Breaches — Page 3

Hasbro Tells Massachusetts Regulators Employee Data Was Stolen in Breach
The toy giant filed notification letters flagging exposed Social Security numbers, bank details and driver's licence data for 436 workers in the state, months after a separate March cyberattack cost it roughly $25 million in lost revenue.

Manchester Airports Group Confirms Data Theft From Wi-Fi Sign-ups and Booking Systems
Hackers pulled email addresses, phone numbers and car registrations from MAG's systems. Payment details were not touched, and flights are running normally.

ShinyHunters dumps 12.9 million Carhartt customer records after ransom refusal
The extortion crew says it grabbed 50GB from the workwear brand's Databricks cloud analytics platform. Carhartt walked away from a $3.3 million demand, and the data is now public.

Boston Scientific Hit By Cyberattack, Global Order Shipments Disrupted
The medical device maker says it detected an intrusion on August 25 that knocked out business systems and stopped some customer orders from going out.

LACMA data breach exposed Social Security numbers and medical records, museum confirms
The Los Angeles County Museum of Art says a July 2025 intrusion leaked names, SSNs, driver's licence numbers and health data. Notifications went out more than a year after detection.

Nutex Health Tells the SEC Hackers Walked Off With Data From Its Servers
The Nasdaq-listed hospital operator, which runs 28 facilities across 12 states, says the stolen files may include private information but has not yet pinned down whose.

A South Korean startup portal left its own encryption key inside the API, and attackers walked in
Encrypted user data isn't protected if the key to unlock it ships alongside the data. A government-backed platform in South Korea just learned that the hard way.

Cyberattack on Hachette Australia Leaves Bookshops Without Stock During Peak Season
A breach of the publisher's computer systems on 18 July has frozen book distribution across Australia and New Zealand, hitting authors, retailers, and readers at the worst possible moment in the retail calendar.

Quest Apartment Hotels Investigating Customer Data Breach Tied to Third-Party Provider
Personal details of Quest guests, including names, email addresses and some dates of birth, were exposed after criminals broke into a database through a flaw in an outside supplier's system.

SickKids Says Third-Party Software Flaw Exposed Employee and Applicant Data
Toronto's largest paediatric hospital confirms a breach affecting HR records. Patient files were not touched.

Nearly a Million Australians' Data Stolen in Origin Energy Breach Traced to Manila Call Centre
A former employee at a Manila-based Accenture office allegedly took customer records belonging to roughly 900,000 Origin Energy customers and tried to extort the company for money to return them.

Sakura Internet Says Breach May Have Exposed 1.36 Million Customer Accounts
The Japanese cloud provider, a chosen supplier for Japan's Government Cloud, found the wider intrusion while investigating a smaller hack of its rental server service.

CareCloud tells 3.7 million patients their data was taken in March breach
The healthcare IT firm's SEC filing pointed to an eight-hour outage. The full patient count only landed with regulators months later.

Heights Finance Data Breach Hits 1.2 Million Borrowers
A consumer lender's cloud storage platform was broken into, exposing Social Security numbers, bank account details and driver's licence numbers for more than 1.2 million past and present customers.

Met Police Exposes Email Addresses of 140 Alleged Al Fayed Victims in Basic CC Blunder
Scotland Yard sent a routine investigation update and accidentally revealed survivors' identities to each other, in a force already under formal enforcement action for data protection failures.