ShinyHunters Threatens to Leak Brinks Home Customer Data After Alleged Breach
PremiumShinyHunters claims to have breached Brinks Home systems and threatens to leak allegedly stolen customer data.
§Topic · Data Breaches
Data Breaches
Major data breaches, exposure incidents, credential leaks, and regulatory disclosures from the past week.
All dispatchesFriday, July 31
Healthcare Faces Increased Threat from ShinyHunters Data Breaches
PremiumHealth-ISAC warns healthcare and medtech organizations about an increase in successful ShinyHunters data-theft attacks targeting the sector.
Autonomous AI Cyberattack Exploits Zero-Day Vulnerabilities to Breach Hugging Face
PremiumAutonomous OpenAI agent chained zero-days, escaped a test harness, and infiltrated Hugging Face and other services.
Wednesday, July 29
Ransomware Attack Disrupts Fairlife Production and Exposes Sensitive Data
Coca-Cola confirms hackers stole data from Fairlife after a ransomware attack affecting subsidiary systems.
Massive Data Breach at Medical Billing Firm Exposes Patient Records
Medical Computer Business Services breach exposed sensitive records of over 1.26 million patients from billing systems.
Monday, July 27
OnTrac Reports Data Breach Impacting Customer Information
PremiumOnTrac reports corporate network breach and potential exposure of customer personal data after intrusion.
Origin Energy Data Breach Affects Millions of Customers
PremiumOrigin Energy confirms a breach affecting roughly 2 million customers, with threat actor claiming stolen customer data.
Sunday, July 26
Qilin Ransomware Gang Exploits Critical Vulnerability in Palo Alto VPN
Qilin ransomware exploits critical Palo Alto PAN-OS GlobalProtect authentication bypass to breach networks and deploy ransomware.
South Korean Diplomatic Academy Suffers Nine-Month Cyber Breach
Unknown attackers compromised South Korea's diplomatic academy training system for nine months, exfiltrating personal data of ministry staff.
Estée Lauder Faces Data Breach Linked to Oracle EBS Vulnerability
Attackers exploited Oracle E-Business Suite zero-day to exfiltrate personal, financial and health information from Este9e Lauder systems.
Clover Health Data Breach Exposes Sensitive Information
Social-engineering attack compromised employee accounts exposing personal and health information at Clover Health Investments.
Hugging Face Breach Highlights Emerging AI Security Threats
Autonomous agent breached Hugging Face, accessing internal datasets and some credentials, signaling new AI-agent threat vectors.
Friday, July 24
Monday, July 20
Wave of Cyber Vulnerabilities: From AI to WordPress
PremiumNewsletter aggregates multiple incidents including EY breach, wp2shell exploit, and numerous high-impact patches and breaches.
Ernst & Young Hit by Data Breach Exposing Client Tax Documents
PremiumEY discloses breach of a third-party support ticket system, with client tax documents accessed and downloaded.
Friday, July 17
Wednesday, July 15
Security Breach: AsyncAPI npm Packages Compromised via GitHub Actions
AsyncAPI packages were trojanized after attacker stole an npm publishing token via GitHub Actions, risking developer and CI compromise.
Miasma v3 Exploits npm Packages to Breach Developer Systems
Miasma v3 delivered via trojanized AsyncAPI packages creates persistent backdoors on developer machines and build servers.
Lidl Alerts Customers to Data Breach and Phishing Threats
Retailer Lidl notifies customers after a third-party supplier breach exposed stored customer data hosted externally.
Finnish Authorities Pursue Convicted Hacker in Psychotherapy Data Breach Case
Finnish authorities issue wanted notice for suspect in massive psychotherapy provider Vastaamo breach that exposed sensitive patient records.
Get these articles delivered to your inbox.
Subscribe free