34 casos · pág. 2/2
Jefferson County Health Department (Hillsboro, Missouri) has agreed to a $2.25 million settlement of a consolidated class action over a 2022 data security incident. An unauthorized third party accessed its network between October 31 and November 15, 2022, and may have viewed or obtained personal and protected health information. The breac…
Researchers at Claroc disclosed GhostShares, a design flaw in Meta's Muse AI assistant that lets anyone discover shared conversations through passive DNS. Muse share links use the domain cf.metaaiusercontent.com and embed the conversation title and a random identifier in the hostname. Once a browser resolves the name, passive DNS sensors …
A $6,438,578.20 settlement has been agreed to resolve the "Other Labs Track" of consolidated litigation over the American Medical Collection Agency (AMCA) breach. The defendants are AMCA clients Sonic Healthcare U.S.A., Aurora Diagnostics LLC, Clinical Pathology Laboratories, Inc. and Austin Pathology Associates. AMCA, a subsidiary of Ret…
Mid Florida Dermatology & Plastic Surgery, a 33-location medical group in central Florida, reported to the HHS Office for Civil Rights a breach affecting 85,585 individuals. An unauthorized third party accessed its network from March 26 to March 30, 2026, and patient files may have been viewed or acquired. Two other healthcare incidents w…
Boston Children's Health Physicians (BCHP) and its managed IT provider XTIUM (formerly Axispoint Technology Solutions Group) settled with the New York and Connecticut Attorneys General over an August 2024 breach affecting almost 890,000 individuals. The settlement carries a $4 million penalty, of which $2.7 million is payable (New York $2…
Germany's Alternative für Deutschland (AfD) confirmed on 19 October 2026 that a hosting provider used by the party was hacked in September and that mailboxes were copied. The anonymous site hexane.cc went online claiming to index 421,179 internal party emails. It does not publish the emails. It shows AI-generated summaries sorted into cat…
Scammers abused a legitimate spend-management platform as part of a fraud operation. They used its notification system to send phishing messages and its open-banking account linking to validate stolen banking credentials. Group-IB documented the activity in a client environment after the platform reported suspicious payment notifications …
Paradigm Healthcare Services, a San Francisco-based billing processor for Medi-Cal (California's Medicaid program) under a data use agreement with the California DHCS, told the US HHS that a breach affected more than 970,000 people. The company detected unauthorized access to its local network on October 13, 2025. It determined only on Au…
AI-assisted "vibe coding" is lowering the barrier to app development, but it is also producing apps with common security oversights that app marketplaces do not necessarily flag. The article cites a report that 84% of developers were using or planning to use AI tools, and a Lovable-hosted app in which a researcher found 16 vulnerabilities…
Publicly reported data breaches in the US reached an all-time high last year, with over 3,300 incidents and nearly 280 million victim notices. The Identity Theft Resource Center (ITRC) reports that over 471 million notices went out in the first half of 2026, but only 24% described the attack vector, the lowest rate it has recorded. The ar…
This SentinelOne weekly roundup (Week 39, 2026) covers one law enforcement success and two active threat campaigns. A US court sentenced Armenian national Karen Serobovich Vardanyan ("Maneeken"/"Karl Lagerfeld"), an initial access specialist for Ryuk ransomware, to two years in prison and over $1.2 million in restitution. SentinelLABS ide…
Conduent has agreed to an $80 million settlement of the consolidated class action In Re Conduent Business Services Data Breach Litigation, filed in the U.S. District Court for the District of New Jersey on October 16, 2026 and confirmed in an 8-K filing with the SEC (infosecurity-magazine.com). The suit stems from the 2024 breach at Condu…
A threat actor using the handle ByteToBreach claims to have copied 10 databases from Ampath Laboratories, out of an environment said to contain roughly 375 databases. The claimed data includes HR and employee records, multiple patient databases, financial information and system-configuration data. The actor says the laboratory admissions …
Indian stock brokerage Angel One confirmed in July 2024 that data leaked online came from a breach that occurred in April 2023. The leak holds 7.9M user records covering 6.8M unique email addresses. It was added to Have I Been Pwned on 7 Oct 2026. Angel One stated the breach "has no impact on client securities, funds, or credentials". The…
