Collaborate Disseminate
Matt Kapko reports: Another core member of the hacker subset of The Com involved in a spree of extortion attacks from at least 2021 to 2023 pleaded guilty to federal charges, according to court records released Tuesday. Ahmed Hossam Eldin Elbadawy, a 2… Continue reading Early Scattered Spider member pleads guilty to cybercrime spree
Lawrence Abrams reports: The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation’s data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service. The attack began Fri… Continue reading ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
Lawrence Abrams reports: The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation’s data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service. The attack began Fri… Continue reading ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
The mistaken cc: breach still happens. Ann Neo reports: An invitation to an event sent by the National Cancer Centre Singapore (NCCS) has sparked privacy concerns after a mailing list exposed the identities, contact details and, in some instances, wor… Continue reading National Cancer Centre e-mail lapse allegedly exposes patients’ details
Erin Woo and Robert McMillan report: Google’s Gemini model accessed the internet and hacked other companies during a test of its cybersecurity capabilities, the first known example of the company’s artificial-intelligence systems autonomous… Continue reading Gemini Hacked Three Companies in First Known Breakout by Google’s AI
WASHINGTON — September 17, 2026 — The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) today announced a settlement with Ambry Genetics Corporation (Ambry) concerning potential violations of the Health Insurance Portabilit… Continue reading HHS’ Office for Civil Rights Settles HIPAA Investigation of Ambry Genetics for Security Rule Violations
Joseph McCarty reports: A Kansas county’s government says it has been hit by a ransomware attack. Ellis County discovered the attack on parts of its information technology systems Thursday morning. Officials said they “immediately took steps to contain… Continue reading Ransomware attack on Kansas county will affect some services
Alayna Alvarez reports: Foreign actors last month breached two small Colorado water utilities and manipulated equipment used to control drinking water systems. The two privately owned utilities, each serving fewer than 200 people, were breached in late… Continue reading Foreign actors breach Colorado water systems
As part of DataBreaches.net’s ongoing investigation into the Navigate360 breach, this report covers approximately 94,000 unclassified but sensitive tips submitted through P3 Global Intel apps and websites used by the military. What has Homeland S… Continue reading The U.S. military leaked more than 93,000 tips via insecure P3 Global Intel. Has anyone been notified?
Choi Won-woo reports: Internal data amounting to 1,894 cases from the Korean-type heavy ion accelerator ‘Raon,’ built with a state budget of 1.5 trillion Korean won [USD $1,080,038,017.50 at today’s rates] was confirmed to have been leaked extern… Continue reading Raon data leak: Insider leak of 1,894 cases went undetected for 4 years