30 articles tagged with #data-breach. AI-curated summaries with sentiment analysis and key takeaways from 50+ sources.
Microsoft discovered a critical vulnerability in the EngageLab SDK that exposed private wallet data across 30 million Android installations. The flaw allowed malicious applications to gain unauthorized read and write access to sensitive user information through Android intents, posing significant risks to cryptocurrency wallet users globally.
LastPass users face renewed security threats following another data breach involving a third-party vendor, with the password management company warning customers to be vigilant against phishing and social engineering attacks targeting their cryptocurrency and financial assets.
The Texas Parks and Wildlife Department experienced a major data breach affecting over 3 million customers after hackers compromised a vendor system managing hunting and fishing licenses. Exposed information includes driver's license numbers, passport information, email addresses, phone numbers, and residential addresses, highlighting significant vulnerabilities in state government infrastructure.
Meta's internal employee-tracking program, which collects keystroke data to train AI models, has exposed sensitive information despite previous employee objections. The incident highlights growing tensions between AI development practices and employee privacy rights at major tech companies.
South Korea's financial regulators have imposed a record $409 million fine on Coupang after discovering that a former employee illegally accessed personal data from approximately 34 million user accounts. This represents the largest penalty ever issued to the e-commerce giant and underscores escalating regulatory enforcement around data security breaches in the region.
South Korean e-commerce giant Coupang has been hit with a record $409 million fine for a data breach affecting 33 million users, marking a significant regulatory escalation in data protection enforcement. The unprecedented penalty underscores intensifying global scrutiny on corporate security practices and the substantial financial consequences companies now face for inadequate safeguarding of customer information.
Oracle PeopleSoft servers have been targeted in data theft attacks attributed to the ShinyHunters threat group, exposing vulnerabilities in enterprise systems and raising concerns about data security across large organizations. The incident underscores the critical need for strengthened cybersecurity defenses to protect sensitive corporate information from sophisticated threat actors.
Meta disclosed a data breach affecting up to 20,225 Instagram accounts in April 2026, with cybercriminals exploiting the platform's "High Touch Support" AI-assisted account recovery system. Compromised data includes contact information and private messages, raising significant concerns about user privacy and the security vulnerabilities of AI-powered authentication systems.
A former IBM executive has accused the company of concealing multiple data breaches involving Chinese hackers, raising concerns about corporate transparency in cybersecurity incidents. The allegations underscore the tension between protecting shareholder interests and maintaining public trust, with implications for national security and regulatory oversight.
A whistleblower has alleged that IBM and AT&T concealed foreign hacking incidents targeting IBM's cloud infrastructure, which is extensively used by U.S. government agencies including the military. The allegations raise significant national security concerns and questions about corporate transparency in handling critical infrastructure breaches.
Crisis24 President Sid Kosaraju revealed that hackers demonstrated the ability to penetrate school websites and track his daughter's activity, illustrating how corporate security vulnerabilities expose families to physical risk. The incident exemplifies how organizations systematically underestimate predictable threats (grey rhinos) and remain unprepared despite warning signs.
Community Bank, a Pennsylvania-based financial institution, disclosed a data breach caused by an AI application that exposed customer names, social security numbers, and dates of birth. The breach, reported to the SEC, highlights emerging cybersecurity vulnerabilities in AI-powered banking systems and raises concerns about enterprise AI security practices across the financial sector.
Cybercriminals breached Docketwise, a Texas-based immigration and case management software provider, compromising personal, financial, and medical records of approximately 143,480 Americans. The company discovered suspicious third-party partner credentials in October 2025 and initiated a security investigation, though the full scope and timeline of the breach remain unclear from the available information.
Radiology Associates of Richmond suffered a data breach affecting 266,183 individuals, exposing personal identification numbers, financial information, and health records. The breach occurred in July 2025 but wasn't discovered until April 2026, highlighting significant delays in breach detection within the healthcare sector.
Kraken faces an extortion attempt by criminals claiming access to client data after two insider incidents where support staff captured photos and videos of internal systems. The breach exposed basic information (names, addresses) for approximately 2,000 accounts, prompting broader industry questions about custodial exchange security practices and whether traders should reconsider data exposure risks.
Kraken, a major cryptocurrency exchange, is being extorted by criminals who claim to possess stolen customer data. The exchange has publicly refused to negotiate or pay the ransom, adopting a firm stance against the threat actors.
Sears inadvertently exposed customer conversations with AI chatbots containing personal information and contact details to public web access. This security breach creates risks for customers by making their personal data available to potential scammers for phishing attacks and fraud.
Meta's AI-powered smart glasses are reportedly sending sensitive footage including intimate moments to human reviewers in Kenya, according to a Swedish investigation. A class action lawsuit has emerged accusing Meta of violating privacy laws and false advertising regarding their privacy claims.
A senior Axiom employee is accused of insider trading by allegedly accessing sensitive user data, sharing private wallet screenshots, and coordinating targeted trading strategies worth $200K. The allegations involve potential misuse of privileged information for personal trading advantage.
OpenAI's KYC provider has been accused of sharing users' cryptocurrency addresses with federal agencies, according to an investigation validated by multiple IT specialists and security experts. This represents a significant privacy breach that could affect user trust in AI platforms requiring identity verification.
Apple is investigating potential exposure to a data breach at Tata Electronics, a key supplier in its manufacturing operations. The incident exposes vulnerabilities in Apple's supply chain diversification strategy and raises concerns about investor confidence and the company's competitive positioning in a critical market.
A former New York bank teller, Tijah M. Williams-Rogers, has been sentenced to three years in prison for stealing $75,000 from customers by exploiting her position as an inside scout to identify and drain targeted accounts. The case highlights critical vulnerabilities in traditional banking security and the risks posed by insider threats.
Texas Capital Bank disclosed a data breach affecting 86,067 customers, exposing names and Social Security numbers. The incident highlights growing cybersecurity vulnerabilities in traditional banking systems and raises concerns about identity theft risks for affected customers.
KerberRose Wealth Management, a Wisconsin-based financial services firm, disclosed a security breach affecting 27,076 customers after an unauthorized third party compromised its computer systems on May 1st. The incident exposed sensitive personal and financial data including names and bank account numbers, with notification issued on May 29th.
Kraken has disclosed that a criminal group is attempting to extort the cryptocurrency exchange over limited unauthorized access to insider-related data affecting approximately 2,000 accounts. The exchange confirms no client funds were at risk and states it will not comply with extortion demands while cooperating with law enforcement.
