Breaches — Page 4
Victorian Parliamentary Committee Exposes Cult Survivors' Email Addresses in Mass Mailing Blunder
A parliamentary committee sent its final report on cult harm to 330 visible recipients, accidentally revealing the contact details of abuse survivors to the very groups they had fled.
Cyber-attack on England's Department for Education exposes 607,000 records
Contact details for individuals and organisations were taken in a breach affecting two government education portals. No bank details were stolen, but the incident lands as UK school and college cyber-attacks hit record frequency.
Amgen Says Attackers Stole Patient Data From Third-Party Cloud Systems
The biotech giant disclosed the breach in an SEC filing after detecting unauthorized activity in July, but has not named the cloud providers involved or how many patients are affected.
OnTrac Hacked, UK Schools Lose 607,000 Records, and AWS Points to North Korea
A parcel delivery company breached, more than half a million children's records exposed, and Amazon's cloud division calling out state-backed hackers. A busy week of stories that almost slipped past.
CareCloud Data Breach Exposes Medical and Financial Records of 350,000 People
A healthcare IT company says hackers spent nearly a week inside its cloud storage system, making off with Social Security numbers, credit card details, and medical records.
Brinks Home Confirms Breach as ShinyHunters Threatens to Leak 4.9 Million Salesforce Records
The residential security company says its alarm systems were not affected, but the extortion group claims to hold customer contacts, employee data and millions of support chat logs.
Analog Devices Discloses Data Breach After Hackers Stole Files in June Attack
The Massachusetts chip-maker told federal regulators that unauthorised intruders accessed its systems on 23 June and took files. A separate extortion group now claims to hold 570,000 records from the company.
CubePilot Drone Maker Hijacked at the DNS Level, Passwords and Firmware in Doubt
Attackers seized control of cubepilot.org on July 24, issued valid HTTPS certificates for every subdomain, and intercepted traffic to the login portal and forum before the Australian firm clawed the domain back.
ShinyHunters claims Ernst & Young breach, points to supply-chain attack
The extortion crew says stolen credentials from a third-party supplier gave them access to EY's Jira, GitHub and Azure. The accounting giant has not confirmed the group's role.
DentaQuest Data Breach: Up to 23 Million People's Dental and Health Records Exposed
A three-day network intrusion at one of America's largest dental benefits administrators may have handed criminals the Social Security numbers, treatment records, and government IDs of tens of millions of people.
OnTrac tells customers hackers were inside its network for three days in March
The last-mile delivery firm hints at a quiet deal with its attackers, but no ransomware crew has claimed the hit.
Origin Energy confirms data breach; hacker claims 2 million customer records held for extortion
Australia's largest energy retailer says names, addresses, birth dates and partial bank details were exposed. An unidentified hacker calling themselves 'John Doe' has threatened to leak the data within two weeks.
What is a data breach and what should you do after one?
A data breach happens when personal information is accessed or taken without permission. Here is exactly what that means and how to protect yourself.
Hackers Steal Data, Cause $13 Million in Fraudulent Leases for Upbound Group
Criminals use stolen customer data from Upbound Group to commit $13 million in fraud through lease-to-own agreements.
South Korea's Diplomatic Academy Breached, Personal Data of Diplomats Compromised
South Korea reveals hackers accessed the National Diplomatic Academy's system for ten months, stealing diplomats' personal data.