The University of Texas at San Antonio swiftly contained a potential cyber threat after detecting suspicious activity on the edge of its network, and took swift action to protect its systems and data. Thankfully, the incident appears to have been effectively managed, with no evidence of data compromise reported so far.
Good news: your SafePal wallet credentials and financial info are safe - the recent data breach exposed non-sensitive customer records, including names, email addresses, and purchase details, of around 39,798 customers.
A threat actor known as TheHatman is selling employee data from top companies like McDonald's and Tata Consultancy Services, allegedly stolen from Microsoft Azure tenants using compromised credentials. The stolen records total 3.6 million, with McDonald's alone accounting for 1.7 million employee records.
A recent cyberattack on CEVA Logistics, a major shipping company, has compromised customer data at the Pokémon Center, forcing the cancellation of some orders due to an unforeseen fulfilment issue. The breach, which occurred between July 29 and August 1, has disrupted operations for multiple retailers in Europe.
GitHub is currently experiencing a widespread outage, with performance problems affecting several of its key services, including Copilot, its AI coding tool, causing disruptions for developers globally. The company confirmed the issue on August 17, 2026, at 9:40 AM EDT and is actively investigating the cause.
A threat actor known as TheHatman is peddling a staggering 1.7 million employee records from McDonald's, along with millions more from other top firms, allegedly stolen from Microsoft Azure environments. The breach, which Hudson Rock deems highly authentic, has left giants like Vodafone, Tata Consultancy Services, and IHG Hotels & Resorts vulnerable.
Don't worry, SafePal has confirmed that sensitive info like your seed phrase, private keys, and bank account details were not compromised in the breach that exposed the order info of 39,798 customers. The exposed data includes names, email and shipping addresses, phone numbers, and purchase details of customers who placed orders between March 2025 and April 2026.
A threat actor known as ZeroBytes has claimed access to sensitive French tax authority systems, boasting on a hacking forum that they could sell stolen databases containing data on hundreds of thousands of individuals. The alarming post sparked a swift response from French authorities, who disclosed a massive breach affecting over 678,000 people.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Good news: SafePal's recent data breach didn't compromise wallet access or funds, but 39,798 customers had their personal info exposed, including names, emails, and shipping addresses. The breach appears to be limited, with sensitive credentials like wallet seed phrases and private keys remaining secure.
In a massive €30M heist, hackers exploited a vulnerability in a service provider's software, making unauthorized direct debits from Commerzbank customer accounts in 2023, but fortunately, no customers suffered financial losses. The incident highlights the risks of relying on third-party services and the importance of robust security measures.
A massive data breach at RingCentral has exposed the sensitive information of 1.6 million customers, including names, addresses, phone numbers, and email addresses, which have been posted online by the hacker group ShinyHunters. This breach was discovered on July 28, and although RingCentral took swift action to stop the unauthorized activity, the damage has already been done.
Data breaches are surging out of control, with 1,803 compromises reported in the first half of 2026 alone, putting the year on track to shatter the 2025 record of 3,321 breaches. If this pace continues, 2026 could see a staggering 3,600 data compromises.
The French Tax Authority has confirmed a data breach after a hacker claimed to have stolen sensitive information from over 2 million taxpayers, exploiting stolen credentials and a security loophole. The breach was detected in June, and an immediate audit helped sever the unauthorized access.
Meet ExfilSquad, a notorious data-extortion group that's made off with a whopping 27 million records and 382.64 GB of sensitive data from 13 major organizations across government, education, finance, and manufacturing. The stolen treasure trove was dumped online for all to see, courtesy of a simple misconfiguration in Microsoft Power Pages.
Shell is investigating a potential data breach after the notorious Clop ransomware gang claimed to have stolen 89GB of sensitive information from the energy giant. The company is working closely with its security teams and experts to get to the bottom of the incident.
RingCentral has confirmed that a breach, known as ShinyHunters, compromised 1.6 million of its accounts, but has since taken swift action to prevent further unauthorized activity. The company is now directly contacting affected customers and has assured that its core platform remains secure and operational.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
A security breach at Trezor's logistics partner has compromised the personal data of over 13,000 customers, including names, email addresses, phone numbers, and shipping addresses, with the exposure window potentially stretching back 90 days. Trezor has confirmed the breach, which affects customers in several countries who ordered products between May and August.
A data security breach has hit a Scottish Government partner, compromising sensitive information of around 300 Crown Office and Procurator Fiscal Service (COPFS) staff who took part in a public sector survey. The incident is under investigation, but COPFS confirms its own systems remain secure.
A contractor's six-week extortion scheme against Brightly Software ended with a guilty verdict, after he threatened to expose sensitive payroll and personnel records unless he received a whopping $2.5 million - ultimately settling for a significantly smaller sum of $7,540.92. The 27-year-old data analyst had been quietly siphoning off corporate data from the Siemens-owned company's network for months.
Uber Freight is investigating claims that a hacking group called Helix has stolen nearly 1 million files from the company, posting them online as evidence. The breach has sparked an urgent probe into unauthorized access to Uber Freight's systems and data repositories.
Over 1,500 UK charities are reeling after a data breach at CRM provider Beacon exposed their personal information, likely due to a compromised AWS access key. This devastating cyber-attack has left countless organizations vulnerable, sparking urgent concerns about data security.
Trezor revealed that its shipping partner, ShipMonk, suffered a security breach, exposing a whopping 14,000 customer records, and fortunately confirmed that its own systems and devices remain secure. The breach, which occurred between May 10 and August 8, 2026, was discovered on August 10, 2026.
A security breach at Beacon compromised customer data, including attachment files, after an AWS access key was potentially exposed in public JavaScript build artifacts, allowing attackers to retrieve encrypted data in readable form. The breach, which started on July 27-28, 2026, may have resulted in a downloadable copy of the database.
A major security blunder at the Criminal Records Office (ACRO) left 10,920 people vulnerable to a data breach after a hacker gained unauthorized access to its website and content management system for a staggering eight months. The Information Commissioner's Office (ICO) has now reprimanded ACRO for its failings in preventing this massive breach.