Cybersecurity articles tagged #Data Breach on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/manchester-airports-group-data-leak-exposed-by-fulcrumsec-extortionhttps://runtimerebel.com/blog/manchester-airports-group-data-leak-exposed-by-fulcrumsec-extortionFulcrumSec leaks 550GB of data on 8.8 million individuals after Manchester Airports Group refused to pay a ransom demand following a breach.Thu, 03 Sep 2026 19:01:09 GMTData BreachRansomwareCredential TheftFulcrumSecManchester Airports Grouphttps://runtimerebel.com/blog/philippines-nuclear-agency-breached-via-unpatched-owncloud-flawshttps://runtimerebel.com/blog/philippines-nuclear-agency-breached-via-unpatched-owncloud-flawsThreat actors exploit unpatched ownCloud vulnerabilities to breach the Philippines nuclear agency, stealing sensitive databases and credentials.Wed, 02 Sep 2026 02:00:51 GMTownCloudData BreachCredential TheftVulnerabilityPhilippineshttps://runtimerebel.com/blog/dark-web-service-nexus-sells-153m-driver-licenseshttps://runtimerebel.com/blog/dark-web-service-nexus-sells-153m-driver-licensesA new dark web service, Nexus, is selling over 153 million drivers' licenses from North America, likely sourced from an identity verification company.Wed, 02 Sep 2026 01:59:46 GMTDark WebIdentity TheftData BreachNexusExploit Forumhttps://runtimerebel.com/blog/nutex-health-suffers-data-breach-sensitive-data-exfiltratedhttps://runtimerebel.com/blog/nutex-health-suffers-data-breach-sensitive-data-exfiltratedNutex Health experienced a data breach exposing patient, employee, and operational data. The company is assessing the full impact.Wed, 26 Aug 2026 08:32:29 GMTData BreachHealthcareCybersecurityNutex HealthExfiltrationhttps://runtimerebel.com/blog/encrypted-prompts-bypass-ai-safety-guardrails-in-grok-and-geminihttps://runtimerebel.com/blog/encrypted-prompts-bypass-ai-safety-guardrails-in-grok-and-geminiResearchers discover cryptographic context injection, a novel technique bypassing AI safety filters in xAI Grok and Google Gemini using encryption.Sat, 22 Aug 2026 08:19:25 GMTArtificial IntelligencePrompt InjectionZero-DayData BreachGoogle Geminihttps://runtimerebel.com/blog/hundreds-of-leaked-aws-keys-expose-corporate-cloud-accountshttps://runtimerebel.com/blog/hundreds-of-leaked-aws-keys-expose-corporate-cloud-accountsResearch reveals over 9,000 publicly exposed Amazon Web Services access keys remain active, including hundreds of root and administrator credentials.Fri, 21 Aug 2026 16:21:53 GMTAWSCredential TheftCloud SecurityIAMData Breachhttps://runtimerebel.com/blog/sakura-internet-breach-exposes-1-36-million-accountshttps://runtimerebel.com/blog/sakura-internet-breach-exposes-1-36-million-accountsJapanese cloud provider Sakura Internet discloses a data breach exposing customer contract and membership data for up to 1.36 million accounts.Thu, 20 Aug 2026 08:27:44 GMTSakura InternetData BreachJapanCloud ProviderSales Management Systemhttps://runtimerebel.com/blog/threat-actor-claims-3-6-million-azure-account-records-stolenhttps://runtimerebel.com/blog/threat-actor-claims-3-6-million-azure-account-records-stolenA threat actor named TheHatman is selling 3.6 million employee records allegedly stolen from major corporate Azure tenants using compromised credentials.Tue, 18 Aug 2026 00:40:50 GMTCredential TheftData BreachAzurePhishingSocial Engineeringhttps://runtimerebel.com/blog/dgfip-data-breach-exposes-680000-individuals-tax-datahttps://runtimerebel.com/blog/dgfip-data-breach-exposes-680000-individuals-tax-dataFrance's DGFiP disclosed a data breach exposing tax income, withholding rates, and cadastral data for 680,000 individuals via compromised credentials.Mon, 17 Aug 2026 16:18:28 GMTDGFiPData BreachFranceCompromised CredentialsTax Datahttps://runtimerebel.com/blog/safepal-data-breach-exposes-39798-customer-order-detailshttps://runtimerebel.com/blog/safepal-data-breach-exposes-39798-customer-order-detailsSafePal confirms a data breach impacting 39,798 customers, exposing names, emails, and shipping info. Stolen data is for sale, increasing phishing risks.Mon, 17 Aug 2026 00:40:25 GMTSafePalData BreachPhishingCryptocurrencySocial Engineeringhttps://runtimerebel.com/blog/beacon-crm-data-breach-exposes-over-1000-charity-databaseshttps://runtimerebel.com/blog/beacon-crm-data-breach-exposes-over-1000-charity-databasesBeacon CRM data breach exposed personal details of supporters across 1,000+ charities due to a compromised AWS access key.Sun, 16 Aug 2026 00:43:21 GMTData BreachCloud SecurityData ExfiltrationBeacon CRMCharitieshttps://runtimerebel.com/blog/scottish-government-data-breach-at-prosecutor-s-office-via-third-partyhttps://runtimerebel.com/blog/scottish-government-data-breach-at-prosecutor-s-office-via-third-partyThe Scottish Crown Office and Procurator Fiscal Service (COPFS) suffered a data breach linked to a third-party supplier, risking sensitive personal data.Sat, 15 Aug 2026 16:15:22 GMTData BreachThird Party RiskSupply Chain AttackPersonal DataScottish Governmenthttps://runtimerebel.com/blog/ringcentral-data-breach-exposes-1-6m-users-to-shinyhuntershttps://runtimerebel.com/blog/ringcentral-data-breach-exposes-1-6m-users-to-shinyhuntersRingCentral data breach impacts 1.6 million users after a sophisticated social engineering attack by ShinyHunters. Names, emails, addresses, and phone numbers exposed.Sat, 15 Aug 2026 16:14:41 GMTShinyHuntersData BreachSocial EngineeringExtortionRingCentralhttps://runtimerebel.com/blog/shinyhunters-breaches-shipmonk-14000-trezor-customers-data-exposedhttps://runtimerebel.com/blog/shinyhunters-breaches-shipmonk-14000-trezor-customers-data-exposedShinyHunters group breached shipping provider ShipMonk, exposing personal data of 14,000 Trezor customers via a Metabase SQL injection vulnerability.Fri, 14 Aug 2026 09:00:29 GMTData BreachShinyHuntersSQL InjectionShipMonkTrezorhttps://runtimerebel.com/blog/data-analyst-sentenced-to-prison-for-extorting-brightly-softwarehttps://runtimerebel.com/blog/data-analyst-sentenced-to-prison-for-extorting-brightly-softwareA former data analyst contractor was sentenced to two years in prison for orchestrating a $2.5 million cryptocurrency extortion scheme against Brightly.Fri, 14 Aug 2026 08:59:48 GMTData BreachCredential TheftRansomwareInsider Threathttps://runtimerebel.com/blog/city-forum-data-theft-targets-salesforce-and-servicenow-portalshttps://runtimerebel.com/blog/city-forum-data-theft-targets-salesforce-and-servicenow-portalsCity-Forum data theft attacks target misconfigured Salesforce and ServiceNow portals, exploiting overly permissive guest access rules.Thu, 13 Aug 2026 01:06:33 GMTSalesforceServiceNowData BreachCloud SecurityCredential Thefthttps://runtimerebel.com/blog/wesco-confirms-cloud-crm-incident-after-exfilsquad-data-leakhttps://runtimerebel.com/blog/wesco-confirms-cloud-crm-incident-after-exfilsquad-data-leakWesco confirms a cloud CRM security incident as ExfilSquad claims theft of 2.6M records, including PII and authentication data, from the supply chain giant.Tue, 11 Aug 2026 16:49:00 GMTData BreachSupply ChainPIIExfilSquadCRMhttps://runtimerebel.com/blog/swiss-government-sharepoint-breach-200-accounts-compromisedhttps://runtimerebel.com/blog/swiss-government-sharepoint-breach-200-accounts-compromisedSwitzerland's federal IT office confirms a Microsoft SharePoint breach compromised approximately 200 accounts, leading to a swift remediation.Mon, 10 Aug 2026 00:59:49 GMTSharePointData BreachSwiss GovernmentAccount CompromiseMicrosoft SharePointhttps://runtimerebel.com/blog/metabase-zero-day-exploited-unauthenticated-admin-accesshttps://runtimerebel.com/blog/metabase-zero-day-exploited-unauthenticated-admin-accessMetabase zero-day vulnerability (CVSS 10.0) actively exploited, allowing unauthenticated remote attackers to gain admin access and steal data.Sat, 08 Aug 2026 08:28:26 GMTZero-DaySQL InjectionUnauthenticated AccessData BreachMetabasehttps://runtimerebel.com/blog/metabase-sqli-zero-day-exploited-data-theft-attacks-confirmedhttps://runtimerebel.com/blog/metabase-sqli-zero-day-exploited-data-theft-attacks-confirmedA critical Metabase SQL injection zero-day vulnerability (versions 1.58+) has been exploited in data theft attacks affecting customers like Framework and Tally.Sat, 08 Aug 2026 00:54:50 GMTSQL InjectionZero-DayData BreachMetabaseFrameworkhttps://runtimerebel.com/blog/unlimited-technology-systems-data-breach-exposes-3-8m-recordshttps://runtimerebel.com/blog/unlimited-technology-systems-data-breach-exposes-3-8m-recordsUnlimited Technology Systems disclosed a data breach exposing PII and PHI of 3.8 million individuals, including Social Security numbers.Fri, 07 Aug 2026 08:47:50 GMTData BreachHealthcarePHIPIIIdentity Thefthttps://runtimerebel.com/blog/canadian-threat-actor-pleads-guilty-in-snowflake-extortionshttps://runtimerebel.com/blog/canadian-threat-actor-pleads-guilty-in-snowflake-extortionsConnor Riley Moucka pleaded guilty to computer fraud and extortion involving 165 Snowflake client organizations and AT&T customer records.Fri, 07 Aug 2026 02:10:26 GMTCredential TheftRansomwareData BreachSnowflakehttps://runtimerebel.com/blog/snowflake-hacker-pleads-guilty-analyzing-the-unc5537-data-breachhttps://runtimerebel.com/blog/snowflake-hacker-pleads-guilty-analyzing-the-unc5537-data-breachHacker pleads guilty in UNC5537 Snowflake data breach, compromising 165 organizations and millions of records via stolen credentials.Fri, 07 Aug 2026 02:09:26 GMTSnowflakeData BreachUNC5537Credential TheftCybercrimehttps://runtimerebel.com/blog/amgen-cloud-data-breach-patient-health-and-proprietary-data-exposedhttps://runtimerebel.com/blog/amgen-cloud-data-breach-patient-health-and-proprietary-data-exposedAmgen confirms a data breach exposed patient health and corporate data stored in third-party cloud systems. Understand the impact and mitigation.Sat, 01 Aug 2026 06:30:31 GMTAmgenData BreachCloud SecurityHealthcarePharmaceuticalPatient DataThird Party Riskhttps://runtimerebel.com/blog/north-korea-attribution-data-breaches-impact-ontrac-uk-educationhttps://runtimerebel.com/blog/north-korea-attribution-data-breaches-impact-ontrac-uk-educationAWS attributes recent hacks to North Korea. OnTrac and the UK Department for Education report significant data breaches, impacting over 600,000 records.Fri, 31 Jul 2026 17:43:11 GMTNorth KoreaAPTData BreachOntracUK Department for EducationAWShttps://runtimerebel.com/blog/kt-corporation-fined-39m-by-pipc-for-data-protection-failureshttps://runtimerebel.com/blog/kt-corporation-fined-39m-by-pipc-for-data-protection-failuresSouth Korea's KT Corporation faces a $39 million fine from PIPC for extensive data protection violations, impacting millions of customers.Fri, 31 Jul 2026 02:55:43 GMTKT CorporationSouth KoreaPIPCData BreachTelecommunicationsData Protectionhttps://runtimerebel.com/blog/shinyhunters-breaches-brinks-home-threatens-data-leakhttps://runtimerebel.com/blog/shinyhunters-breaches-brinks-home-threatens-data-leakShinyHunters claims a breach of Brinks Home systems, threatening to leak stolen data. This analysis covers the threat actor, potential impact, and mitigation.Thu, 30 Jul 2026 17:31:04 GMTShinyHuntersBrinks HomeData BreachData LeakExtortionCybercrimehttps://runtimerebel.com/blog/mcbs-network-breach-1-26-million-records-compromisedhttps://runtimerebel.com/blog/mcbs-network-breach-1-26-million-records-compromisedMedical billing provider MCBS discloses a network breach affecting 1.26 million individuals, highlighting systemic risks in the healthcare supply chain.Tue, 28 Jul 2026 10:37:56 GMTMCBSHealthcare SecurityData BreachMedical BillingPIIhttps://runtimerebel.com/blog/origin-energy-data-breach-900000-australians-affectedhttps://runtimerebel.com/blog/origin-energy-data-breach-900000-australians-affectedAn unauthorized breach of Origin Energy systems has exposed personal data for approximately 900,000 Australian customers. Understand the impact and recommended actions.Tue, 28 Jul 2026 06:29:14 GMTOrigin EnergyAustraliaData BreachCustomer DataPersonal Informationhttps://runtimerebel.com/blog/shinyhunters-data-leaks-fuel-2000-sextortion-phishing-campaignhttps://runtimerebel.com/blog/shinyhunters-data-leaks-fuel-2000-sextortion-phishing-campaignScammers are weaponizing personal data from ShinyHunters leaks to launch convincing sextortion campaigns demanding $2,000 in Bitcoin from victims.Sat, 25 Jul 2026 17:00:04 GMTShinyHuntersSextortionPhishingData BreachSocial Engineeringhttps://runtimerebel.com/blog/chick-fil-a-data-breach-over-13k-accounts-compromised-via-credential-stuffinghttps://runtimerebel.com/blog/chick-fil-a-data-breach-over-13k-accounts-compromised-via-credential-stuffingChick-fil-A confirms a data breach affecting over 13,000 customer accounts through credential stuffing, leading to drained rewards and gift cards.Fri, 24 Jul 2026 17:41:55 GMTChick Fil aData BreachCredential StuffingAccount TakeoverCustomer Datahttps://runtimerebel.com/blog/origin-energy-data-breach-2-million-customers-data-compromisedhttps://runtimerebel.com/blog/origin-energy-data-breach-2-million-customers-data-compromisedAustralian energy giant Origin Energy confirms a data breach impacting 2 million customers. A hacker claims to have stolen information and threatens public disclosure.Fri, 24 Jul 2026 06:26:59 GMTOrigin EnergyData BreachAustraliaCustomer DataEnergy SectorThreat Disclosurehttps://runtimerebel.com/blog/origin-energy-data-breach-exposes-client-piihttps://runtimerebel.com/blog/origin-energy-data-breach-exposes-client-piiAustralian energy provider Origin Energy confirms a data breach exposed sensitive Personally Identifiable Information of its clients, heightening fraud risks.Thu, 23 Jul 2026 21:06:35 GMTOrigin EnergyData BreachPII ExposureAustraliaEnergy Sectorhttps://runtimerebel.com/blog/south-korea-diplomatic-academy-breach-exposes-mfa-staff-datahttps://runtimerebel.com/blog/south-korea-diplomatic-academy-breach-exposes-mfa-staff-dataSouth Korea's National Diplomatic Academy suffered a 10-month data breach, exposing personal info of MFA employees and diplomats globally.Wed, 22 Jul 2026 21:12:04 GMTSouth KoreaMFADiplomatic AcademyData BreachGovernment Securityhttps://runtimerebel.com/blog/suno-paidwork-data-breaches-expose-millions-of-accountshttps://runtimerebel.com/blog/suno-paidwork-data-breaches-expose-millions-of-accountsTens of millions of Suno and Paidwork user accounts were compromised, exposing personal data, emails, and financial information, demanding immediate user action.Wed, 22 Jul 2026 17:22:28 GMTSunoPaidworkData BreachAccount CompromisePIICredential TheftFinancial Datahttps://runtimerebel.com/blog/everest-ransomware-targets-stadler-rail-s-supply-chainhttps://runtimerebel.com/blog/everest-ransomware-targets-stadler-rail-s-supply-chainStadler Rail faced a $12.3M ransom demand from Everest ransomware after a data breach affecting a supplier data exchange platform.Wed, 22 Jul 2026 17:21:52 GMTEverest RansomwareStadler RailSupply Chain AttackData BreachRansomwarehttps://runtimerebel.com/blog/clover-health-investments-data-breach-social-engineering-compromises-employee-accountshttps://runtimerebel.com/blog/clover-health-investments-data-breach-social-engineering-compromises-employee-accountsClover Health Investments reports a data breach impacting personal and health information after social engineering tactics compromised employee accounts.Tue, 21 Jul 2026 10:41:19 GMTClover HealthData BreachSocial EngineeringAccount CompromiseHealthcarehttps://runtimerebel.com/blog/estee-lauder-data-breach-oracle-e-business-suite-flaw-exploitedhttps://runtimerebel.com/blog/estee-lauder-data-breach-oracle-e-business-suite-flaw-exploitedEstée Lauder discloses a data breach affecting HR systems due to an unpatched flaw in Oracle E-Business Suite. Customers notified of potential data exposure.Tue, 21 Jul 2026 02:53:03 GMTEst U00e9e LauderOracle E Business SuiteData BreachHR SystemsVulnerabilityEnterprise Securityhttps://runtimerebel.com/blog/hugging-face-infrastructure-breach-analyzing-autonomous-ai-agent-ttpshttps://runtimerebel.com/blog/hugging-face-infrastructure-breach-analyzing-autonomous-ai-agent-ttpsHugging Face discloses a breach where autonomous AI agents compromised production infrastructure, exposing internal datasets and secrets. Learn how to mitigate.Mon, 20 Jul 2026 14:19:12 GMTHugging FaceAutonomous AI AgentCredential ExposureMLOps SecurityData Breachhttps://runtimerebel.com/blog/hugging-face-infrastructure-breached-by-autonomous-ai-agenthttps://runtimerebel.com/blog/hugging-face-infrastructure-breached-by-autonomous-ai-agentHugging Face reports a breach of its production infrastructure by an autonomous AI agent, resulting in unauthorized access to internal datasets and credentials.Mon, 20 Jul 2026 06:48:21 GMTHugging FaceAI SecurityAutonomous AgentsData BreachCredential Thefthttps://runtimerebel.com/blog/abbott-labs-probes-dual-cyber-incidents-data-theft-extortionhttps://runtimerebel.com/blog/abbott-labs-probes-dual-cyber-incidents-data-theft-extortionAbbott Laboratories confirms unauthorized access to Exact Sciences systems and investigates alleged LabCentral breach amid extortion. Learn about the dual threat.Fri, 17 Jul 2026 20:58:16 GMTAbbott LaboratoriesExact SciencesLabCentralData BreachExtortionCyber IncidentHealthcare Securityhttps://runtimerebel.com/blog/diverse-threat-landscape-military-tracking-macos-malware-defense-ransomwarehttps://runtimerebel.com/blog/diverse-threat-landscape-military-tracking-macos-malware-defense-ransomwareAnalysis of diverse threats including reported Iranian tracking of US military phones, CrashStealer macOS malware, ransomware on a naval firm, and a Lidl data breach.Fri, 17 Jul 2026 17:14:58 GMTIranUS MilitaryCrashStealermacOS MalwareRansomwareNaval DefenseTKMSLidlData Breachhttps://runtimerebel.com/blog/ey-data-breach-third-party-support-system-exposes-client-datahttps://runtimerebel.com/blog/ey-data-breach-third-party-support-system-exposes-client-dataErnst & Young (EY) disclosed a data breach stemming from a compromise of a third-party IT support system, potentially exposing customer information.Fri, 17 Jul 2026 17:14:18 GMTErnst YoungEYData BreachSupply Chain AttackThird Party Riskhttps://runtimerebel.com/blog/23andme-18m-settlement-lessons-in-protecting-genetic-data-privacyhttps://runtimerebel.com/blog/23andme-18m-settlement-lessons-in-protecting-genetic-data-privacy23andMe agrees to an $18 million settlement with 43 attorneys general following a 2023 data breach that exposed sensitive genetic data of millions.Thu, 16 Jul 2026 14:03:41 GMT23andMeData BreachCredential StuffingPrivacy Settlementhttps://runtimerebel.com/blog/balochistan-police-portal-exploited-in-multi-group-espionage-campaignhttps://runtimerebel.com/blog/balochistan-police-portal-exploited-in-multi-group-espionage-campaignMultiple threat actors weaponize Balochistan Police infrastructure, compromising criminal records and citizen data in a multi-year espionage operation.Sat, 11 Jul 2026 20:51:09 GMTBalochistan PolicePakistanEspionageData BreachLaw Enforcementhttps://runtimerebel.com/blog/assuranceamerica-data-breach-impacts-7m-dhs-database-hackedhttps://runtimerebel.com/blog/assuranceamerica-data-breach-impacts-7m-dhs-database-hackedAnalysis of the AssuranceAmerica data breach affecting 7 million individuals and the reported hack of a DHS database.Sat, 11 Jul 2026 02:46:36 GMTAssuranceAmericaData BreachDHSCybersecurity IncidentPersonal Data CompromiseRansomware DisruptionAdobe Securityhttps://runtimerebel.com/blog/odido-data-breach-analysis-dutch-police-suspect-local-hacker-involvementhttps://runtimerebel.com/blog/odido-data-breach-analysis-dutch-police-suspect-local-hacker-involvementDutch National Police identify strong indications of local hacker involvement in the February data breach at telecommunications provider Odido.Fri, 10 Jul 2026 21:07:51 GMTOdidoData BreachTelecommunicationsDutch PoliceCybercrimehttps://runtimerebel.com/blog/mount-royal-university-data-breach-ransomware-impact-mitigationhttps://runtimerebel.com/blog/mount-royal-university-data-breach-ransomware-impact-mitigationMount Royal University confirms a ransomware attack led to data theft and deletion, impacting student, employee, and university data. Review critical mitigation steps.Thu, 09 Jul 2026 11:03:28 GMTRansomwareData BreachMount Royal UniversityEducation SectorData Deletionhttps://runtimerebel.com/blog/mount-royal-university-data-breach-network-intrusion-data-theft-and-deletionhttps://runtimerebel.com/blog/mount-royal-university-data-breach-network-intrusion-data-theft-and-deletionMount Royal University confirms a significant data breach involving network intrusion, data theft, and subsequent deletion of files from storage systems.Thu, 09 Jul 2026 03:27:03 GMTMount Royal UniversityData BreachNetwork IntrusionData TheftHigher Educationhttps://runtimerebel.com/blog/accenture-data-breach-source-code-theft-confirmedhttps://runtimerebel.com/blog/accenture-data-breach-source-code-theft-confirmedAccenture confirms a data breach involving source code theft. Runtime Rebel analyzes the incident, potential impacts, and recommends urgent mitigation steps for similar…Wed, 08 Jul 2026 17:39:50 GMTAccentureData BreachSource Code TheftProfessional Services SecurityIntellectual Property Theft