Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
Data Breaches
The incidents, breaches and state campaigns making headlines.
39stories this week
2today
the last seven days
Most fromDataBreaches.net, The Hacker News, BleepingComputer, The Record
In the news hereOpenAI2Microsoft2GitHub1npm and PyPI1APT28 (Fancy Bear)1RansomHub1
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
In today’s reminder of the insider threat, Kim Ji-won reports: A National Health Insurance Service (NHIS) employee was dismissed for illegally selling personal information of health insurance subscribers to external parties, but victims have yet to be notified of the data breach. Rep. Kim Ki-woong of the People Power Party revealed this during a parliamentary…
DataBreaches.net
-
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
Dark Reading
-
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.
BleepingComputer
-
Background information Date of final decision: 2 October 2026 National case Controller: Xandr Inc. Legal References: Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data) Decision: Administrative fine Key words: Fines, Basic principles, Marketing, Online platforms Summary of the Decision Origin of the case The case started in 2020 when…
European Data Protection Board
-
The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas. CenterPoint Energy is a regulated utility company used to deliver natural gas and electricity infrastructure, maintain power grids and pipelines, and restore service across parts of Texas, Indiana, Ohio, and Minnesota. The organization…
Security Affairs
-
Debra Ahmed reports: An unprotected database linked to India-based AI software development and IT services company Vibetech exposed 13.7 million records containing credentials and other sensitive information from previous data breaches. The repository was accessible online without security authentication or a password, according to cybersecurity researcher Jeremiah Fowler, whose findings were published by ExpressVPN and……
DataBreaches.net
-
A cyberattack on Britain’s Legal Aid Agency (LAA) stole far older and broader records than the government previously disclosed.
The Record
-
The UK’s data protection watchdog warns of an “ongoing failure” by the Metropolitan Police Service to restrict staff from using unauthorised IT services…
Computer Weekly
-
Guru Baran reports: Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force companies to pay. According to the Semperis 2026 Ransomware Risk Report, 37% of successful attacks included threats against workers’ friends or relatives. The findings show that ransomware is no longer only a……
DataBreaches.net
-
Tevye Markson has an update on the April 2025 breach of the UK’s Legal Aid Agency, previously reported on this site: A new update on the Legal Aid Agency data breach has revealed that the data which was compromised in a cyberattack in 2025 goes back as far as 1978. The LAA on Wednesday announced……
DataBreaches.net
-
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.
SecurityWeek
-
The ICO has handed the Metropolitan Police a reprimand and enforcement notice after privacy failings linked to the Auror platform…
Infosecurity Magazine
