Enterprise Breach Watch

Early figures are giving way to a more cautious picture:

• Binance's account: It said a cyberattack affected $6.3 billion, halted withdrawals, and...

Covenant Health has agreed to a $2 million class-action settlement over a breach that affected more than 280,000 patients in Maine. For those...

• Claimed release: The leak site Distributed Denial of Secrets says it published data on more than 40,000 DHS employees, obtained by a group calling...

Broadcom's recent security news shows two separate problems: one active exploitation, one patch-delivery challenge. CISA warned that hackers are...

The HHS portal now lists the June breach at iRhythm as affecting 8,179,772 people, the same figure the company earlier reported to Oregon's attorney...

Binance said $2.54 billion in crypto assets had been frozen while it investigated a potential breach, and that figure could rise as more assets are...

AT&T denies wrongdoing, but a judge approved the $177 million class action settlement this month. Eligible customers could receive payments of up to...

The company reports that hackers accessed personal information of 8,179,772 people in June 2026.

• Confirmed: Access came through compromised data in...

The Community Care Clinic at the University of Central Arkansas is notifying clients of a breach that may have exposed patient email addresses. The...

• Reported scale differs: The leak site posted data on more than 40,000 DHS employees, while other reports cite over 41,000.
• Okta link is a claim:...

CSX says unauthorized parties gained access to information, including employee Social Security numbers. The company says the incident happened between...

Fisher & Paykel Healthcare describes the access as limited so far: two employee email accounts and a subset of company files, some containing personal...

Hackers accessed and copied records of millions of current and former California public school students. The files can include birth dates, home...

Attackers are already testing CVE-2026-101767, a critical SQL injection flaw in Oracle E-Business Suite's Application Object Library, which was...

The Bitdefender and Netgear report describes home IoT devices as "an ideal foothold" for attackers, with implications for businesses running similar...

Here is what is established and what is still open:

• Confirmed: Hackers accessed Bithumb's internal mobile communication network this week....

ServiceNow says the expanded OpenAI partnership aims to help enterprises move from AI reasoning to governed action across operations, cybersecurity...

The eMudhra compromise exposed eight intermediate certificate keys, which the source says creates risks of fraudulent TLS certificates and website impersonation.

A breach at one provider can expose customer records across multiple organizations, even where the affected companies' own systems were not...

Apple's October 26 release fixed at least 329 unique vulnerabilities in one day, covering iPhone, iPad, Mac, Apple Watch, Apple TV, Apple Vision Pro,...