UPDATED
Malwarebytes Labs · · Medium severity
The US government is alerting millions of people that their personal information was stolen during a breach of the Pentagon’s personnel records at the Defense Manpower Data Center (DMDC). The DMDC is a central US Department of Defense...
HackRead · · High severity
Times Mobility says a data breach exposed data linked to 6.6 million accounts, including 1.6 million identity records with driver's license images and documents too.
PYMNTS.com · · High severity
A Department of Defense recordkeeping unit, the Defense Manpower Data Center (DMDC), has alerted millions of current and former military members and staff that their data was stolen during a breach that lasted from October 2025 to July...
Slashdot · · High severity
A months-long breach of the Defense Manpower Data Center exposed personal information belonging to roughly 2.8 million living current and former U.S. military personnel and staff, plus records for nearly 300,000 deceased people....
TechCrunch · · High severity
The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a months-long breach.
Graham Cluley · · Medium severity
A Pentagon personnel database was breached for nine months without anyone noticing. Over three million people are affected. Read more in my article on the Hot for Security blog.
News – MeriTalk · · Medium severity
A breach of a Pentagon personnel database exposed sensitive personal information belonging to more than 3 million people, including 2.76 million living individuals and 294,000 deceased individuals, a Defense Department (DOD)...
SecurityWeek · · Medium severity
Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel The post New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks appeared first...
SecurityWeek · · High severity
The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense. The post Pentagon Personnel Agency Data Breach Impacts 3 Million People appeared first on SecurityWeek .
BleepingComputer · · High severity
Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week.
StartupDaily · · High severity
Labor says OpenAI’s rogue Medicare bot proves AI agents need fences, not excuses.
Tech-Economic Times · · Medium severity
OpenAI's ongoing battle also reflects a yawning gap between the strength of the models the company is testing and its capacity to oversee or even track their actions.
The Register · · High severity
Revolut customers have been caught up in a second data breach this month after attackers socially engineered their way into US brokerage DriveWealth and stole historic personal information. DriveWealth provides execution and clearing...
The Record by Recorded Future · · High severity
The healthcare firm Astrana warned regulators that hackers accessed confidential information by impersonating company personnel.
TNW · · Medium severity
A breach at DriveWealth, the US broker behind Revolut’s US stock trading, exposed the personal data of some Revolut customers. DriveWealth and Revolut emailed affected customers on Thursday. DriveWealth said an unauthorised party got...
SecurityWeek · · High severity
Hackers impersonated the company’s personnel and contacted its employees to gain access to Astrana Health’s servers. The post Astrana Health Data Breach Impacts Private, Confidential Information appeared first on SecurityWeek .
Tech-Economic Times · · High severity
Australia said on Thursday an OpenAI agent breached a government health data portal in June, gaining unauthorised access to files, in what could be the first known instance of an AI agent hacking a government website.
Hacker News · · High severity
BleepingComputer · · High severity
Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores.
Hacker News · · High severity
SecurityWeek · · High severity
Gyazo maker Helpfeel said the attacker exploited a vulnerability in its image upload server to gain unauthorized access. The post 23 Million User Records Compromised in Gyazo Data Breach appeared first on SecurityWeek .
SiliconANGLE ·
Data loss prevention startup Mind Security Inc. today announced it has raised $72 million in new funding to push further into large enterprise accounts. Hiring and channel partnerships will absorb much of the money.
TechRadar · · Medium severity
Gyazo breach exposes 23.62 million user records and 490 million image records — PII and metadata exposed in huge attack
Silicon Republic · · High severity
The hackers have reportedly given Revolut 24 hours to pay the ransom, or else they will sell the stolen data to other criminals. Read more: FT: Hackers demand $3m ransom from Revolut after data breach
Malwarebytes Labs · · High severity
Only days after Revolut acknowledged that it disclosed sensitive customer records to an unauthorized party, affected customers are receiving phishing texts. However, we don’t know yet if the phishing texts are linked to the breach. The...
UpGuard Blog · · High severity
A list of the biggest data breaches rocking the healthcare industry in 2026, ranked by degree of impact.
UpGuard Blog · · High severity
This regularly updated list analyzes the biggest data breaches in the financial services sector. Learn the key errors that lead to each breach event.
UpGuard Blog · · High severity
Data leaks are an overlooked attack vector that increase your risk of suffering a data breach. Learn what they are and how to shut them down quickly.
SecurityWeek · · High severity
Revolut allegedly fed customer information to hackers impersonating an Italian government agency for five months. The post Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom appeared first on SecurityWeek .
The Hacker News · · Medium severity
A security breach at Gyazo, Helpfeel's image-sharing service, exposed about 23.62 million user records, including email addresses and password hashes, the Kyoto-based company said in a notice published Wednesday. It also exposed about...
Help Net Security · · High severity
Spain’s data protection authority (AEPD) has reported its first data breach blamed on an AI agent acting on its own, after the system reportedly logged into a company’s network, found a way to alter personal records, and pulled invoice...
BleepingComputer · · High severity
The Spanish Data Protection Agency (AEPD) was notified of an attack allegedly carried out with an AI agent powered by a known large language model (LLM).
SecurityWeek · · High severity
Spanish regulators say an AI agent chained together a successful login, vulnerability discovery, and access to personal data in a potential milestone for autonomous cyberattacks. The post First Agentic AI Data Breach Reported to Spanish...
Tech-Economic Times · · High severity
British digital bank Revolut said Wednesday that an impersonation attack caused it to share customers' information with an "unauthorized third party" posing as a government agency. Revolut said it "recently identified a sophisticated...
SecurityWeek · · High severity
In June 2026, hackers accessed files containing patients’ names, contact information, diagnosis details, and health insurance information. The post 280,000 Impacted by Premier Medical Group Data Breach appeared first on SecurityWeek .
Help Net Security · · Critical severity
CenterPoint Energy disclosed that an unauthorized third party got into customer data through one of its external systems, after online claims by a hacker that millions of records had been stolen from the company. CenterPoint Energy is a...
Tech-Economic Times · · High severity
Spain's data protection watchdog said it has received the first reported notification of a personal data breach allegedly carried out by an artificial intelligence agent, a case that suggests autonomous systems are beginning to play a...
TechCrunch · · Critical severity
From the massive DOGE data breach and the compromise of critical infrastructure to the hack of federal surveillance systems, here are the most damaging security incidents and data breaches of 2026 so far.
The Record by Recorded Future · · High severity
Houston-based CenterPoint Energy notified federal regulators about an incident that exposed some customer data on the dark web.
SecurityWeek · · High severity
Hackers exploited a vulnerability in a VPN product to steal the personal information of roughly 240,000 people. The post 240,000 Hit by Data Breach at Japan’s Digital Agency appeared first on SecurityWeek .
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free