Instructure Canvas
Supply chain breach generating 58% of breach notices in 2026, affecting educational institutions
Latest Disclosures
A former data analyst contractor for Brightly Software has been sentenced to two years
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme. [...]
Portable Intelligence
Canadian software firm breached by BlackNevas
View incident → Indexed 2 weeks, 4 days ago
The Rust-based macOS infostealer harvests users’ passwords, keychain information,
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared fir
American Addiction Centers
SSNs and health data from Salesforce breach
View incident → Indexed 2 weeks, 4 days ago
100K+ officers' PII exposed by ExfilSquad
100K+ officers' PII exposed by ExfilSquad
View incident → Indexed 2 weeks, 4 days ago
Brightspeed
1M+ customer records stolen by Crimson Collective
View incident → Indexed 2 weeks, 4 days ago
Snowflake Breach Guilty Plea
165 orgs compromised, billions of records stolen
View incident → Indexed 2 weeks, 4 days ago
AmnesiaStealer contains novel functions, including the attackers gaining remote control
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
Unnamed Canadian Credit Firm
28K customers, 55GB financial PII stolen
View incident → Indexed 2 weeks, 4 days ago
Brightspeed Telecom
1M+ customer records stolen in ransomware
View incident → Indexed 2 weeks, 4 days ago
Change Healthcare (UnitedHealth Group)
2024 ransomware attack exposed millions of patients' health and insurance data
LiteLLM AI Supply Chain
2500 orgs and 434K CI/CD pipelines exposed
View incident → Indexed 2 weeks, 4 days ago
Ernst Young
Client documents exfiltrated via third-party platform
View incident → Indexed 2 weeks, 4 days ago
Over 95% of the affected companies were exposed before the malicious LiteLLM packages
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published. The post Trivy, Not LiteLLM Behind the 2,500 Org Compromise appeared first on SecurityWeek.
Exposed Credential Database
24B stolen credentials in 8.3TB public exposure
View incident → Indexed 2 weeks, 4 days ago
Nissan
Data breach involving third-party vendor with stolen data claims
7.3 million Chess.com profiles leaked online: the data is genuine, but evidence points
7.3 million Chess.com profiles leaked online: the data is genuine, but evidence points to large-scale scraping, not a server breach. Free is a strange price for stolen data, and that’s exactly what makes this listi
Polish Heat-and-Power Plant
Breached via private APN; facility supplies heat to ~50,000 residents
100K+ police officer records leaked
100K+ police officer records leaked
View incident → Indexed 2 weeks, 4 days ago
Ernst & Young
Data breach exposed client tax records and personal financial information; class action investigation underway
Researchers have verified that ExfilSquad possesses sensitive data stolen from at least
Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents
Records held in Salesforce and ServiceNow systems are under attack leaving user data
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those perpetrated by the extortion group ShinyHunters, Reco