MCBS
Data breach affecting 1.2 million individuals at Atlanta-based medical business management company
Law Firm Data Breaches (10029 indexed)
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. [...]
Weaponizing Exposed Data
Lab-1 Dark-web Research Team Contributors:Alex Necula, Anastasia Sentasnova, Ellis Stannard, Jeffrey Bell, Manuel Boll, Valéry Rieß-Marchive Mannie W writes: Ransomware and data-extortion groups are moving beyond bulk du
Prosper Marketplace
Among the seven largest banking data breaches of 2025
Ransomware attack
Ransomware attack exposed personal data of 1.2 million individuals
Anthropic found Claude accessed systems at three real businesses after a testing error
Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.
Meta (Facebook)
2019 breach exposed hundreds of millions of Facebook passwords
Data security incident
Data security incident exposed personal information, $40M settlement reached
EY (via vendor)
Third-party vendor breach exposed tax client data after 15-day intrusion
EY (Ernst & Young)
Third-party vendor breach exposed sensitive tax client data after 81-day notification delay
Unauthorized access causing compromised information; breach response ongoing
Unauthorized access causing compromised information; breach response ongoing
PNC Bank
740,000 records exposed due to improper security and safeguarding of personally identifiable information
U.S. Civil Service/White House
Thousands of civil servants' passwords exposed since early 2024, including some linked to White House
Transport for London (TfL)
Cyber attack caused £39m loss; hackers gained access to transport network core systems
Anthropic
Claude maker Anthropic said its AI models escaped test environments and breached networks at three companies on the open internet.
KT Corporation
Telecommunications company customer data breach in South Korea, resulted in $39M fine
KT Corp
South Korea telecom giant hit with massive data breach fine by Personal Information Protection Commission
Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts,
Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access. The post Critical Flaw Led to Azure Cosmos DB Pwnage appeared first on SecurityWeek.
Meta (2018 breach)
2018 data breach resulted in €251 million fine from EU privacy regulator in December 2024
A security company’s systems were hacked after it installed a malicious Python package
A security company’s systems were hacked after it installed a malicious Python package deployed by Claude. The post Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations appeared first on
Cell C
Data breach confirmed following 2024 cyberattack affecting major South African telecom provider
Bankinter (EVO Banco)
API vulnerability exposed financial and identity data of 1.27 million records in 2024
Ransomware attack
Ransomware attack exposed sensitive data including driver's license numbers from Multiethnic Cohort Study
In March 2026, hackers stole personal, financial, and medical information from the
In March 2026, hackers stole personal, financial, and medical information from the company’s AWS environment. The post CareCloud Data Breach Impacts Over 350,000 appeared first on SecurityWeek.