Therecord

Latvian road traffic agency breach exposed vehicle data affecting ~two-thirds of population, prompting official resignations.

CareCloud confirms breach affecting 3.7 million patients after eight-hour intruder access to EHR environment.

CISA ordered federal agencies to patch a Microsoft bug exploited in a long-running DPRK job-application campaign within two weeks.

A Mirai variant adds encrypted C2 communications and a credential 'sniffer' to improve stealth and persistence for botnets.

Flock Safety mandates 'Audit Assistance' for customers and reduces license plate retention to seven days to improve privacy controls.

Microsoft warns China-linked actors are exploiting a critical flaw in N-able to deploy ransomware broadly as a launchpad.

Ransomware group claims 6 TB exfiltration and hijacks a hospital's Facebook page, exposing highly sensitive patient data categories.

IEH Corporation disclosed a cyberattack affecting systems tied to military device manufacturing in an SEC filing.

De Bijenkorf notifies customers of potential exposure after a third-party logistics provider suffered a cyber incident affecting retail data.

7babka retail chain experienced an intrusion via a compromised third-party account exposing Jira and sensitive data.

Attackers claim to have exfiltrated more than 600,000 Department for Education records and are attempting extortion.

Unknown attackers compromised South Korea's diplomatic academy training system for nine months, exfiltrating personal data of ministry staff.

Stadler Rail rejects Everest ransomware group's $12.3M extortion demand after data theft from supplier's file-sharing platform.

Ofcom probes TikTok over alleged insufficient age verification that may expose minors to online harms under UK safety laws.

Cyberattack on Nichirei Logistics disrupted cold-chain operations, causing KFC and supermarket supply shortages across Japan.

Finnish authorities issue wanted notice for suspect in massive psychotherapy provider Vastaamo breach that exposed sensitive patient records.

Supreme Court changes to location-tracking law could limit ALPR searches and reshape policing use of license-plate cameras.

State-owned Latvijas Valsts Mezi (LVM) remains recovering weeks after a financially-motivated cyberattack corrupted systems.