The full corpus — beyond today's front page.
232 results · page 1 of 10
The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Community Dental Care, a Minnesota nonprofit that provides Medicaid dental services, has agreed to settle a class action lawsuit stemming from a data breach. The settlement resolves claims brought against the organization, though specific terms were not disclosed in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Modernizing Medicine, a Florida company that provides cloud-based EHR and AI-powered software to healthcare providers, has agreed to a $3 million settlement over a data breach. The company serves medical practices, making the exposed data likely to include sensitive patient health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals · General readers · AI governance · Policy
A data breach exposed approximately 9 million facial recognition images, according to a report by Woodlands Online. The scale of the leak points to a significant failure in securing one of the most sensitive categories of biometric data.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
zHealth, a software company that provides practice management and electronic health records tools to medical practices, has disclosed a data breach affecting approximately 118,000 people.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Spanish data watchdog publicises first AI agent-linked data breach report Yahoo News Canada
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Multiple home health care providers, including Louisiana-based LHC Group, Provident Behavioral Health in Missouri, and Elixir, have reported data breaches affecting patient information. The incidents add to a growing pattern of cyberattacks targeting health care organizations that handle sensitive personal and medical data.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Houston-based CenterPoint Energy notified federal regulators about an incident that exposed some customer data on the dark web.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Dev Kundaliya reports: Revolut recently disclosed a security incident in which an unauthorised third party obtained sensitive customer information by sending fraudulent requests from the email domain of a legitimate government agency. People claiming responsibility for the incident have posted samples of the allegedly stolen information across several Telegram groups and the material appears to... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Japan's Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government employees. [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A hacking incident at Hawaii Family Dental has affected almost 46,000 individuals. Data breaches have also been announced by Life […] The post Hacking Incident Affects 46,000 Hawaii Family Dental Patients appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Federal Trade Commission has rescinded a 2021 policy statement that had extended the Health Breach Notification Rule to cover health apps and connected devices. The original statement had broadened consumer protections by requiring health technology companies outside traditional HIPAA coverage to notify users of data breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers
Silent Ransom Group added Greenberg Traurig to its list of prominent law firms it attacked and leaked. DataBreaches.net has exclusive details on the incident. On August 21, when DataBreaches reported on a data breach affecting Troutman Pepper Locke, the firm was one of 64 law firm listings on Silent Ransom Group’s (SRG’s) leak site. As... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Revolut has confirmed a data breach involving sensitive customer information, which the company says resulted from fraudulent requests that impersonated government authorities. The fintech firm was deceived into handing over data it believed was being requested through legitimate legal channels.
Who should care: Cybersecurity · Privacy officers · Administrators
Florida's Department of Motor Vehicles confirmed a data breach linked to ShinyHunters after credentials stored on a police officer's personal device were stolen. The compromised login information gave the cybercrime group access to motor vehicle records held by the state.
Who should care: Cybersecurity · Privacy officers · Administrators
Florida's Department of Highway Safety and Motor Vehicles confirmed that its DAVID driver database was breached after attackers used stolen credentials from a police department employee to gain access. The state has acknowledged the incident but has not disclosed how many records were exposed.
Who should care: Cybersecurity · Privacy officers · Administrators
Central Maine Medical Center and Susan B. Allen Memorial Hospital have agreed to settle class action lawsuits connected to data breaches at both facilities. The settlements resolve legal claims brought by patients whose information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
IDScan has confirmed a data breach after hackers reportedly put 153 million driver's license scans up for sale. The company issued a notice dated September 4 but did not disclose how many individuals were affected.
Who should care: Cybersecurity · Privacy officers · Administrators
Veradigm, a Chicago-based electronic health records and practice management company formerly known as Allscripts Healthcare Solutions, has disclosed a cybersecurity incident involving a third-party breach. Hackers are threatening to publish the stolen data if their demands are not met.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
South Korea's privacy regulator is raising the maximum fine for large-scale data breaches to 10% of a company's revenue, effective immediately. The change targets cases involving intent or gross negligence where at least 10 million people's personal data is exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Palomar Health Medical Group in California and Summit Medical Group have each agreed to settlements resolving class action lawsuits stemming from data breaches. The cases were reported by The HIPAA Journal, indicating the breaches involved protected health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Veradigm, a healthcare technology company, has disclosed a data breach affecting patient personal data following a cyberattack on one of its third-party vendors. A ransomware group has claimed responsibility for the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
The FTC has rescinded its 2021 Policy Statement on health app data breach notification, saying the statement became redundant after the agency updated its Health Breach Notification Rule in 2024 to formally cover health apps and connected devices. The withdrawal aligns with a Trump executive order directing agencies to remove unnecessary regulatory guidance.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers