Labcorp Agrees to $35M Settlement to Resolve AMCA Data Breach Litigation
HIPAA Journal reports: A $35,000,000 settlement has been agreed to resolve a long-running class action lawsuit against Labcorp over a
HIPAA Journal reports: A $35,000,000 settlement has been agreed to resolve a long-running class action lawsuit against Labcorp over a
The Record reports that the court administrator approved a $47 million settlement fund, even though plaintiffs had sought $47 billion:
WBRZ reports: he St. George Fire Protection District is suing Baton Rouge cybersecurity company General Informatics, blaming them for allowing
Two proposed state laws could impact incident response and costs: New Jersey Assembly Bill 1852 and New York Senate Bill 3078.
KRCR reports: California Attorney General Rob Bonta announced a lawsuit Thursday against genetic testing company 23andMe, now known as Chrome
Miscellaneous News
The New Humanitarian reports: A cyber-attack targeting the World Food Programme has exposed sensitive personal information belonging to some 600,000
DysruptionHub reports: A cybersecurity event has disrupted calibration systems at Des Moines, Iowa-based Intoxalock since March 14, leaving some court-ordered

Politie (the Dutch Police) reports: In Operation Endgame, a major operation this week disrupted a key infection chain used by cybercriminals. Within an international cooperation, 14.971 websites infected with SocGholish malware were remediated. This malware is used by a criminal group that plays a pivotal role in international cybercrime, namely: Evil Corp. SocGholish exploits hacked legitimate WordPress sites to spread malware to visitors, with the aim of gaining unauthorized access to their computer systems. WordPress is the world’s most widely

Israeli Defense reports: Cybernews researchers discovered an exposed, publicly accessible database containing roughly 24 billion records and more than 8.3TB of sensitive data. The dataset appears to be one of the largest leaks ever uncovered, consisting mainly of stolen login credentials harvested from infected devices. The leak, which was discovered on June 12, 2026 and reportedly secured by June 15, 2026, is believed to consist primarily of infostealer malware logs – stolen data harvested from infected devices, including usernames, email addresses,

Ars Technica reports: Researchers have uncovered a massive breach of Fortinet firewalls that has given Russian-speaking attackers near-unrestricted access to some of the world’s largest and most powerful organizations, including Oracle, Chevron, Lenovo, Federal Express, a NATO defense contractor, and Fortinet itself. Nearly 74,000 Fortinet devices from more than 21,000 IP addresses in 194 countries have been compromised and their plaintext credentials exposed online, Bob Diachenko, a security researcher and head of SecurityDiscovery.com, said online and in an interview. He said he

Mashable reports: Nintendo of North America says it’s aware of what’s been described as a small third-party data breach affecting some of its employees. “Nintendo’s systems have not been compromised,” the company told Mashable in a statement, acknowledging that a third-party service was affected by an “issue.” Earlier this week, a hacking group calling itself ShadowByte$ posted a threat on a “well-known cybercrime forum,” according to CyberNews. The group alleged it stole 859MB of internal corporate data from a third-party service called

DataBreaches.net reports that Novo Nordisk wasn’t attacked by just one criminal group but by two. The first group was FulcrumSec, who first contacted Novo Nordisk on June 1. After Novo Nordisk stopped responding to them, FulcrumSec leaked some of the data, providing DataBreaches.net with some exclusive material revealing how they approached the pharmaceutical giant. The second group to attack Novo Nordisk leaked data before FulcrumSec did, but attacked Novo Nordisk after FulcrumSec had. And while FulcrumSec had set a ransom
Israeli Defense reports: Cybernews researchers discovered an exposed, publicly accessible database containing roughly 24 billion records and more than 8.3TB
News AZ reports: Brazil’s government is investigating a suspected cyberattack after a bizarre, unauthorized emergency alert woke citizens across multiple
Chron reports: Read more at Chron. The medical group does not explain why it took them so long to notify
WJAR reports: A data breach four months ago has Warwick-based Beacon Mutual Insurance notifying people whose personal information was compromised
Does it matter whether President Trump calls the situation with Iran a “war” or an “excursion” or something else if
Reuters reports: Consultancy firm Accenture (ACN.N), opens new tab said on Thursday it would take a majority stake in industrial cybersecurity firm

Politie (the Dutch Police) reports: In Operation Endgame, a major operation this week disrupted a key infection chain used by cybercriminals. Within an international cooperation, 14.971 websites infected with SocGholish malware were remediated. This malware is used by a criminal group that plays a pivotal role in international cybercrime, namely: Evil Corp. SocGholish exploits hacked legitimate WordPress sites to spread malware to visitors, with the aim of gaining unauthorized access to their computer systems. WordPress is the world’s most widely

Israeli Defense reports: Cybernews researchers discovered an exposed, publicly accessible database containing roughly 24 billion records and more than 8.3TB of sensitive data. The dataset appears to be one of the largest leaks ever uncovered, consisting mainly of stolen login credentials harvested from infected devices. The leak, which was discovered on June 12, 2026 and reportedly secured by June 15, 2026, is believed to consist primarily of infostealer malware logs – stolen data harvested from infected devices, including usernames, email addresses,

Ars Technica reports: Researchers have uncovered a massive breach of Fortinet firewalls that has given Russian-speaking attackers near-unrestricted access to some of the world’s largest and most powerful organizations, including Oracle, Chevron, Lenovo, Federal Express, a NATO defense contractor, and Fortinet itself. Nearly 74,000 Fortinet devices from more than 21,000 IP addresses in 194 countries have been compromised and their plaintext credentials exposed online, Bob Diachenko, a security researcher and head of SecurityDiscovery.com, said online and in an interview. He said he

Mashable reports: Nintendo of North America says it’s aware of what’s been described as a small third-party data breach affecting some of its employees. “Nintendo’s systems have not been compromised,” the company told Mashable in a statement, acknowledging that a third-party service was affected by an “issue.” Earlier this week, a hacking group calling itself ShadowByte$ posted a threat on a “well-known cybercrime forum,” according to CyberNews. The group alleged it stole 859MB of internal corporate data from a third-party service called
HIPAA Journal reports: A $35,000,000 settlement has been agreed to resolve a long-running class action lawsuit against Labcorp over a
The Record reports that the court administrator approved a $47 million settlement fund, even though plaintiffs had sought $47 billion:
WBRZ reports: he St. George Fire Protection District is suing Baton Rouge cybersecurity company General Informatics, blaming them for allowing
Two proposed state laws could impact incident response and costs: New Jersey Assembly Bill 1852 and New York Senate Bill 3078.
KRCR reports: California Attorney General Rob Bonta announced a lawsuit Thursday against genetic testing company 23andMe, now known as Chrome
Miscellaneous News
The New Humanitarian reports: A cyber-attack targeting the World Food Programme has exposed sensitive personal information belonging to some 600,000
DysruptionHub reports: A cybersecurity event has disrupted calibration systems at Des Moines, Iowa-based Intoxalock since March 14, leaving some court-ordered
Israeli Defense reports: Cybernews researchers discovered an exposed, publicly accessible database containing roughly 24 billion records and more than 8.3TB
News AZ reports: Brazil’s government is investigating a suspected cyberattack after a bizarre, unauthorized emergency alert woke citizens across multiple
Chron reports: Read more at Chron. The medical group does not explain why it took them so long to notify
WJAR reports: A data breach four months ago has Warwick-based Beacon Mutual Insurance notifying people whose personal information was compromised
Does it matter whether President Trump calls the situation with Iran a “war” or an “excursion” or something else if
Reuters reports: Consultancy firm Accenture (ACN.N), opens new tab said on Thursday it would take a majority stake in industrial cybersecurity firm
