[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentData Breaches
UK School Faces Data Breach After Photographer's Vehicle Targeted
A break-in at a photographer's vehicle has led to a data breach at Priory School in Lewes, with a stolen camera bag containing SD memory cards that may hold sensitive student information, including names, class details, and photographs. The incident, which occurred overnight on October 6-7, has prompted the school to investigate and take action.
BAE Systems Cyber Incident Paralyzes US Bankruptcy Noticing System
A major cyber incident has crippled the US Bankruptcy Noticing System, leaving thousands of courts nationwide without access to critical bankruptcy notices. The disruption, caused by a BAE Systems cyber incident, has brought the system to a standstill, with officials working to restore access as soon as possible.
BAE Systems Cyberattack Cripples US Bankruptcy Court Notices
A cyberattack on BAE Systems has crippled the US bankruptcy court's notice system, leaving thousands of federal bankruptcy notices in limbo. The Administrative Office of the US Courts is working closely with BAE to investigate and restore operations as soon as possible.
CenterPoint Energy Breach Exposes 1M Customer Records
A security breach at CenterPoint Energy has put the personal data of around 1 million Texans at risk, with hackers gaining unauthorized access to customer information through an externally facing system. The incident was discovered after hackers claimed to have stolen a dataset, prompting an investigation that confirmed the breach.
UK Legal Aid Agency Breach Exposes Decades of Personal Records
A massive data breach at the UK's Legal Aid Agency has exposed a staggering 250,000 personal records, including information dating back to 1978, forcing a major reassessment of the government's data security. The breach, detected in April 2025, reveals that decades-old personal data was surprisingly still accessible on government systems.
UK Legal Aid Agency Breach Exposes Decades of Sensitive Records
A massive breach at the UK's Legal Aid Agency has exposed sensitive records spanning nearly five decades, with stolen data dating as far back as 1978 and affecting around 250,000 records from before 2007. The breach, which occurred in April 2025, compromised a vast trove of applicant, recipient, and provider data.
UK Housing Ombudsman Probes Third-Party IT Breach
The UK Housing Ombudsman Service has launched an investigation into a third-party IT security breach that affected its case management system, and is working closely with the supplier to assess the impact and restore services as quickly as possible. The watchdog is also racing to determine if any personal information was compromised.
TFG London Cyberattack Exposes Retailers' IT Systems
TFG London's cyberattack has left several of its IT systems offline, impacting brands like Phase Eight, Hobbs, and Whistles, but physical stores remain open for business. The incident, detected on October 11, has prompted the company to activate its incident response and business continuity plans.
Cyber Incidents Disrupt European Retail Operations
Ahold Delhaize took swift action to protect its systems, taking some offline after detecting a security issue that impacted three of its popular brands: Albert Heijn, Etos, and Gall & Gall. The move comes as the company works to contain and resolve the disruption.
AI Firm Exposes 14M Credentials in Unsecured Database
A staggering 13.7 million records containing sensitive personal data, including names, passwords, and bank account information, were left vulnerable in an unsecured database, putting millions at risk of identity theft. This massive data breach exposed a treasure trove of stolen credentials and personal info, harvested from earlier breaches, in a single, easily searchable store.
Weak Password Exploited in Denmark's 8.8M Person Data Breach
A weak password, astonishingly "123456", was exploited by hackers to breach Denmark's Central Register of Persons, compromising sensitive data of 8.8 million people. This massive breach highlights the alarming vulnerability of even seemingly secure systems to simple yet devastating cyber attacks.
Fashion Retailer TFG London Hit by Cyberattack
TFG London is battling to contain a cyberattack that hit its operations, but reassures customers that stores are open as usual. The incident has temporarily affected some website capabilities, including orders and payments, while the company investigates.
Danfoss Controllers Exposed in French Supermarket Cyberattack
A wave of cyberattacks hit French supermarkets on October 11, forcing hundreds of stores to warm fridges and freezers, and ultimately discard thousands of dollars' worth of food. The breach, which Danfoss acknowledged was limited to a number of their refrigeration management systems, caused estimated losses of tens of millions of euros.
FBI Apprehends Suspect in ShinyHunters Hacking Case
The FBI has caught a suspect in the ShinyHunters hacking case, which made headlines in September when the group claimed to have stolen a massive trove of sensitive data about FBI agents, calling it an "intelligence disaster". This brazen breach raised serious concerns about the security of the FBI's internal information.
Yandex Disrupted by Drone Attacks on Data Centers
Russia's largest tech company, Yandex, is operating in emergency mode after a series of drone attacks damaged three of its data centers, leaving customers struggling to access cloud-stored files. The attacks, which occurred on consecutive days, have resulted in some services being disrupted, with parts of the company still working to stabilize its systems.
Ahold Delhaize Disrupts Operations After Cyberattack
Ahold Delhaize has taken swift action to protect its customers, employees, and partners after detecting a security issue within its network, taking some systems offline to prevent further damage. The company is working diligently to assess and mitigate the problem.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
H&M Probes Possible Data Breach by ShinyHunters Group
H&M is investigating claims of a potential data breach after online rumors surfaced, and is working to verify if a cyber attack by the ShinyHunters group has compromised its data. The retailer says it's taking the situation seriously and prioritizing the security of its systems and data.
Daiichi Kosho Breach Exposes 8 Million Customer Records
A shocking data breach at Daiichi Kosho has put 8 million customer records at risk, with the company confirming that personal data stored on an infected device may have been leaked. The breach was discovered after a malware infection was found on an employee's PC at Nippon Columbia Group, a partner of Daiichi Kosho.
FBI Arrests Cybersecurity Executive in Extortion Case Tied to ShinyHunters Breach
A Canadian cybersecurity executive, Edward Dubrovsky, has been arrested in Pennsylvania on charges of conspiring to extort money through threats, linked to the ShinyHunters breach. The charges against him include violating federal computer fraud law and committing Hobbs Act extortion.
Japan's Web Data Leaks Surge Amid API Abuse and Metabase Attacks
Japan is facing a surge in web data leaks, with 81 incidents reported from July onwards, and experts point to a wave of API abuse and targeted exploitation of a Metabase flaw as the main culprits. In just a few months, personal data from millions of accounts has been stolen, including sensitive info like driver's license images.
Breaches Expose Sensitive Data at Dropbox, Healthcare Firms
Massive data breaches are making headlines, with over 150 million driver's licenses compromised and around 5,000 Dropbox accounts exposed through a third-party vulnerability. These staggering incidents highlight the vulnerability of our sensitive information in today's digital landscape.
ASOS Breach Exposes Customer Data After Stolen Credentials Used
ASOS recently suffered a data breach when an attacker impersonated a trusted contact to steal employee login credentials, which were then used to access sensitive customer information on third-party platforms. The breach highlights the importance of protecting sensitive data and preventing unauthorized access.
Healthcare Breach Exposes 20 Million Patient Records
A recent healthcare breach has put 20 million patient records at risk, highlighting the vulnerabilities that can arise during cloud migrations - especially when sensitive data is left exposed on servers. Even with the best intentions, a single misstep can leave patients' personal and medical information in the wrong hands.
ASOS Breach Exposes Customer Data After Credential Theft
ASOS recently fell victim to a sneaky social engineering attack, where hackers tricked an employee into handing over their login credentials, allowing the attackers to access sensitive customer data stored on third-party platforms. The company quickly sprang into action, locking down the affected platforms to prevent further damage.