Data Breaches

Editorial illustration of a small robot arm slipping a key from an open AI model-repository vault, marking Hugging Face's breach by an autonomous AI agent.

Data Breaches

Hugging Face Confirms Production Infrastructure Breach Reportedly Perpetrated by Autonomous AI Agent

A first-of-its-kind AI-agent breach hits the world's largest AI model repository — defender posture and AI-supply-chain review are the week's practical takeaways for organizations that depend on Hugging Face-hosted models, datasets, and Spaces.

Ransomware

Coca-Cola Suspends Fairlife US Milk Production Following Ransomware Attack (SEC 8-K Filed)

A ransomware attack halts fairlife's US milk production and lands as a Coca-Cola SEC 8-K filing — food-industry sector-advisory coverage this week.

Editorial illustration of a DNA helix beside a gavel and coin stacks, marking 23andMe's $18M settlement with 42 state attorneys general.

Data Privacy

23andMe Reaches $18 Million Multi-State Settlement Across 42 State Attorneys General

A significant multi-state privacy settlement — regulatory-policy analysis coverage this week — as 23andMe agrees to pay $18 million to a coalition of 42 state attorneys general over the security failings behind its data breach.

Editorial illustration of an airplane tail beside a spilling records folder and a headset, marking the Qantas breach of 5.7 million from a tech-support scam.

Data Breaches

Qantas Discloses Data Breach Affecting 5.7 Million People Traced to Tech-Support Scam

A scale-significant airline-industry disclosure traced to a tech-support scam — sector-advisory coverage this week, based on early single-source reporting that Qantas has yet to fully detail.

Editorial illustration of three trails converging on a customer-records file, representing Microsoft's analysis of three Salesforce attack paths.

Threat Intelligence

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

Microsoft maps ShinyHunters' Salesforce activity — defender review for SaaS-heavy organizations this week.

Editorial illustration of a magnifying glass over a newspaper beside a spilling records folder, marking the Accenture data breach in a weekly security recap.

Data Breaches

Accenture Confirms Data Breach After Hacker Lists Stolen Source Code and Cloud Keys for Sale

A consulting-and-IT-services sector signal: Accenture has confirmed an intrusion after a threat actor advertised stolen source code and cloud credentials for sale, calling it an isolated, remediated matter even as the scale and any client impact remain unverified.

Flat white line-art of an open report book beside a shield, one flat red dot at the shield — CISA credential-leak forensic report.

Data Breaches

CISA Publishes Forensic Report on May AWS GovCloud Credential Leak

A candid CISA transparency report — defender takeaways on incident-playbook readiness this week.

Flat white line-art of a government building beside a tall database drum — a DHS database breach reported in a weekly security roundup.

Data Breaches

DHS Database Hacked, SecurityWeek Roundup Reports; Adobe, Canada Also Featured

A federal-agency database breach lands in the weekly roundup — sector-advisory tracking this week.

Flat white line-art of a cloud shape linked to a stack of patient record cards — AdaptHealth cloud-systems compromise affecting patient data.

Data Breaches

AdaptHealth Discloses Cloud-Systems Compromise Affecting Patient Data

Another healthcare-sector cloud-compromise disclosure — sector-advisory work this week. AdaptHealth says attackers reached its cloud systems and accessed patient data, with social engineering reported as the initial-access route.

Flat white line-art of a pacemaker device beside a stack of patient record cards — Medtronic warns pacemaker patients of a health-data exposure.

Data Breaches

Medtronic Warns Pacemaker Patients Health Data May Have Been Exposed in Cyber Incident

A medical-device-manufacturer disclosure with sector-advisory implications — patient notification in focus this week.

Flat white line-art of a government building beside a shield panel — US government confirms a new breach affecting federal systems.

Data Breaches

US Government Confirms New Breach Affecting Federal Systems in Sector-Advisory Disclosure

Another federal-agency disclosure — sector-advisory tracking for federal-adjacent defenders this week.

Flat white line-art of one highlighted building linked to a wide row of faint identical buildings — Oracle PeopleSoft campaign reportedly reaching about 100

Data Breaches

Nissan Oracle PeopleSoft Campaign Reportedly Targeted 100 Organizations

One confirmed victim, a reported 99 more not yet named — Oracle PeopleSoft customers stay in patch-verification posture this week.

See all