Adidas is investigating a suspected breach tied to an independent licensing partner after a threat actor using the name “LAPSUS-GROUP” posted on BreachForums on 16 Feb, https://objavlenie.com/confidential-computing-a-quarantine-for-the-digital-age.html 2026, claiming access to the Adidas Extranet. Have I Been Pwned lists names, email addresses, phone numbers, and physical addresses, while Panera confirmed the involved data was contact information and said authorities were notified. Analysis from Have I Been Pwned indicates about 5.1M unique accounts were exposed even though the attackers advertised 14M records, a distinction that still leaves millions of customers at risk. Panera Bread confirmed a cybersecurity incident after ShinyHunters claimed theft in late Jan 2026 and later leaked a roughly 760 MB archive when extortion failed.
Additionally, ongoing notification activity from previously reported breaches included significant incidents like Infosys McCamish Systems (originally from 2023) affecting over 6 million people and Ascension Health impacting 5.6 million. While healthcare organizations continued to face significant breach activity and hacking remained the dominant attack method, the combined business sectors actually experienced the most incidents overall. The first quarter saw 876 new breach notifications representing 658 distinct security incidents that impacted over 32 million people. Following media reports on July 4 indicating that IT distribution giant Ingram Micro was experiencing an outage, the company confirmed that it had been impacted by a ransomware attack and was working on restoring its systems. Scattered Spider then reportedly moved on to targeting airlines, with the group blamed for incidents including attacks against Hawaiian Airlines and WestJet.
The firm, based in Kentucky, says that threat actors gained unauthorized access to personal information about millions of patients, as well as a considerable number of employees. The company – which employs almost 125,000 people globally – did not reveal what kind of information had been exposed by the attack. Through this monitoring we identified a second incident, which impacted approximately 576,000 additional accounts.” “We notified affected customers in early March and continued https://magzinenews.com/digest/why-manufacturing-data-analytics-services-are-a-game-changer-for-modern-industry/ to monitor account activity closely to protect our customers and their personal information. Luckily, at present, there seems to be no evidence of foul play or the data being misused in any manner.
Corporate Data Stolen in Levi Strauss Cyberattack
Once all that personal data is stolen, it can be used against the breach victims for identity theft, ransomware attacks, and to send unwanted spam. But instead, companies gobble up as much as they can, store it for as long as possible, and inevitably at some point someone decides to poke in and steal that data. In most cases, if these companies practiced a privacy first approach and focused on data minimization, only collecting and storing what they absolutely need to provide the services they promise, many data breaches would be far less harmful to the victims. Where one might affect a small number of people and include little useful information, like a name or email address, others might include data ranging from a potential medical diagnosis to specific location information.
Stalkerware apps Cocospy, Spyic, and Spyzie expose phone data of millions of people
Legal experts say that DOGE staffers are “personally liable” under U.S. hacking laws, though a court would also have to agree. The year started with a brazen cyberattack by Chinese hackers on the U.S. Visa service, these services exposed over two million people’s personal documents that can be easily misused. From a hotel check-in system and a money transfer app to a prison payphone provider and a U.K.
iCloud Private Relay leaks can expose your real IP
The company advises users not to delay updating their browsers to stay protected against potential attacks. Microsoft’s advisory notes that exploitation is considered “less likely,” and no active attacks have been reported. If successful, this would result in complete privilege escalation, enabling the attacker to install software, modify or delete data, and create accounts with unrestricted access.
Suno Data Breach Exposes 55.3M Accounts
- Stolen files include patient information, such as names, addresses, dates of birth, driver’s license numbers, financial account numbers, medical information, and health insurance information.
- Although all data breaches fall under the umbrella of a “cyberattack,” cyberattacks are not limited to data breaches.
- As for the data that was stolen, Logitech said this “likely included limited information about employees and consumers and data relating to customers and suppliers’ which is not particularly comforting, as this implies it is not known exactly what data was accessed.
- The European Commission disclosed a staff data breach on 06 Feb, 2026, after its mobile device management infrastructure detected attack traces on 30 Jan, 2026.
French officials said 73,467 accounts were affected, representing less than 9% of more than 825,000 registered government users. IRhythm disclosed a June 2026 cyberattack after detecting unauthorized activity involving data stored in certain third-party-hosted business applications on 8 Jun, 2026. Apple was reportedly investigating the exposure, and India’s Ministry of Electronics and Information Technology opened an investigation after the incident was reported to CERT-In. Tata has not publicly confirmed whether the leaked files came directly from its systems, how many people or customers were affected, or whether it negotiated with the threat actor. Malicious activity reportedly began on 2 Jun, 2026, and customers submitted related bug bounty reports on 3 Jun and 4 Jun, 2026. The department said it strengthened access controls, planned more security features, and continued working with the vendor on safeguards and monitoring.
Truist – which looks after more than $500 billion in assets and has 65,000 staff members on its payroll – said they notified “a small number of clients” at the time of the breach. A hacking group known as Sp1d3r has claimed responsibility and is reportedly selling the dataset for around $1 million. An unauthorized third party had accessed their systems, and viewed or copied the data of current and former patients, and employees.
- Early indicators showed the attackers first breached Salesloft customers, stole Drift authentication tokens, then used those tokens to enter connected Salesforce environments and pull stored data.
- Reports continued to cite Social Security numbers, medical information, health insurance data, and other personal details.
- A SecurityScorecard report revealed this year that 90% of the world’s top energy companies experienced data breaches that stemmed from third-party breaches.
- EFF’s free Privacy Badger extension can block online trackers, but you shouldn’t need an extension to stop companies from harvesting and monetizing your medical data.
The FTC notes that breach notification duties vary across jurisdictions, and public companies may also face SEC disclosure rules for material incidents. PowerSchool, a major K-12 education tech provider, suffered a data breach in December 2024 affecting 62.4 million students and 9.5 million educators. Dutch cybersecurity firm EclecticIQ attributed the attacks to groups UNC5221, UNC5174, and CL-STA-0048. Fowler warned that email accounts often store tax documents, contracts, medical records, and other personal files.
