Imagine a stranger flipping through the policies that underwrite your life on the road: more than five million auto insurance records—names, policy numbers, VINs and claims—were left in an unsecured online database anyone could download. Heres what went wrong, whos at risk, and what you can do to protect yourself.
Heads-up: a critical vulnerability in Adobe Commerce and Magento Open Source is being actively exploited — Sansec logged 250+ attack attempts in 24 hours. Merchants should patch immediately, rotate sessions, and hunt for suspicious activity to prevent account takeovers, fraud, and data leaks.
Turns out your pet’s medical chart can be a treasure map for crooks — over 85,000 pet and owner records were left publicly accessible, exposing names, contact details, microchip and medical data. What starts as spam can quickly turn into targeted fraud, identity theft or even false ownership claims, putting families and animals at real risk.
ShinyHunters have kicked off a sweeping campaign of corporate extortion—leaking stolen data and demanding ransoms—so read on to see how companies are fighting back and what it means for you.
WestJet has notified U.S. customers of a recent data breach—find out what happened and the simple steps you can take now to protect your information. Stay informed and act quickly to safeguard your accounts.
What if your car insurance records were sitting unprotected online? For more than 5 million policyholders, that’s exactly what happened when a password-free auto-insurance database exposed names, policy numbers, VINs and claims details — creating prime targets for fraud, identity theft and social-engineering attacks.
About 180,000 people had names and payment details left exposed — putting them at heightened risk of fraud and identity theft; here’s what to do now to protect yourself and why companies must tighten their defenses.
About 180,000 records — including names and payment card data — were left exposed, turning everyday transactions into a potential headache for consumers and a regulatory and reputational crisis for businesses; monitor your accounts, enable alerts, and favor virtual or tokenized payment options while companies patch misconfigurations and tighten security.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
More than 85,000 pet and owner records were left exposed, turning beloved pets’ details into a roadmap for scammers and raising real risks like spam, identity theft and fraudulent claims—here’s what went wrong and what you can do now to protect yourself.
Imagine waking up to find your company’s secrets posted online unless you pay up — that’s the stark reality dozens of firms now face after ShinyHunters launched a brazen public extortion site. This escalation — tied to prior Salesforce, Discord, and Red Hat breaches — raises the stakes for stronger security, faster incident response, and clearer vendor transparency.
WestJet says a recent cybersecurity incident may have exposed U.S. customers’ travel and payment info — if you’ve flown with them recently, check your accounts, be on the lookout for phishing, and watch for the airline’s updates as the investigation continues.
Imagine anyone being able to read your policy—because more than 5 million auto insurance records were left publicly accessible online, putting drivers at immediate risk of fraud and identity theft. This glaring misconfiguration shows how easily useful data can become a goldmine for scammers.
A DHS data hub meant to improve intelligence sharing was reportedly accessible to thousands, risking sensitive sources, operations, and personal data — a stark reminder that centralizing information without strict access controls can turn a security advantage into a vulnerability. Fixing it will take technical fixes, clearer policies, and a culture that makes secure behavior the default.
Have I Been Pwned flags 17.6 million records tied to a suspected September hack of Prosper, leaving customers and regulators in the dark while the lender says it can’t yet verify the claims. Check whether your email appears in the database and take basic precautions like changing passwords and monitoring your credit.
Prosper says it found no evidence of stolen funds, but a data exposure affecting roughly 17 million people still raises real risks of identity theft and phishing — here’s what to watch for and do next.
Sotheby’s recent data breach exposed buyers’ sensitive financial and identity records — and some of those files are already being offered for sale online — forcing clients to scramble for protection and pushing the auction world to rethink security. If you entrusted the house with your details, now’s the time to monitor accounts, consider fraud alerts, and demand stronger safeguards.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Over 23 million people had personal data exposed in Q3, according to the ITRC — a wake-up call that privacy can’t be an afterthought as breaches across sectors put identities, finances and long-term security at risk.
The FBI and French police just knocked BreachForums offline, disrupting a major marketplace for stolen data. It’s a bold win — but domain seizures are only a pause unless paired with sustained investigations, stronger security practices, and international cooperation.
U.S. and French authorities have shut down the latest BreachForums marketplace, a welcome blow to a forum that trafficked stolen data and coordinated extortion. But while the takedown disrupts criminals and helps victims, the real test is whether arrests and sustained action can stop cybercriminals from just reappearing elsewhere.
A cyber gaffe at Prospect exposed sensitive details — including sexual orientation and disability status — for up to 160,000 members. Now the union must act fast with clear fixes and transparent support to rebuild trust and protect vulnerable members.
A zero-day in Oracle E-Business Suite, actively exploited by CL0P since Aug. 9, 2025, likely hit dozens of organizations and put payroll, financial and HR data at risk. Security teams and leaders are racing to contain the damage, patch systems and lock down access before attackers strike again.
Jaguar Land Rover says a cyberattack shut down systems and sparked a 25% drop in quarterly sales, halting production and deliveries — a wake-up call that digital threats can cripple even the most established carmakers.
Two 17‑year‑olds have been arrested after a cyber-attack on Kido nurseries exposed sensitive staff and parent data — a stark reminder that even childcare providers need stronger security, clear answers and better protections for families now.
When a November 2024 cyberattack on Florida’s Doctors Imaging Group exposed medical and financial records for 171,862 patients, it both disrupted care and left people painfully exposed — yet the company offered little remediation or apology. The incident underscores how valuable health data is to criminals and why patients deserve stronger protections and accountability.