Breaches
-
Parradee Kietsirikul via Getty Images
Check Point Software confirms security incident but pushes back on threat actor claims
A malicious hacker recently offered to sell the security firm’s sensitive customer information.
By David Jones • April 2, 2025 -
Courtesy of Sam's Club
Sam’s Club investigating attack claim linked to Clop ransomware
The prolific gang is linked to the exploitation of critical flaws in Cleo file transfer software.
By David Jones • April 1, 2025 -
Just_Super via Getty Images
Hacker linked to Oracle Cloud intrusion threatens to sell stolen data
Security researchers from Trustwave SpiderLabs provided additional evidence backing up claims of a breach.
By David Jones • March 31, 2025 -
Marlon Trottmann via Getty Images
Cybersecurity firms brace for impact of potential Oracle Cloud breach
As evidence continues to pile up, security providers warn customers to secure networks.
By David Jones • March 28, 2025 -
Sundry Photography via Getty Images
Researchers back claim of Oracle Cloud breach despite company’s denials
Security researchers from CloudSEK provided additional evidence supporting a hacker’s claim to have exfiltrated 6 million records.
By David Jones • March 25, 2025 -
Just_Super via Getty Images
Rubrik discloses server breach, compromise of ‘access information’
The data security and backup vendor said it found no evidence that the stolen data was used by cyber threat actors.
By Rob Wright • March 4, 2025 -
Stock Photo via Getty Images
Employment screening provider data breach affects 3.3M people
The attack is one of several in recent years targeting the employment services industry.
By Ginger Christ • Feb. 28, 2025 -
NicoElNino via Getty Images
Cisco: Salt Typhoon used new custom malware in telecom attacks
The China-backed hackers used compromised credentials to gain initial access to Cisco devices.
By Rob Wright • Updated Feb. 21, 2025 -
GOCMEN via Getty Images
Tech investment firm Insight Partners discloses data breach
The company holds equity in several major technology companies, including Wiz and Kaseya.
By Rob Wright • Feb. 19, 2025 -
NicoElNino via Getty Images
China-backed hackers continue cyberattacks on telecom companies
Salt Typhoon threat actors compromised Cisco edge devices by exploiting older vulnerabilities.
By Rob Wright • Feb. 13, 2025 -
JHVEPhoto via Getty Images
HPE issues breach notifications for 2023 Midnight Blizzard attack
Russian state-sponsored hackers compromised the tech giant's Office 365 email environment.
By Rob Wright • Feb. 10, 2025 -
Just_Super via Getty Images
Ransomware payments fell 35% in 2024
Cyberattacks using ransomware spiked in the second half of the year, but fewer victims paid up.
By Rob Wright • Feb. 5, 2025 -
Courtesy of Rhode Island
Deloitte pays $5M in connection with breach of Rhode Island benefits site
The company agreed to cover expenses related to recovery from the December cyberattack.
By David Jones • Feb. 5, 2025 -
Courtesy of UnitedHealth Group
UnitedHealth hikes number of Change cyberattack breach victims to 190M
The new estimate nearly doubles the company’s previous report of 100 million affected individuals, already the largest healthcare data breach ever reported to federal regulators.
By Emily Olsen • Jan. 27, 2025 -
izusek via Getty Images
PowerSchool data breach brings claims of negligence, poor cyber hygiene
The K-12 software company is facing legal pushback and criticism following a cyberattack that impacted a still unknown number of districts.
By Anna Merod • Jan. 22, 2025 -
Courtesy of HPE
HPE probes hacker claim involving trove of sensitive company data
The vendor said it has no immediate evidence of operational impacts or compromised customer data.
By David Jones • Jan. 21, 2025 -
Chip Somodevilla via Getty Images
Treasury Department issues sanctions linked to cyber intrusions, telecom attacks
The Office of Foreign Assets Control took measures against a state-linked hacker and a Shanghai-based cybersecurity firm in response to the recent attacks against critical infrastructure in the U.S.
By David Jones • Jan. 21, 2025 -
Jack Taylor / Stringer via Getty Images
Cyber disruptions remain top business risk concern in US, globally
A report from Allianz shows the global disruption caused by CrowdStrike’s IT mishap added to longtime concerns about data breaches and ransomware.
By David Jones • Jan. 15, 2025 -
stefanovsky via Getty Images
CISA adds second BeyondTrust CVE to known exploited vulnerabilities list
Federal authorities are still working with the company to investigate a hack of Treasury Department workstations, but have not yet explained the CVEs’ specific roles in the attacks.
By David Jones • Jan. 14, 2025 -
Brothers91 via Getty Images
Consumers are becoming apathetic to cyber incidents, research finds
Despite an increase in cyber incidents, breaches had less impact on consumer trust in 2024, a Vercara survey found.
By Kristen Doerer • Jan. 13, 2025 -
Courtesy of Rhode Island
Hack of Rhode Island social services platform impacted at least 709K, officials say
State officials received reports from Deloitte and a third-party forensic firm showing the threat to the database has been mitigated and restoration efforts are underway.
By David Jones • Jan. 10, 2025 -
gorodenkoff via Getty Images
Cyberattacks, tech disruption rank as top threats to business growth
Two in five executives view data breaches and leaks as the most financially burdensome man-made threats, a Chubb study found.
By Alexei Alexis • Jan. 10, 2025 -
JuSun via Getty Images
PowerSchool data breach possibly exposed student, staff data
The cloud-based K-12 software provider confirmed a compromised credential was used to access its PowerSource customer support portal.
By Anna Merod • Jan. 10, 2025 -
Win McNamee via Getty Images
Censys researchers warn 8,600 BeyondTrust instances still exposed
As authorities investigate a December attack spree, the researchers added the caveat that not all instances are considered vulnerable.
By David Jones • Jan. 3, 2025 -
Denis Tangney Jr./iStock via Getty Images
Hackers leaked data from Rhode Island ransomware attack, officials warn
A criminal threat group had previously threatened to leak sensitive data from a Deloitte-managed social services database.
By David Jones • Jan. 2, 2025
