Collaborate Disseminate
DysruptionHub reports: Gritman Medical Center began reopening clinics in Moscow, Idaho, on Friday after a cybersecurity incident disrupted outpatient care beginning early Wednesday, though the hospital and emergency department remained open throughout…. Continue reading Moscow, Idaho, clinics reopen after Gritman cyber incident
We have probably all read recommendations that cyberattack victims should not pay ransom demands because it encourages more crime, and because criminals can’t be trusted to delete data they promise to delete. But what evidence have we seen suppor… Continue reading How often do threat actors default on promises to delete data?
Unauthorized access to Auger & Auger‘s network lasted all of 25 minutes on February 17, 2026. On March 30, the North Carolina personal injury law firm notified those affected and offered them 1 year of complimentary identity protection servi… Continue reading The breach lasted 25 minutes. How long will the litigation last?
Edith Lin reports: Hong Kong’s privacy watchdog and police are investigating a large-scale data leak involving over 56,000 patients served by the Hospital Authority, which reported the unauthorised retrieval of a variety of information. The authority o… Continue reading Hong Kong Hospital Authority apologises for data breach involving 56,000 patients
Bill Toulas reports: Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from Anthropic, designed to execute codi… Continue reading Claude Code leak used to push infostealer malware on GitHub
Phil Tenser reports: A cybersecurity attack is affecting several Massachusetts towns that share a regional emergency communications center. The cyberattack affecting the Patriot Regional Emergency Communications Center and associated towns was identifi… Continue reading ‘Serious cyberattack’ impacts phones, public safety systems in several Massachusetts towns
Robbie Meredith reports: An IT system used by schools across Northern Ireland has been targeted in a cyber attack, the Education Authority (EA) has said. On Thursday, schools received a message that as part of “work to manage an IT security issue… Continue reading UK: School IT system targeted in cyber attack ahead of exam season
Maxwell Zeff, Zoë Schiffer, and Lily Hay Newman report: Meta has paused all its work with the data contracting firm Mercor while it investigates a major security breach that impacted the startup, two sources confirmed to WIRED. The pause is indefinite,… Continue reading Meta Pauses Work With Mercor After Data Breach Puts AI Industry Secrets at Risk
Abraham Jewett reports: The Cherry Creek School District sent a message to families recently after some students received a notice about a class action settlement over a 2024 data breach involving the web-based education platform Naviance. The school d… Continue reading Questions raised after Cherry Creek students notified of data breach, lawsuit
BakerHostetler’s annual report, which shares their experiences as a law firm representing data breach clients, is always one of my favorite reads, and their 2026 Data Security Incident Response Report does not disappoint. As always, it is chock-f… Continue reading BakerHostetler’s 2026 report: Findings from 1,250 clients’ breach experiences in 2025