Category: Data Breaches
-
The Estée Lauder data breach exposed personal information after attackers accessed an Oracle E-Business Suite system that supports the company’s HR operations. Estée Lauder discovered the incident last month. Its investigation found that an unauthorised party entered the system on or around 9 August 2025 and took personal data belonging to certain individuals. The company…
-
A Hugging Face breach was carried out by an autonomous AI agent system that accessed a limited set of internal datasets and service credentials, the company has confirmed. The incident began in the platform’s data-processing environment and developed into a wider intrusion across several internal clusters. According to Hugging Face, the attack unfolded over a…
-
Kenyan authorities are investigating a cyberattack that disrupted the official website of President William Ruto. Attackers replaced the website’s homepage with insulting political messages aimed at the president. They also demanded a ransom of five Bitcoin and threatened to release unspecified information. The Kenya website breach temporarily forced the presidential portal offline. However, officials have…
-
Italy’s privacy regulator has fined telecommunications company WINDTRE more than €1.7 million after two security breaches exposed customer information. The WINDTRE data breaches affected more than 365,000 people. Attackers stole identity and contact details, while some customers also had payment information compromised. The regulator blamed serious weaknesses in the company’s security systems. In particular, investigators…
-
The 23andMe data breach has resulted in an $18 million settlement after a multistate investigation concluded that the genetic testing company failed to adequately protect customer information. The agreement follows one of the largest privacy incidents involving consumer DNA data in recent years. The breach exposed information belonging to roughly 6.9 million users after attackers…
-
Lidl has warned customers in Germany, Belgium, and the Netherlands that attackers stole personal information during a cyberattack on one of its external service providers. The supermarket chain says the attackers accessed customer data stored outside its online shop, while the online shopping platform itself remained secure. Service Provider Suffers Data Breach Lidl informed affected…
-
Dutch police have warned they could publicly release a suspect’s voice recording as they continue investigating the Odido data breach, which exposed the personal information of more than 6.2 million current and former customers. Investigators believe the caller played a key role in the attack by impersonating an Odido IT employee. The social engineering call…
-
Mount Royal University has confirmed that hackers stole sensitive data during a cyberattack in June. The attackers also deleted files from university storage systems. The incident disrupted several campus services and triggered a large recovery effort. The Mount Royal University breach affected file storage used by students and employees. Investigators are still working to determine…
-
AssuranceAmerica has disclosed a major data breach affecting nearly seven million people. The company says hackers entered its network through a phishing attack and copied files containing driver’s license numbers, insurance policy details, claims information, and other personal data. The AssuranceAmerica breach adds to a growing wave of cyberattacks against the US insurance sector, where…
-
Accenture has confirmed an Accenture breach after a threat actor claimed to have stolen 35GB of company data and offered it for sale on a cybercrime forum. The company acknowledged the security incident and said it has already addressed the source of the breach. Accenture also stated that the incident has not affected its operations…