Carnival Corporation Notice of Data Breach
A press release from Carnival Corporation: Read more of the press release. Carnival has already been sued over the incident.
Help at Home must face core negligence claims over patient data breach
Martin A. Steinberg, J.D. discusses a case in the Northern District of Illinois: The provider must face negligence and implied-contract claims after patients alleged a vendor breach exposed sensitive health and personal data. Two patients brought a putative class action against HAH Group Holding, LLC d/b/a Help at Home, after a March 2024 vendor data […]
How sweet it is: Krispy Kreme settles 2024 data breach suit for $1.6 million
Consumer Affairs reports: Krispy Kreme customers affected by a 2024 data breach may now be eligible for compensation under a proposed class-action settlement. The doughnut chain has agreed to a $1.6 million settlement to resolve claims stemming from a cybersecurity incident disclosed in November 2024. The breach allegedly exposed personal information, including names, dates of […]
Radiology Associates of Richmond reveals second breach affects 266,000
One month after announcing a 2024 data breach affecting 1.4 million patients, Radiology Associates of Richmond (“RAR”)was facing at least 10 potential class-action lawsuits. Now that the Virginia medical group has reported a second data breach in 2025, they are potentially facing more litigation. DataBreaches.net reports that RAR’s July 2025 breach affected 266,183 people, but it is unknown […]
Beacon Mutual Insurance notifies more than 131,000 RI residents of data breach
WJAR reports: A data breach four months ago has Warwick-based Beacon Mutual Insurance notifying people whose personal information was compromised in the incident. A message on the company website states more than 131,000 people in Rhode Island are impacted. NBC 10 News has learned the number includes thousands of state workers. Files that were hacked included Social […]
TeamPCP Poisons 500+ Open Source Tools, Breaches GitHub
Technology.org reports: The group behind it, a fast-rising crew called TeamPCP, says it reached roughly 4,000 of GitHub’s code repositories. GitHub confirmed the breach Tuesday night and counted at least 3,800 compromised repositories, all of them holding GitHub’s own code rather than customer data, according to what it has found so far. For years, supply […]
Two arrested for facilitating pro-Russia cyberattacks, violating EU sanctions
NL Times reports: FIOD arrested two men in the Netherlands on Monday for aiding and facilitating pro-Russian cyberattacks and violating European sanctions. The FIOD suspects these men of providing infrastructure for cyberattacks on European targets, including attacks by pro-Russian cybercriminals on the Danish municipal elections. During raids on business premises in Almere and Drente, and data centers […]
Nitrogen Ransomware Claims Attack on Foxconn
CPO Magazine reports that the Nitrogen ransomware-as-as-service (RaaS) group has claimed responsibility for an attack on a major electronics manufacture for brands that include, Apple, AMD, and Nvidia: The documents the group claims to have stolen allegedly contain confidential instructions, projects, and drawings from various tech giants, including AMD, Apple, Google, Intel, and Nvidia. Other […]
NYC Health + Hospitals says hackers stole medical and biometric data affecting at least 1.8 million patients
TechCrunch reports: New York public health provider NYC Health + Hospitals says a months-long data breach that allowed hackers to steal personal data, medical records, and fingerprints scans affects at least 1.8 million people. NYCHHC is the largest public health system in the United States and provides healthcare to over a million New Yorkers, the majority of whom […]
CISA Contractor Leaked AWS GovCloud Keys on Github
When the federal agency that directs organizations and agencies to quickly attend to vulnerabilities and breaches has its own breach, people notice. Brian Krebs reports: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA […]