Live and recent posts from across the Fediverse tagged #databreach, aggregated by home.social.
Data breaches are a matter of when, not if.
And it's only getting worse.
The only way to ensure an organization will not eventually leak personal data is when it does not have it.
Data minimization should be a fundamental practice for every organization.
A recent Notion AI data breach via vendor Fireworks AI exposed user chat logs, prompting urgent credential rotation warnings for affected workspaces.
#Notion #DataBreach #FireworksAI #Cybersecurity #AISecurity #Privacy
https://meterpreter.org/notion-ai-data-breach/?utm_source=mastodon&utm_medium=jetpack_social
CISA just handed us a Friday deadline for Barracuda products. If you are running their Email Security Gateway or other core tools, the window to fix CVE-2026-116606 closes tonight, November 13.
Fullerton Health Reports Data Breach Affecting Migrant Worker Primary Care Plan
Fullerton Health confirmed a data breach on October 31, 2026, involving unauthorized access to a server supporting its Migrant Worker Primary Care Plan. The incident potentially exposed personal details, including FIN numbers and contact information.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/fullerton-health-reports-data-breach-affecting-migrant-worker-primary-care-plan-p-0-9-0-1/gD2P6Ple2L
Notice about the #FireworksAI incident that may impact some #Notion workspaces
https://www.notion.com/help/security-incident-involving-a-third-party-ai-vendor
Amplifon Breach Exposes Sensitive Data of 80 Million Customers
A massive data breach at Amplifon has exposed the sensitive information of 80 million customers, including names, IDs, medical and financial details, after suspicious activity was detected as far back as February. The alarming eight-month delay between detection and disclosure raises questions about data breach notification…
#DataBreach #Healthcare #CustomerDataExposure #SupplyChainRisk #EmergingThreats
Japanese #furniture giant #Nitori says hackers stole 37.6M customer records
#Japan #cybersecurity #privacy #DataBreach #China #SouthKorea #Taiwan #Thailand #Singapore #HongKong
Bad News for gamers, if you have Task Bar Hero game... your Steam Data might be compromised.
They stated that there is a third party data breach at the service they used for their server activity.
If you are player/played between October 17 and November 8, your informations below might be cooked:
-Steam IDs
-Last login IP addresses
-PC and motherboard names
-Operating system details
-Account status
Source: Pirat_Ninja
#cybersecurity #infosec #game #steam #gaming #databreach #taskbarhero
Maersk Exposes Data Breach After Extortion Group Targets Logistics Data
Maersk has confirmed a data breach after an extortion group claimed to have stolen 100GB of sensitive logistics data from one of its systems. The incident, which affected a local legacy system from a previous acquisition, appears to be isolated with no indication of a wider impact on Maersk's systems or those of its customers and…
#DataBreach #Extortion #Logistics #SupplyChain #EmergingThreats
A massive Nitori data breach exposed up to 37.62 million personal and corporate customer records in Japan, raising severe impersonation scam risks.
#Nitori #DataBreach #Cybersecurity #Japan #InfoSec #Privacy
https://securityonline.info/nitori-data-breach/?utm_source=mastodon&utm_medium=jetpack_social
YouHack - 7,160,849 breached accounts - https://www.redpacketsecurity.com/youhack-7-160-849-breached-accounts/
#databreach #HaveIBeenPwnedLatestBreaches #HIBP #OSINT #Security #threatintel #TroyHunt
https://www.europesays.com/3369007/ WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data #cybercrime #Data #DataBreach #Hacking #HackingNews #InformationSecurityNews #ITInformationSecurity #Maersk #malware #PierluigiPaganini #SecurityAffairs #SecurityNews #WhiteArmor
https://www.europesays.com/dk/203467/ WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data #Cybercrime #DataBreach #Hacking #HackingNews #InformationSecurityNews #ITInformationSecurity #Mærsk #malware #PierluigiPaganini #SecurityAffairs #SecurityNews #WhiteArmor
York University in Toronto suffered what I would call a brutal data breach—19 years' worth of sensitive information. It's not clear yet who might have been responsible, and whether there is an extortion demand in play or anything, but to their credit, the university has created a fairly detailed FAQ on the incident and types of info available on specific websites, etc:
Maersk Discloses Data Breach After WhiteArmor Ransomware Attack
Maersk recently disclosed a data breach affecting a single local system after falling victim to a ransomware attack by WhiteArmor, and fortunately, no other systems or customer data appear to have been compromised. The hackers are demanding $5 million in bitcoin, claiming Maersk's contract-logistics arm handles fulfilment for many top consumer…
📢 SEGA victime d'une fuite massive de données touchant 2,2 millions d'adresses email
SEGA confirme une fuite de données touchant 2,2 millions d'adresses email après une cyberattaque chez son prestataire de newsletters ARARA. Le géant japonais du jeu vidéo SEGA, connu notamment pour Sonic, annonce une importante fuite de données concernant 2,2 millions d'adresses email.
🔗 https://frenchbreaches.com/blog/sega-victime-dune-fuite-massive-de-donnees-touchant-22-millions-dadresses-email
💬 discussion : https://infosec.pub/post/54784413
#DataBreach #Cyberveille
SPH Media Discloses Data Breach Following Series of Cyberattacks on Internal Systems
SPH Media confirmed a series of cyberattacks targeting five internal systems between November 4 and November 8, 2026, exposing personal information from approximately 9% of its database. The company secured the affected systems and confirmed that financial information and customer account access were not compromised.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/sph-media-discloses-data-breach-following-series-of-cyberattacks-on-internal-systems-w-d-e-1-9/gD2P6Ple2L
Datenschutz mit Biss: Endlich echte Rechtsdurchsetzung und Sanktionen
Datenschutz mit Biss: Endlich echte Rechtsdurchsetzung und Sanktionen
Thai Airways Discloses Third-Party Data Breach Affecting Passenger Bookings
Thai Airways International confirmed a data breach involving unauthorized access to 60,529 passenger booking records stored on Amadeus' reservation platform. Attackers misused account credentials between August 2023 and September 2026. The airline confirmed that its internal systems and credit card information were not affected.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/thai-airways-discloses-third-party-data-breach-affecting-passenger-bookings-j-x-j-f-u/gD2P6Ple2L
Wyndham Hotels and Resorts Exposed Customer Data Through Hardcoded Android App Password
Wyndham Hotels and Resorts confirmed a security lapse after a researcher discovered a hardcoded password in its Android application that allowed access to an internal Salesforce database. The database contained millions of entries, including customer information and login tokens, but the company reported no evidence of unauthorized access.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/wyndham-hotels-and-resorts-exposed-customer-data-through-hardcoded-android-app-password-t-6-3-n-4/gD2P6Ple2L
In response to a public records request, Lake County school district in Florida mistakenly provided the parent with about 47k unredacted records with sensitive info on students. The district asked the parent to delete it all, and when the parent didn't, they sought a court injunction.
The court has not yet ruled.
Read about it at https://www.fox35orlando.com/news/lake-county-data-leak-thousands-student-records-mistakenly-released
Perhaps the district could have handled this better?
🛡 THREAT INTEL | Southwest Orthopedic & Reconstructive Specialists
🔴 Actor "interlock" claims Undisclosed
Allegedly exposed (+2 more)
• Physical addresses
• Social Security numbers
• Medical records
⚠️ Unverified claim
by Yazoul AI
Nitori Breach Exposes 37.6M Customer Records
Nitori, Japan's beloved furniture and home accessories retailer, has confirmed a massive data breach that may have compromised a staggering 37.62 million customer records. The alarming incident was detected on November 6, 2026, with evidence suggesting the breach may have started as early as mid-October.
#DataBreach #CustomerDataExposure #Japan #RetailSector #ThirdpartyAccess
The National Privacy Commission confirmed on Tuesday that ten government agencies have reported data breaches, and warned the public against phishing. Ten agencies, one password culture. #DataBreach #Privacy
Sega Reports Data Breach Following Unauthorized Access to Third-Party Provider Arara
Sega confirmed a data breach exposing approximately 2.2 million newsletter email addresses following unauthorized access to its third-party provider, Arara. The incident exposed email addresses and newsletter delivery information but did not compromise Sega Account credentials or payment information.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/sega-reports-data-breach-following-unauthorized-access-to-third-party-provider-arara-c-v-j-g-k/gD2P6Ple2L
Amplifon Discloses Data Breach Reportedly Affecting Approximately 1.3 Million Individuals
Amplifon disclosed a data breach involving unauthorized access to its U.S. systems between January and February 2026, potentially exposing personal, medical, and financial information. The breach reportedly affected approximately 1.3 million individuals.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/amplifon-reports-data-breach-affecting-over-one-million-healthcare-customers-o-6-r-1-4/gD2P6Ple2L
Fireworks AI says its investigation found further malicious activity affecting a limited set of accounts.
On Oct.
23, attackers reached development machines through an unnamed third-party cloud provider; an unauthorized workload ran the next day, leading to additional customer data impact.
Accessed information included billing and shipping addresses, invoice and payment history, and account balances.
A subset of incom…
#York #University breach exposed personal information dating to 2007
#Blacksmith, a #GitHub Actions CI/CD runner provider, has disclosed a security #databreach affecting CI job logs - attackers gained unauthorized access. CI/CD logs can leak secrets, tokens & credentials. Are yours protected?
⚠️ #Iris Plaza breach threatens 7.7M records
Cloud intrusion may have exposed names, contact details and passwords.
🔗 https://securityaffairs.com/202740/data-breach/iris-ohyama-data-breach-may-expose-personal-information-of-7-7-million-people.html
ezTravel Discloses Data Breach Affecting Over 690,000 Members
ezTravel confirmed a data breach affecting more than 690,000 members after detecting unauthorized activity targeting its membership system. The company blocked the suspicious traffic, launched an investigation with independent cybersecurity experts, and notified affected customers about potential scams.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/eztravel-discloses-data-breach-affecting-over-690000-members-c-m-j-y-i/gD2P6Ple2L
Reward: You've unlocked the Anubis Platinum Data Sharing Plan. Unlimited uploads. All on their end.
https://cybersecuritynews.com/anubis-ransomware-lindnor-backdoor
#Ransomware #Cybersecurity #Backdoor #DataBreach #Lindnor #PatchedOrPerish (3/3)
Legacy Technology Risks Expose Gaps in Responsibility
A recent data breach at SK Telecom exposed a shocking truth: a critical operating system vulnerability from 2016 remained unpatched, leaving the door wide open for attackers to exploit for years. This costly oversight highlights a glaring gap in responsibility when it comes to managing legacy technology.
#LegacyTechnology #DataBreach #VulnerabilityManagement #PatchManagement #GovernanceFailure
📰 Children's Foundation Data Breach Occurs via Third-Party IT Provider
The Children's Foundation reports a data breach via its IT provider, Highland Shores Children's Aid Society. The supply chain attack may have exposed donor and volunteer contact info. No financial data was affected. #DataBreach #SupplyChain #NonProfi...
📰 CIRO Reaches $8.3M Settlement for 2025 Data Breach Affecting 750k
Canadian regulator CIRO agrees to an $8.3M settlement for a 2025 data breach that hit 750k people. The breach, caused by a phishing attack, exposed SINs and financial data. #DataBreach #CIRO #Canada #Phishing #Settlement
📰 Nitori Data Breach May Expose Records of 37.62 Million Customers
Japanese retailer Nitori Holdings discloses a massive data breach potentially affecting 37.62 million customers. The breach exposed customer email and home addresses. Nitori warns of follow-on phishing attacks. #DataBreach #Nitori #Japan #CyberSecuri...
📰 Ten Philippine Government Agencies Report Data Breaches
The Philippines' National Privacy Commission confirms 10 government agencies, including the Dept. of Justice and Dept. of IT, have reported data breaches. The scale of the incidents is under investigation. #DataBreach #Philippines #CyberSecurity #Govt
📰 Vanderbilt University Hit by 'BYOD' Ransomware, Over 1M Records at Risk
Vanderbilt University confirms ransomware attack by 'BYOD' group. Attackers claim to have stolen data on over 1M students & staff, including SSNs. Campus Wi-Fi was shut down as files were encrypted with a .byod extension. #Ransomware #DataBreach #Van...
PJ&A just found out that neglecting your data hygiene has a very specific price tag: 10 million dollars. That is the penalty they are facing after a breach exposed the personal information of 13.3 million patients.
🚨 Hackers breached Fireworks AI and went after something far more valuable than passwords: PROPRIETARY AI MODEL WEIGHTS.
Attackers compromised a third-party cloud provider, pivoted into Fireworks' R&D environment, escalated cloud privileges, and accessed customer datasets, secrets, billing information and incomplete model weights.
The scary part? This was linked to a financially motivated LLMJacking operation.
Your AI models are intellectual property. Your training data is the crown jewels. Your AI vendor's cloud infrastructure might be the weakest link.
Full technical breakdown: 👇
https://thecybersecguru.com/news/fireworks-ai-breach-model-weights-stolen/
Fireworks AI Breach: How Attackers Stole Model Weights in 2026
Fireworks AI confirmed attackers stole up to 7.69% of customer model weights via IAM role chaining. Timeline, LLMJacking link, ZDR and four fixeshttps://thecybersecguru.com/news/fireworks-ai-breach-model-weights-stolen/
Philippine SEC Discloses Potential Data Breach Affecting Digital Platform Users
The Philippine Securities and Exchange Commission disclosed a data breach involving the potential exposure of personal information belonging to users of its digital platforms. The agency is investigating possible unauthorized access to user devices and has notified the National Privacy Commission.
****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/philippine-sec-discloses-potential-data-breach-affecting-digital-platform-users-j-k-w-1-u/gD2P6Ple2L