DevaOnBreaches

Ars Technica

FBI rushes to investigate if ShinyHunters hack of thousands of employees is real

It's unclear what will happen if FBI misses ShinyHunters' deadline.

Data Breach Insights - Be Aware & Stay Secure

H1 2026 Data Breach Report: 101 Breaches, 1 Billion Records - Data Breach Insights

A billion records in six months. Our first half-yearly breach coverage report: what entered the index, what happened out there, and the two findings that change how often you should check.

Cybernews

Nextcloud leaks 367K records, exposing staff and clients

Nextcloud exposed 367K records including employee data, client contracts, and infrastructure scripts through a misconfigured database, raising phishing risks.

TechCrunch

Computer maker Framework notifies 'all customers' of a data breach | TechCrunch

Framework told "all" of its customers that hackers accessed their names, email addresses, phone numbers, and physical addresses in a data breach.

Data Breach Insights - Be Aware & Stay Secure

Free Breach Monitoring Toolkit for Sysadmins: Scripts, API, Alerts - Data Breach Insights

Monitor every domain and employee inbox for breach exposure with free scripts, a keyless API, and Slack or Teams alerts. Built for sysadmins with no budget line.

Data breach at medical billing firm MCBS affects 1.26 million people

Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive information of more than 1.2 million people.

Are we human?

Hackread - Cybersecurity News, Data Breaches, AI and More

AI Firm Mercor Confirms Breach as Hackers Claim 4TB of Stolen Data

AI firm Mercor confirms a breach linked to a LiteLLM supply chain attack, as hackers claim to have stolen 4TB of sensitive data and internal systems.

Drift loses $280 million as North Korean hackers seize Security Council powers

The Drift Protocol lost at least $280 million after a threat actor took control of its Security Council administrative powers in a planned, sophisticated operation.

Healthcare tech firm CareCloud says hackers stole patient data

Healthcare IT firm CareCloud has disclosed a data breach incident that exposed sensitive data and caused a network disruption lasting approximately eight hours.

Dutch Police discloses security breach after phishing attack

The Dutch National Police (Politie) says a security breach resulting from a successful phishing attack has had a limited impact and hasn't affected citizens' data.

European Commission investigating breach after Amazon cloud account hack

The European Commission, the European Union's main executive body, is investigating a security breach after a threat actor gained access to the Commission's Amazon cloud environment.

Accenture confirms breach after hacker offers stolen data for sale

IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company.

Ernst & Young data breach claimed by ShinyHunters extortion gang

The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, saying it obtained credentials for some of the company's systems via a supply-chain attack.

Hackread - Cybersecurity News, Data Breaches, AI and More

LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach

LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people.

GitHub - XposedOrNot/XposedOrNot-API: Open-source API to check if an email has been exposed in a data breach and monitor breaches across your verified domains. Real-time alerts and breach analytics protect your online identity.

Open-source API to check if an email has been exposed in a data breach and monitor breaches across your verified domains. Real-time alerts and breach analytics protect your online identity. - Xpose...

OnTrac notifies customers of data breach after network hack

OnTrac parcel delivery company is informing that hackers breached its corporate network and may have accessed personal details belonging to its customers.

NAIC says public data stolen in ShinyHunters' PeopleSoft breach

The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after breaching its systems by exploiting a zero-day vulnerability in an Oracle PeopleSoft server.

TechCrunch

CareCloud begins to notify hundreds of thousands after hackers stole medical records | TechCrunch

The health tech data giant, which handles vast amounts of patients' medical data, said hackers struck one of its protected health data stores.

South Korea discloses data breach impacting diplomats worldwide

South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and stole personal information belonging to current and former employees of the Ministry of Foreign Affairs (MFA), including overseas diplomats.

Estée Lauder discloses data breach via Oracle E-Business flaw

Cosmetics giant Estée Lauder is notifying employees of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations.

Hackread - Cybersecurity News, Data Breaches, AI and More

Brazil Health Surveillance Database Exposed 79GB of Sensitive Records

Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection.

Data Breach Insights - Be Aware & Stay Secure

Weekly Databreaches Roundup Week 13-2026 - Data Breach Insights

Dutch National Police, European Commission, AFC Ajax, Crunchyroll, and Infinite Campus.

Lidl discloses online shop breach after service provider hack

German discount supermarket chain Lidl notified customers in Germany, Belgium, and the Netherlands that attackers stole their personal information in a breach at a service provider.

Bank of Baroda confirms data breach. Can the lender now face penalties?

Bank of Baroda has confirmed a customer data breach after an employee email account was compromised. The case now turns on regulatory scrutiny, possible penalties and the steps customers must take against phishing and misuse.

TechCrunch

Telehealth giant Hims & Hers says its customer support system was hacked | TechCrunch

The U.S. telehealth giant says hackers stole customer support ticket data over the course of several days in February.

Data Breach Insights - Be Aware & Stay Secure

Password Managers, From Someone Who Reads Breach Dumps - Data Breach Insights

Four field notes from reading 516 password-leaking breaches, an honest argument with the sceptic about single points of failure, and a 30-minute start. No product picks, no affiliate links.

Data Breach Insights - Be Aware & Stay Secure

H1 2026 Data Breach Report: 101 Breaches, 1 Billion Records - Data Breach Insights

A billion records in six months. Our first half-yearly breach coverage report: what entered the index, what happened out there, and the two findings that change how often you should check.

DataBreaches.Net

Silent Ransom Group leaked another big law firm: Orrick, Herrington & Sutcliffe - DataBreaches.Net

Jones Day wasn't the only big law firm to recently fall prey to threat actors variously known as Silent Ransom Group, Luna Moth, Chatty Spider, or UNC3753. Data

Chick-fil-A discloses data breach after credential stuffing attacks

American fast food restaurant chain Chick-fil-A is notifying customers of a data breach after their accounts were hacked in a wave of recent credential stuffing attacks.

Data Breach Repository: Statistics, Trends & Insights | XposedOrNot

Real-time data breach statistics, yearly trends, industry breakdowns, password risk analysis, and identity theft risk insights across thousands of breaches.

Mount Royal University confirms breach as hackers claim attack

Mount Royal University in Calgary says hackers stole and then deleted data from its file storage systems after breaching the university's network.

bbc.com

Education department says 607,000 records taken in cyber attack

The DfE says it is working closely with the National Cyber Security Centre and the National Crime Agency.

TechCrunch

Hackers stole 'significant' amount of data from tech firm relied on by thousands of US hospitals and pharmacies | TechCrunch

Edinburgh-based tech firm Craneware said customer data was stolen during a cyberattack. The company makes software that thousands of U.S. hospitals, pharmacies, and clinics rely on for billing patients, potentially exposing health data.

Hackread - Cybersecurity News, Data Breaches, AI and More

ShinyHunters Walk Away from BreachForums, Leak 300,000-User Database

ShinyHunters leaves BreachForums, leaks data of 300,000 users, warns all active domains are fake, and threatens more leaks from forum backups.

Are we human?

ExfilSquad hackers leak info of over 100,000 UK police officers, staff

A cyberattack on the U.K.'s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals.

Data Breach Insights - Be Aware & Stay Secure

Introducing My Circle: Breach Monitoring for Your Family - Data Breach Insights

You are the family tech person. My Circle brings the people you look after into your breach dashboard, with their explicit permission, revocable by them at any time. Free, like everything else.

Data Breach Insights - Be Aware & Stay Secure

Introducing My Circle: Breach Monitoring for Your Family - Data Breach Insights

You are the family tech person. My Circle brings the people you look after into your breach dashboard, with their explicit permission, revocable by them at any time. Free, like everything else.

‘A matter of urgency’: Major energy retailer hit by suspected hack

According to their latest annual report the energy provider has about 4.7 million customers.