Conduent to pay $80M to settle 3rd-largest healthcare data breach
Becker’s Health IT reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over
October 27, 2026
Becker’s Health IT reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over
ITPro reports: The US Department of Homeland Security (DHS) has banned the use of DeepSeek by civilian federal agencies, citing
HackRead reports on a third arrest within one month linked to the ShinyHunters investigation. Two of the arrests, including this
A 16 year-old arrested as the leader of a ransomware gang? The news had experienced cybersecurity professionals shaking their heads
The Register reports that the California Attorney General has subpoenaed OpenAI as part of an investigation into the AI lab’s models
Miscellaneous News
The Record reports: Just in time for the World Cup’s “knockout” round, the U.S. government announced the seizure of hundreds
The New Humanitarian reports: A cyber-attack targeting the World Food Programme has exposed sensitive personal information belonging to some 600,000
TechCrunch reports on what is almost certainly a very worrying breach for employees of the Department of Homeland Security (DHS): Personally identifiable information belonging to thousands of U.S. Department of Homeland Security employees has been published online after a hacker stole reams of data in a previously undisclosed breach at the government department earlier this year. The breach includes names, job titles, and work contact information, such as email addresses, cell phone numbers, and office locations, of more than 40,000
Seen on exploit.in: Source: exploit.in. The original article appeared in Russian at rakep.ru.
Bleeping Computer reports: Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. Discovered in a core component of EBS’s Application Object Library and tracked as CVE-2026-101767, this flaw lets unauthenticated threat actors with HTTP network access take over vulnerable systems in low-complexity attacks. Oracle released security updates to address the issue in its October 2026 Critical Security Patch Update on October 20 and urged customers to patch their systems immediately.
Becker’s Health IT reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over the third-largest healthcare data breach on record, which exposed data on about 62.2 million people. Conduent signed the settlement Oct. 16 with plaintiffs in the U.S. District Court for the District of New Jersey, according to an SEC filing. The $80 million nonreversionary fund covers class member recoveries, credit and medical data monitoring, plaintiffs’ attorney fees and administration costs, and
Forbes reports: Crypto thieves are targeting iPhone users at scale with a sneaky kind of cyberattack that only requires victims to view an ad or visit an infected webpage, researchers tell Forbes. Hundreds of websites have been compromised as part of the hack, they say and, in one case, a malware ad was served over Instagram. “Users aren’t visiting malicious websites. They’re not doing anything wrong. They’re just scrolling and being infected,” says Rocky Cole, CEO and cofounder at mobile
Categories
TechCrunch reports on what is almost certainly a very worrying breach for employees of the Department of Homeland Security (DHS):
TechCrunch reports: Security researchers at digital rights unit The Citizen Lab say government spyware makers are abusing global advertising networks
CBC reports: More Ontario police units have now paused their use of the Crime Stoppers program, after CBC News revealed
Reuters reports that French supermarkets are facing millions of euros in losses after a cyberattack forced them to throw away food.
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail
Becker’s Health IT reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over
TechCrunch reports on what is almost certainly a very worrying breach for employees of the Department of Homeland Security (DHS): Personally identifiable information belonging to thousands of U.S. Department of Homeland Security employees has been published online after a hacker stole reams of data in a previously undisclosed breach at the government department earlier this year. The breach includes names, job titles, and work contact information, such as email addresses, cell phone numbers, and office locations, of more than 40,000
Seen on exploit.in: Source: exploit.in. The original article appeared in Russian at rakep.ru.
Bleeping Computer reports: Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. Discovered in a core component of EBS’s Application Object Library and tracked as CVE-2026-101767, this flaw lets unauthenticated threat actors with HTTP network access take over vulnerable systems in low-complexity attacks. Oracle released security updates to address the issue in its October 2026 Critical Security Patch Update on October 20 and urged customers to patch their systems immediately.
Becker’s Health IT reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over the third-largest healthcare data breach on record, which exposed data on about 62.2 million people. Conduent signed the settlement Oct. 16 with plaintiffs in the U.S. District Court for the District of New Jersey, according to an SEC filing. The $80 million nonreversionary fund covers class member recoveries, credit and medical data monitoring, plaintiffs’ attorney fees and administration costs, and
Becker’s Health IT reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over
ITPro reports: The US Department of Homeland Security (DHS) has banned the use of DeepSeek by civilian federal agencies, citing
HackRead reports on a third arrest within one month linked to the ShinyHunters investigation. Two of the arrests, including this
A 16 year-old arrested as the leader of a ransomware gang? The news had experienced cybersecurity professionals shaking their heads
The Register reports that the California Attorney General has subpoenaed OpenAI as part of an investigation into the AI lab’s models
Miscellaneous News
The Record reports: Just in time for the World Cup’s “knockout” round, the U.S. government announced the seizure of hundreds
The New Humanitarian reports: A cyber-attack targeting the World Food Programme has exposed sensitive personal information belonging to some 600,000
Categories
TechCrunch reports on what is almost certainly a very worrying breach for employees of the Department of Homeland Security (DHS):
TechCrunch reports: Security researchers at digital rights unit The Citizen Lab say government spyware makers are abusing global advertising networks
CBC reports: More Ontario police units have now paused their use of the Crime Stoppers program, after CBC News revealed
Reuters reports that French supermarkets are facing millions of euros in losses after a cyberattack forced them to throw away food.
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail
Becker’s Health IT reports: Business services provider Conduent has agreed to pay $80 million to settle class action litigation over