Advertisement
69GB Philippine Migrant Worker Data Breach: POEA SQL Backups Leaked
Sensitive PII of Philippine migrant workers, including personal data, likely leaked in a 69GB breach from POEA SQL Server backups.
Chainstack Production Breach Exposes Customer Data, Password Hashes
Chainstack suffered a production systems breach, exposing customer data and password hashes to a China-linked threat group using an AI-powered attack framework.
Lazarus Group's Fake Job Interview Leads to Binance Crypto Heist
North Korean Lazarus Group used a fake job interview and zero-day malware to breach Binance, leading to a $6.3 billion crypto heist.
mSecure Warns Users to Change Passwords After Suspicious Activity
mSecure password manager users urged to change passwords, reset 2FA, and remove passkeys following unspecified suspicious activity. Investigation ongoing.
Frontline Education Data Breach: 1.3M+ Records Exposed
Frontline Education breach compromised over 1.3 million records, exposing PII of K-12 staff and students via a third-party software vulnerability.
Florida Student Aid Breach Exposes 4.9M Records
The Florida Student Financial Aid website experienced a data breach, exposing sensitive personal information for up to 4.9 million individuals.
Advertisement
Japan's Cyber Crisis: Surging Attacks & Data Breaches
Japan faces a 'state of emergency in cyberspace' as cyberattacks surged 48% in Q3 2026, leading to massive data breaches and operational disruption.
Northflank Cloud Breach Exposes AI API Keys, LLMJacking Threat
Cloud platform Northflank suffered a security breach, leading to unauthorized use of customer AI API keys and potential LLMJacking. Rotate secrets immediately.
Chainalysis Data Breach: AI Attack Exposes Customer Identity
Chainalysis confirms an intrusion into internal systems using 'offensive agentic techniques,' exposing non-sensitive customer identity data such as user IDs and emails.
Ransomware Disrupts Japan's IDCF Cloud, Affecting Gov't Clients
IDC Frontier's IDCF Cloud suffered a ransomware attack impacting its East Japan Region 1, disrupting services for 495 companies and local governments.
Georgia Power, Alabama Power Data Breach: 400,000 Accounts Hit
Southern Company's Georgia Power and Alabama Power data breach exposed names, addresses, emails, and partial SSNs of 400,000 customers.
Arizona Court System Breach: 1.3 Million Records Stolen via Phishing
A phishing attack led to the theft of personal data for over 1.3 million individuals from Arizona's court system, including sensitive protection orders.
FBI Data Breach: Missed Patch on PeopleSoft Exposes Employee Data
A critical patch failure on an Accenture-managed Oracle PeopleSoft system led to a data breach, exposing FBI employee information to ShinyHunters.
Denmark Population Registry Data Breach: 8.8M Records Exposed
Denmark's Central Population Register reports a data breach affecting 8.8 million individuals, exposing names, addresses, and CPR numbers.
DTU Data Breach Exposes 200,000 User Records via IAM Compromise
The Technical University of Denmark (DTU) reports a data breach affecting up to 200,000 users, exposing sensitive data including CPR numbers.
Frontline Education Data Breach: School Employee SSNs Exposed
Frontline Education confirms a data breach exposed school district employee Social Security numbers, emails, and addresses via a third-party software vulnerability.
Mathspace Breach: Over 1 Million Impacted by Metabase Zero-Day
Mathspace disclosed a data breach affecting over 1 million students, staff, and parents due to a Metabase vulnerability.
CVE-2026-63077: JetBrains Cadence Breach Exposes Credentials
JetBrains Cadence suffered a data breach via unpatched TeamCity (CVE-2026-63077), exposing AWS credentials, source code, and user data. Immediate action required.
IDScan Sued Over Alleged Breach Impacting 153 Million Drivers
IDScan faces lawsuits after a dark-web service allegedly offered to sell 153 million driver's licenses and millions of other identity documents.
French Hospital Fined €500K for GDPR Data Breach
France's CNIL fined Hôpital privé de la Loire €500,000 after a data breach exposed sensitive medical data of 727,000 patients.
Manchester Airports Group Data Leak Exposed by FulcrumSec Extortion
FulcrumSec leaks 550GB of data on 8.8 million individuals after Manchester Airports Group refused to pay a ransom demand following a breach.
Philippines Nuclear Agency Breached via Unpatched ownCloud Flaws
Threat actors exploit unpatched ownCloud vulnerabilities to breach the Philippines nuclear agency, stealing sensitive databases and credentials.
Dark Web Service Nexus Sells 153M+ Driver Licenses
A new dark web service, Nexus, is selling over 153 million drivers' licenses from North America, likely sourced from an identity verification company.
Infostealers Target Anthropic Claude Users via Session Theft
Threat actors are employing various infostealers to compromise Anthropic Claude user accounts via session theft, posing significant risks.