Data Breaches
UK Biobank's complete dataset exposed via three Chinese research institutions; listings removed after UK-China government intervention. LONDON, UK — In what is being described as a geopolitical health data security scandal, the UK government has confirmed that confidential medical and genomic data belonging to all 500,000 UK
Data Breaches
Following our initial report on the Everest ransomware group's claims, Citizens Financial Group now faces a dual-front battle as federal litigation arrives in Rhode Island. Update (August 26, 2026): The litigation has expanded beyond the two original suits described below. By April 29, 2026, American Banker counted
Data Breaches
Vendors' pen-testing credentials and URL guessing gave Discord hackers weeks of access to a cybersecurity superweapon Anthropic warned was too risky for public release. SAN FRANCISCO, CA — On the same day Anthropic prepared to roll out its most powerful and restricted cybersecurity model to date, an unauthorized group
Data Breaches
ShinyHunters ransomware group accessed names, SSNs, and financial accounts of 47,876 customers; multiple class actions allege inadequate security. MINNEAPOLIS, MN — For the second time in less than half a year, financial services giant Ameriprise Financial is reeling from a major cybersecurity failure. The firm has confirmed that an unauthorized
Data Breaches
Quorum Cyber analysis reveals ransomware (+21%), hacktivism (+75%), and data breaches (+73%) converging on research-rich academic targets. EDINBURGH, UK — Global higher education is facing a "convergence of threats" as a new analysis from Quorum Cyber reveals a staggering 63% year-over-year increase in verified cyberattacks. Between
Data Breaches
PIPC's record penalty cites an employee workstation hack, a 72-hour reporting delay, and nonexistent database security controls. SEOUL, South Korea — South Korea’s Personal Information Protection Commission (PIPC) has levied a record 1.21 billion KRW ($815,000) fine against Duo, the nation’s largest matchmaking service,
Data Breaches
The Los Angeles County Office of Education (LACOE) has launched a forensic investigation into potential unauthorized access to its tax document portal after fraudulent tax returns were reportedly filed in the names of school district employees. DOWNEY, CA — The Los Angeles County Office of Education (LACOE) is investigating a potential
Data Breaches
Major Dutch e-commerce platform bol.com is investigating unverified claims that a database containing approximately 400,000 customer records was offered for sale online, though the company currently reports no evidence of a security incident. UTRECHT, NETHERLANDS — Leading Dutch retailer bol.com addressed a series of unverified allegations between
Data Breaches
Agoda has issued a formal denial following unverified claims on a dark web forum that a dataset containing 82 million customer records was stolen from its systems. SINGAPORE — Digital travel platform Agoda denied unverified claims on April 22, 2026, that a threat actor exfiltrated a database containing 82 million user
Data Breaches
Citizens Financial Group has confirmed it is managing a data security incident involving a third-party vendor, following claims by the Everest ransomware group that they exfiltrated sensitive corporate and customer data. Providence, RI — Citizens Financial Group (CFG) has become the latest major financial institution to grapple with the fallout
Data Breaches
Rituals confirmed attackers downloaded MyRituals loyalty records — names, birth dates, addresses, phones — while passwords and card data stayed segmented. The lesson: a retailer's least-protected database is a ready-made phishing kit, and it sits in a year-long wave on European retail.
Data Breaches
Canada Life confirmed a hacker used one employee login to reach its Salesforce and access 70,000 people's data. Three months on, ShinyHunters claims 5.5 million records are for sale. The gap between those numbers — and one stolen login — is the story.