Data Breach

Cyber Threat Intel 6 min Compromised Login Let Intruder Copy California Student Test Records for Nearly Four Months, ETS Notice Says Files covering everyone enrolled in the past three school years, with disability records and exam results, wer... PR Priya Nair 19 Oct Privacy & Data 4 min Burger King Japan Says Attackers Took 11.18 Million App Member Records, Close to Its Whole App Base Names, birth dates and phone numbers leaked in a breach from 2 to 7 October. The company had passed 10 million... PR Priya Nair 16 Oct AI & ML 4 min A Chinese AI Hacking Tool and Claude Code Were Behind Korea's Bank Breaches, CrowdStrike Says Several South Korean lenders lost customer data in late September. The attacker's exposed servers revealed an... MA Maya Lin 12 Oct Cybersecurity 4 min Intruders Used One Company's Legal Access to Reach 8.8 Million Danish ID Records Names, addresses and CPR numbers were obtained from the national population register over about ten days in Se... PR Priya Nair 7 Oct Cybersecurity 4 min An AI Agent Hacked a Dutch Security Volunteer Group. One of the Flaws It Used Has No Fix. DIVD, which warns others about software holes, says an agent chained two unknown Zammad helpdesk flaws to reac... KE Kenji Tanaka 3 Oct Cybersecurity 4 min Ransomware Hit Tokyo Rail Operator Keio. Its Trains Kept Running. Keio confirmed the attack on 26 September and cut off parts of its network. Business systems, including at a g... KE Kenji Tanaka 30 Sep Cybersecurity 3 min Kiteworks Told Customers to Switch Off for Nine Hours, Then Found a Critical Flaw Acting on a federal warning, the file-sharing company ordered a precautionary shutdown on 25 September. No bre... KE Kenji Tanaka 30 Sep Cyber Threat Intel 4 min The PeopleSoft Attackers Are Back, and Firewall Rules No Longer Stop Them Google says ShinyHunters now slips past rules that blocked June's exploit and has hit dozens of systems. Oracl... PR Priya Nair 29 Sep Business 4 min Bitget Lost About $388 Million From Its Hot Wallets and Says Its Reserve Fund Will Pay The exchange traces the break-in to a flaw in a third-party security product. Its CEO pointed to North Korea;... EV Eva Chin 29 Sep Privacy & Data 6 min Trezor's Breach Reached 81,000 Because Its Shipping Vendor Kept Data It Promised to Delete The 67,000 records added are orders from 2019 to 2021, held by a shipping provider that gave written assurance... PR Priya Nair 8 Sep Privacy & Data 7 min The Thomson Reuters C-Track Breach May Include Sealed Court Records Files left C-Track in March, were found on 30 June and disclosed on 3 September. The remedy offered is credit... PR Priya Nair 4 Sep Privacy & Data 6 min 500,000 New ID Documents a Day Is Not a Historical Breach A dark-web service advertised documents from an identity verification firm and claimed half a million new ones... PR Priya Nair 3 Sep Health & Wellness 7 min Aesto Health Took Eight Months to Tell 9.5 Million People A vendor that archives patient records during system migrations is notifying 9.5 million people about a Decemb... AM Amelia Wong 2 Sep Health & Wellness 6 min McKesson Will Not Be Notifying Most of These Patients. Their Doctors Will. The rule splits the duty: the business associate tells the practices, and each practice tells its own patients... AM Amelia Wong 1 Sep Cybersecurity 6 min Attackers Phoned McKesson's Staff, and Okta Let Them Into Snowflake McKesson has confirmed unauthorised access to third-party applications. The attackers say they got there by te... KE Kenji Tanaka 30 Aug Cybersecurity 7 min Half the Carhartt Breach Data Was Fabricated ShinyHunters claimed close to 25 million records. Troy Hunt filtered the dump before loading it and found 12,9... KE Kenji Tanaka 30 Aug Cybersecurity 7 min ASEAN's Record $4.12m Breach Cost Comes From 26 Companies IBM discloses the sample size and the coverage drops it. The comparisons inside the study — 123 days faster de... KE Kenji Tanaka 29 Aug Privacy & Data 7 min The Dangerous Part of the UK Airports Breach Is Not 8.7 Million Most of what was taken from Manchester, Stansted and East Midlands is wifi sign-up email. The parking and loun... PR Priya Nair 29 Aug ASEAN Tech 7 min Two Incidents Account for Half of the Philippines' 335 Million Exposed Records Credentials are not records, records are not people, and 255 incidents are not evenly distributed. Reading Vie... SA Sarah Chew 26 Aug Privacy & Data 8 min The French Education Breach Is Being Counted in Lines, Not People A seller advertises 346 million records from France's school systems. His own deduplicated figures are 4.35 mi... PR Priya Nair 24 Aug Privacy & Data 8 min An Extortion Group Claimed 25 Million Records. 218,000 Appeared. ShinyHunters listed Alcon on 2 August alleging more than 25 million Salesforce records. The data later publish... PR Priya Nair 21 Aug Cybersecurity 8 min A Ransomware Group Posted Its Demands On The Hospital's Own Facebook Page AnMed closed 83 medical offices after a July attack, with ten still shut a week later. On 11 August the attack... KE Kenji Tanaka 21 Aug Cybersecurity 7 min A Poisoned JSON Feed Made Hidden Admins on WordPress Sites No plugin update was published. Attackers reached BdThemes storage, poisoned a feed the plugins pull into the... CY Cyber Team 11 Aug Cybersecurity 8 min A Signup Form Sent Passwords to Facebook and Google for Nearly Two Years Klaviyo's signup form was misconfigured so third-party marketing trackers captured what users typed, including... CY Cyber Team 11 Aug