Meta/Facebook
2019 breach exposed hundreds of millions of Facebook passwords; fined $101.5M
Latest Disclosures
TriZetto
More than 3 million people impacted by breach of healthcare tech provider software affecting multiple counties
Meta (Facebook)
2019 breach exposed hundreds of millions of Facebook passwords
Medical billing company (unnamed)
2025 ransomware attack exposed protected health data on 1.3 million people to dark web
Partnered Health
Australian healthcare provider breach exposed personal information and medical details across 21 clinics
Gaming accounts (multiple)
11 million gaming account credentials exposed in 2024 data leaks discovered by Kaspersky
CommonSpirit Health
19,027 patient records exposing personal and medical information
Spectrum (Charter Communications)
Data breach exposed 4.9 million confirmed accounts with 42 million records claimed stolen
FinWise Bank
Data breach affecting 689,000 users with unencrypted personal data accessed
TransUnion
Among the seven largest banking data breaches of 2025
In a filing for federal regulators, Massachusetts-based Analog Devices said intruders
In a filing for federal regulators, Massachusetts-based Analog Devices said intruders had exfiltrated data from its networks earlier this summer, but the scope of the incident is still under investigation.
Hackers were detected on Analog Devices systems in June, and an investigation found that
Hackers were detected on Analog Devices systems in June, and an investigation found that they stole files. The post Semiconductor Firm Analog Devices Discloses Data Breach appeared first on SecurityWeek.
Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms
Unauthenticated attackers could send HTTP requests to an exposed endpoint to execute commands inside the MCP bridge container. The post Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms appeared first on Security
Two years after a malware incident that was not handled in accordance with South
Two years after a malware incident that was not handled in accordance with South Korea’s requirements, KT has been fined. Lee Jin-seok reports: KT has been fined more than 53.9 billion won [USD $37,630,484.43] over
Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have
Cyberattack tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with ransomware criminals targeting South Korean organizations — further evidence of deepening entanglement between Pyon
A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the
A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, whi
Analog Devices
American semiconductor company Analog Devices announced that an unauthorized party accessed some of its systems and exfiltrated certain files. [...]
Residential security company Brinks Home has
Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data. [...]
A coordinated attack
A coordinated cyberattack that targeted more than 30 Minnesota community water systems has alarmed industrial cybersecurity experts, not because it caused widespread disruption, but because it appears to represent the fi
CISA is urging water and wastewater utilities to lock down internet-exposed controllers,
CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems. The post CISA Urges Water Sector to Protect OT After Coordinated Attacks on
South Korea's Personal Information Protection Commission (PIPC) has fined
South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) over data protection violations. [...]
The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response
The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after hackers targeted more than 30 community water systems in "a coordinated cyberattack." [...]
The autonomous AI agent that escaped during OpenAI testing exploited weaknesses across a
The autonomous AI agent that escaped during OpenAI testing exploited weaknesses across a customer workload, a third-party cloud platform, and Hugging Face’s production environment before being contained, according to new
OpenAI on Tuesday
OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face's production environment, and also hacked multiple third-party accounts a