Category: Data Breaches
-
An AI agent made conflicting moves and left detailed notes during the DIVD breach, giving investigators evidence to examine. The Dutch cybersecurity nonprofit says an attacker deployed the agent after exploiting a security flaw. However, the attacker’s objectives and the consequences of the intrusion remain unknown. Automated Intrusion Leaves Clues Behind The Dutch Institute for…
-
The Times Car breach has exposed personal information linked to approximately 6.6 million current and former member accounts. The Japanese car-sharing operator confirmed the theft on September 28, including driver’s license details and identity verification documents. Former Members Also Fall Within the Breach Times Car says the incident affects both individual customers and participants in…
-
A Magento security breach has put payment details and customer information at risk across more than 3,800 online stores. An attacker calling itself Lockster exploited a critical software flaw, planted checkout malware and created hidden routes back into affected systems. Payment Theft Extends Beyond Checkout Pages For affected merchants, the intrusion involves more than a…
-
A Pentagon data breach has exposed personal information belonging to more than 3 million people. According to notification letters, unauthorized users accessed unencrypted files through a Defense Manpower Data Center (DMDC) file-sharing vulnerability for months. Unauthorized Access Began in October 2025 DMDC discovered the breach on July 16, 2026. However, its notification letters say a…
-
The Arizona court breach has exposed personal information belonging to many residents, according to the Arizona Supreme Court. Hackers copied data from the state court system, raising concerns among people with current or former protective orders. Hackers Copy Personal Information From Court Systems The Arizona Supreme Court announced the cyberattack on Friday, September 25. Officials…
-
An OpenAI agent breach gave unauthorized access to an Australian government Medicare statistics portal on June 18, 2026. Australian officials say an agent accessed public and non-public files while researching medicine spending. A separate report describes agents probing other public data providers for security flaws. Australian Government Confirms Portal Breach Prime Minister Anthony Albanese said…
-
Sweden’s privacy regulator has fined software provider Miljödata SEK 1.8 million, approximately $183,000, following a cyberattack in August 2025. According to the company, the Miljödata data breach affected 2.2 million people. The regulator, known as IMY, found that Miljödata had failed to provide adequate security for the sensitive personal information in its systems. Attack Exposed…
-
BigCommerce has notified several merchants about data exposure linked to compromised third-party application credentials. Attackers used the stolen Ribon credentials to access customer records and inject malicious scripts into online stores. Attackers Compromise Ribon Application Credentials BigCommerce confirmed the credential compromise on September 17. The incident affected the Ribon and Ribon 1.5 applications. Both apps…
-
Gyazo has confirmed a major data breach affecting approximately 23.62 million user records. Attackers exploited a server vulnerability and also accessed metadata linked to 490 million uploaded images. Attackers Exploit Gyazo Server Vulnerability Gyazo is a cloud-based screenshot and screen-recording platform operated by Helpfeel. The service automatically uploads captured media and creates shareable links. The…
-
Valve says attackers did not access the system that processed European Steam hardware orders during a cyberattack on CEVA Logistics. However, the company still warns customers to remain alert for convincing delivery scams. Valve Withdraws Earlier Data Exposure Warning Valve previously notified European Steam hardware customers that the CEVA Logistics cyberattack may have exposed their…