9to5Mac reports: A new report from Reuters details how Apple and its Indian supplier, Tata Electronics, are responding to a massive data breach that exposed sensitive files earlier this month. Here are the details. A few days ago, Tata Electronics confirmed that it fell victim to a cyberattack that, as reported by Reuters, stole confidential files from Apple and Tesla. […]
Help Net Security reports: LastPass disclosed that attackers used OAuth tokens compromised in a supply chain attack on Klue, a market intelligence platform that integrates with CRM and sales tools across organizations, to access customer data stored in its Salesforce environment. “On June 12th LastPass was made aware of an incident that occurred at Klue […]
Reuters reports: Consultancy firm Accenture (ACN.N), opens new tab said on Thursday it would take a majority stake in industrial cybersecurity firm Dragos and fully acquire asset intelligence company runZero and device security specialist NetRise in a combined deal valued at $4.18 billion. … The acquisitions will expand Accenture’s cybersecurity business into software for protecting industrial operations […]
Mashable reports: Nintendo of North America says it’s aware of what’s been described as a small third-party data breach affecting some of its employees. “Nintendo’s systems have not been compromised,” the company told Mashable in a statement, acknowledging that a third-party service was affected by an “issue.” Earlier this week, a hacking group calling itself ShadowByte$ […]
Bleeping Computer reports: Digital healthcare company iRhythm Holdings has disclosed a data breach after hackers stole patients’ personal and health information stored on third-party-hosted business applications. The company says its cardiac monitoring service has been used to analyze more than 2 billion hours of curated heartbeat data from over 12 million patients. In a filing with the […]
HIPAA Journal reports: A $35,000,000 settlement has been agreed to resolve a long-running class action lawsuit against Labcorp over a 2018 cybersecurity incident at American Medical Collection Agency. Laboratory Corporation of America Holdings (Labcorp), a provider of diagnostic testing services, had contracted with a company called Retrieval-Masters Creditor’s Bureau, Inc., which does business as American Medical […]
Claim Depot reports: Paylogix, a New York-based insurtech company that provides technology and billing solutions for voluntary employee benefits, disclosed a data breach that occurred in November 2025. Paylogix posted a notice of the data event on its website stating that between Nov. 13 and Nov. 18, 2025, unauthorized individuals gained access to certain Paylogix computer systems […]
WBRZ reports: he St. George Fire Protection District is suing Baton Rouge cybersecurity company General Informatics, blaming them for allowing hackers to gain access to the fire department’s network in 2023. The lawsuit, filed by the fire department on May 23, claims that General Informatics was hired to prevent cyberattacks and now seeks damages from […]
HealthcareInfoSecurity reports that Conduent has updated its already-large data breach numbers: The victim tally in back-office support services firm Conduent Business Services‘ 2024 hack has more than doubled to over 62.2 million people. The revised, eye-popping total Conduent reported to federal regulators apparently in recent days brings the breach closer to tying the nearly 79 […]
When the federal agency that directs organizations and agencies to quickly attend to vulnerabilities and breaches has its own breach, people notice. Brian Krebs reports: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA […]
