Collaborate Disseminate
Divya reports: The popular communication platform Discord is confronting a major extortion attempt after cybercriminals breached one of its third-party customer service providers, compromising sensitive user data including government identification pho… Continue reading Discord Confirms 70,000 Government IDs Exposed in Third-Party Breach
Heads up to entities doing business in California: your breach notification obligations are changing. Joseph Lazzarotti of JacksonLewis explains: Governor Gavin Newsom recently signed SB 446 into law, introducing significant changes to California’s da… Continue reading California Sets 30 Day Deadline for Data Breach Notifications
Over the years, DataBreaches has noted hospitals in APAC countries having data leaked or being hit with ransomware attacks, but I have not seen a lot of reviews. An article by Thai Khang in VietnamNet names mentions some of the bigger hospital breaches… Continue reading Vn: Major hospitals hit by cyberattacks, patient data sold on hacker forums
Going forward, this might help California residents reduce the chances of their personal information being caught up in some breaches. Hunton Andrews Kurth writes: On September 26, 2025, following a public comment period, the California Privacy Protec… Continue reading California’s New Delete Request Tool Impacts Data Brokers and Residents
Stephanie Cunningham reports: According to Mississippi State Auditor Shad White, a third of state offices are at risk of cybercrimes due to not meeting cybersecurity assessment requirements according to a report released yesterday, Tuesday, Oct. 7. Aud… Continue reading Shad White’s office finds nearly a third of Mississippi’s state agencies fail cybersecurity requirements
Veronica P. Adams and Andrea DeField of Hunton Andrews Kurth write: Last month, Ace American Insurance Company filed a subrogation action against its insured’s cybersecurity and technology vendors, alleging missteps by the technology companies. See Ace… Continue reading Policyholder Plot Twist: Cyber Insurer Sues Policyholder’s Cyber Pros
Pierluigi Paganini reports: Ransomware groups DragonForce, LockBit, and Qilin formed a strategic alliance to enhance their attack capabilities, signaling an evolving cyber threat landscape. The alliance aims at sharing tools and infrastructure to enhan… Continue reading DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscape
NOTE from DataBreaches.net: The injunction Qantas obtained is limited in terms of who it covers. It does NOT cover all journalists and media. It only covers those who are under the jurisdiction of the NSW Supreme Court. Most journalists and media are n… Continue reading Qantas says ‘legal protections in place’ as ScatteredLAPSUS$Hunters group threatens to release personal data
Sean Lyngaas of CNN reports: Suspected Chinese government-backed hackers have breached computer systems of U.S. law firm Williams & Connolly, which has represented some of America’s most powerful politicians, as part of a larger spying campaign aga… Continue reading US law firm with major political clients hacked in spying spree linked to China
Margi Murphy, Jake Bleiberg, and Brody Ford report: Salesforce Inc. told customers Tuesday that it won’t pay a ransom demand from a hacker who claimed to have stolen a large amount of client data and threatened to publish it, according to an email seen… Continue reading Salesforce Tells Clients It Won’t Pay Hackers for Extortion