Breaches

Estée Lauder Says Hackers Stole Staff Data Through an Oracle HR System Flaw
The cosmetics giant links the August 2025 break-in to the same Oracle E-Business Suite bug the Clop ransomware crew has been abusing all year.

Ostium loses $23.75 million after attackers feed the platform fake prices
The decentralised trading platform paused all activity within an hour, but not before a manipulated price feed drained its liquidity vault.

Ernst & Young Client Data Stolen in Third-Party Platform Breach
Names, Social Security numbers, and card details belonging to Ernst & Young clients were taken after criminals broke into a third-party software platform the firm used to manage data.

Australian Health Clinics Waited 22 Days to Warn Patients After Hackers Stole Medical Records
Partnered Health, which operates more than 60 clinics across Australia, sat on a serious data theft for three weeks before telling anyone. Experts say that gap is long enough to cause real harm.

Hackers Hit 21 Australian Health Clinics, Putting Medicare Numbers and Test Results at Risk
Partnered Health confirmed a data breach on 23 June that reached patient files across Sydney, Melbourne and Canberra. Experts warn the stolen records could surface for sale on hidden online marketplaces.

Two Scattered Spider Hackers Jailed for Attacking Transport for London
Owen Flowers, 18, and Thalha Jubair, 20, each received five-and-a-half years after pleading guilty to a 2024 attack that stole data on up to 10 million customers and cost TfL £29 million to recover from.

Abbott Digs Into Two Cyber Incidents at Its Cancer Diagnostics Arm
The medical giant is investigating a break-in at old Exact Sciences systems and a separate extortion claim tied to a research portal.

Ernst & Young Tells Clients Their Tax Data Was Taken From a Support Ticket System
The Big Four firm says an outside party pulled documents from a third-party helpdesk platform between late March and mid-April. Affected clients get 24 months of identity monitoring through Experian.

Cyberattack Hits Nichirei, Japan's Frozen Food Giant, Putting Personal Data at Risk
A July 13 attack knocked out warehouses and shipping lines across Japan. Nichirei says personal information may have been stolen, and a regulator report has already been filed.

23andMe to pay $18 million after 43 states found 'flimsy' security let hackers steal 6.9 million profiles
A coalition of state attorneys general says the DNA testing firm lacked basic protections like multifactor authentication before the 2023 breach that exposed genetic data on nearly seven million customers.

Australian Actress Falls Victim to $10,500 Insurance Scam
Christine Whelan Browne, a well-known Australian theatre actress, warns others about an insurance scam after losing her car.

Japan's biggest taxi firm Nihon Kotsu hit by malware, dispatch system still down
The Tokyo-based operator pulled systems offline over the weekend after detecting unauthorized access. Bookings, phone dispatch and a service for expectant mothers remain suspended.

Lidl Customers in Three Countries Warned After Supplier Breach Exposes Personal Data
The German discount chain says a file at an outside IT provider was raided, spilling names, phone numbers and dates of birth for online shoppers in Germany, Belgium and the Netherlands.

Half a Million Patients' Data Stolen From New Jersey Lab Company
A criminal group called WorldLeaks broke into Centers Laboratory's systems last August and walked off with records covering 542,377 people, including Social Security numbers and medical details.

MSG's Secret Celebrity Database Tagged Nearly 40,000 People by Sexuality, Race, and 'Risk' Level
A data breach at Madison Square Garden exposed an internal tracking list that sorted celebrities, public figures, and ordinary visitors using labels including 'LGBTQIA,' 'DO NOT HOST,' and a personal 'risk' score.