Aura, a company that sells identity theft protection, has confirmed a data breach that exposed roughly 900,000 customer records containing names and email addresses. The breach was carried out via a phone phishing attack by ShinyHunters, the same group behind high-profile hacks at AT&T and Salesforce. Aura has confirmed a data breach that resulted in customer records […]
ExpressVPN researcher Jeremiah Fowler writes: I recently discovered 3 separate publicly exposed databases that were not password-protected nor encrypted. The databases contained a total of 3.7 million chat log transcripts, audio recordings, and text transcriptions of phone calls ranging from 2024-2026. In a limited sample of the exposed documents I reviewed as part of the […]
Bleeping Computer reports: Canadian business process outsourcing giant Telus Digital has confirmed it suffered a security incident after threat actors claimed to have stolen nearly 1 petabyte of data from the company in a multi-month breach. Telus Digital is the digital services and business process outsourcing (BPO) arm of Canadian telecommunications provider Telus, providing customer support, […]
Security Week reports: Stryker is a Fortune 500 company that specializes in the manufacturing of surgical equipment, orthopedic implants, and neurotechnology. Headquartered in Michigan, the company employs approximately 56,000 people and reported over $25 billion in revenue for 2025. Its critical role in the healthcare supply chain makes it an essential partner for hospitals worldwide. […]
The Record reports: A prominent ambulance service in Milwaukee confirmed that hackers targeted their systems last year and stole sensitive information on more than 235,000 people. Bell Ambulance, which is the largest ambulance provider in the state of Wisconsin, filed breach notifications in Maine this week confirming that 237,830 people had information impacted by a […]
CPO Magazine reports: Surveillance systems used by the FBI for lawful foreign intelligence interception orders suffered a security breach recently, and investigators believe state-backed Chinese hackers are the culprits based on recent patterns of “suspicious activity.” Inside sources have told media outlets that the investigation is in its early stages and the full severity and […]
So you trusted your sensitive data to an app created by two young people and one of them thought a vulnerability alert was just a joke. … The app itself allows you to track how many times you masturbate, write down how watching porn makes you feel, and exchange tips and share your experience with others […]
HackRead reports: ShinyHunters, the notorious group of hackers, has issued a final warning to roughly 400 organizations, claiming to have successfully broken into their private records. The group is threatening to leak this sensitive information onto the internet unless their extortion demands are met. According to previous research firm Mandiant, the hackers are specifically targeting websites […]
The Washington Post reports: The Social Security Administration’s internal watchdog isinvestigating a complaint that alleges a former U.S. DOGE Service employee claimed he had access to two highly sensitive agency databases and planned to share the information with his private employer — a claim that, if true, would constitute an unprecedented breach of security protocols […]
Negligence Stirring Rise in Cyber Incidents
DigitNews reports: Two fifths (42%) of organisations reported an increase in malicious insider incidents over the past year, with the same amount reporting a rise in negligent incidents for the first time. This is according to Mimecast’s State of Human Risk Report, which found that this parity marks a fundamental shift in enterprise security where international […]