breaches
-
Blog
Western Sydney University discloses security breaches, data leak
Western Sydney University (WSU) announced two security incidents that exposed personal information belonging to members of its community. WSU is a prominent Australian institution offering various undergraduate, postgraduate, and research programs across multiple disciplines. It serves a student body of 47,000 and employs over 4,500 permanent and seasonal staff, operating with an annual budget of approximately $600 million. One of…
Read More » -
Blog
These five countries recorded the most third-party data breaches last year
Singapore and the Netherlands are the world’s leading hotspots for third-party data breaches, with more than seven-in-ten organizations falling victim last year. Figures from SecurityScorecard’s 2025 Global Third-Party Breach Report show third-party breaches are on the rise, accounting for a third of all breaches globally. However, the number is probably higher than that due to a combination of under-reporting and…
Read More » -
Blog
Coinbase was primary target of recent GitHub Actions breaches
Researchers have determined that Coinbase was the primary target in a recent GitHub Actions cascading supply chain attack that compromised secrets in hundreds of repositories. According to new reports from Palo Alto Unit 42 and Wiz, the attack was carefully planned and began when malicious code was injected into reviewdog/action-setup@v1 GitHub Action. It is unclear how the breach occurred, but…
Read More » -
Blog
36 US schools report data breaches following ransomware attack on Carruth Compliance Consulting
Ransomware gang Skira today claimed responsibility for a December 2024 data breach at Carruth Compliance Consulting. The breach led to at least three dozen school districts and colleges across the US–Carruth’s clients–reporting data breaches that compromised the personal data of more than 110,000 school employees. Carruth administers the retirement savings plans for these school districts. It started notifying victims of…
Read More » -
Blog
US charges Chinese hackers linked to critical infrastructure breaches
The US Justice Department has charged Chinese state security officers along with APT27 and i-Soon hackers for network breaches and cyberattacks that have targeted victims globally since 2011. Their victim list includes US federal and state government agencies, foreign ministries of multiple governments in Asia, U.S.-based dissidents, as well as a prominent religious organization in the United States. “These malicious…
Read More » -
Blog
Why vendor breaches still haunt enterprise IT leaders
Nearly half (47%) of enterprises suffered highly disruptive outages due to vendor-related breaches last year, according to research from Resilience. This is a blind spot for businesses, the report said, with many businesses claiming familiarity but not confidence in their reliance on third parties. While 83% of those surveyed described themselves as ‘familiar’ with their third-party vendor systems, just 35%…
Read More » -
Blog
Two Illinois school districts disclose data breaches claimed by ransomware gangs
Two school districts north of Chicago this week confirmed they notified thousands of people about data breaches claimed by ransomware gangs, according to public disclosures. Community High School District 117 says it notified 18,830 people about a June 2024 data breach. Ransomware gang BlackSuit claimed responsibility. “We recently discovered unauthorized access to our network between approximately June 2 and June…
Read More » -
Blog
Amazon Redshift gets new default settings to prevent data breaches
Amazon has announced key security enhancements for Redshift, a popular data warehousing solution, to help prevent data exposures due to misconfigurations and insecure default settings. Redshift is widely used by enterprises for business intelligence and big data analytics for data warehousing, competing with Google BigQuery, Snowflake, and Azure Synapse Analytics. It’s valued for its petabyte-scale data handling efficiency and performance,…
Read More » -
Blog
Massive healthcare breaches prompt US cybersecurity rules overhaul
The U.S. Department of Health and Human Services (HHS) has proposed updates to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to secure patients’ health data following a surge in massive healthcare data leaks. These stricter cybersecurity rules, proposed by the HHS’ Office for Civil Rights (OCR) and expected to be published as a final rule within 60…
Read More » -
Blog
Nearly all of the top US banks were impacted by third party breaches last year
Virtually all of the top 100 US banks were hit by third party data breaches last year, including every one of the top ten. Research from SecurityScorecard found 97% of firms reported third-party breaches across the year, although only 6% of vendors were compromised. A similar number also suffered fourth-party breaches, traced back to just 2% of vendors. Ryan Sherstobitoff,…
Read More »