Data Breaches
Citizens Financial Group has confirmed it is managing a data security incident involving a third-party vendor, following claims by the Everest ransomware group that they exfiltrated sensitive corporate and customer data. Providence, RI — Citizens Financial Group (CFG) has become the latest major financial institution to grapple with the fallout of
Data Breaches
International cosmetics giant Rituals has notified members of its "MyRituals" program that their personal information was unlawfully downloaded following a targeted breach of its customer systems. Amsterdam, Netherlands — Rituals Cosmetics, the Amsterdam-founded wellness and beauty brand, has become the latest high-profile victim in a wave of cyberattacks targeting
Data Breaches
Canada Life has confirmed a significant data breach after hackers successfully exploited a single employee account to access a high-value Salesforce environment, exposing the sensitive personal information of thousands. Winnipeg, MB — Canada Life, one of the nation's largest insurance and financial services providers, has begun notifying approximately 70,
Data Breaches
Insurance giant Humana has begun notifying customers across Texas and five other states of a significant data breach, marking the second time in 60 days that the company has confirmed the exposure of sensitive patient information. LOUISVILLE, KY — Humana Inc., one of the largest health insurance providers in the United
Data Breaches
New forensic details reveal that the massive data exfiltration at Vercel began with a single employee downloading a compromised Roblox game cheat, highlighting the catastrophic intersection of personal device use and enterprise SaaS permissions. SAN FRANCISCO, CA — The security community is processing the full scope of the breach involving Vercel
Data Breaches
The French National Agency for Secure Documents (ANTS) has confirmed a significant security incident targeting its central portal, as threat actors move to monetize a database allegedly containing millions of sensitive user records. PARIS, FRA — The French government is grappling with a severe compromise of its digital identity infrastructure. The
Data Breaches
Security researchers have identified a persistent vulnerability in the world’s most popular messaging app that allows attackers to scrape granular user metadata, bypassing end-to-end encryption (E2EE) protections. MENLO PARK, CA — While WhatsApp’s end-to-end encryption ensures that the content of a message remains private, a series of critical vulnerabilities
Data Breaches
The popular frontend cloud platform has confirmed a security incident after threat actors leveraged an infostealer infection at an integrated AI vendor to access Vercel’s internal environments. SAN FRANCISCO, CA — Vercel, the platform behind the Next.js framework, has officially disclosed a security breach originating from a compromised third-party
Data Breaches
The notorious threat group has claimed responsibility for a multi-vector attack targeting over 9 million records, allegedly exfiltrated via a shared third-party service provider. GLOBAL OPERATIONS — The cybersecurity landscape is bracing for a massive coordinated data leak after the threat actor group ShinyHunters issued a public ultimatum to three of
Data Breaches
The Indonesia Game Rating System (IGRS) has been taken offline following an API failure that exposed sensitive developer data and massive spoilers for high-profile unreleased titles. JAKARTA, INDONESIA — Indonesia’s Ministry of Communication and Informatics (Kominfo) has officially suspended the operations of the Indonesia Game Rating System (IGRS) following a
Data Breaches
South Africa’s largest lender by assets is reeling from a major security incident after a threat actor publicly released a massive cache of sensitive banking data. JOHANNESBURG, SOUTH AFRICA — Standard Bank has confirmed it is managing a "data incident" following reports that a threat actor has successfully
Cyber Crime
The Russia-linked exchange halts all operations after a high-precision attack empties its hot wallets, with leadership blaming Western intelligence services for the collapse. MOSCOW, RUSSIA — Grinex, a prominent cryptocurrency exchange previously blacklisted by international regulators for its alleged role in money laundering and sanctions evasion, has officially suspended all trading