Collaborate Disseminate
DataBreaches can’t recall any recent cases in the news involving one spouse hacking another’s email, but this one seems a bit unusual. Geoffrey York reports: A Canadian woman says she has been stuck in the Indian Ocean country of Mauritius … Continue reading Canadian woman stuck since 2021 in Mauritius after passport withheld
Sometimes we forget about breaches when they are out of the immediate news cycle. Here is a reminder that some ransomware attacks have long-lasting impacts. Athena Stavrou reports: Home to more than 170 million items, including Magna Carta, the British… Continue reading ‘People have had to move house’: Inside the British Library, two years on from devastating cyber attack
From the Office of NYS Comptroller Thomas P. DiNapoli: North Salem Central School District – Audit Follow-Up (2022M-140-F) Issued Date September 26, 2025 [read complete report – pdf] | [read complete 2022 report – pdf] Purpose of Review The purpos… Continue reading Two years after an audit highlighted significant concerns, North Salem Central School District leaves sensitive student data at risk
Frederick Sutton Sinclair of CBS reports: The University of Pennsylvania is investigating a vulgar email that was sent to members of its campus community. Penn told CBS News Philadelphia that it was not hacked, but the university is working to find the… Continue reading University of Pennsylvania says it wasn’t hacked after a vulgar email was sent to campus community
Veradigm LLC is a health information technology company that provides software solutions to healthcare providers. On September 22, 2025, Veradigm filed breach notification letters with some state attorneys general. According to the notice, Veradigm lea… Continue reading Veradigm’s Breach Claims Under Scrutiny After Dark Web Leak
Mathew J. Schwartz reports: Russian police arrested “three young IT specialists” suspected of developing and selling the Meduza credential-harvesting malware. Authorities from the Ministry of Internal Affairs of Russia, together with police… Continue reading Russian Police Bust Suspected Meduza Infostealer Developers
Mathura Kayir reports: In a historic breach of China’s censorship infrastructure, over 500 gigabytes of internal data were leaked from Chinese infrastructure firms associated with the Great Firewall (GFW) in September 2025. Researchers now estimate the… Continue reading Massive Great Firewall Leak Exposes 500GB of Censorship Data
Today’s reminder of the insider threat comes to us from the National Health Service in the U.K. Craig Meighan and Billy Gaddi report: A woman has been charged after Scots patients had their private medical records accessed during an NHS data brea… Continue reading UK: Woman charged after NHS patients’ records accessed in data breach
Charmian Aw, Melissa B. Levine, and Ciara O’Leary of Hogan Lovells write: On 9 October 2025 the Federal Court of Australia (the Court) imposed an AU$5.8 million civil penalty on Australian Clinical Labs Limited, one of Australia’s largest p… Continue reading Landmark civil penalty of AU$5.8 million issued under Australia’s Privacy Act
DataBreaches recently reported that researchers had discovered two courts had sealed filings and court records exposed, but the vendor responsible wasn’t responding to notifications. Despite months of trying to get a software vendor to respond to… Continue reading How many courts have had sealed and sensitive files exposed by one vendor’s error?