Archive
(2,175 Total Articles)Page 9 of 15.
A large traveler data exposure has surfaced, with passenger and passport details among the records reported leaked. For defenders, the immediate issues are data-breach response, identity theft risk, and the need to check whether airline or travel systems held the exposed data.
The Montana Supreme Court says backup court records were accessed by an unauthorized third party. For defenders, this is a government data-breach case with likely exposure around sensitive judicial records, backup-system access, and the need to review identity controls and incident response around courts and other public-sector archives.
Lawyers are investigating reported data breach activity tied to the University of San Francisco. For defenders and campus IT leaders, this points to potential exposure of student, staff, or alumni data and a need to confirm whether any unauthorized access actually occurred.
A reported biometric data breach in Pakistan points to exposure of sensitive identity data and weak controls around systems that hold it. For defenders, the immediate focus is on access controls, data protection, and monitoring for misuse of biometric and identity records in government-linked environments.
Boston Scientific is saying it is dealing with a cybersecurity incident, which puts patient-facing medical technology and corporate systems in scope for defenders. The immediate issue is exposure from disruption, possible data loss, and the need to confirm whether any healthcare-adjacent systems or information were affected.
Trezor customers appear to be affected by a breach that exposed contact information and was followed by phishing calls aimed at buyers. For defenders, the issue is both data exposure and follow-on social engineering, which raises the urgency of verifying incident scope, warning customers, and tightening help-desk and account-recovery controls.
A cyberattack tied to three UK airports reportedly exposed personal information for a large number of customers. For defenders, the issue is exposure of passenger PII and the need to verify whether airport-facing systems, third-party access, or shared services were involved.
IDScan says it suffered a breach after a large batch of identity documents was offered for sale. For defenders, this is a data-breach and identity-access issue because identity document data can be used for fraud, account takeover, and downstream verification abuse.
South Korean payment gateways are reported to have suffered a mass credit card data breach. For defenders, this points to exposure in payment processing systems and the need to prioritize card data handling, access controls, and incident response across financial services and adjacent merchants.
Australia is considering privacy law reforms, which matters for organizations that collect, store, or transfer personal data in the country. Defenders and compliance teams should treat this as a possible shift in privacy obligations, breach handling, and governance requirements.
A New York real estate firm is settling a data breach case for millions of dollars, and affected customers are expected to receive payments. For defenders, this is a reminder that breach response can bring direct financial exposure, class-action risk, and long-tail obligations around notice, claims handling, and customer remediation.
A database tied to Vietnam-linked APIS records exposed passport details and flight information. For defenders, this is a data-breach and identity-access issue with clear privacy and travel-security impact, and it raises the need to verify how sensitive passenger data is stored and exposed.
Macquarrie is investigating a reported data breach after ransomware claims surfaced. For defenders, the immediate issues are exposure of sensitive operational or customer data, validation of the intrusion path, and whether the incident affects business continuity or downstream obligations.
A ransomware group is claiming responsibility for publishing a large cache of Berlin-related files on the dark web. For defenders in government and critical infrastructure, this points to exposure of sensitive records and the need to reassess data handling, backup integrity, and incident response readiness.
The piece points to an NHS data breach that affected people connected to the Nottingham attack case. For defenders in healthcare and public-sector systems, the exposure is the handling of sensitive personal data tied to a high-profile incident, which raises obligations around access controls, incident response, and patient or victim confidentiality.
A dataset tied to Condé Nast and reportedly containing information on millions of users is being offered for sale after a leak involving WIRED. For defenders, the main impact is exposure of user data and the need to review how subscriber, account, and publisher data were stored, accessed, and protected.
Bimbo Bakeries USA says it was affected by a data breach tied to a zero-day attack against Oracle EBS. For defenders, the immediate issues are exposure in enterprise application software, the need to identify whether Oracle EBS instances are reachable or compromised, and the obligation to review data handling and incident response steps if the environment is in scope.
A New Jersey mortgage lender is resolving a data breach through customer payouts. For defenders, the main issues are exposure of borrower data, notification and settlement obligations, and the operational cost of remediating a breach in a financial services environment.
Driver licence records have been exposed on the dark web, which points to a large personal-data breach with identity-theft and fraud implications. For defenders, the priority is to assess whether licence data is being used for account takeover, synthetic identity creation, or downstream fraud, and to tighten controls around identity verification and breach response.
A large KFC franchise operator in South Africa has been hit by a major data breach involving a large volume of data. For defenders, the main issues are exposure of sensitive business or customer information, the need to check for lateral movement or follow-on access, and the obligation to verify containment, notification, and any third-party risk tied to the franchise environment.
A South Korea-based cosmetic surgery app was hacked, exposing personal data tied to a large user base. For defenders, this is a straightforward data-breach event that raises exposure in a consumer healthcare-adjacent application and puts pressure on the operator to assess what user information was stored, how it was protected, and whether account or identity misuse could follow.
A major South African vehicle tracking provider was hit by a cyberattack. For defenders, the immediate questions are whether customer or operational data was exposed, whether tracking services were disrupted, and whether the incident creates follow-on risk for fleet, insurance, or recovery workflows that depend on the company.
Healthcare organizations in Houston and other regions are facing more cyberattacks, which raises the risk of patient data exposure, service disruption, and incident response costs for the businesses that support them. Defenders in healthcare and adjacent vendors should treat this as a priority for access control, backup resilience, and breach detection.
A threat actor known as ShinyHunters is reported to have accessed records for millions of customers through a single call. For defenders, the main issue is exposure from weak access controls or a single point of failure in customer data handling, especially where telecom customer records are involved.
A lawsuit says DentaQuest exposed private information belonging to a large number of patients. For defenders, this is another reminder that healthcare data handling failures can create major notification, legal, and trust obligations even when the incident is framed as alleged misconduct rather than a confirmed breach.