Sarah Hemmersbach or Mitratech Holdings writes: A third-party data breach occurs when malicious actors compromise a vendor, supplier, contractor, or other organization to gain access to sensitive information or systems of the victim’s customers, clients, or business partners. Third-party data breaches are becoming increasingly common as technology makes it easier for businesses to connect and […]
HIPAA Journal reports: The number of individuals affected by the hacking incident at Oracle Health has yet to be confirmed; however, the data breach is known to have affected approximately 80 hospitals, although a list of those hospitals has not been made public. Oracle Health has been notifying the affected healthcare provider clients, some of […]
Geo News reports: Russian hackers have sent shockwaves through Britain’s health system after gaining access to hundreds of thousands of sensitive NHS documents some of them linked to the Royal Household. The cyber breach, blamed on a ransomware gang exploiting a flaw in NHS software, has resulted in around 169,000 confidential files being dumped on […]
VitalLaw reports: The Department of Defense would have to add new cybersecurity requirements to its contracts for telecom services when those services are used for “sensitive national security functions” under legislation released yesterday by the House Armed Services Committee. The committee released a compromise version of the National Defense Authorization Act (NDAA) for Fiscal Year […]
HackRead reports: Barts Health NHS Trust has confirmed that the Russian-speaking Cl0p ransomware group stole files from one of its invoice databases after exploiting a vulnerability in Oracle E-Business Suite. The breach exposed data linked to payments for treatment and services, with some records going back several years. Hackread.com first reported on the Cl0p activity in November twenty twenty […]
Gesa Credit Union was one of Marquis Software Solutions’s clients affected by a breach at Marquis, but there were many others. Bleeping Computer reports: Financial software provider Marquis Software Solutions is warning that it suffered a data breach that impacted dozens of banks and credit unions across the US. Marquis Software Solutions provides data analytics, […]
Gesa Credit Union has posted a notice on its website: Gesa Credit Union (“Gesa”) is providing notification of a recent data security incident that occurred at Marquis Software Solutions (“Marquis”), a former digital and physical marketing and communications vendor for Gesa. This incident involved information related to some Gesa members. However, this incident did not impact […]
Paubox reports on the recent Mixpanel incident and why it matters: OpenAI experienced a third-party data breach on November 9, 2025, when its vendor, Mixpanel, reported unauthorized access within its own systems. What happened According to OpenAI’s own disclosure of the incident on November 28, 2025, the attacker exported a dataset containing limited customer identifiable analytics tied […]
If you have ever car-shopped online or looked for information on the prices or value of a car, you’ve probably checked out Edmunds.com. Edmunds, headquartered in Santa Monica, California, was acquired by CarMax in 2021. On or about August 19, 2025, Edmunds learned that a vendor they use for proprietary messaging was the victim of […]
The Record reports: A lack of liability for software vendors is among the most pressing issues putting Britain’s economic and national security at risk, an influential committee of lawmakers warned on Monday. The report by the Business and Trade Committee says economic threats facing the United Kingdom are “multiplying — and, in the years ahead, will grow […]
