On August 25, Boston Scientific discovered a cybersecurity incident was affecting some information technology systems, resulting in a network outage and disruption to the medical device firm’s operations. The incident impacted access to certain operating systems and business applications, including the ability to process and ship customer orders. Since then, the firm has provided daily […]
“TeamPCP” has been arrested in Australia. The leader’s arrest had been widely anticipated across online channels and discussions, and the leader had even said he expected to be arrested and might just turn himself in. Now The Register reports: The Australian city of Perth is by some measures the world’s most isolated major metropolis, but […]
CyberInsider reports that ShinyHunters claims to have hit a major healthcare software provider, and that hundreds of millions of records have been acquired, although the number of unique patients is not yet determined. McKesson has acknowledged that it is investigating the claims. Read more at CyberInsider.
A reminder that the details of states’ data breach notification laws really do matter. A notification that may be satisfactory in most states may be noncompliant in another state and really cost the firm. From attorneys at BakerHostetler: One ruling is not a trend. And there can be unique factors at play in regulatory investigations […]
There has been another ruling that makes it harder for plaintiffs in data breach litigation to prove standing. As seen on JDSupra: Helpful guidance for businesses, and for Massachusetts state courts. In 2021, the U.S. Supreme Court held in TransUnion, LLC v. Ramirez that in a suit for damages, “the mere risk of future harm, without more, cannot […]
The Guardian reports: Hackers linked to Iran have been blamed for a cyber-attack that caused a British power plant to be temporarily shut down. The incident involved a small-scale energy generator, according to the UK government, which said that at no point was there a risk to the wider energy system. However, it marks an apparent escalation […]
IANS reports: IT services firm Cognizant has notified customers of a data breach that occurred on April 21, 2026, which may have exposed personal information, while stating that there is no evidence so far that the data has been misused, as per multiple reports. In a notification sent to affected individuals, the US-headquartered company said […]
On August 6, HIPAA Journal reported: On July 23, 2026, the HIPAA Journal reported on a data breach at Unlimited Technology Systems, a Cincinnati, Ohio-based provider of revenue cycle management and practice management software. At the time, the scale of the data breach had yet to be made public, but it has recently been confirmed […]
In March 2025, CISA published an advisory on the Medusa ransomware gang. They have now updated it, noting: Medusa is a ransomware-as-a-service (RaaS) variant first identified in June 2021. As of April 2026, Medusa developers and affiliates—referred to as “Medusa actors” in this advisory—have impacted over 500 victims from a variety of critical infrastructure sectors. […]
The Cybersecurity and Infrastructure Security Agency (CISA) released new resources for K-12 schools this week. Their press announcement: Source: CISA
