Tag: data-breach
-
Chainalysis discloses data breach from “offensive agentic techniques”
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used “offensive agentic techniques” to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chainalysis-discloses-data-breach-from-offensive-agentic-techniques/
-
Applebee’s exposed customers’ personal data after leaving database password in app
EXCLUSIVE: A security researcher discovered the hardcoded credential in Applebee’s app, allowing unrestricted access to customers’ personal data. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/30/applebees-exposed-customers-personal-data-after-leaving-database-password-in-app/
-
Hospital Cyberattacks Bring Disruptions, Legal Fallout
New Mexico, Ohio Ransomware Attacks Raise Concerns as Feds Settle Pennsylvania Case. Cyber incidents at university health systems in New Mexico and Ohio disrupted patient care and sparked data theft concerns and litigation. Meanwhile, a Pennsylvania health system faces an $800,000 HIPAA settlement over a 2023 ransomware attack that exposed sensitive cancer patient photos. First…
-
Fashion retailer Resolve says hackers stole payment card information
The company, billing itself as “the next-generation fashion retailer for Millennial and Generation Z consumers,” said a recent hack exposed customer payment card numbers. First seen on therecord.media Jump to article: therecord.media/resolve-fashion-retailer-data-breach-payment-cards
-
Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
The state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on October 19. First seen on therecord.media Jump to article: therecord.media/florida-warns-5-million-affected-financial-aid-site-breach
-
The Cyber Express Weekly Roundup: Binance Hit by $6.3 Billion Security Incident, South Korea Busts AI-Powered Hacking Ring and More
This weekly roundup covers a $6.3 billion security incident at Binance, the arrest of a South Korean hacking ring that used generative AI to breach about 90 companies, Columbia University’s $16.1 million settlement over its 2025 data breach, a 70-month prison sentence for a Ukrainian ransomware affiliate tied to Nefilim and Hive, and Discord’s decision…
-
Datenleck: Mitarbeiter soll KI-Agenten Zugriff auf Pentagon-System gewährt haben
Ein Accenture-Mitarbeiter soll einem KI-Agenten Zugang zu einem Pentagon-System gewährt haben. Dabei gelangten offenbar Daten nach außen. First seen on golem.de Jump to article: www.golem.de/news/datenleck-mitarbeiter-gewaehrte-ki-agenten-zugriff-auf-pentagon-system-2610-214666.html
-
Datenleck: Mitarbeiter gewährte KI-Agenten Zugriff auf Pentagon-System
Ein Accenture-Mitarbeiter soll einem KI-Agenten Zugang zu einem Pentagon-System gewährt haben. Dabei gelangten offenbar Daten nach außen. First seen on golem.de Jump to article: www.golem.de/news/datenleck-mitarbeiter-gewaehrte-ki-agenten-zugriff-auf-pentagon-system-2610-214666.html
-
Datenleck: Mitarbeiter gewährte KI-Agenten Zugriff auf Pentagon-System
Ein Accenture-Mitarbeiter soll einem KI-Agenten Zugang zu einem Pentagon-System gewährt haben. Dabei gelangten offenbar Daten nach außen. First seen on golem.de Jump to article: www.golem.de/news/datenleck-mitarbeiter-gewaehrte-ki-agenten-zugriff-auf-pentagon-system-2610-214666.html
-
Hacker leaks data on more than 40,000 Homeland Security employees
A hacker leaks personal data on more than 40,000 DHS employees, including CBP, ICE and CISA staff, after an undisclosed breach. Personal details of thousands of U.S. Department of Homeland Security (DHS) employees are now online after a hacker stole reams of data in a data breach that occurred earlier this year and nobody had…
-
Japan Airlines suffers third-party data breach exposing passenger info
Japan Airlines (JAL) has announced that a data breach at Amadeus’s Passenger Service System exposed the data of about 92,000 customers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info/
-
Japan Airlines suffers third-party data breach exposing passenger info
Japan Airlines (JAL) has announced that a data breach at Amadeus’s Passenger Service System exposed the data of about 92,000 customers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info/
-
Leaked DHS employee archive, Icepick, faces challenges to stay online
Tags: data-breachA DHS contractor requested its removal, while a social media site blocked links to it. It was offline for a spell before finding a new home. First seen on cyberscoop.com Jump to article: cyberscoop.com/dhs-employee-breach-icepick-database-takedown/
-
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn’t.There’s a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from familiar apps, websites, and AI tools. Some are using…
-
484,142 Exposed Cloud Buckets Contain 18 Billion Files
42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team counted 484,142 publicly listable cloud storage buckets in October 2026, holding 18.05 billion files. They built the count from the search engines that index open cloud storage and published it as the Ransomnews Cloud Exposure…
-
Cryptohack Roundup: CoinDCX Loses $16M
Also: Coinbase Fined 3.25M Euros, Initia Hit by $2.7M Hack. This week, CoinDCX confirmed a $16 million hack, Coinbase Ireland fined 3.25 million euros, New York sought $1.37 billion from NovaTech founders, Initia suffered a $2.7 million exploit, Keystone reported a data breach, the U.S. Department of the Treasury sanctioned North Korean IT workers. First…
-
Bluesky blocks links to leaked DHS employee data as government seeks takedowns
The social networking site is facing criticism for blocking access to the site, which identifies thousands of ICE agents and other employees working for Homeland Security. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/29/bluesky-blocks-links-to-leaked-dhs-employee-data-as-government-seeks-takedowns/
-
Hacktivists ‘Department of Peace’ Leak DHS Employee Data
‘Icepick’ Leak Tens of Thousands of Department of Homeland Security Agent Names. The identities of over 41,000 U.S. Department of Homeland Security employees, including agents working in immigration and undercover, have been leaked online by hacktivists. DHS said it’s aware of a potential breach and is actively working to address the situation swiftly and effectively.…
-
26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a researcher tested them. Anyone who copied one from that code could have used it.Independent researcher Ben Zimmermann found them by scanning 7.25 million public Gitee repositories and reported the results on October 28. Most were keys for…
-
Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents
Names, offices, contact details and assignments of more than 41,000 U.S. Department of Homeland Security (DHS) employees have been leaked by a hacktivist group calling itself … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/29/icepick-dhs-leak-ice-undercover-agents/
-
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Illicit software on the computers of some of the world’s best online poker players allowed the accused cheater to see what cards were in the victims’ hands”, and trounce them at the tables. First seen on wired.com Jump to article: www.wired.com/story/a-hacker-targeted-high-stakes-poker-players-with-malware-that-exposed-their-cards/
-
Volt Typhoon Hackers Exploit Multiple Zero-Days to Breach U.S. Critical Infrastructure Networks
Tags: access, breach, china, cyber, data-breach, exploit, framework, group, hacker, hacking, infrastructure, network, vulnerability, zero-dayChinese state-sponsored hacking group Volt Typhoon has exploited multiple previously unknown vulnerabilities in enterprise management platforms to penetrate strategically significant organizations. Its investigation exposed Silent Train, a covert access framework built from rapidly rotating chains of compromised devices. Over three years, Black Lotus Labs issued hundreds of victim notifications, helping investigations uncover four confirmed zero-day…
-
12 Cyber Threat Intelligence (CTI) Feeds Services: The 2026 Buyer’s Verdict Guide
CTI services answer different sentences who targets us, what’s leaked about us, which alerts are noise, whose infrastructure is that and no provider owns them all. This verdict guide maps twelve feeds and services to the sentences they answer best, spanning frontline-IR intel, noise-filtering specialists, preemptive infrastructure hunting, underground depth, and the regional players with…
-
ENGIE Data Breach Exposes Customer Details and Energy Contracts
ENGIE says attackers accessed French customers’ contact and energy contract data through a partner sales tool. Banking data was not affected. French multinational energy company ENGIE warned customers in France that attackers accessed personal information through a sales tool used by some business partners. The exposed data includes contact details and energy contract information that…
-
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces.”Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet,” the network security company said in an update to its advisory.The vulnerabilities, tracked as First seen on thehackernews.com Jump to…
-
Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers. First seen on therecord.media Jump to article: therecord.media/japan-airlines-warns-of-breach-country-grapples-with-incidents
-
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers because it contains people’s contact information, shared without their authorization. First seen on wired.com Jump to article: www.wired.com/story/bluesky-blocks-links-to-major-leak-of-dhs-data/
-
Massive Leak Exposes 41,000 Homeland Security Workers”, Including Undercover ICE Agents
The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot. First seen on wired.com Jump to article: www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/
-
US Homeland Security Data Breach Exposes Personal Details of Over 41,000 Employees
A newly disclosed data leak has exposed personal and professional information on more than 40,000 U.S. Department of Homeland Security employees, including personnel in surveillance, human intelligence, and undercover operations. Distributed Denial of Secrets announced the publication on October 28. It attributed the information to an entity calling itself “Department of Peace.” The reported exposure…