RTX Notified in 28 Days and Got Sued Anyway: The Notification Gap Became a Damages Period
Three breaches disclosed in eight days — RTX at four weeks, CareCloud at 140 days, Origin Energy after a public denial. RTX drew a class action within...
Breach Intelligence & Articles
893 articles on data breaches, ransomware, incident response, and threat intelligence.
$9 Million for 153 Water Systems: New York Buys What Washington Cannot Mandate
A week after coordinated attacks hit more than 30 Minnesota utilities and incidents surfaced in Michigan, Governor Hochul announced more than $9 milli...
Five Months to Notify: CareCloud's March Intrusion Reaches 345,000 Patients and Nobody Has Claimed It
Attackers were inside CareCloud between March 10 and March 16, 2026. The New Jersey health-tech vendor serves more than 45,000 healthcare providers. I...
Amgen Told the SEC Hackers Took Its Research: A Cloud Breach Reaching Patient PHI, IP and R&D Data
Amgen filed an 8-K on July 29 disclosing that attackers gained unauthorized access to third-party-hosted cloud storage and potentially exfiltrated pat...
The Agent Exposed Itself: A Chinese Operator Ran Autonomous Attacks on DeepSeek Until Hermes Served Up Its Own Home Directory
Palo Alto Networks Unit 42 documented a China-based actor using DeepSeek as the reasoning engine behind the open-source Hermes Agent, driven by Telegr...
RTX Waited a Month: The Defense Giant's Breach Exposed Social Security Numbers in June and Notices Went Out in Late July
RTX Corporation — the aerospace and defense conglomerate behind Raytheon, Collins Aerospace and Pratt & Whitney — has begun notifying individuals that...
Cisco Shipped a Password in Its Firewall Manager and Someone Found It First: CVE-2026-20316 Exploited as a Zero-Day
Cisco Secure Firewall Management Center contains static credentials for a built-in low-privilege account. Any unauthenticated remote attacker who know...
Angola's Largest Telecom Went Down Hours Before Its IPO: 21 Million Subscribers Cut Off as Unitel Listed on BODIVA
Unitel detected anomalous activity against its core infrastructure at 02:20 local time on July 28, hours before the largest IPO in Angola's history. V...
607,000 Records Out of the Department for Education: ExfilSquad Hit the Help Desk and the Turing Scheme Portal
The UK Department for Education confirmed attackers stole around 607,000 records from two external-facing systems — its online help desk and the Turin...
A CVSS 10 in the SD-WAN Controller and a Symlink Bypass in FortiOS: CISA Gives Agencies Three Days
CISA added two actively exploited flaws to the KEV catalog on July 27. CVE-2026-16812 is an unauthenticated command injection in Arista VeloCloud Orch...
CISA Warns Every US Water System After Minnesota: 'Threat Actors Are Targeting Water Entities of All Sizes'
Four days after coordinated attacks disrupted 30+ Minnesota utilities, CISA issued a national warning to the water and wastewater sector. The underlyi...
Stadler Refuses $12.3 Million, Nichirei Loses Its Shipping: Two Manufacturers, Two Very Different Weeks
Swiss rail builder Stadler was extorted for $12.3 million by the Everest group after attackers compromised credentials to a third-party file-sharing p...
Showing 12 of 893 articles
Load More →