21 articles on Data Breach — privacy laws, security frameworks, and regulatory compliance.
The extortion group ShinyHunters leaked roughly 234 GB of data tied to DentaQuest, the Sun Life-owned dental benefits administrator, exposing names, d...
May 2026 saw 95 publicly disclosed ransomware attacks across 17 countries, with Qilin and ShinyHunters leading a campaign that increasingly skips encr...
NYC Health + Hospitals confirmed a breach affecting 1.8 million individuals — including fingerprints and palm prints — originating through a third-par...
Charter Communications confirmed on May 25, 2026 that a ShinyHunters vishing attack on a Microsoft Entra credential gave the threat actor access to Ch...
West Pharmaceutical Services detected a ransomware attack on May 4, 2026, disclosing via SEC 8-K that attackers exfiltrated data and encrypted systems...
On May 2, 2026, Trellix — the cybersecurity company formed from the merger of McAfee Enterprise and FireEye, serving more than 50,000 enterprise and g...
In late April and early May 2026, Cushman & Wakefield confirmed a cyberattack originating from a voice phishing operation that gave ShinyHunters acces...
ShinyHunters breached Instructure's Canvas learning management system twice in May 2026, stealing an estimated 275 million records — names, email addr...
In January 2026, France's data protection authority fined Free Mobile €27 million and its parent Free €15 million — a combined €42 million — for three...
In April 2026, ShinyHunters executed two related but technically distinct supply chain attacks: a Salesforce Experience Cloud misconfiguration at McGr...
On April 20, 2026, the Everest ransomware gang listed both Citizens Financial Group and Frost Bank on its dark web leak site, claiming to hold 3.4 mil...
On April 22, 2026, Netherlands-based luxury cosmetics chain Rituals confirmed that attackers had accessed its customer membership database, exposing n...
A software defect introduced during an overnight IT update on March 12, 2026 caused Lloyds, Halifax, and Bank of Scotland app users to see other custo...
Booking.com confirmed hackers accessed customer reservation data in April 2026, raising immediate GDPR 72-hour notification questions — and echoing a ...
A threat actor known as 'Mr. Raccoon' claims to have stolen 13 million Adobe customer support tickets and 15,000 employee records — not by hacking Ado...
Europe's largest fitness chain confirmed on April 13, 2026 that a cyberattack exposed the personal and bank account details of approximately one milli...
In the span of a single week, five separate class action lawsuits landed in federal courts against Mercor.io Corporation. The complaints vary in scope...
A supply chain attack, a compliance fraud scandal, and invasive contractor surveillance converge in a single federal lawsuit — exposing the fragile tr...
In 2025, ransomware groups launched 1,174 publicly disclosed attacks—a 49% year-over-year increase—and healthcare bore the heaviest burden with 22% of...
Cornwall Council exposed the personal data of 10 complainants — including home addresses, emails, and phone numbers — after redacted PDFs automaticall...
Two class-action lawsuits now target Mercer Advisors after ShinyHunters exposed 5.7 million records and hit Beacon Pointe and Pathstone. Analysis of F...