#утечка-данных
-
South Korea Fines Telecom KT $39 Million Over Data Breach
The PIPC regulator has levied nearly 54 billion won against South Korea's largest carrier for an 11-month network compromise carried out through a rogue base station — and for concealing that its servers had been infected with the BPFDoor malware.
-
CareCloud breach: medical data of nearly 350,000 patients stolen
CareCloud, an American provider of healthcare IT services, has begun notifying hundreds of thousands of patients whose data was stolen by hackers. The breach happened back in March, but the details are only surfacing now.
-
ShinyHunters claim responsibility for the Ernst & Young data breach
The extortion group ShinyHunters says it is behind the recent breach at auditing firm Ernst & Young and is threatening to publish the stolen data unless the firm gets in touch by July 31.
-
Claude's public links pushed users' chats into Google search
Claude users are creating public links to their conversations without realizing that their chats and the projects they've built become accessible to anyone through Google's search results.
-
OnTrac Notifies Customers of Data Breach After Network Hack
American courier company OnTrac has disclosed that attackers broke into its corporate network and may have gained access to customers' personal data.
-
Data theft cost Upbound $13M: scammers set up fake leases through Acima
Fintech company Upbound Group has reported that customer data stolen from its systems was used to set up fraudulent lease-to-own agreements worth around 13 million dollars.
-
Breach at South Korea's Diplomatic Academy: Diplomats' Data at Risk Worldwide
Hackers had access to the National Diplomatic Academy's online learning platform for ten months and stole the personal data of current and former Foreign Ministry staff, including diplomats posted abroad.
-
Swiss train maker Stadler refuses to pay $12.3M ransom
The Everest group demanded roughly 10 million Swiss francs from Stadler Rail after breaching a data-exchange platform the company shared with one of its suppliers. Stadler said it would not pay under any circumstances.
-
Chick-fil-A Discloses Data Breach After Credential Stuffing Attacks
The fast-food restaurant chain is notifying customers that Chick-fil-A One accounts were compromised using login credentials stolen elsewhere.
-
Anubis Claims Attack on Fairlife, a Coca-Cola Subsidiary
The Anubis ransomware group claims it stole roughly a terabyte of data from Coca-Cola's dairy division and is threatening to publish it unless the company enters negotiations.
-
The Suno Breach: Data of 55 Million Users at Risk
The Have I Been Pwned service has gauged the scale of last year's attack on the music generator Suno: the intruder made off with the personal data of more than 55 million people. The company still hasn't disclosed the incident publicly.
-
Estée Lauder Discloses Data Breach via Oracle E-Business Suite Vulnerability
The cosmetics giant is notifying those affected: attackers breached an HR system built on Oracle E-Business Suite and stole employees' personal data.
-
Craneware breach: medical data of thousands of US hospitals at risk
Craneware, a British company whose billing software is used by thousands of American clinics, hospitals and pharmacies, has reported the theft of a significant amount of data in a cyberattack.
-
Hugging Face Breach: Internal Datasets and Service Keys Compromised
The AI model-hosting platform has urged users to rotate access tokens and check account activity following a cyberattack. The company blames the breach on an external AI agent.
-
Hugging Face Breached by an Autonomous AI Agent: The Incident Was Investigated with a Chinese Model
The largest repository of AI models has reported an intrusion into its production infrastructure carried out by an autonomous agentic framework. Western models refused to help analyze the incident — so the team turned to the open Chinese model GLM 5.2.
-
Ernst & Young Reports Data Breach Following Support System Hack
Ernst & Young has notified clients of a data breach caused by the compromise of a third-party support service used by its IT specialists. The incident affected the technical support ticketing system.
-
23andMe to Pay $18 Million Over Leak of Customers' Genetic Data
23andMe has agreed to pay $18 million, settling claims brought by a coalition of 43 U.S. state attorneys general over the protection of customers' genetic data.
-
Hack Reveals Suno Trained Its AI on Music Scraped from YouTube, Deezer and Genius
Stolen source code from the Suno service has revealed that the company spent years harvesting music and podcasts from the internet to train its AI-powered music generator. The news was reported by 404 Media.
-
Lidl Discloses Online Shop Customer Data Breach After Contractor Hack
The Lidl supermarket chain has notified customers in Germany, Belgium and the Netherlands that their personal data was stolen following a breach at a third-party service provider. The incident affected users of the company's online shop.
-
Server Misconfiguration Exposed Three Phishing Campaigns Against Microsoft 365
France's Lexfo uncovered three Evilginx-based phishing operations targeting Microsoft 365 users, thanks to an accidental slip by one of the attackers. The leak was caused by an unsecured web server with directory listing enabled.
- More