Yearslong data breach
Yearslong data breach exposed residents' private health-related information
2026 Data Breaches Year-to-Date (3087 indexed)
Data breach requiring $40M settlement in class action lawsuit
Data breach requiring $40M settlement in class action lawsuit
EY Vendor
Third-party vendor breach exposed tax client data after 15-day intrusion
Partnered Health
Australian healthcare provider breach exposed personal information and medical details across 21 clinics
700Credit
Among the seven largest banking data breaches of 2025
Meta (Facebook)
2019 breach exposed hundreds of millions of Facebook passwords
KT Corp
Data breach resulting in massive fine from South Korea's Personal Information Protection Commission
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. [...]
Unauthorized access compromised information; breach reported in 2024
Unauthorized access compromised information; breach reported in 2024
TransUnion
Among the seven largest banking data breaches of 2025
FinWise Bank
Data breach affecting 689,000 users with unencrypted personal data accessed
Meta/Facebook
2019 breach exposed hundreds of millions of Facebook passwords; fined $101.5M
Huntsville Hospital Health System
Third-party data breach exposed patient information at hospital facilities
Hackers were detected on Analog Devices systems in June, and an investigation found that
Hackers were detected on Analog Devices systems in June, and an investigation found that they stole files. The post Semiconductor Firm Analog Devices Discloses Data Breach appeared first on SecurityWeek.
Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms
Unauthenticated attackers could send HTTP requests to an exposed endpoint to execute commands inside the MCP bridge container. The post Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms appeared first on Security
In a filing for federal regulators, Massachusetts-based Analog Devices said intruders
In a filing for federal regulators, Massachusetts-based Analog Devices said intruders had exfiltrated data from its networks earlier this summer, but the scope of the incident is still under investigation.
Residential security company Brinks Home has
Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data. [...]
A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the
A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, whi
CISA is urging water and wastewater utilities to lock down internet-exposed controllers,
CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems. The post CISA Urges Water Sector to Protect OT After Coordinated Attacks on
South Korea's Personal Information Protection Commission (PIPC) has fined
South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) over data protection violations. [...]
A coordinated attack
A coordinated cyberattack that targeted more than 30 Minnesota community water systems has alarmed industrial cybersecurity experts, not because it caused widespread disruption, but because it appears to represent the fi
Analog Devices
American semiconductor company Analog Devices announced that an unauthorized party accessed some of its systems and exfiltrated certain files. [...]
Two years after a malware incident that was not handled in accordance with South
Two years after a malware incident that was not handled in accordance with South Korea’s requirements, KT has been fined. Lee Jin-seok reports: KT has been fined more than 53.9 billion won [USD $37,630,484.43] over
Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have
Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with ransomware criminals targeting South Korean organizations — further evidence of deepening entanglement between Pyon