Klue OAuth Breach Victim List Grows as Icarus Claims Responsibility

What happened Market intelligence platform Klue confirmed a security incident after attackers gained access to part of its integration infrastructure and stole OAuth tokens used to connect customer environments to third-party platforms, ...

Texas Government Data Breach Exposes Over 3 Million Driver’s Licenses

What happened The Texas Parks and Wildlife Department disclosed a data breach affecting more than three million individuals after unauthorized access was discovered at its license system vendor. Texas Cyber Command discovered ...
Kodak listed on ShinyHunters leak site

Kodak confirms breach as ShinyHunters’ leak threat reaches deadline

The photography giant confirmed a data breach after ShinyHunters claimed it stole 2.2 million records and threatened to leak them ...

Nintendo Confirms Limited Employee Data Breach Linked to Third-Party Service

What happened Nintendo confirmed a security incident involving TinyPulse, a third-party employee engagement and survey platform used by the company, after threat actors claimed to have stolen internal data and demanded a ...

Novo Nordisk Reports Cybersecurity Breach Affecting Clinical Trial Patients

What happened Novo Nordisk disclosed a cybersecurity incident involving unauthorized access to a limited number of internal IT systems, which resulted in certain clinical trial patient data being copied externally. The company ...

HSE Fined €300,000 After Tullamore Hospital Data Breach

What happened Ireland’s Health Service Executive (HSE) has been fined €300,000 by the Data Protection Commission (DPC) following a data breach at Midlands Regional Hospital Tullamore. The breach involved a ransomware incident ...

Maine Closes Data Breach Portal After Fake Breach Notices

What happened Maine’s Attorney General’s Office has taken its public-facing data breach reporting portal offline after two fraudulent breach notices were posted, one falsely claiming 2.4 million VRChat customers had been breached ...

Kodak Confirms Data Breach Claimed by ShinyHunters Extortion Gang

What happened Kodak has confirmed that an unauthorized third party illegally gained temporary access to a limited amount of company data, with the ShinyHunters extortion group claiming responsibility on its dark web ...

Council of Europe Investigates ShinyHunters Data Breach Claims

What happened The Council of Europe is investigating claims that the ShinyHunters extortion group stole hundreds of thousands of documents from the organization. The Council of Europe is Europe’s oldest intergovernmental body ...

How to Prevent a Data Breach: A Practical Playbook

Most data breaches don't come from sophisticated zero-day attacks. They come from stolen credentials, misconfigurations, and unpatched systems. Here is a practical, prioritized playbook for preventing the breaches that actually happen ...