UPDATED
BleepingComputer · · High severity
The ShinyHunters extortion gang stole personal information from more than 137,000 school staff accounts in a Salesforce data theft attack that targeted the widely used Infinite Campus K-12 student information system in March.
SecurityWeek · · High severity
Someone posted fake VRChat and Discord data breach reports on the system, prompting the Maine AG to take action. The post Maine Disables Data Breach Portal Due to Fake Submissions appeared first on SecurityWeek .
TechCrunch Security · · High severity
IBM and two of its subsidiary companies were allegedly breached during the mid-2010s — a lawsuit filed by a former cybersecurity executive accuses IBM of not disclosing and actively covering it up.
TechCrunch Security · · High severity
South Korean authorities issued the record-breaking fine following a data breach that affected over 30 million customers.
Malwarebytes Labs · · High severity
A data breach notice has been filed with the Maine Attorney General, saying more than 2.4 million users of VRChat have had their data breached. The question is, was it VRChat who filed the breach notice, or did someone pretending to...
The Record by Recorded Future · · High severity
The penalty is the largest ever issued by the commission for a personal data breach, surpassing the record 134.8 billion won ($88.8 million) fine levied against SK Telecom earlier this year.
The Record by Recorded Future · · High severity
About 7 million customers of the genetics testing company had their data stolen by hackers starting in April 2023, and many had their information posted on the dark web.
BleepingComputer · · High severity
In an unusual misinformation campaign, fraudulent data breach disclosures were submitted to Maine's official breach portal and publicly posted before their legitimacy could be verified, prompting companies to deny the claims.
BleepingComputer · · High severity
Maine has taken its public data breach reporting portal offline after fraudulent breach disclosures were published on the state's website, prompting a review of procedures to prevent abuse in the future.
TechRepublic · · High severity
South Korea fined Coupang $409 million after regulators said weak security controls led to a massive breach affecting 37.5 million accounts. The post South Korea Drops a $409M Fine on Coupang in Historic Data Breach Ruling appeared...
SecurityWeek · · High severity
The affected individuals’ personal information was stolen from a legacy server managed by a third party. The post IMA Diligence Services Data Breach Impacts 525,000 People appeared first on SecurityWeek .
TechCrunch Security · · High severity
The data breach included names, dates of birth, postal addresses, and Social Security numbers, according to a state government listing.
Malwarebytes Labs · · High severity
Carnival Corporation, parent of Carnival Cruise Line, is sending out fresh “Notice of Cybersecurity Event” letters dated May 27, 2026. If you feel like you’ve read that sentence before, you’re not imagining things. Over the last decade,...
SecurityWeek · · High severity
The affected third-party vendor has not been named, but one possible candidate is TriZetto. The post Oncology Institute Discloses Third-Party Data Breach appeared first on SecurityWeek .
SecurityWeek · · High severity
Threat actors stole files containing names and protected health information from the healthcare organization’s systems. The post 266,000 Affected by Data Breach at Radiology Associates of Richmond appeared first on SecurityWeek .
SecurityWeek · · High severity
Hackers accessed names, addresses, Social Security numbers, financial information, and medical data from third-party partner repositories. The post DocketWise Data Breach Impacts 143,000 appeared first on SecurityWeek .
Android Authority · · Medium severity
Credit: NBC News / YouTube TL;DR Trump Mobile’s T1 smartphone launch is off to a rough start after a website flaw exposed customer preorder data. The exposed information reportedly included names, phone numbers, email addresses,...
Help Net Security · · High severity
This is my favourite time of the year, not just because spring is here and the promise of summer is on the way. But also, because one of my must reads each year gets published. There are a few must read reports that I have on my reading...
Digital Trends · · Medium severity
Trump Mobile is investigating a potential customer data exposure after names, addresses, phone numbers, and preorder details were reportedly left accessible online.
Android Authority · · Medium severity
TL;DR Trump Mobile has acknowledged that it exposed customer data through public-facing webpages. A spokesperson said the exposure was caused by an unnamed third-party platform. The company said it was evaluating whether it would inform...
Krebs on Security · · Medium severity
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and...
TNW · · High severity
Somewhere in your organisation right now, an employee is reusing a password they created in 2019. Another is sharing login credentials for a team account through a Slack DM. A third is storing client portal access in a browser’s...
Graham Cluley · · High severity
For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon Data Breach Investigations Report (DBIR). Read more in my article on the Fortra blog.
The Hacker News · · Medium severity
Grafana Labs, on May 19, 2026, said an investigation into its recent breach found no evidence of customer production systems or operations being compromised. It said the scope of the incident is limited to the Grafana Labs GitHub...
Android Authority · · Medium severity
TL;DR A YouTuber claims the Trump Mobile site is exposing customer information through a basic security exploit. Voidzilla says his mailing address, email, and order details were accessible, but not credit card info. The alleged leak...
HackRead · · Medium severity
AI agent security starts with a simple fact: the more authority an agent has, the tighter its access…
TechRadar · · High severity
BleepingComputer · · High severity
Convenience store chain giant 7-Eleven confirmed that its systems were breached in a cyberattack claimed by the ShinyHunters extortion group last month.
TechRadar · · High severity
An image depicting an phone user countering a scammer using Avast One antivirus protection on their phone.
TechRepublic · · Medium severity
Grafana refused an extortion demand after attackers used a stolen GitHub token to download code, with no customer data exposed so far. The post Grafana Rejects Ransom Demand After GitHub Breach Exposes Codebase Theft appeared first on...
SecurityWeek · · High severity
Several healthcare data breaches impacting hundreds of thousands and even millions were added to the HHS tracker. The post Millions Impacted Across Several US Healthcare Data Breaches appeared first on SecurityWeek .
SecurityWeek · · High severity
The hackers claimed to have stolen more than 600,000 Salesforce records, including personal information and corporate data. The post 7-Eleven Data Breach Confirmed After ShinyHunters Ransom Demand appeared first on SecurityWeek .
SecurityWeek · · Critical severity
The non-bank lender discovered a ransomware attack nearly one year ago, but only recently completed its investigation. The post American Lending Center Data Breach Affects 123,000 Individuals appeared first on SecurityWeek .
HackRead · · Medium severity
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak.
HackRead · · Medium severity
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak.
TechCrunch · · High severity
House lawmakers want to know how hackers broke into education tech giant Instructure twice, and stole reams of data from students who use the company's flagship student data software Canvas.
SecurityWeek · · High severity
The Committee on Homeland Security has requested to be briefed on the incident and Instructure’s remediation steps. The post Government to Scrutinize Instructure on Canvas Disruption, Data Breach appeared first on SecurityWeek .
SecurityWeek · · High severity
The telehealth platform was hacked in January, and users’ personal information was exfiltrated from its systems. The post 716,000 Impacted by OpenLoop Health Data Breach appeared first on SecurityWeek .
BleepingComputer · · High severity
Škoda Auto, a wholly owned subsidiary of the Volkswagen Group, has disclosed a data breach after attackers hacked its online shop and stole the personal information of an undisclosed number of customers.
BleepingComputer · · Medium severity
Instructure, the edtech giant behind the widely popular Canvas learning management system (LMS), has reached an "agreement" with the ShinyHunters extortion group to prevent the data stolen in a recent breach from being leaked online.
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free