PowerSchool commits to strengthened breach measures following engagement with the Privacy Commissioner of Canada
July 22, 2025 – Gatineau, Quebec
Episource Data Breach Hits Over 5 Million Patients, Sensitive Medical and Insurance Data Potentially Exposed
The Daily Security Review reports: Episource, a key healthcare services provider under UnitedHealth Group’s Optum division, has disclosed a significant data breach that exposed the sensitive personal and medical data of more than 5.4 million individuals. The company, which offers risk adjustment and medical coding services to healthcare providers and insurers, identified unauthorized access to […]
Kelly Benefits updates its breach disclosure: 550,000 people affected
SecurityAffairs reports: Benefits and payroll solutions firm Kelly Benefits has confirmed that a recent data breach has affected 550,000 individuals. As the investigation continued, the scale of the impact expanded, revealing that more people were affected than initially believed. The U.S.-based company provides benefits, payroll, and workforce management solutions to businesses. In April, Kelly Benefits disclosed a data breach where […]
Qantas suffers data breach as hackers accesses millions of customer records
Airline Routes & Ground Services reports: Qantas has confirmed a significant cyberattack affecting the personal data of up to six million customers, marking one of Australia’s most serious data breaches in recent years and delivering a fresh blow to the airline’s reputation. The breach, which targeted a third-party customer service platform used by a call […]
Horizon Healthcare RCM discloses ransomware attack in December
Supply-chain attacks are often a goldmine for cybercriminals. In the healthcare sector, revenue cycle management (RCM) firms process and store a great amount of personally identifiable information (PII) and protected health information (PHI). DataBreaches.net reports that another RCM firm was the victim of an attack: Horizon Healthcare RCM (“Horizon”) in Indiana is the latest RCM to […]
UBS data leak: UBS reports data breach after cyber attack on provider, client data unaffected
Reuters reports: Swiss bank UBS on Wednesday said it had suffered a data leak due to a cyber attack against one of its providers, but that no client data was affected. Swiss newspaper Le Temps said that files containing details of tens of thousands of UBS employees had been stolen from business service company Chain […]
Remorseless extortionists claim to have stolen thousands of files from Freedman HealthCare
The Register reports: An extortion gang claims to have breached Freedman HealthCare, a data and analytics firm whose customers include state agencies, health providers, and insurance companies, and is threatening to dump tens of thousands of sensitive files early Tuesday morning. According to a claim posted Sunday on the shame site belonging to World Leaks, […]
School Districts Unaware BoardDocs Software Published Their Private Files
Company said it notified customers nationwide after a tech glitch exposed confidential data, but multiple districts said they knew nothing about it. The 74 reports that although Diligent Corporation claims they notified all BoardDocs clients of a recently discovered data leak, many school districts had no awareness of any incident until The 74 contacted them. […]
Marriott wins appeal to block class action over data breach
The Daily Record reports an appellate decision that is probably quite a relief to Marriott International: The U.S. Court of Appeals for the 4th Circuit has reversed a lower Maryland court’s recertification of plaintiff classes in a pair of consolidated lawsuits filed against Marriott and an information technology service provider for a 2018 data breach, handing down a major […]
Security bug at compliance firm Vanta exposed customer data to other users
TechRadar reports: Security and compliance automation company Vanta has confirmed sharing sensitive customer data with other customers by mistake. In a statement (via TechCrunch), the company said a change it had made in the code resulted in a security breach. In it, some sensitive data from a small subset of customers was shared with other customers. […]