Stay informed on the latest data breach incidents and security breaches. Protect your information with our up-to-date breach news and analysis.
Search across headline titles and summaries.
Background for this topic.
Breach means unauthorized access to a computer system or network that exposes or steals sensitive data like personal details, passwords, or proprietary information. Attackers often exploit software flaws, weak passwords, or social engineering to gain entry. Breaches can also result from insiders misusing access or accidental data exposure.
Understanding breaches is crucial because they reveal weaknesses in security controls and can lead to data theft or operational disruption. Effective defenses include promptly patching vulnerabilities, enforcing strong authentication, and segmenting networks to limit attacker movement. Detecting breaches quickly through monitoring and logging helps contain damage and guide targeted remediation efforts to secure affected systems and data.
Group Amassed Intelligence on CFO to Trick Help Desk and Gain Initial AccessHackers tied to the cybercrime group Scattered Spider have been taking down fresh victims, including a logistics firm first breached when attackers tricked its help desk, using personal information they amassed for the CFO, reports the security team that responded to the intrusion.
Personal Data Stolen in Ransomware Hit, Says Dutch Owner of Stop & Shop, Giant FoodFood retail giant Ahold Delhaize USA is notifying 2.2 million current and former employees, as well as an unspecified number of employees in the Netherlands, that a November 2024 data breach exposed their personally identifiable information, including Social Security numbers and medical details.
Ahold Delhaize, one of the world's largest food retail chains, is notifying over 2.2 million individuals that their personal, financial, and health information was stolen in a November ransomware attack that impacted its U.S. systems. [...]
Debt Collector's 2024 Data Breach Affected Multiple Hospitals and Medical PracticesThe list of healthcare sector clients reporting large health data breaches from the 2024 hack on debt collection firm Nationwide Recovery Service continues to grow, as does the vast number of affected patients. So far, the hack has affected at least 500,000 patients.
Also, O Canada, Oh Brother and More Probable Chinese HackingThis week, ransomware kills, Salt Typhoon hit Canada, Russian backdoors, SAP and Citrix patches, China hackers in the oil and energy sector. Brother printers have an unfixable flaw. Ransomware hit a U.S. dairy cooperative. Hackers in Albania and Oxford. European lawmakers heard cybersecurity advice.
Pathology outage caused by Synnovis breach linked to harm across dozens of healthcare facilities The NHS says Qilin's ransomware attack on pathology services provider Synnovis last year led to the death of a patient.…
Notorious Site Facilitated Buying and Selling of Breached Databases, Hacking ToolsFrench police have reportedly busted five suspected hackers - "IntelBroker," "ShinyHunters," "Hollow," "Noct" and "Depressed" - tied to the operation of the notorious cybercrime site BreachForums, which facilitated the buying and selling of stolen databases and hacking tools.
Thousands of personal records allegedly linked to athletes and visitors of the Saudi Games have been published online by a pro-Iranian hacktivist group called Cyber Fattah
A representative of NCSC-FI shared some lessons learned from a 2024 data breach affecting the Finnish capital
America's largest steel producer initially disclosed the breach in May and took potentially affected systems offline to investigation the intrusion and contain any malicious activity.
Data breach at McLaren Health Care affecting over 743,000 individuals has been linked to a ransomware attack
The Canadian Centre for Cyber Security and the U.S. Federal Bureau of Investigation (FBI) have issued an advisory warning of cyber attacks mounted by the China-linked Salt Typhoon actors to breach major global telecommunications providers as part of a cyber espionage campaign
Michigan-Based Group Breached in Ransomware Attack for Second Time in Two YearsMcLaren Health has begun notifying more than 743,000 people affected by a ransomware attack last summer. The incident, carried out by cybercriminal gang Inc Ransom, is McLaren's second major health data breach from a ransomware attack in two years.
Preliminary Approval Granted to Settle Lawsuits Over Snowflake Breach, DatasetA federal judge has granted preliminary approval for AT&T to settle multiple data breach lawsuits for $177 million. The lawsuits pertain to a customer dataset from 2021 that was circulating on cybercrime forums, and to the 2024 breach of AT&T's Snowflake account.
McLaren Health Care is warning 743,000 patients that the health system suffered a data breach caused by a July 2024 attack by the INC ransomware gang. [...]
Nucor, North America's largest steel producer and recycler, has confirmed that attackers behind a recent cybersecurity incident have also stolen data from the company's network. [...]
Oxford City Council warns it suffered a data breach where attackers accessed personally identifiable information from legacy systems. [...]