Snowflake
Hacking led to 165 confirmed breaches affecting 100+ million people
Law Firm Data Breaches (9672 indexed)
Cybersecurity researchers have flagged a global cybercrime operation that abuses
Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents, screens
An autonomous AI security agent developed by cloud security firm Wiz identified and
An autonomous AI security agent developed by cloud security firm Wiz identified and exploited a critical vulnerability in Snowflake’s GitHub Actions pipeline, while GitHub Copilot had previously reviewed the code change
TransUnion
Data breach exposed credit and personal data of 37,000 people in 2019
IBM-managed test system (Singapore)
Exposed personal information of approximately 70,000 individuals due to supply chain vulnerability
The data breach was initially believed to affect roughly 350,000 people, but the HHS
The data breach was initially believed to affect roughly 350,000 people, but the HHS breach tracker shows a far bigger impact. The post CareCloud Data Breach Impact Grows to 3.7 Million Individuals appeared first on Secu
MCBS
Medical business management company suffered data breach affecting 1.2 million individuals
Oz Hair and Beauty
1,988,331 records exposed — Email addresses, Geographic locations, Names, Phone numbers and 1 more
View incident → Indexed 6 days, 22 hours ago
U.S. Government
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
UnitedHealthcare
Millions of patients' health and insurance information exposed in 2024 cyberattack
MCBS
Medical business management company data breach affecting 1.2 million individuals
Conduent
Healthcare company breach affecting 62.2 million people, third-largest US health hack
Gaming Services (Multiple)
Over 11 million gaming account credentials exposed in 2024 data leaks discovered by Kaspersky
U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered
U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted more than 3.7 million individuals. [...]
Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say
Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass fl
A suspected ransomware affiliate is posing as a ransomware recovery service called
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete s
A suspected ransomware affiliate is posing as a ransomware recovery service called
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete s
Inside Operation CameraSwarm
An exposed operator directory reveals how one actor compromised 14,000+ Dahua cameras across Ukraine and Russia, no password needed for most. A researcher discovered an exposed directory containing the tools of an attack
Healthcare software firm CareCloud filed documents with the Department of Health and
Healthcare software firm CareCloud filed documents with the Department of Health and Human Services confirming that 3,756,469 people had information leaked after a hacker spent eight hours in one of the company’s electro
Sakura Internet hack
Japanese cloud and data center service provider Sakura Internet disclosed that hackers accessed its sales management system, where customer contract and membership information is stored. [...]
The first 24 hours after a cyber incident are messy. Teams are moving fast, and a lot
The first 24 hours after a cyber incident are messy. Teams are moving fast, and a lot gets said on Slack or email that can come back later. People are scrambling to contain the issue, figure out what happened and keep th
The security defect allows unauthenticated attackers to modify or delete user data and
The security defect allows unauthenticated attackers to modify or delete user data and public projects. The post GitLab Patches Critical Code Injection Vulnerability appeared first on SecurityWeek.
Security researchers are
Security researchers are warning of a newly uncovered Python malware framework that routes much of its command-and-control (C2) activity through Microsoft services that defenders already expect to see. The Ontinue Cyb
Hackers stole names, addresses, phone numbers, Social Security numbers, and financial
Hackers stole names, addresses, phone numbers, Social Security numbers, and financial information from a third-party platform. The post Heights Finance Data Breach Impacts at Least 1.2 Million Individuals appeared first