CyberInsider reports that ShinyHunters claims to have hit a major healthcare software provider, and that hundreds of millions of records have been acquired, although the number of unique patients is not yet determined. McKesson has acknowledged that it is investigating the claims. Read more at CyberInsider.
The Register reports: Workwear and fashion retailer Carhartt’s data breach was about half as bad as ShinyHunters claimed, according to Troy Hunt, who reviewed the data dump before uploading it to his Have I Been Pwned website. Hunt’s HIBP service reported 12.9 million individuals affected by the alleged breach, around half of what ShinyHunters purported […]
The Daily Hodl reports: A proposed class action settlement is offering cash payments and monitoring services to millions affected by a data breach at a health care company. The agreement stems from the Crowe v. Managed Care of North America (MCNA) class action lawsuit filed in the U.S. District Court for the Southern District of […]
DataBreaches.net reports: Read ReliaQuest’s blog post.
IANS reports: IT services firm Cognizant has notified customers of a data breach that occurred on April 21, 2026, which may have exposed personal information, while stating that there is no evidence so far that the data has been misused, as per multiple reports. In a notification sent to affected individuals, the US-headquartered company said […]
SuspectFile provides more details on the previously disclosed cyberattack affecting Coca-Cola’s subsidiary, Fairlife. One week. According to Anubis, that is all the time it allegedly needed to turn a vulnerability in a corporate VPN into full access to Fairlife’s IT infrastructure. One week to get in.One week to move through the network.One week, according to […]
On August 6, HIPAA Journal reported: On July 23, 2026, the HIPAA Journal reported on a data breach at Unlimited Technology Systems, a Cincinnati, Ohio-based provider of revenue cycle management and practice management software. At the time, the scale of the data breach had yet to be made public, but it has recently been confirmed […]
TechCrunch reports: Days after reporting an incident affecting a number of its customers, enterprise data giant Alation on Thursday confirmed a cyberattack. Alation makes data software that its enterprise customers use to search for files and data using natural language queries. In recent years, the company has expanded into AI, allowing customers to turn large amounts of […]
In March 2025, CISA published an advisory on the Medusa ransomware gang. They have now updated it, noting: Medusa is a ransomware-as-a-service (RaaS) variant first identified in June 2021. As of April 2026, Medusa developers and affiliates—referred to as “Medusa actors” in this advisory—have impacted over 500 victims from a variety of critical infrastructure sectors. […]
Fox54 in Alabama reports: A second proposed class-action lawsuit has been filed over the data breach that compromised patient information at Huntsville Hospital Health System, this time in federal court and against both the hospital system and its electronic records vendor. Crystal Mullins filed the complaint Aug. 14 in the U.S. District Court for the Western District of […]
