Reported Condé Nast database sale creates phishing and account-abuse risk
A reported sale of Condé Nast account data may fuel targeted phishing, but the advertised size and exposed fields remain unconfirmed.
3 min readOpen brief →
A breach matters because of what exposed data can enable next. Track verified disclosures, affected information, downstream identity and fraud risk, and the response decisions organizations should prioritize.
TOPIC NAVIGATIONBrowse all topics →
412,000 The Town 2025 Ticket Buyers’ Data Hits the Dark Web
A forum seller is marketing alleged festival-buyer records for fraud-related uses. The defensive priority is targeted validation and stronger identity controls, not treating the listing as proven.
3 min readOpen brief →
McKesson confirms customer data theft as extortion claims grow
McKesson confirms stolen customer data, while the attacker’s enormous record-count claim remains unverified and the company investigation continues across connected applications.
3 min readOpen brief →
ATF confirms breach of system holding investigation-target data
Segmentation limited the operational impact, but the breached standalone system still held sensitive information about targets of active federal investigations.
3 min readOpen brief →
Utah study finds school apps sharing student data
What a school app sends across the network may differ materially from what its contracts and privacy paperwork promise families.
3 min readOpen brief →
Latvia’s CSDD confirms breach affecting payment records
Latvia’s CSDD has confirmed a breach affecting payment records, while the supplied facts do not show direct compromise of bank accounts, funds or payment systems.
3 min readOpen brief →
Apollo breach exposes personal data after financial-sector social engineering
Apollo Global Management has confirmed that attackers gained unauthorized access to some of its cloud platforms between July 6 and July 10. The private-equity company disclosed the incident…
3 min readOpen brief →
SickKids breach exposes employee and applicant data through third-party software
The Hospital for Sick Children in Toronto has disclosed a cyber incident involving personal information connected to current and former employees, job applicants and people working with related…
3 min readOpen brief →
Latvian officials resign after breach exposes data on 1.2 million people
Latvia’s road traffic agency confirmed a major cyberattack in which attackers stole data connected to about 1.2 million people. The incident triggered political consequences and demonstrated how compromise…
3 min readOpen brief →
CareCloud breach exposes medical records of 3.7 million patients
CareCloud confirmed that attackers accessed an electronic health-record environment and stole information affecting roughly 3.7 million people. Healthcare platforms concentrate highly sensitive identity and medical data and often…
3 min readOpen brief →
Reverse-lookup service exposed millions of facial images and contact details
A reverse-lookup service called ClarityCheck left more than nine million image files reachable without authentication, according to research independently reported by Wired. The exposed storage contained roughly 450…
3 min readOpen brief →
French tax authority data breach affects 678,000 people
A breach at France’s tax authority exposed data tied to 678,000 people, creating not only a privacy issue but a powerful new source of material for follow-on fraud.
3 min readOpen brief →
UK education portals exposed contact records now used for extortion
Cybercriminals attempted to extort the UK Department for Education after compromising two online portals used for support and the Turing Scheme. The criminals claimed to hold more than…
3 min readOpen brief →
Origin Energy says data linked to about 900,000 customers was accessed
Australia’s Origin Energy said personal information belonging to roughly 900,000 current and former customers was accessed in a July cyber incident.
3 min readOpen brief →
Upbound says breach led to $13 million in fraudulent contract losses
Upbound Group said a breach involving customer and business documents contributed to roughly $13 million in fraudulent contract losses. The incident is notable because it demonstrates how data…
3 min readOpen brief →
Paidwork leak reportedly exposed personal and banking data for 23 million users
A database attributed to microtask platform Paidwork was published online with records reportedly covering more than 23 million users. Malwarebytes and The Register cited Have I Been Pwned…
3 min readOpen brief →
Spanish regulator fined 23andMe over safeguards for genetic data
Spain’s data-protection authority fined 23andMe €2.4 million over security and notification failures connected with its 2023 breach. The regulator said more than 2,600 people in Spain were affected…
3 min readOpen brief →
Healthcare software supplier breach exposed employee and customer records
Healthcare software company Craneware disclosed unauthorized access to part of its data environment and the theft of a significant volume of files. Its regulatory filing said the material…
3 min readOpen brief →
Abbott investigates cyberattack on cancer-diagnostics systems
Abbott disclosed unauthorized access to a limited number of internal systems in its cancer-diagnostics business. The affected environment included legacy Exact Sciences systems that remained separate from Abbott’s…
3 min readOpen brief →
Lidl online-shop customer data exposed after service-provider breach
Lidl disclosed that attackers accessed a separately stored customer-data file at an external service provider. The breach affected online-shop customers in Germany, Belgium and the Netherlands and exposed…
3 min readOpen brief →
AssuranceAmerica breach exposes records of nearly 7 million drivers
AssuranceAmerica disclosed that attackers gained access to parts of its IT environment and copied files containing personal and insurance information for 6.9 million people. The exposed data included…
3 min readOpen brief →
Medtronic breach impacts 3.8 million people
Medtronic notified customers after a breach exposed personal and medical information belonging to millions of people. The incident was linked to unauthorized access to corporate IT systems and…
3 min readOpen brief →
DHS investigates breach of sensitive information-sharing platform
The U.S. Department of Homeland Security investigated unauthorized access to the Homeland Security Information Network, a platform used to share sensitive information across federal, state, local and private-sector…
3 min readOpen brief →
Aflac Japan breach exposed data belonging to 4.38 million customers
Aflac disclosed that a breach involving its Japanese subsidiary exposed information associated with approximately 4.38 million customers. BleepingComputer published the underlying report or notice on 2026-06-30, placing the…
3 min readOpen brief →
Cost of a Data Breach Report 2026
Global breach costs reached a record $4.99M while AI-driven attacks rose 56%, changing the economics of cyber risk.
2026 Data Breach Investigations Report
Software vulnerability exploitation now begins 31% of breaches, while ransomware appears in 48%, sharpening the need to reduce exposed attack paths.
Cyber Security Breaches Survey 2025/2026
Cyber crime affected 19% of businesses and 14% of charities, with phishing and repeat victimization shaping the practical risk.