A telecommunications company has been found granting new employees sudo-level administrative access to production databases containing unencrypted customer personally identifiable information (PII). This egregious security failure violates fundamental access control principles, exposing millions of
iRhythm Technologies, a leading provider of cardiac monitoring solutions, has disclosed a significant data breach affecting patient information. Unauthorized actors gained access to systems containing personal and medical data, including names, contact information, dates of birth, Social Security nu
Anthropic has updated its privacy policy to include identity verification measures for Claude users, marking a significant shift in how AI companies handle user authentication and data collection. The new policy enables Anthropic to request and store government-issued identification documents, biome
Maine’s Office of the Attorney General temporarily suspended its data breach notification portal after discovering fraudulent breach filings claiming VRChat and Discord had exposed millions of user records. The incident exposed critical flaws in the state’s breach reporting system, including lack of
A former IT employee of a U.S. school district has been sentenced to jail for launching retaliatory cyberattacks against their previous employer. The attacks disrupted educational operations, compromised system integrity, and highlighted the significant insider threat posed by disgruntled former emp
Plymouth City Council has exposed the personal information of hundreds of families after mistakenly sending an email that revealed recipients’ addresses in the “To” field rather than using blind carbon copy (BCC). The incident represents yet another email handling failure affecting a UK local govern
Pharmaceutical giant Novo Nordisk has confirmed a data breach exposing clinical trial information. The Danish company, known for diabetes and obesity treatments including Ozempic and Wegovy, discovered unauthorized access to systems containing sensitive research data. While patient identities report
A critical path traversal vulnerability in Microsoft Teams for Android allows attackers to access sensitive data from the application’s storage. The flaw, discovered in versions prior to 1416/1.0.0.2024102404, enables malicious actors to read arbitrary files from the app’s private directory, potenti
A Japanese energy company has reported the loss of a portable storage drive containing personal information of approximately 10.9 million customers. The incident represents one of Japan’s largest data exposure events in the energy sector, raising serious concerns about physical data security practic
Internal Xbox documents leaked online reveal senior leadership acknowledging a “crisis” within the gaming division, with executives stating “this cannot continue” regarding declining brand perception and market position. The breach exposes strategic vulnerabilities, competitive intelligence, and can