Data Breaches

CISA publishes after-action lessons following contractor exposure of AWS GovCloud credentials and IaC repos on public GitHub.

Compromise of Injective Labs' GitHub published @injectivelabs/[email protected] npm package that exfiltrates crypto wallet keys and seeds.

Threat group O UNC 066 uses phone-based phishing to trick employees into registering attacker-controlled Entra passkeys to hijack accounts.

AssuranceAmerica breach exposed nearly 6.9 million drivers' records after attackers accessed internal systems earlier this year.

KDDI data breach exploited a third-party zero-day, affecting roughly 12 million users' email accounts for ISPs.

Sygnia analysis shows agentic AI compressed cloud intrusion timelines to 72 hours, emphasizing speed and orchestration risk.

Cyberattack on major Japanese telco exposed 12 million customer emails from ISP-managed systems and webmail stores.

Major medical device maker notifies nearly 4 million people after breach exposing SSNs and health-related data.

Major healthcare data breach exposed millions of patients’ personal and medical information, raising regulatory and patient-care risks.

OAuth token theft in Klue supply chain enables access to Salesforce data; investigation ongoing.

Fortinet VPN credential exposure affects ~73k devices; patch now and rotate credentials to reduce risk.

Extortion group data leak; breach shows attacker access lasting months. Review data exposure and customer notification readiness.

Major retail breach affecting millions; highlights risk from third-party access and credential abuse. Prepare containment and notification playbooks.

Retail data breach affecting 185,000 individuals; exposed PII including emails and DOB. Immediate containment and notification required.

Instructure reached an extortion settlement to prevent data leaks from Canvas, affecting thousands of schools. Monitor for affected organizations and assess risk exposure.

Two OpenAI employee devices were compromised; credential material stolen from code repositories. No user data or production systems affected.

Initial access via social engineering on Teams; rapid persistence emphasis for defenders to harden collaboration tools and training.

Exim fixes address memory corruption, crash and data leakage risks across widely used mail servers.

Education tech giant confirms breach; extortion group claims responsibility with potential student data exposure.