Category: Data Breaches
-
The QualDerm data breach has exposed sensitive information belonging to more than 3.1 million individuals across 17 US states. The incident highlights persistent weaknesses in healthcare security, where large volumes of patient data remain attractive targets for attackers. Because the breach includes medical and insurance records, the risks extend beyond standard identity theft and may…
-
A reported Crunchyroll data breach highlights how third-party access can turn into a direct risk for users. Attackers allegedly reached internal systems through a Telus-linked compromise, gaining access to sensitive data tied to customer operations. The incident shows how quickly exposure can spread once a trusted connection is compromised. Entry Point Through a Third Party…
-
A supply chain incident has exposed serious weaknesses in CI/CD pipelines. The Trivy GitHub breach shows how attackers can exploit automation workflows to gain control over trusted projects. In this case, a security tool itself became the entry point, turning a defensive solution into a distribution channel for malicious code. Misconfigured Workflow Enabled Initial Access…
-
AI companion apps continue to attract millions of users, but security issues are raising serious concerns. The AI girlfriend apps data leak risk is growing as researchers uncover widespread vulnerabilities that expose private conversations and sensitive user data. Researchers Uncovered Widespread Vulnerabilities Researchers analyzed multiple AI companion platforms and identified a large number of high-risk…
-
A former employee triggered a serious data exposure at an energy provider. The Innova Energie data breach unfolded when the individual accessed company systems and stole customer IBANs, showing how internal access can quickly turn into a critical security risk. Former Employee Carried Out the Breach A former employee accessed internal systems and extracted customer…
-
Aura, a company focused on identity protection, has suffered a data breach that exposed around 900,000 records. Attackers used a phishing call to trick an employee into granting access, showing how social engineering continues to bypass even well-established security environments. Phishing Attack Led to the Aura Data Breach The breach began with a targeted phone-based…
-
Employee portals often contain large amounts of sensitive personal information. When attackers gain access to these systems, the consequences can affect hundreds of people. A recent Starbucks HR breach exposed employee data after attackers accessed internal accounts on the company’s Partner Central platform. Investigators determined that the incident began with phishing attacks designed to steal…
-
Starbucks has disclosed a cybersecurity incident that exposed employee information. Attackers accessed internal HR accounts used by company staff. The Starbucks employee data breach involved the company’s Partner Central system. This platform manages employee records, payroll details, and benefits information. Security teams detected unauthorized access and launched an investigation. The company also began notifying affected…
-
Canada’s largest grocery retailer has confirmed a cybersecurity incident that exposed customer information. Loblaw Companies Limited disclosed that attackers accessed a portion of its internal network. The Loblaw data breach involved a limited system used for customer communications. The incident exposed contact details but did not compromise financial or medical data. The company detected the…
-
A cybersecurity breach involving federal law-enforcement infrastructure has raised serious concerns about the protection of sensitive investigative records. The Epstein files hack reportedly occurred after a foreign hacker gained unauthorized access to an FBI system that stored digital evidence connected to the Jeffrey Epstein investigation. The intrusion targeted systems used to manage and analyze evidence…