data breach

Israel’s largest crypto broker, Bits of Gold, was hit by a significant data breach. The security incident reportedly affected approximately 200,000 customers associated with the firm.

The French Ministry of the Economy and Finance disclosed a data breach involving an attacker who accessed the General Directorate of Public Finances (DGFiP) systems. This security incident resulted in the theft of data belonging to 678,000 individuals.

Cryptocurrency hardware wallet provider SafePal has issued a warning regarding a data breach impacting approximately 39,798 customers. The incident occurred after a flaw was exploited to steal customer order information. Furthermore, a threat actor is reportedly claiming to be selling this stolen data.

Zenith Bank is investigating a data breach and has activated its incident response protocols, intensifying cybersecurity and remediation efforts following the discovery of the incident.

A Toronto-based company that produces Coldcard, a bitcoin-only hardware wallet, has suffered a data breach resulting in the theft of $100 million worth of bitcoin.

The UK’s state investments agency, UK Government Investments (UKGI), experienced a data breach exposing sensitive information and contact details of 51 government officials for 40 hours. The breach also compromised high-level management data and prompted calls for improved internal security.

A user reported unauthorized sign-ups for Change.org and Walmart accounts using their email address. They noted Change.org allows account creation without email verification, raising concerns about potential email breaches or scams.

A user created a BetOnline account with a fake alias but used their real cell number, later receiving a scam call referencing the fake alias. The user suspects BetOnline or an associated vendor experienced a data breach or sold customer information.

A data breach at Paidwork, a microtask platform, exposed over 23 million user records, including personal details like names, addresses, bank account numbers, and passwords stored as bcrypt hashes. The breach, confirmed by Have I Been Pwned, occurred when hackers leaked nearly 11 GB of data in July 2026, prompting Paidwork to investigate and notify users.

Analog Devices, a Massachusetts-based semiconductor chip company, reported a data breach in which intruders exfiltrated data from its networks earlier this summer. The scope of the incident remains under investigation.

Medical Computer Business Services (MCBS), a healthcare billing company, disclosed a 2025 network breach that exposed sensitive information of over 1.2 million people.

Origin Energy confirmed a data breach affecting 900,000 current and former customers, with the company admitting it was warned three weeks before public disclosure. CEO Frank Calabria apologized and urged customers to monitor for suspicious activity due to increased scam risks.

Angelina Jolie and other Hollywood stars were reportedly affected by a data breach that exposed their contact details, according to a cybersecurity expert. The incident is described as a 'huge data breach' in the claim.

OnTrac, a parcel delivery company, has notified customers of a data breach following a network hack. Hackers may have accessed personal details of its customers.

Origin Energy, a major Australian energy supplier, confirmed that customer data was compromised in a recent breach. The company is working to determine how many Australians were affected.

Sumner County Schools delayed the start of the school year and new student registration due to a data breach in its computer network. The district notified law enforcement, the Department of Education, and third-party forensic specialists to address the unauthorized access. Parents expressed concerns about potential exposure of personal data during the breach.

Chick-fil-A experienced a data breach exposing customer information from its loyalty accounts. The company attributed the breach to an automated attack on its website and mobile app.

Virginia Attorney General Jay Jones joined a coalition of 42 attorneys general in securing a $660,000 settlement with the bankruptcy trustee for 23andMe over a 2023 data breach that compromised the genetic data of nearly seven million customers.

Chick-fil-A experienced a data breach from July 17 to 19, 2026, exposing customers' names, email addresses, membership numbers, and partial credit card details. The company forced account logouts, removed saved payment methods, and advised customers to reset passwords and monitor their accounts for suspicious activity.

Chick-fil-A reported a data breach affecting customer accounts from July 17 to 19, 2026, exposing names, email addresses, membership numbers, and partial credit card details. The company advised customers to reset passwords, monitored affected accounts, and offered restored balances and additional rewards.

Chick-fil-A reported a data breach affecting customer accounts from July 17 to July 19, 2026, exposing names, email addresses, membership numbers, and partial credit card details. The company forced account logouts, removed saved payment methods, and advised customers to reset passwords and monitor financial activity.

A data breach at Paidwork, a platform that pays users for microtasks, exposed personal and financial information of over 23 million users. The breach, which occurred in March 2026, involved data advertised on a cybercrime forum in April, including bank details, transaction records, and personal identifiers, posing risks for phishing and identity fraud.

Chick-fil-A is notifying customers of a data breach caused by credential stuffing attacks, which led to unauthorized access to their accounts.

A class action lawsuit was filed in Illinois federal court against Abbott Laboratories and its subsidiary Exact Sciences over a data breach involving unauthorized access to patient information. The breach, attributed to cybercriminal group ShinyHunters via a voice phishing attack, exposed sensitive data including Social Security numbers, email addresses, and physical addresses from at-home cancer screening tests.

A user received a fraudulent email from trackapet.ai claiming their pet's microchip registration had expired, prompting a suspicious interaction with a fake renewal site. The scam appears to use stolen pet data, likely from a data breach, to trick victims into paying $28 or revealing financial information. TrackAPet.ai is identified as a known scam, not a legitimate pet tracking service.

A person's email and credit card information were stolen, leading to a $1k fraudulent purchase of equipment using the scammer's own name and address for delivery. The scammer has since flooded the victim's inbox with account verification attempts, prompting questions about police reporting and potential further victimization.

Washington state will receive $547,000 from a 23andMe data breach settlement. The funds will be allocated by the state attorney general’s office to enforce consumer protection law and cover attorney fees.

A data breach at the Kudankulam nuclear plant has caused 'absolute commotion' among project leaders, according to sources. NPCIL sources confirmed the leak, but a senior official stated the files do not pertain to KKNPP plant safety or nuclear safety, calling them 'ordinary' and common to thermal power plants.

Tennessee will receive $348,000 as part of a multistate settlement over a 2023 data breach at 23andMe, which exposed genetic and personal information of 6.9 million customers, including 116,395 in Tennessee. The settlement, secured by Tennessee Attorney General Jonathan Skrmetti and 42 other states, holds 23andMe accountable for inadequate security measures and delayed acknowledgment of the breach. The company's assets were later sold to TTAM Research Institute with enhanced privacy protections.

Donna Sanders filed a class action against One Medical, alleging a data breach exposed patients' personal and medical information to cybercriminals. The breach, attributed to One Medical's inadequate security measures, occurred from June 8 to 11 and involved the cybercriminal group ShinyHunters.

A user's PayPal account was hacked 18 years ago due to a reused password from a data breach, leading to unauthorized eBay orders and spam email subscriptions. Despite creating a new email address, the original email still receives spam, and the user suspects a well-off student exploited stolen credentials for personal gain.

Insurance provider AssuranceAmerica confirmed a data breach affecting up to 6.9 million people, with hackers stealing driver’s license numbers, customer names, contact information, and auto insurance policy details. The breach originated from a phishing attack targeting a single employee, though no specific threat group or ransom demand has been publicly linked to the incident.

American insurance company AssuranceAmerica has disclosed a data breach impacting 6.9 million drivers. The breach occurred after attackers gained access to its systems earlier this year.

A United States bankruptcy judge ordered genetic testing company 23andMe to pay a nearly $50 million settlement for a 2023 hack that led to the data leak of millions of their customers.

A 84-year-old woman lost $30,000 from her bank accounts after thieves exploited weak security practices, including the absence of mandatory multi-factor authentication (MFA). The attackers used stolen passwords from a data breach and created spam filters to block alerts, while financial institutions initially doubted the theft was fraudulent.

A cyberattack on Hong Kong's Shun Hing Group compromised the personal information of over 1 million people. The Office of the Privacy Commissioner for Personal Data confirmed an investigation into the breach, which was reported by Shun Hing Group on March 23.

South Korea's government disputed a U.S. congressional report accusing it of discriminating against Coupang, a U.S.-listed e-commerce company fined 625 billion won for a data breach affecting 37 million people. The report alleged coercive investigations by South Korean authorities, but Seoul denied the claims, stating its actions were lawful and non-discriminatory.

South Korea disputes a U.S. congressional report accusing it of discriminating against Coupang, a U.S.-listed e-commerce company fined 625 billion won for a data breach. The report claims South Korea used coercive tactics against Coupang, while Seoul asserts its actions were lawful and non-discriminatory. Coupang plans to challenge the fine in court, citing inadequate consideration of its security improvements.

Healthcare device company Medtronic is notifying affected customers about a data breach that exposed their personal information to an unauthorized third party. The breach is linked to ShinyHunters, a hacker group.

Insurance giant Aflac has disclosed a new data breach after attackers breached its Japan subsidiary's systems and stole personal and bank account information.