CenterPoint Energy Confirms Customer Data Theft From Internet-Facing System
CenterPoint Energy says an unauthorized party accessed customer personal information through an internet-facing company system. Energy delivery remains unaffected, but the utility has not yet disclosed the number...
Japan Digital Agency Breach Exposes 246,000 Records After VPN Intrusion
Attackers exploited a previously patched VPN weakness to enter Japan’s shared government IT environment, potentially exposing about 246,000 personal records. The incident highlights the continuing danger of delayed...
Fraudulent Government Request Exposes Revolut KYC Records and Transaction Histories
Revolut disclosed that a fraudulent request sent from an official government email domain led to the release of highly sensitive customer records. The incident shows why authenticated email...
Veradigm Discloses Patient SSNs Exposed After Vendor Credentials Were Stolen
Healthcare technology firm Veradigm has disclosed to the SEC that stolen vendor credentials were used to access an API and download patient data, including Social Security numbers. The...
Bimbo Bakeries Employee Data Stolen Through Oracle EBS Zero-Day
Bimbo Bakeries USA says attackers obtained employee names and Social Security numbers through a vendor’s vulnerable Oracle E-Business Suite environment. The disclosure connects another major organization to a...
Mathspace Breach Exposes Data of More Than One Million Users
Mathspace says attackers exploited a maximum-severity Metabase flaw and downloaded records belonging to 1,079,819 users. A missed vulnerability alert and incomplete post-patch checks allowed the intrusion to remain...
Trezor Reveals Its ShipMonk Breach Was Far Bigger Than First Disclosed
Hardware wallet maker Trezor has confirmed that a breach at its fulfillment partner ShipMonk exposed far more customers than originally reported, after retained order data that should have...
Lenovo ID Trust Flaw Opened About 5,000 Dropbox Accounts to Takeover
Dropbox says attackers compromised roughly 5,000 accounts by creating Lenovo IDs with victims’ email addresses and abusing a federated-login integration. The incident demonstrates why matching email claims cannot...