity · Privacy officers · Administrators
Amicus Solutions, also known as Fedora Solutions, has disclosed a cybersecurity incident that affected Huntsville Hospital Health System. The hospital confirmed it was impacted by the breach, which was reported in connection with HIPAA compliance obligations.
Who should care: Healthcare professionals · Privacy officers · Compliance
Washington State's Department of Social and Health Services disclosed that an employee improperly accessed protected records belonging to approximately 8,600 individuals, constituting an insider data breach of sensitive personal information held by a state agency.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Fox Rothschild, a top-100 U.S. law firm, has suffered a data breach carried out by Silent Ransom Group, a threat actor known to target law firms specifically. The breach resulted in a data leak, exposing the firm and potentially its clients to serious confidentiality risks.
Who should care: Cybersecurity · Privacy officers · Administrators
Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A federal court rejected a second attempt by Progress Software and co-defendants to dismiss negligence claims stemming from the large-scale MOVEit data breach, allowing lawsuits under the laws of California, Indiana, Michigan, and Ohio to move forward in multi-district litigation.
Who should care: Cybersecurity · Privacy officers · Administrators
South Florida Injury Centers reported a hacking incident, and the Chickasaw Nation Department of Health disclosed a separate data breach, according to reporting in the HIPAA Journal. Both incidents involve healthcare entities covered under federal patient privacy rules.
Who should care: Healthcare professionals · Privacy officers · Compliance
South Africa's data privacy law, POPIA, can require mandatory breach reporting even when personal information is exposed by something as routine as a misdirected email, according to attorneys citing an enforcement notice against a Johannesburg college. The case confirms that accidental internal disclosures are not exempt from the law's reporting obligations.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Japanese telecommunications company KDDI confirmed a data breach on June 17, 2026, in which attackers gained unauthorized access to a system shared by six ISP mail services. Up to 14.22 million email addresses and associated passwords may have been exposed as a result.
Who should care: Cybersecurity · Privacy officers · Administrators
Japanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its email systems used by five other internet service providers (ISPs) in the country. [...]
Who should care: Cybersecurity · Privacy officers · Administrators