Recent data breaches at the Pokémon Center, McKesson, and other major players in freight, retail, airports, finance, and healthcare reveal a disturbing trend: third-party vulnerabilities and social engineering are leaving supply chains exposed. A staggering 284 million records were allegedly stolen, highlighting the urgent need for stronger security measures.
Boston Scientific's operations have been significantly disrupted by a cyberattack, forcing the company to revise its financial outlook and warning investors of a potential material impact on its third-quarter and full-year results. The incident, detected on August 25, has left the company's net sales growth and earnings guidance in jeopardy.
Google's top analyst warns that AI data has become a prime target for extortionists, with companies willing to pay up to keep their valuable intellectual property under wraps. Attackers are exploiting this vulnerability, as seen in recent breaches at a healthcare firm and an AI media generation company.
A data breach at Trezor has just gotten much worse, with 81,000 customers now confirmed to be affected, having their personal details including names, emails, and addresses exposed. This significant increase from the initial report puts even more users at risk of phishing scams and other malicious activities.
A staggering 220 million traveler records, including passenger and crew information, were left vulnerable due to a misconfigured system linked to a Vietnamese organization. This massive data leak, discovered by Kinryū Labs, exposed sensitive information spanning nearly a decade.
In a shocking twist, hackers made off with around $320 million in Bitcoin from the Liquid Network, but claim they're "white-hats" with good intentions. Roughly 4,000 BTC was drained from the federation wallet in a mysterious heist that's left the project reeling.
A massive data breach at Mathspace has compromised the personal information of over 1 million students, school staff, and parents or guardians across Australia, New Zealand, the US, and the UK. The breach exposed sensitive data, leaving thousands of people vulnerable to potential identity theft and security risks.
Trezor warned that nearly 81,000 customers are at risk of phishing scams after a data breach exposed sensitive information that could be used for fake emails, calls, or letters. If you're one of them, be on high alert for suspicious contact attempts!
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Natural Resources Wales has apologized for a significant data blunder that exposed diversity records of around 2,000 staff members, sparking concern and uncertainty for those affected. The organisation confirmed that a spreadsheet containing sensitive staff diversity data was inadvertently disclosed on a website.
Data breaches can be devastating, and now IDScan.net is facing multiple class-action lawsuits over an alleged driver's license data breach, with plaintiffs seeking damages and improved security measures. The lawsuits, filed in Louisiana, highlight the importance of protecting sensitive information and holding companies accountable for data security.
A critical deserialization flaw, CVE-2026-63077, was exploited by unknown attackers to breach JetBrains' Cadence environment, compromising AWS credentials, backups, and user data. The vulnerability, scoring 9.8, allowed threat actors to bypass authentication and execute malicious commands with ease.
A data breach at Trezor's shipping provider has compromised the personal info of 67,000 US customers, including names, emails, phone numbers, addresses, and order numbers. The breach, linked to a zero-day SQL injection vulnerability, has raised concerns about customer data security, but Trezor assures that its hardware wallets remain secure.
A massive data breach at IDScan has exposed a staggering 153 million U.S. and Canadian driver's licenses, along with millions of other sensitive identity documents, to dark-web identity thieves. The alarming leak has sparked multiple lawsuits and a federal investigation.
If you're trying to send or receive emails from outside domains using Exchange Online, you might have encountered delays or error messages - Microsoft is currently investigating the issue and working to resolve it. The outage, affecting multiple mailboxes, is causing intermittent server busy errors, and the company is still analyzing the cause and devising a fix.
Healthcare breaches are skyrocketing, sparking urgent concerns about patient safety and data protection, with a recent string of incidents exposing millions to potential harm. In just one alarming example, Aesto Health's December 2025 breach went undetected for five months, ultimately affecting 9.5 million people and compromising highly sensitive information.
A recent Thomson Reuters breach exposed sensitive court data across the US and Canada, impacting 11 US states, the US Virgin Islands, and Ontario, with affected entities including appellate and supreme courts. The breach, discovered in June, involved unauthorized access to files from C-Track, a court case management platform.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
A massive data breach has exposed a staggering 153 million driver's licenses, putting the sensitive information of millions of people in the US and Canada at risk. The breach, linked to a service called Nexus on a Russian cybercrime forum, also includes 10 million ID cards, 3 million travel documents, and 579,000 medical cards.
Fishbrain has revealed a data breach that exposed password hashes for some users, which may be vulnerable to decoding, putting their accounts at risk of cyberattack. The breach, which occurred on August 19, also compromised other sensitive user data, including names, email addresses, and phone numbers.
A recent Thomson Reuters breach exposed sensitive US and Canadian court records, potentially putting individuals' personal information at risk. The breach, detected in June, affected the company's C-Track digital case management product and involved unauthorized access to certain court records in Ontario, Canada.
A stolen cache of 153 million driver's licenses, containing sensitive info like birth dates, addresses, and ID numbers, has fallen into the wrong hands, putting millions at risk of identity theft. This breach is especially alarming since this type of data is often used to verify identities.
A sneaky exploit in Lenovo's email verification process led to a Dropbox breach, putting around 5,000 accounts at risk - and some users may have been affected without even having a Lenovo account. The hack allowed attackers to access Dropbox accounts by creating fake Lenovo IDs linked to victims' email addresses.
A security lapse in a legacy Lenovo login integration left around 5,000 Dropbox accounts vulnerable to hackers, who exploited an email verification flaw to gain unauthorized access. Dropbox has since notified affected users and confirmed the breach to reporters.
Beware: a sneaky flaw in Lenovo's email verification process was exploited by hackers to hijack Dropbox accounts - no password required! Dropbox has warned users that an attacker used a legacy link between Lenovo ID and Dropbox to register fake IDs and gain unauthorized access.
Imagine a black market service that boasts access to over 153 million drivers' licenses, 10 million ID cards, and 3 million travel documents - and has been secretly collecting data for over a year. The notorious Nexus service on Exploit is making these staggering claims, sending shockwaves through the cybersecurity world.