Collaborate Disseminate
DataBreaches is not on TikTok and, being something of a dinosaur, never heard of “Josh and Jase” before. But no patient should have their privacy violated the ways Josh’s was. What happened to “break the glass?” What happe… Continue reading It’s 2026, but hospitals still haven’t prevented snooping in celebrities’ records
There is an update to a breach previously reported on DataBreaches.net. ApolloMD describes itself as a private, independent group of physicians that partners with more than 100 hospitals nationwide to provide integrated, multispecialty physician, Ambul… Continue reading ApolloMD reveals that 626,540 patients were affected by May, 2025 cyberattack
On May 20, 2025, CNN reported that a ransomware attack had triggered a “system-wide technology outage” at Kettering Adventist Health in Ohio. Disclosures by Kettering Health would later explain that the healthcare system had been attacked b… Continue reading Kettering Adventist Health now notifying patients affected by May 2025 ransomware attack
Top Class Actions reports a settlement stemming from the Citrix Bleed” data breach it suffered in 2023: A Pennsylvania federal judge has granted preliminary approval to a $117.5 million class action settlement resolving claims Comcast failed to p… Continue reading Comcast agrees to $117.5M data breach class action settlement
Ashden Fein, Jess Gonzalez Valenzuela, Analese Bridges, John Webster Leslie, and Claire O’Rourke of Covington and Burling write: The Cybersecurity Information Sharing Act of 2015 (“CISA 2015”), which provides liability protections and other safeg… Continue reading Cybersecurity Information Sharing Act of 2015 Reauthorized Through September 2026
EPIC writes: A strong comprehensive privacy bill passed the Maine House of Representatives today. The bill, LD 1822, closely mirrors the privacy law Maryland passed in 2024 and would extend essential privacy protections to Mainers. The bill includes st… Continue reading Maine House Passes Strong Privacy Bill
Kwon Soon-wan reports: The Democratic Party of Korea and the government are pushing for a bill that would hold companies liable for damages in personal information leaks even in the absence of intent or negligence. It was reported on the 10th that the … Continue reading South Korea government is promoting bill for statutory damages for personal information leaks.
Zack Whittaker reports: Singapore’s government has blamed a known Chinese cyber-espionage group for targeting four of its top telecommunication companies as part of a months-long attack. In a statement Monday, Singapore confirmed for the first time tha… Continue reading Singapore says China-backed hackers targeted its four largest phone companies
Some may experience some schadenfraude over this one. Zack Whittaker reports: A hacktivist has scraped more than half-a-million payment records from a provider of consumer-grade “stalkerware” phone surveillance apps, exposing the email addresses and pa… Continue reading Hacktivist scrapes over 500,000 stalkerware customers’ payment records
It’s easy to forget that just because a news cycle may be about 15 minutes, incident response is much longer. The following is an update from St. Mary’s County in Maryland about the CodeRED emergency systems ransomware attack that affected … Continue reading CodeRED Emergency Notification System Incident Update