Security news aggregator

Latest coverage for Incident

Incident coverage examines breaches, outages, and response failures to explain how security events affect systems, data, and organizations.

4 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

An incident is a suspected or confirmed event that threatens the confidentiality, integrity, or availability of information or systems, or violates a security policy. Examples include unauthorized access, malware execution, exposed credentials, data loss, and disruptive attacks. Not every alert is an incident: triage determines whether an event is credible, its scope, and the assets or data involved.

Incident handling requires timely detection, analysis, containment, eradication, and recovery. Practitioners must preserve relevant evidence, identify affected accounts and systems, assess whether data was accessed or altered, and prevent recurrence. Clear escalation and documentation support privacy or regulatory notifications when applicable. Findings should feed security improvements such as closing exploited vulnerabilities, strengthening access controls, and updating detection and response procedures.

Showing 4 most recent headlines Filtered view
Bank Info Security 1 year, 3 months ago

Revenue Cycle Management Firm Hack Affects Patients, Clients

Incident Spotted in March 2024 Is Yet Another Attack Against Medical Billing FirmsA Nebraska-based firm that provides revenue cycle management and billing services to healthcare firms is notifying tens of thousands of people and an undisclosed number of companies that their personal, health and financial information was compromised in a March 2024 hack.

Bank Info Security 29 Mar 2025, 10:30 a.m. Compromise Critical Infrastructure Finance Hacking Healthcare Incident
Bank Info Security 1 year, 3 months ago

Traditional Supply Chain Risk Assessment Methods Fall Short

Australian Payments Plus' Cody Kieltyka on Using Approaches Beyond QuestionnairesUnderstanding vendor interdependencies is too complex for humans alone, said Cody Kieltyka, CISO at Australian Payments Plus. While questionnaires remain common for supply chain risk management, they need supplementation with dark web monitoring and incident response planning with critical vendors.

Bank Info Security 29 Mar 2025, 7:30 a.m. Australia CISO Dark Web Incident Supply Chain Vendor
Bank Info Security 1 year, 3 months ago

Fitness Firm Pays Feds $228K in Misconfiguration Breach

Settlement Is 5th HIPAA Enforcement Action Under HHS's OCR Risk Analysis InitiativeAn Illinois-based firm that provides fitness and wellness plans to clients throughout the U.S. has agreed to pay federal regulators a settlement of nearly $228,000 and implement a corrective action plan following an IT misconfiguration incident caused several breaches in late 2018 and early 2019.

Bank Info Security 26 Mar 2025, 12:00 p.m. America Breach Healthcare Incident Misconfiguration
Bank Info Security 1 year, 3 months ago

Wheelchair Firm Ramps Up Notices to 500,000 for Email Hack

Large Health Data Breach Started With Phishing Lure in Employees' EmailTennessee-based Numotion, one of the largest U.S. providers of wheelchairs and other health-related mobility products is notifying nearly 500,000 people of a 2024 email hacking incident that potentially compromised their personal and health-related information.

Bank Info Security 25 Mar 2025, 11:00 a.m. America Breach Compromise Email Hacking Healthcare Incident Phishing