Breaches — Page 5

Swiss federal IT office says SharePoint breach exposed 200 accounts
The BIT breach lines up with the July SharePoint bug wave, though attribution remains open.

311,000 People's Medical and Financial Records Stolen from Brown Health Medical Group in Massachusetts
A hack at the group's Hawthorn location last December exposed Social Security numbers, credit card details, and medical records for more than 311,000 patients and staff. The breach sat undiscovered for six months.

Angola's Biggest Mobile Network Hit by Cyberattack on the Day It Went Public
Unitel, which carries more than two-thirds of Angola's mobile traffic, suffered a crippling attack on July 28, the same morning its shares began trading on the stock exchange. Four days later, 4G and 5G service was still down.

Madera Community Hospital Breach: 150,000 People's Medical and Financial Data Stolen
A California hospital spent nearly a year reviewing stolen files before telling patients their Social Security numbers, health records, and bank details had been taken. The criminal group that attacked them eventually dropped its ransom demand.

UK Government Investments Agency Exposed Data on 51 Officials for 40 Hours
A security failure at the public body that manages taxpayer stakes in companies like Channel 4 and the Post Office left sensitive management records and personal details of more than 50 civil servants sitting openly accessible online for nearly two days.

UK Police Legal Database Leaked to Dark Web After July Breach
Names, work emails and organisational details of officers, criminal justice staff and government partners were posted online after intruders hit the Police National Legal Database.

Victorian Parliamentary Committee Exposes Cult Survivors' Email Addresses in Mass Mailing Blunder
A parliamentary committee sent its final report on cult harm to 330 visible recipients, accidentally revealing the contact details of abuse survivors to the very groups they had fled.

Cyber-attack on England's Department for Education exposes 607,000 records
Contact details for individuals and organisations were taken in a breach affecting two government education portals. No bank details were stolen, but the incident lands as UK school and college cyber-attacks hit record frequency.

Amgen Says Attackers Stole Patient Data From Third-Party Cloud Systems
The biotech giant disclosed the breach in an SEC filing after detecting unauthorized activity in July, but has not named the cloud providers involved or how many patients are affected.

OnTrac Hacked, UK Schools Lose 607,000 Records, and AWS Points to North Korea
A parcel delivery company breached, more than half a million children's records exposed, and Amazon's cloud division naming state-backed hackers. Stories that almost slipped past.

CareCloud Data Breach Exposes Medical and Financial Records of 350,000 People
A healthcare IT company says hackers spent nearly a week inside its cloud storage system, making off with Social Security numbers, credit card details, and medical records.

Brinks Home Confirms Breach as ShinyHunters Threatens to Leak 4.9 Million Salesforce Records
The residential security company says its alarm systems were not affected, but the extortion group claims to hold customer contacts, employee data and millions of support chat logs.

Analog Devices Discloses Data Breach After Hackers Stole Files in June Attack
The Massachusetts chip-maker told federal regulators that unauthorised intruders accessed its systems on 23 June and took files. A separate extortion group now claims to hold 570,000 records from the company.

CubePilot Drone Maker Hijacked at the DNS Level, Passwords and Firmware in Doubt
Attackers seized control of cubepilot.org on July 24, issued valid HTTPS certificates for every subdomain, and intercepted traffic to the login portal and forum before the Australian firm clawed the domain back.

ShinyHunters claims Ernst & Young breach, points to supply-chain attack
The extortion crew says stolen credentials from a third-party supplier gave them access to EY's Jira, GitHub and Azure. The accounting giant has not confirmed the group's role.