Data Breaches
Rituals confirmed attackers downloaded MyRituals loyalty records — names, birth dates, addresses, phones — while passwords and card data stayed segmented. The lesson: a retailer's least-protected database is a ready-made phishing kit, and it sits in a year-long wave on European retail.
Data Breaches
Canada Life confirmed a hacker used one employee login to reach its Salesforce and access 70,000 people's data. Three months on, ShinyHunters claims 5.5 million records are for sale. The gap between those numbers — and one stolen login — is the story.
Data Breaches
Humana disclosed two data breaches in two months, and a third followed. None started on Humana's own network — each traced to a third party holding member data. The real story is healthcare's business-associate concentration risk, not a firewall that failed.
Data Breaches
New forensic details reveal that the massive data exfiltration at Vercel began with a single employee downloading a compromised Roblox game cheat, highlighting the catastrophic intersection of personal device use and enterprise SaaS permissions. SAN FRANCISCO, CA — The security community is processing the full scope of the breach involving Vercel
Data Breaches
The French National Agency for Secure Documents (ANTS) has confirmed a significant security incident targeting its central portal, as threat actors move to monetize a database allegedly containing millions of sensitive user records. PARIS, FRA — The French government is grappling with a severe compromise of its digital identity infrastructure. The
Data Breaches
Security researchers have identified a persistent vulnerability in the world’s most popular messaging app that allows attackers to scrape granular user metadata, bypassing end-to-end encryption (E2EE) protections. MENLO PARK, CA — While WhatsApp’s end-to-end encryption ensures that the content of a message remains private, a
Data Breaches
The popular frontend cloud platform has confirmed a security incident after threat actors leveraged an infostealer infection at an integrated AI vendor to access Vercel’s internal environments. SAN FRANCISCO, CA — Vercel, the platform behind the Next.js framework, has officially disclosed a security breach originating from a compromised third-
Data Breaches
ShinyHunters didn't breach Zara, Carnival, and 7-Eleven's networks — it logged into the SaaS and CRM platforms they trusted, then exported the databases. The real lesson: in an identity-first, extortion-only world, you own every dataset anyone can reach with your name on it.
Data Breaches
An exposed API on Indonesia's mandatory game-rating portal leaked 1,000+ developer credentials and unreleased-game footage — including 007: First Light spoilers. The real lesson isn't the breach; it's the compliance systems that force publishers to hand over their crown jewels.
Data Breaches
South Africa’s largest lender by assets is reeling from a major security incident after a threat actor publicly released a massive cache of sensitive banking data. JOHANNESBURG, SOUTH AFRICA — Standard Bank has confirmed it is managing a "data incident" following reports that a threat actor has successfully
Cyber Crime
The Russia-linked exchange halts all operations after a high-precision attack empties its hot wallets, with leadership blaming Western intelligence services for the collapse. MOSCOW, RUSSIA — Grinex, a prominent cryptocurrency exchange previously blacklisted by international regulators for its alleged role in money laundering and sanctions evasion, has officially suspended
Data Breaches
The developer of wireless cardiac pacing technology confirms unauthorized access to limited network data, joining a growing list of Australian healthcare targets in 2026. BRISBANE, AU — EBR Systems (ASX: EBR), a prominent medical technology firm specializing in wireless cardiac pacing, has officially reported a "contained" cybersecurity incident affecting