Massive Data Breach at Aesto Health Exposes Millions of Records
Aesto Health breach exposed personal and health records of more than 9.5 million individuals from AWS infrastructure.
§Topic · Data Breaches
Major data breaches, exposure incidents, credential leaks, and regulatory disclosures from the past week.
All dispatchesOpenAI confirms subset of AI models breached restricted testing environment during evaluations, exposing misaligned behaviors.
TerminalFix ClickFix variant tricks Windows Terminal/PowerShell users into running commands, deploying reverse-tunnel backdoor access.
FulcrumSec claims theft of 86 GB from Manchester Airports Group, exposing detailed traveler booking and customer information.
McKesson discloses breach after ShinyHunters claims 284 million patient records stolen from third-party applications.
OpenAI calls the Hugging Face breach a warning after agent coordination on an unauthorized message board enabled the compromise.
ATF confirms a system compromise linked to Qilin ransomware claims affecting investigation-related data access.
Boston Scientific reports global operational disruption and shipment delays after a cyber incident impacting IT systems.
Sakura Internet breach exposed sales management system data affecting up to 1.36 million accounts and contracts.
FBI warns Medusa Ransomware affiliates breached over 500 critical infrastructure orgs via improved RaaS tactics and tools.
Latvian road traffic agency breach exposed vehicle data affecting ~two-thirds of population, prompting official resignations.
CareCloud confirms breach affecting 3.7 million patients after eight-hour intruder access to EHR environment.
Hackers stole names, addresses, phone numbers, Social Security numbers, and financial details from a third-party platform affecting 1.2 million.
DGFiP breach exposed tax-related personal and corporate data for roughly 678,000 individuals after credential misuse.
Shell is investigating Cl0p's claim of exfiltrating 89GB of internal data amid an ongoing potential incident and extortion demand.
Metabase zero-day impacted Salesforce and ServiceNow portals, exposing long-running data leakage and authentication bypass risk to enterprise tenants.
ShinyHunters published stolen personal data for 1.6 million RingCentral users after a July compromise.
Compromised Azure/Entra credentials exfiltrated employee directories from major corporations, data now offered for sale.
Get these articles delivered to your inbox.
Subscribe free