The Register reports on a significant data breach affecting millions of Danes. And yes, the password that reportedly enabled access to the data was “123456.” A person claiming responsibility for the breach of Denmark’s Central Register of Persons (CPR) says they gained access through an IT company’s account protected by the password “123456.” The person […]
This is the kind of press a contractor dreads. Reuters reports that the FBI has removed an Accenture contractor on Monday because its failure to patch a vulnerability in Oracle’s PeopleSoft in a timely manner reportedly allowed the troubling FBI data breach by ShinyHunters. In a statement to Reuters, a senior FBI official confirmed that an unidentified contractor […]
In June, LabCorp settled a class action lawsuit over the 2018 American Medical Collection Agency (AMCA) breach for $35 million. Now it has settled charges by state attorneys general stemming from the same incident. Bank Info Security reports: LabCorp has agreed to pay $2.2 million and improve its data security and vendor risk management practices […]
Ratopati reports that a ransomware attack on a Nepal Stock Exchange data center resulted in the closing of stock market trading on Monday. There are 90 broker companies in Nepal. These brokers use two data centers to store data related to transactions with their clients. Of these, Data Hub handles the data center work for […]
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail that matters for insurance brokers is not that a breach occurred – it is how. Ryan Specialty’s 2026 analysis of Dependent Business Interruption (Dependent BI) coverage puts the structural problem plainly: “Each of these events […]
Threat actors may claim to have hacked an entity when the reality is that they hacked the entity’s vendor. This is one of those instances. iTWeb reports: Insurer Hollard has rejected claims that its IT systems were hacked, saying a threat actor’s allegations stem from a cyber incident at a third-party service provider. This, after […]
Between December 2 and December 18, 2025, Aesto LLC, a business associate under HIPAA, suffered a data breach that would impact dozens of its covered entity clients. The clients first found out in June, however. Bleeping Computer reports: Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 […]
The Next Web reports that a breach involving Thomson-Reuter’s C-track case management system has affected courts in at least 12 states and Ontario, Canada: Thomson Reuters says an unauthorised party got into files belonging to C-Track, the case management platform its court software business sells to judiciaries. The records involved come from appellate courts in […]
WOWO reports that more than 3.75 million people were affected by a data breach involving CareCloud, a healthcare technology firm used by medical providers. The breach was initially reported to the SEC in March as having involved one of the firm’s six EHR environments on March 16 for 8 hours. That was later revised to […]
CyberInsider reports that ShinyHunters claims to have hit a major healthcare software provider, and that hundreds of millions of records have been acquired, although the number of unique patients is not yet determined. McKesson has acknowledged that it is investigating the claims. Read more at CyberInsider.
