Topic
12 posts tagged “Data Breach”.
Chisato · · 5 min read McKesson disclosed a breach tied to third-party apps after ShinyHunters claimed it stole 284 million patient records via Salesforce and Snowflake. What's known so far.
Chisato · · 7 min read Cl0p named Shell, Philips, GE and Fiserv among ~50 victims of its Oracle E-Business Suite extortion campaign. What was stolen and who is exposed.
Chisato · · 5 min read ShinyHunters says it stole 50GB from Carhartt, including millions of customer records, after a rejected $3.3M ransom. What's in the leak and what it means.
Chisato · · 6 min read France's tax authority DGFiP confirmed a breach exposing data on roughly 678,000 taxpayers, disclosed only after a hacker's claim surfaced on a crime forum.
Chisato · · 6 min read A CVSS 10.0 SQL injection zero-day in Metabase was exploited in the wild to steal database credentials. Affected versions, the fix, and what it means.
Chisato · · 6 min read Biotech giant Amgen disclosed a material breach in an SEC filing: attackers exfiltrated patient health data and proprietary files from third-party cloud.
Chisato · · 7 min read ShinyHunters exploited a critical Oracle PeopleSoft zero-day (CVE-2026-35273, CVSS 9.8) to breach 100+ organizations. What happened and how to respond.
Chisato · · 5 min read EY disclosed a breach after attackers accessed a third-party IT support platform and downloaded client tax documents. What happened, what leaked, and what to do.
Chisato · · 5 min read Ransomware group World Leaks published 19,000 files tied to India's Kudankulam nuclear plant, leaked via contractor Reliance and data host Yotta.
Chisato · · 6 min read ShinyHunters leaked data on 2.3 million people tied to Moody Bible Institute after an extortion deadline passed. What was stolen, and what victims should do.
Chisato · · 5 min read AssuranceAmerica disclosed a breach exposing driver's licenses of nearly 7 million people after an employee account hack. What leaked and what to do.
Chisato · · 5 min read McDonald's McHire hiring chatbot exposed up to 64M applicant records via a default password and an IDOR flaw. What happened, what leaked, and the lessons.
