Breaches — Page 2
Hacker Backdoored a WordPress Plugin's Own Website, Hitting 1,500 Sites
The maker of Admin Menu Editor Pro says an attacker took over his site and shipped two poisoned updates that installed a hidden admin account on customer sites.
282,000 Patients' Medical Records Stolen in Premier Medical Group Breach
A New York cardiology and neurology group is notifying patients after criminals accessed files containing names, diagnoses, and insurance details in a June attack.
Wide-open airline database leaked 220 million passenger records, researchers say
A Vietnam-linked passenger screening system sat on the internet with default logins, exposing nine years of travel data.
Mathspace breach exposes data on more than 1 million students, parents and staff
Attackers exploited a flaw in the maths platform's internal reporting tool, part of a wider campaign tied to the ShinyHunters extortion crew.
JetBrains Says Attackers Broke Into Its Cadence Cloud Through an Unpatched TeamCity Server
Customers of the build service are being told to rotate every credential after criminals exploited a critical flaw in JetBrains' own software.
Trezor Customers Caught in a Second Wave of ShipMonk Data Leak
The crypto hardware wallet maker says 67,000 more U.S. buyers had their names, addresses and phone numbers exposed through its old shipping partner. The wallets themselves are unaffected.
France fines Saint-Étienne hospital €500,000 over breach hitting 727,000 people
A teenage hacker got into a doctor's account and roamed the patient record system for days. Regulators say the hospital's security controls were nowhere near enough.
Thomson Reuters Says Court Records Software Breached, 11 States Affected
West Publishing's C-Track platform, used by courts across the U.S. and beyond, had files taken by an unauthorized party in March. Thomson Reuters only spotted the activity three months later.
Dark web store is selling 153 million US and Canadian drivers licence scans, FBI opens probe
A criminal marketplace called Nexus is hawking front-and-back photos of drivers licences, with timestamps pointing at a Louisiana identity verification firm used by car rental counters and cannabis dispensaries.
Novocure Says Cancer Patient Data Exposed in August Break-In
The oncology device maker told the SEC that intruders reached records for more than 1,400 U.S. patients, though treatment devices were untouched.
Attackers Drain $600,000 in AI Credits After Stealing METR API Key
The AI safety non-profit says intruders got into a staff laptop and a code repository, but no sensitive research data was taken.
9.5 Million People's Health and Personal Records Stolen in Aesto Health Breach
A Birmingham, Alabama healthcare data company discovered in December 2025 that criminals had broken into its cloud storage and stolen records including Social Security numbers, medical histories, and financial account details belonging to more than 9.5 million people.
McKesson Confirms Break-In After Hackers Claim 284 Million Patient Records Stolen
The US pharmaceutical distribution giant says intruders reached third-party apps holding limited data. The ShinyHunters gang claims a haul far larger than McKesson admits.
Berlin Refuses Ransom After Hackers Breach City's Administrative Network
Berlin's state government says it will not pay the criminals behind an August intrusion, as forensic work uncovers fresh data theft from the city's transport and environment department.
Hasbro Tells Massachusetts Regulators Employee Data Was Stolen in Breach
The toy giant filed notification letters flagging exposed Social Security numbers, bank details and driver's licence data for 436 workers in the state, months after a separate March cyberattack cost it roughly $25 million in lost revenue.