Articles tagged "Data Breach"

Found 239 articles

France Arrests 22 Year Old After Hack of Interior Ministry Systems

Hackread – Cybersecurity News, Data Breaches, AI, and More

Actively Exploited

A 22-year-old man has been arrested in France following a cyberattack on the Interior Ministry's systems. The hacker claimed to have gained access to sensitive information, including police records, tax data, and criminal histories. This breach raises serious concerns about the security of government systems and the potential misuse of personal data. The incident highlights vulnerabilities within public sector cybersecurity and the ongoing risks posed by cybercriminals targeting sensitive government infrastructure. Authorities are likely to enhance security measures in response to this breach to protect citizen data.

Impact: Interior Ministry systems, police records, tax databases, criminal record systems
Remediation: N/A
Read Original

Askul, a major Japanese e-commerce and logistics company, has reported a significant data breach following a ransomware attack by a group called RansomHouse. This incident has compromised over 700,000 records, raising concerns about the security of sensitive information related to both businesses and consumers who rely on Askul for office supplies and logistics services. The attack underscores the ongoing risks faced by companies in the e-commerce sector, particularly as cybercriminals increasingly target organizations with ransomware. As a result, affected individuals and businesses may be at risk of identity theft and other cyber threats. Companies should take this incident as a wake-up call to bolster their cybersecurity measures and ensure they have effective data protection strategies in place.

Impact: Over 700,000 records from Askul's customer database
Remediation: Companies should enhance cybersecurity protocols and consider implementing more stringent data protection measures.
Read Original
Hackers Claim Stealing 94GB of Pornhub Premium User Watch Histories

Hackread – Cybersecurity News, Data Breaches, AI, and More

Actively Exploited

A hacking group known as ShinyHunters has reportedly stolen 94GB of data from former Pornhub Premium users, which includes their watch histories. This breach is part of an extortion campaign aimed at these users, raising significant privacy concerns. The attackers utilized a smishing attack, where they sent phishing messages via text to lure victims into revealing personal information. While the specifics of the breach are still being investigated, conflicting reports have emerged about the extent and security of the data involved. This incident underscores the ongoing risks associated with online platforms, particularly regarding user data security and the potential for exploitation by cybercriminals.

Impact: Pornhub Premium user watch histories
Remediation: Users should monitor their accounts for suspicious activity and consider changing passwords. Enabling two-factor authentication can also help enhance security.
Read Original

LKQ, a US autoparts manufacturer, has confirmed a data breach affecting over 9,000 individuals. The breach involved unauthorized access to personal data, raising concerns about the security of sensitive information. This incident highlights the vulnerabilities that companies face, especially those relying on systems like Oracle EBS. Those affected may be at risk for identity theft and other forms of fraud, emphasizing the need for individuals to monitor their accounts and consider additional security measures. Companies are urged to review their security protocols to prevent similar incidents in the future.

Impact: Personal data of over 9,000 individuals
Remediation: N/A
Read Original

LKQ, a major player in the auto parts industry, has confirmed a breach involving their Oracle EBS system, compromising the personal information of thousands of individuals. The attack raises serious concerns about data security, as sensitive information could be misused by cybercriminals. While LKQ has not disclosed the exact number of affected individuals, the incident underscores the vulnerabilities that can exist in enterprise resource planning systems. Companies using similar platforms should take this as a wake-up call to assess their security measures and ensure that personal data is adequately protected. The breach serves as a reminder of the increasing risks businesses face from cyberattacks in today's digital landscape.

Impact: Oracle EBS system, personal data of thousands of individuals
Remediation: N/A
Read Original

Askul, a company specializing in e-commerce and logistics, suffered a significant data breach when the RansomHouse ransomware group targeted it in October. Around 700,000 records were compromised during this attack, raising concerns about the exposure of sensitive customer and business information. The incident highlights the ongoing risks faced by online retailers and logistics providers in today's digital landscape. Organizations like Askul must bolster their cybersecurity measures to protect against such threats and safeguard customer trust. The breach serves as a reminder for all businesses to remain vigilant and proactive in their security practices.

Impact: 700,000 customer and business records from Askul
Remediation: Companies should enhance their cybersecurity protocols, including regular data backups, employee training on phishing, and implementation of multi-factor authentication.
Read Original

SoundCloud has confirmed that hackers accessed the personal information of approximately 20% of its user base. The breach raises concerns about the security of user data on the platform, as it affects a significant number of accounts. This incident could lead to potential misuse of the compromised information, such as phishing attacks or identity theft. Users are advised to change their passwords and monitor their accounts for any suspicious activity. SoundCloud's response to the breach will be crucial in restoring user trust and ensuring the security of their systems moving forward.

Impact: SoundCloud user accounts
Remediation: Users should change their passwords and monitor accounts for suspicious activity.
Read Original

Credit700, a financial services firm in the U.S., has reported a significant data breach affecting approximately 5.8 million individuals. The breach involves sensitive personal information, which could put affected users at risk of identity theft and financial fraud. The company has not disclosed specific details on how the breach occurred or the exact types of data compromised. This incident raises concerns about the security measures in place to protect consumer data and serves as a reminder for users to monitor their financial accounts and consider additional security measures, such as credit monitoring services. As data breaches become more common, it's crucial for both companies and consumers to remain vigilant about data security.

Impact: Personal information of 5.8 million individuals
Remediation: Users should monitor financial accounts and consider credit monitoring services.
Read Original

Hackers linked to a group known as ShinyHunters have launched an extortion attempt against Pornhub following a data breach involving Mixpanel, an analytics platform. The breach exposed the search and viewing history of Premium users, raising serious privacy concerns. The attackers are reportedly demanding a ransom to prevent the release of this sensitive information. This incident not only affects Pornhub's reputation but also puts the personal data of its paying users at risk. As the situation unfolds, it serves as a stark reminder of the vulnerabilities that even major platforms face when it comes to user data protection.

Impact: Pornhub Premium users, Mixpanel analytics platform
Remediation: N/A
Read Original

Askul Corporation, a major Japanese e-commerce company, reported a ransomware attack by the hacker group RansomHouse, resulting in the theft of approximately 740,000 customer records. The breach, which occurred in October, raises significant concerns about the security of customer data and the potential for identity theft or fraud. Askul has not disclosed the specific types of information taken, but the volume of records suggests that sensitive personal information may be involved. This incident highlights the ongoing challenges faced by companies in protecting consumer data against increasingly sophisticated cyber threats. Customers of Askul should remain vigilant and monitor their accounts for any suspicious activity.

Impact: 740,000 customer records
Remediation: Customers should monitor their accounts for suspicious activity and consider changing passwords. Companies should enhance their cybersecurity measures to prevent future attacks.
Read Original
Actively Exploited

In December 2025, researchers identified a serious vulnerability in React, designated as CVE-2025-55182, which has led to a surge in attacks on services that use React2Shell. This vulnerability affects numerous applications built with the React framework, making them targets for malicious actors. Attackers are exploiting this flaw to gain unauthorized access to systems, which could lead to data breaches or service disruptions. Organizations utilizing React-enabled services are urged to take immediate action to safeguard their systems. The situation is critical, as the exploitation of this vulnerability poses significant risks to businesses and users globally.

Impact: React2Shell applications, React framework versions affected are not specified.
Remediation: Organizations should apply the latest security patches for the React framework, conduct vulnerability assessments, and implement monitoring to detect any suspicious activities. Regular updates and reviews of security protocols are also recommended to mitigate risks.
Read Original

A significant security oversight was uncovered when researchers found an unsecured 16TB MongoDB database that exposed approximately 4.3 billion professional records. This database primarily contained LinkedIn-style data, which could be exploited for large-scale AI-driven social engineering attacks. The discovery was made by Bob Diachenko and nexos.ai on November 23, 2025, and the database was secured only after the researchers alerted its owner. This incident underscores the risks associated with unsecured databases, as the exposed data could facilitate identity theft and phishing schemes targeting professionals. Organizations need to ensure better security measures for their data to prevent such breaches in the future.

Impact: Unsecured MongoDB database, professional records, LinkedIn-style data
Remediation: Database secured after researcher notification; organizations should implement strict access controls and regular security audits.
Read Original
UK’s ICO Fine LastPass £1.2 Million Over 2022 Security Breach

Hackread – Cybersecurity News, Data Breaches, AI, and More

The UK's Information Commissioner's Office (ICO) has imposed a £1.2 million fine on LastPass following a significant data breach in 2022 that compromised the personal information of 1.6 million users. The breach was traced back to a vulnerability in an employee's personal computer, which allowed attackers to access sensitive data. This incident raises serious concerns about the security practices of password management services, especially considering the potential for misuse of the exposed information. Users of LastPass are now at increased risk of phishing attacks and identity theft. The fine serves as a reminder for companies to enhance their cybersecurity measures and protect user data more effectively.

Impact: LastPass user accounts and associated personal data
Remediation: Companies should conduct thorough security audits and ensure employees follow strict cybersecurity protocols, particularly when using personal devices for work.
Read Original

Coupang, a major South Korean e-commerce platform, recently suffered a significant data breach that compromised the personal information of approximately 33.7 million customers. Investigations revealed that the breach was the result of a former employee who had retained access to the company's internal systems after leaving. This situation raises serious concerns about how companies manage access permissions for departing employees. The exposed data could include sensitive customer information, potentially leading to identity theft or fraud. This incident serves as a reminder for businesses to regularly review and update their access control policies to safeguard against similar breaches in the future.

Impact: Coupang customer data, including personal information of 33.7 million users
Remediation: Companies should implement stricter access control measures and regularly audit user permissions, especially for departing employees.
Read Original
Actively Exploited

Fieldtex Products recently experienced a significant data breach attributed to the Akira ransomware group, which claims to have stolen approximately 14 gigabytes of data. This incident has affected around 238,000 individuals, raising concerns about the security of personal information. The breach underscores the ongoing threat posed by ransomware attacks, which can have far-reaching implications for both companies and their customers. Users may face risks related to identity theft and privacy violations as a result of this data leak. Companies in similar sectors should take this incident as a warning to bolster their cybersecurity measures to prevent similar breaches in the future.

Impact: Fieldtex Products, 238,000 individuals affected
Remediation: Companies should enhance their cybersecurity protocols and consider incident response plans to mitigate future risks.
Read Original
PreviousPage 12 of 16Next