Firstmac Limited is warning customers that it suffered a data breach a day after the new Embargo cyber-extortion group leaked over 500GB of data allegedly stolen from the firm.

Have I Been Pwned has added the information for 26,818,266 people whose data was leaked in a recent hack of The Post Millennial conservative news website.

​CISA and the FBI said today that Black Basta ransomware affiliates breached over 500 organizations between April 2022 and May 2024.

​Europol, the European Union's law enforcement agency, confirmed that its Europol Platform for Experts (EPE) portal was breached and is now investigating the incident after a threat actor claimed they stole For Official Use Only (FOUO) documents containing classified data.

​The Ohio Lottery is sending data breach notification letters to over 538,000 individuals affected by a cyberattack that hit the organization's systems on Christmas Eve.

The University System of Georgia (USG) is sending data breach notifications to 800,000 individuals whose data was exposed in the 2023 Clop MOVEit attacks.

The LockBit ransomware gang has claimed responsibility for a disruptive cyberattack on the City of Wichita, which has forced the City's authorities to shut down IT systems used for online bill payment, including court fines, water bills, and public transportation.

The federal agency took blame for the incident, saying the addresses were "inadvertently exposed as we transitioned to a new IT system."

Thousands of ID cards plus CCTV snaps of suspects found online

Mobile medical care firm DocGo confirmed it suffered a cyberattack after threat actors breached its systems and stole patient health data.

Guardant Health, a laboratory known for conducting cancer screening tests, has experienced a significant data breach affecting patient information. The breach originated from a file that contained personal details of patients, which was unintentionally made available on a publicly accessible online platform. This file included sensitive information such as names, ages, medical record numbers, treatment information, and test results collected in late 2019 and 2020. Importantly, the file did not contain any financial information or Social Security numbers.

The UK Government confirmed today that a threat actor recently breached the country's Ministry of Defence and gained access to part of the Armed Forces payment network.

The realty trust giant said described the incident as consistent with a ransomware attack, and said the cybercriminals stole internal data.

The City of Wichita, Kansas, disclosed it was forced to shut down portions of its network after suffering a weekend ransomware attack.

Data at risk includes names, bank details and addresses of current and former force members, government sources suggest

The New York City Department of Education last week began sending letters notifying the hundreds of thousands of additional current and former students that they were victims of the cyber attack in…

Marriot revealed in a court case around a massive 2018 data breach that it had been using secure hash algorithm 1 and not the much more secure AES-1 encryption as it had earlier maintained.

At least two conservative news websites – Human Events and The Post Millennial – were hacked on Thursday and replaced with a page leaking private information.

Cybercrime detectives have charged a 46-year-old man with blackmail over alleged threats to share the personal details of more than 1 million people that were reportedly obtained via a data breach of clubs in NSW and the ACT.

Qantas Airways confirms that some of its customers were impacted by a misconfiguration in its app that exposed sensitive information and boarding passes to random users.

Panda Restaurant Group, the parent company of Panda Express, Panda Inn, and Hibachi-San, disclosed a data breach after attackers compromised its corporate systems in March and stole the personal information of an undisclosed number of individuals.

Cloud storage firm DropBox says hackers breached production systems for its DropBox Sign eSignature platform and gained access to authentication tokens, MFA keys, hashed passwords, and customer information.

​Canadian pharmacy chain London Drugs has closed all its retail stores to contain what it described as a "cybersecurity incident."