How firms are reached from outside and how the way in is closed.

A week of cascading vendor breaches and employee credential exposures shows why domain monitoring and third-party risk reviews are now core business survival tools.

A cross-border data leak exposed 153 million U.S. and Canadian driver's licenses this week, alongside major breaches at Carhartt, American Tower, and Thomson Reuters court systems.

This week's data breach intelligence: a 12.9M-account Carhartt breach, a live Stripe API key leak hitting North American merchants, and a Toronto hospital incident. Here's what individuals and businesses need to do now.

This week's business data breach roundup: a Stripe merchant credential leak, an Azure enterprise credential theft campaign, and a CRM vendor breach show why domain security and vendor risk matter for owner-run firms.

California-based Amgen disclosed unauthorized cloud access exfiltrating proprietary research and patient health data. SEC materiality determination signals scope concerns; HIPAA exposure unresolved.

In March 2026, HHS OCR settled a HIPAA investigation involving MMG Fusion, a dental software vendor whose 2020 breach affected 15 million individuals. The fine was $10,000. The precedent it sets, that risk-analysis failu

In September 2025, Ontario's Information and Privacy Commissioner issued the first administrative monetary penalty under the Personal Health Information Protection Act. The case wasn't a ransomware breach. It was a physi

AssetMark financial data breach exposes Social Security numbers and financial accounts of 570,000 Americans. Delaware North hospitality breach affects thousands more with driver's license exposure.

This week saw major data breaches affecting millions, including Carnival Cruise Line's 6 million customer breach and ongoing fallout from the Canvas education platform attack by ShinyHunters affecting 275 million student

The ShinyHunters threat group escalated attacks this week targeting 275 million education records, 5.5 million ADT customers, and major telecommunications providers through social engineering campaigns.

ShinyHunters breached Instructure's Canvas LMS affecting 275 million users at 8,809 institutions. Company paid ransom to prevent data leak. Credential theft campaigns surge as threat actors target educational infrastruct

BWH Hotels breach exposed guest emails and reservations for 6 months while Microsoft warns of massive credential theft campaign targeting 35K users. Critical week for hospitality data security.