52 articles
Norway's Data Protection Authority fined Xandr, a Microsoft-owned advertising firm, $9.6 million for unlawfully processing and sharing sensitive Grindr user data without valid consent between 2018 and 2020.
Hackers accessed and copied backup files from Arizona’s court system, exposing sensitive personal data of over 1.3 million individuals, including Social Security numbers and foster care case records spanning three decades.
ASOS confirmed a data breach after hackers sent fake 'HACKED' push notifications through its mobile app, claiming access to its Snowflake environment and customer data.
A data breach in Denmark's Central Population Register exposed personal information of 8.8 million people, including names, addresses, and CPR numbers, after threat actors abused a private company's legitimate access.
The FBI’s New Orleans field office is probing a breach at identity verification provider IDScan.net after over 153 million U.S. and Canadian driver licenses appeared for sale on the dark web service Nexus.
The Technical University of Denmark (DTU) confirms a breach of its identity and access management system may have exposed data of up to 200,000 current and former users since 2003.
A New Mexico jury found Meta liable for deceiving consumers about data privacy practices, with each violation carrying up to $5,000 in penalties, potentially totaling billions in damages.
Bitget CEO Gracy Chen confirmed hackers stole $387.5 million from the exchange, attributing the breach to North Korean-linked threat actors and activating recovery efforts with Mandiant and SlowMist.
Labcorp agreed to pay $2.3 million and overhaul vendor data security practices after a 2019 breach exposed 10.2 million patients’ health information through its debt collector AMCA.
A cybercriminal has leaked gameplay footage of Grand Theft Auto VI, sparking a data extortion attack and prompting Take-Two Interactive Software to seek subpoenas against tech companies.
Dutch regulators have fined Uber nearly $1 billion for using automated software to suspend driver accounts without human review, violating EU's General Data Protection Regulation.
A cyberattack on Latvia's Road Traffic Safety Directorate exposed data on 1.2 million people, prompting calls for senior officials to resign.
Two Berlin state ministries have been cut off from the city government's IT network after a security breach, with employees forced to communicate by telephone, text message, and fax.
A third-party data breach at CEVA Logistics exposed customer info and canceled some Pokémon Center orders in the UK and Germany.
A data breach at the French Ministry of the Economy and Finance has affected 678,000 individuals, with stolen data including tax information and property records.
Levi Strauss & Co. suffered a cyberattack where hackers stole corporate data using social engineering tactics on three employees.
Amgen suffered a data breach exposing patient health and proprietary information stored in third-party cloud systems.
South Korea's Personal Information Protection Commission fines KT Corporation $39 million for a customer data breach affecting 16,647 subscribers.
Analog Devices announced a data breach after an unauthorized party accessed its systems, but claims operations were unaffected.
India's nuclear operator claims leaked documents from Kudankulam plant pose no safety risk, despite thousands of files being published online by cybercrime group World Leaks.
Genetic testing company 23andMe agrees to pay $18 million to settle claims over a 2023 data breach that exposed 6.9 million customers' genetic data.
A Supreme Court decision has put the EU-US Data Privacy Framework at risk, potentially disrupting €1.7 trillion in transatlantic trade and forcing companies like Meta and Google to reconsider their presence in Europe.
The US Justice Department has seized nearly 400 web domains used for illegally streaming FIFA World Cup matches, protecting consumers and enforcing intellectual property rights worldwide.
Decentralized prediction market Polymarket has been hacked, with approximately $3 million in cryptocurrency stolen from users.
Nintendo of America confirmed that threat actors stole internal survey data from the third-party TinyPulse service, with the Shadowbyt3$ group demanding a $2 million ransom
Cybersecurity firms Huntress and Recorded Future were impacted by a supply chain attack on market intelligence platform Klue, resulting in unauthorized access to customer data.
A Missouri bankruptcy court has approved a $47 million settlement fund for 7 million victims of a 2023 data breach at genetics testing company 23andMe.
Danish pharmaceutical giant Novo Nordisk disclosed a data breach affecting patient information from some clinical trials, including pseudonymized patient data and exposed healthcare professional information.
Maine has disabled its public data breach reporting portal after fake disclosures were submitted, including a hoax claiming a VRChat breach affecting 2.4 million people.
South Korea's data protection regulator has imposed a record $409 million fine on Coupang, the country's largest online retailer, after a data breach compromised the personal information of tens of millions of customers.
SoFi Hong Kong suffered a data breach after hackers gained access to a database at a third-party vendor containing customer information.
The United Nations' World Food Programme disclosed a breach affecting 600,000 Gaza households, with attackers gaining access to personal data including names, ID numbers, and location information.
Cruise giant Carnival confirms a data breach affecting nearly 6 million people, with stolen data including names, addresses, and passport numbers.
A data breach at Charter Communications has affected 4.9 million accounts, with the ShinyHunters extortion gang claiming responsibility and leaking stolen documents on the dark web.
California AG sues 23andMe over a 2023 data breach that exposed sensitive health information of nearly 7 million customers, including 855,541 Californians.
California's attorney general sued 23andMe, alleging it failed to protect user data in a 2023 breach affecting nearly 7 million people.
Charter Communications confirms data breach after ShinyHunters extortion threat, affecting millions of customer records.
Lithuanian prosecutors are investigating a major data breach affecting the country's state registry systems, potentially exposing sensitive personal and property records of over 600,000 individuals.
A data breach at 7-Eleven has exposed the personal information of 185,000 people, including names, dates of birth, email addresses, phone numbers, and physical addresses.
Italian authorities dismantled the CINEMAGOAL piracy app, which stole streaming authentication codes, causing estimated damages of €300 million in unpaid subscription revenues.
Lawmakers are demanding answers from CISA after a contractor leaked agency secrets on a public GitHub account, raising concerns about the agency's internal policies and procedures.
Convenience store giant 7-Eleven confirms a data breach after ShinyHunters claimed to have stolen information from the company's systems.
A CISA contractor leaked credentials to highly privileged AWS GovCloud accounts and internal CISA systems on a public GitHub repository.
More than $10 million was stolen from cryptocurrency platform THORChain during a security incident on Friday morning.
Colorado Governor Jared Polis has commuted the prison sentence of Tina Peters, the former Mesa County election clerk who was sentenced to nine years for a serious election-related data breach.
A data breach at American Lending Center has impacted over 123,000 individuals, with stolen information including names, dates of birth, and SSNs.
South Staffordshire Water was fined £963,900 for failing to discover hackers hidden inside its computer network for nearly two years, resulting in the personal data of 633,887 customers and employees being published.
Cybercriminals threaten to leak 3.65 terabytes of sensitive data from Canvas, a widely used education tech platform, after a prolonged cyberattack.
ShinyHunters claims nearly 9,000 schools are affected by a data breach of Canvas, a learning management system, with personal information of 275 million users compromised.
AI evaluation platform Braintrust urges customers to rotate API keys after a data breach, where hackers accessed an AWS account, potentially exposing keys used by companies like Box and Dropbox.
A data extortion attack on the education technology platform Canvas has disrupted classes and coursework at schools and universities across the US, with hackers threatening to leak data from 275 million students and faculty.
A data breach at Zara exposed personal information of 197,000 customers, including email addresses, geographic locations, and purchase history.