111 casos · pág. 4/6
Central Ohio Primary Care Physicians, a large physician-owned primary care group based in Westerville, Ohio, with more than 80 locations, disclosed a breach affecting about 1.4 million current and former patients. In August 2026, an unauthorized third party used a voice phishing (vishing) attack to obtain credentials that gave access to i…
Documents released by the defense team in the federal case against the Minnesota 15 show that a joint task force of six local officers and eight HSI Chicago agents surveilled an April 2 talk at the Co-Prosperity gallery in Chicago. The talk was part of a Crimethinc national tour in which Twin Cities anarchists discussed resisting Operatio…
Federal investigators examining ShinyHunters have uncovered potential links between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity report published on October 19. An executive at an unnamed U.S. consulting firm (reportedly 1,000+ employees) allegedly helped operate the group's extort…
F5 Labs published its 2026 cybersecurity predictions and scored its 2025 forecasts at 6.5/8, by its own assessment. The 2025 review cites AI-powered botnets, attacks on AI model APIs, AI side-channel attacks on cryptography, APT use of hacktivist personas, and expanded Roskomnadzor powers to isolate or reroute Russian internet traffic fro…
Scammers are exploiting the annual Medicare Open Enrollment period (October 15 to December 7) as a pretext to impersonate insurers, agencies or Medicare itself. Contact comes by phone, SMS, email, social media and malicious Google ads that lead to spoofed, official-looking websites. Lures include plan changes, card replacement, lower prem…
This SentinelOne weekly roundup covers law enforcement wins and two major breaches. A federal court sentenced former U.S. Army soldier Cameron John Wagenius to 70 months for attacks on technology and telecom firms, and former U.S. Air Force members Chijioke Timothy Odimegwu and Harafat Mogaji received a combined 189 months for business em…
The US Department of Defense has confirmed a breach of the Defense Manpower Data Center (DMDC), one of its main personnel data repositories. The breach exposed sensitive data on roughly 2.76 million people plus about 294,000 deceased individuals. Unauthorised users reportedly accessed files between October 2025 and 16 July 2026, and the i…
Dutch authorities arrested a 24-year-old, reportedly Pepijn van der Stap (alias "Umbreon"), around Sept. 16, 2026 on suspicion of aiding data thefts and extortions by ShinyHunters. Van der Stap was previously convicted in 2023 for data theft and extortion. Days after the arrest, remaining ShinyHunters members escalated, breaching the FBI …
U.S. federal investigators pursuing ShinyHunters, which recently stole sensitive personnel data from the FBI recruitment site fbijobs.gov, reportedly identified executives at two ransomware negotiation firms with unusually close ties to the group. One U.S. consulting firm executive is suspected of helping operate the now-defunct extortion…
Analysis by Bridewell of reports to the UK Information Commissioner's Office (ICO) found more than 26,000 data breaches caused by human error between 2020 and 2025. Annual human-error breaches rose from 3,847 to 5,496 (+43%). The leading cause is data emailed to the wrong recipient (11,214 incidents, up 62% from 1,519 in 2020 to 2,459 in …
An actor using the handle Feel claims to have leaked data tied to IAD France, a French real estate network that supports property buying, selling and rental. The listing references three JSONL files: 8,592 agent records, 112,780 property records and 8,592 user-photo records. A sample archive is advertised, and the full download is gated b…
The Eclipse leak site has listed Taiwan Otsuka Pharmaceutical, a Taiwan-based pharmaceutical manufacturer, and claims to hold about 832 GB of internal company data. The victim page shows a countdown to a claimed publication deadline. The listing gives examples of allegedly stolen material across many business functions, including finance,…
A threat actor using the handle ChimeraZ claims to have leaked a user dataset linked to ISEP, a French engineering school specializing in digital technology, computer science, electronics and cybersecurity. The listing advertises 5,091 lines covering 5,088 people in a 720 KB JSON dataset, with multiple download mirrors provided. The data,…
The UK Information Commissioner's Office (ICO) has reprimanded the Metropolitan Police Service (MPS) and issued an enforcement notice. Between March 2023 and September 2024, officers registered about 500 free accounts on the retail crime platform Auror without formal procurement, a data protection impact assessment (DPIA) or data-sharing …
The UK government has disclosed that the April 2025 breach of the Legal Aid Agency (LAA) was larger than first reported. Around 250,000 stolen records predate 2007, with the oldest dating to 1978. The LAA had initially said the stolen data covered applications, claims and payments from 2007 onward. The Ministry of Justice (MoJ) also found…
Qilin and Settra ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect and Prisma Access disclosed in May 2026, according to ReliaQuest. Because access arrives through the victim's own VPN, it can resemble legitimate remote work and go unnoticed until credential theft, lateral movement, …
This weekly recap covers several concurrent incidents. ConnectWise disabled seven application identities and suspended Cloud Backup after unknown actors abused them to compromise Microsoft 365 tenants. China-nexus Armory Castle (UNC5221 / Warp Panda) exploited BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) as a zero-day in lat…
American Renal Management LLC, doing business as Innovative Renal Care, a kidney care provider with more than 200 locations in 28 U.S. states, has proposed a $900,000 settlement to resolve consolidated class action litigation (In re American Renal Management LLC Data Breach Litigation, U.S. District Court for the Middle District of Tennes…
Ridgeway Pharmacy Ltd, a Victor, Montana mail order and community pharmacy, disclosed that a security incident involving its third-party designed and developed website exposed the personal and health information of 258,920 customers. The company became aware of the exposure on August 21, 2026. Forensic experts confirmed the incident was l…
A Tenable blog post for Cybersecurity Awareness Month argues that shadow AI now covers far more than personal chatbots. It includes unvetted MCP servers, AI browser extensions, locally hosted models, coding assistants and autonomous agents holding broad credentials. Citing IBM's 2026 Cost of a Data Breach Report, it says 43% of organizati…
