Navia Benefit Solutions
2.7M SSNs and health benefits records exfiltrated via API
View incident → Indexed 2 weeks, 4 days ago
Healthcare Data Breaches (10306 indexed)
A lot of security problems still begin with someone doing a completely normal thing.
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the default. That pretty much covers the mood this week. Old bugs ar
Healthcare advocacy vendor cybersecurity incident exposed employees' social security
Healthcare advocacy vendor cybersecurity incident exposed employees' social security numbers
Three separate research efforts last week demonstrated ways to defeat passkey
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable passwords and resist phishing. The atta
Breached via private APN; supplies heat to approximately 50,000 residents
Breached via private APN; supplies heat to approximately 50,000 residents
Atlassian’s enterprise AI assistant Rovo, which is usually connected across sensitive
Atlassian’s enterprise AI assistant Rovo, which is usually connected across sensitive work environments like Slack, Microsoft 365, and Google Workspace, was found vulnerable to data leaks through malicious instructions.
7-Eleven
Data breach exposed current, former, and prospective franchisees' detailed application packages
Fortinet FortiGate Systems
73,932 FortiGate firewall credentials exposed including admin and VPN credentials
US Civil Service/White House
Thousands of civil servants' passwords exposed including White House-linked credentials since early 2024
135K law enforcement contacts leaked to dark web
135K law enforcement contacts leaked to dark web
View incident → Indexed 2 weeks, 4 days ago
The incident occurred on the same day as coordinated cyberattacks struck more than 30
The incident occurred on the same day as coordinated cyberattacks struck more than 30 other renewable energy installations and a larger heat plant, as Poland publicly disclosed in January.
The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra
The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold. The post OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns appeared
Ontario Health atHome
Vendor ransomware attack exposed data, kept under wraps for months
Attacks targeting water systems just keep flowing across a dozen states, against
Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.
Polish heat-and-power plant
Heat and power facility supplying 50,000 residents breached via private APN exploitation
Unlimited Technology Systems
3.8 million people impacted in healthcare software company breach
Quantum Health
Healthcare advocacy vendor breach exposed employees' SSNs via New Era Technology
Tribeca Festival
Data leak exposed contact information for celebrities and hundreds of thousands of records
100K officer contact records leaked
100K officer contact records leaked
View incident → Indexed 2 weeks, 5 days ago
Multiple major data breaches since 2013 exposed over 1 billion records
100K officer and staff contacts leaked
100K officer and staff contacts leaked
View incident → Indexed 2 weeks, 5 days ago
Thousands of civil servants' passwords exposed, including White House credentials
Thousands of civil servants' passwords exposed, including White House credentials
Bank of Baroda
Alleged major cyberattack representing one of India's biggest corporate data breaches
100K officer and staff records exfiltrated
100K officer and staff records exfiltrated
View incident → Indexed 2 weeks, 5 days ago