Discord says its servers weren’t hacked — but customer IDs and payment details were stolen from a compromised support vendor, showing how outsourcing can turn into a privacy disaster. If you use Discord, now’s the time to check your payment methods, monitor statements, and enable extra protections like MFA.
Renault and Dacia have informed customers that a supplier’s data exposure may have leaked personal information, a reminder that one weak third party can put many at risk. If you own a Renault or Dacia, now’s the time to check communications, watch for phishing, and demand clearer, faster protections from automakers and their vendors.
WestJet revealed a criminal intrusion that exposed personal and loyalty data for about 1.2 million customers, raising urgent questions about airline cybersecurity and what it means for your privacy. Read on to learn what happened, why stolen travel data is so dangerous, and simple steps you can take right now to protect yourself.
Renault UK is investigating after a supplier breach exposed customers’ names, phone numbers and registration plates and says it will contact anyone affected while urging extra caution against phishing. It’s a reminder that third‑party systems can put your identity at risk — watch for suspicious messages and keep an eye on accounts and vehicle paperwork.
Red Hat is scrambling after a hacking group called the Crimson Collective claims to have leaked roughly 570 GB from about 28,000 private repositories — including source code, internal notes and customer documents — a breach that could upend supply chains and privacy protections. If confirmed, assume exposure: rotate credentials, audit CI/CD and follow Red Hat’s guidance while investigators work to assess the full scope.
About 3.7 million North Americans just received breach notices after incidents at Allianz Life, WestJet and a payroll software vendor — leaving many wondering what to do next and how to protect themselves. Read on for what happened, what to watch for, and simple steps you can take right now to guard your identity.
A cyberattack forced Asahi to shut down distribution systems, leaving bars and shops scrambling for stock and showing how even your favorite beer can be derailed by invisible digital threats. The outage is a wake-up call about fragile supply chains and the tough tradeoffs between rapid containment and keeping business flowing.
Harrods says a third‑party supplier caused a breach that exposed about 430,000 customers, but that blame game leaves people hungry for clear details on what was taken and how they’ll be protected. As trust frays, customers and regulators will demand better transparency and tighter vendor oversight.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
If you shopped online at Harrods, a supply‑chain breach may have exposed customer data — a reminder that even luxury brands aren’t immune when a trusted vendor is compromised. Check your accounts, enable MFA, and watch for phishing while retailers tighten vendor security and transparency.
Salesforce now faces a wave of lawsuits after customer data stolen from Salesloft surfaced in identity‑theft schemes, sparking a heated debate over who’s liable when third‑party integrations expose sensitive information. The outcome could reshape how platforms, vendors, and customers share responsibility for security in a cloud‑first world.
Volvo North America says some employee records were accessed after a ransomware strike on HR supplier Miljödata, a reminder of how risky outsourcing payroll and benefits can be. Affected staff are being notified as investigators work the case — and the incident spotlights the urgent need for tougher vendor security and clearer breach rules.
A recent cyberattack on Kido International exposed photos and home addresses of preschoolers, leaving parents reeling and asking how we can better protect the kids in our care. This alarming breach shows why stronger security, clearer rules, and more support for small childcare providers are urgently needed.
After a major cyberattack forced the Co-op to isolate critical systems, the group now expects a £206m revenue hit — a sharp reminder that containing a breach can protect customers but comes with steep commercial costs.
The Co-op says a cyberattack flipped forecast profits into an estimated £80m loss, leaving shelves bare and staff scrambling. It’s a sharp reminder that when retail systems fail, customers, workers and company coffers all pay the price.
Google says China-linked attackers have quietly lived inside many enterprise networks since March — an average of 393 days — installing persistent backdoors and exfiltrating sensitive IP. The takeaway: tighten access, boost detection, and treat long dwell times as an urgent business and security priority.
Boyd Gaming says it takes privacy seriously — yet a recent cyberattack may have exposed employee and other personal data, highlighting how hospitality firms with large workforces remain irresistible targets. Quick, transparent responses and stronger cybersecurity measures are now more crucial than ever to protect people and trust.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Boyd Gaming has confirmed an unauthorized actor removed data from its systems — a worrying development for employees and guests that raises urgent questions about what types of information were exposed and how many people were affected. The company says it’s working with forensic experts and law enforcement, but clearer, timely disclosures and concrete protections will be crucial to restore trust.
Stellantis warns a third‑party supplier may have exposed customer personal data, leaving millions wondering what may actually means. Customers deserve clear answers about who was affected, what was leaked, and what protections will be offered.
Stellantis says a third-party vendor hack exposed some customer names and email addresses—no financial or vehicle data—but the breach still leaves customers and regulators wondering whether outsourcing kept their information safe. Even seemingly low-risk leaks can fuel phishing and fraud, underscoring the need for stronger vendor security and clearer accountability.
President Trump says Michael Dell is part of a consortium — reportedly including Larry Ellison and the Murdochs — aiming to buy TikTok’s U.S. operations, reigniting a high-stakes debate over data security and who controls a platform used by tens of millions every day.
About 194,000 people were affected when the New York Blood Center disclosed a breach exposing Social Security numbers, IDs, bank details and in some cases health information — a stark reminder that even trusted health organizations can become targets. If you were notified, enroll in offered monitoring, watch your accounts closely, and tighten passwords and fraud protections now.
SonicWall revealed threat actors accessed cloud-stored firewall preference files for about 5% of its devices — a small slice but a big risk, since exposed configurations act like blueprints that can speed and stealth targeted attacks. Now’s the time to audit vendor backups, rotate credentials, and enforce customer-controlled encryption to limit fallout.
A newly unsealed court filing alleges a TaskUs employee sold Coinbase customer records for about $200 each, potentially linking a vendor insider to the 2023–24 breach and raising urgent questions about third‑party trust. If true, it’s a stark reminder that outsourcing can turn a single insider into a major security risk.
A court reversed an earlier plea deal and sentenced Conor Fitzpatrick, founder of BreachForums, to three years — a decision prosecutors say holds platform operators accountable after the site turned stolen data into a lucrative hub that harmed thousands.