Category: Data Breaches
-
Sweden’s privacy regulator has fined software provider Miljödata SEK 1.8 million, approximately $183,000, following a cyberattack in August 2025. According to the company, the Miljödata data breach affected 2.2 million people. The regulator, known as IMY, found that Miljödata had failed to provide adequate security for the sensitive personal information in its systems. Attack Exposed…
-
BigCommerce has notified several merchants about data exposure linked to compromised third-party application credentials. Attackers used the stolen Ribon credentials to access customer records and inject malicious scripts into online stores. Attackers Compromise Ribon Application Credentials BigCommerce confirmed the credential compromise on September 17. The incident affected the Ribon and Ribon 1.5 applications. Both apps…
-
Gyazo has confirmed a major data breach affecting approximately 23.62 million user records. Attackers exploited a server vulnerability and also accessed metadata linked to 490 million uploaded images. Attackers Exploit Gyazo Server Vulnerability Gyazo is a cloud-based screenshot and screen-recording platform operated by Helpfeel. The service automatically uploads captured media and creates shareable links. The…
-
Valve says attackers did not access the system that processed European Steam hardware orders during a cyberattack on CEVA Logistics. However, the company still warns customers to remain alert for convincing delivery scams. Valve Withdraws Earlier Data Exposure Warning Valve previously notified European Steam hardware customers that the CEVA Logistics cyberattack may have exposed their…
-
CenterPoint Energy has confirmed that an attacker stole personal information belonging to some of its customers. The utility company launched an investigation after a threat actor claimed to possess 7.49 million customer records. However, CenterPoint has not confirmed how many people the breach affected or exactly what information the attacker accessed. Utility Confirms Theft of…
-
Japan’s Digital Agency says attackers may have exposed around 246,000 rows of personnel data after exploiting a vulnerability in a government VPN device. The affected information includes names, email addresses, telephone numbers and physical addresses. The agency has found no evidence that criminals misused the exposed data. However, it warned affected individuals about an increased…
-
Revolut has disclosed a data breach after sending sensitive customer information to an attacker impersonating a government agency. The exposed records include identity documents, facial verification images, account statements and complete transaction histories. The fintech company said the incident affected a very limited number of customers. However, it has not revealed the exact figure. Attacker…
-
Revolut disclosed sensitive customer information to scammers who impersonated a government agency, the financial technology company has confirmed. The attackers reportedly used an email address on a legitimate government domain to submit fraudulent data requests. The exposed information may include identity documents, verification selfies and complete transaction histories. However, Revolut said the incident affected only…
-
The Cl0p cybercrime gang claims it stole 270GB of internal data from Harley-Davidson during its latest extortion campaign. The group has published a torrent link for the files, although the motorcycle manufacturer has not confirmed a data breach. Initial findings suggest the alleged Harley-Davidson data breach may connect to Cl0p’s campaign against organisations using PTC…
-
Surfshark has disclosed a security incident involving an internal test server and a separate proxy system. According to the VPN provider, a configuration error left the testing environment accessible from the internet. An unauthorized party then entered the server and accessed internal information. The exposed material included service configurations, build-related credentials, parts of system binaries…