Mazda Motor Corporation has confirmed a data breach that involved the compromise of 692 records containing information about employees and business partners. This incident occurred in December and raises concerns about the security of sensitive data within the automotive industry. While Mazda has not disclosed specific details about how the breach happened, the exposure of such records can lead to identity theft or unauthorized access to company resources. Companies like Mazda must ensure they have strong security measures in place to protect personal information, as breaches can damage trust and reputation. Customers and partners may want to be vigilant about potential phishing attempts or other fraudulent activities that could arise from this incident.
QualDerm Partners, a U.S.-based healthcare management firm, experienced a significant data breach in December 2025 that impacted over 3.1 million individuals. Hackers gained unauthorized access to the company's internal systems, compromising sensitive personal information, medical records, and health insurance details. This incident raises serious concerns about patient privacy and the security of healthcare data. Those affected may face risks such as identity theft or misuse of their medical information. The breach underscores the ongoing vulnerability of healthcare organizations to cyberattacks, emphasizing the need for stronger security measures to protect patient data.
The Lapsus$ hacking group has reportedly breached AstraZeneca, gaining access to internal code repositories, employee credentials, and sensitive employee data. This incident raises significant concerns about the security of private information and proprietary code within the pharmaceutical industry, especially given AstraZeneca's role in vaccine development. If the claims are verified, it could lead to serious implications for the company's operations and trustworthiness in handling personal and sensitive data. Companies like AstraZeneca must enhance their cybersecurity measures to protect against such targeted attacks, which are becoming increasingly common in various sectors.
Infinite Campus, a popular student information system used by K-12 schools, has alerted its customers about a data breach after a group known as ShinyHunters claimed to have stolen sensitive information. The attackers reportedly attempted to extort Infinite Campus, raising concerns about the safety of student data and the potential for further exploitation. Schools relying on this system could be at risk of having personal information of students and staff compromised. As of now, it's unclear what specific data has been accessed and how many users are affected. This incident highlights the ongoing challenges educational institutions face in protecting their systems from cyber threats.
QualDerm has suffered a significant data breach affecting approximately 3.1 million individuals. Hackers accessed the company's internal systems and stole sensitive personal information, including medical and health insurance details. This incident raises serious concerns about patient privacy and the potential for identity theft. Individuals whose data was compromised may be at risk of fraud or other malicious activities. Companies in the healthcare sector must prioritize cybersecurity to protect sensitive information and maintain trust with their patients.
The Dutch Ministry of Finance has confirmed that it experienced a cyberattack that compromised some of its systems. The breach was detected last week, although specific details about the nature of the attack or the data that may have been accessed have not been disclosed. This incident potentially affects the ministry's employees, raising concerns about the security of sensitive information. As government agencies often handle critical data, any breach could have significant implications for public trust and national security. The ministry is likely working to assess the damage and improve its security measures to prevent future incidents.
Hackread – Cybersecurity News, Data Breaches, AI and More
A significant security vulnerability known as the DarkSword exploit has been leaked, putting an estimated 270 million iPhones at risk. This exploit allows hackers to potentially access sensitive user data, raising serious concerns about privacy and security for iPhone users worldwide. Researchers have indicated that this could lead to unauthorized access to personal information stored on these devices. The scale of the impact is alarming, as many users may not be aware that their data could be compromised. It's crucial for affected users to stay informed and take necessary precautions to protect their information as details about the exploit continue to emerge.
Recent developments in ransomware attacks have seen threat actors using artificial intelligence to conduct faster and more sophisticated assaults. These attackers are bypassing traditional security measures by exploiting valid credentials, making it easier for them to infiltrate systems and access sensitive data. This new approach can lead to significant data breaches and financial losses for companies, as the speed and efficiency of these attacks increase. Organizations need to bolster their cybersecurity defenses and educate employees on credential management to mitigate these risks. The rise of AI in cybercrime highlights the urgent need for updated security strategies to keep pace with evolving threats.
Crunchyroll, a popular anime streaming service, is investigating a significant data breach after hackers announced they had stolen personal information from about 6.8 million users. The breach raises concerns over the security of user data, which may include sensitive details such as email addresses and passwords. As the platform works to assess the extent of the breach, affected users should be cautious and consider changing their passwords and monitoring their accounts for unusual activity. The incident highlights ongoing vulnerabilities in online services and the importance of robust security measures to protect user information. Crunchyroll has not yet confirmed the breach's details or the specific data involved, but they are taking steps to address the situation.
In a recent report by Mandiant, the high-tech sector has emerged as the most targeted industry for cyber-attacks in 2025, surpassing the financial services sector, which held that position in 2023 and 2024. This shift indicates a growing trend where attackers are increasingly focusing on technology firms, which often handle sensitive data and critical infrastructure. The report suggests that as technology advances, so do the tactics used by cybercriminals, making it essential for tech companies to bolster their security measures. The implications of this trend are significant, as a successful attack on a high-tech firm can lead to widespread data breaches and disruption of services, affecting not only the companies involved but also their customers and the broader economy.
A recent report from SpyCloud reveals a significant rise in the exposure of non-human identities, specifically API keys and tokens, which reached 18.1 million in 2025. This surge increases the risk for organizations as these exposed credentials can be exploited by attackers to gain unauthorized access to systems. The findings emphasize the need for companies to enhance their security measures around API usage and management, as these keys are often overlooked in traditional security protocols. The report serves as a crucial reminder for businesses to audit their API security practices and monitor for any potential breaches or misuse. Failure to address these vulnerabilities could lead to severe data breaches and operational disruptions.
Navia Benefit Solutions has reported a significant data breach that has affected approximately 2.7 million individuals. The breach occurred over a period from December 2025 to January 2026, with suspicious activity first detected on January 23, 2026. In response, Navia quickly initiated an investigation to understand the full scope of the incident. The company, which provides benefits solutions in the U.S., has not yet disclosed specific details about the types of data that were compromised. This breach raises serious concerns about the security of personal information in the benefits sector, especially given the large number of individuals impacted. Those affected may face risks such as identity theft or phishing attacks as a result of their information being exposed.
Navia experienced a significant data breach between late December 2025 and mid-January 2026, affecting approximately 2.7 million individuals. Hackers accessed sensitive personal and health plan information, raising serious concerns for those impacted. The breach not only compromises individual privacy but also poses risks of identity theft and fraud. As healthcare data is particularly valuable on the dark web, this incident highlights the ongoing vulnerability of health-related organizations to cyberattacks. Affected individuals may need to monitor their accounts and take steps to protect their personal information.
A former data analyst contractor from North Carolina was convicted for extorting a Washington, D.C.-based technology company out of $2.5 million. While still employed, he accessed sensitive company data and threatened to release it unless his demands were met. The case raises significant concerns about insider threats, especially as remote work becomes more common and employees have greater access to sensitive information. This incident serves as a reminder for companies to implement robust security measures and monitor access to critical data. The repercussions of such extortion schemes can be severe, impacting both the financial stability of a company and the trust of its clients.
Cameron Nicholas Curry, a tech worker from North Carolina, was found guilty of conducting an insider attack that resulted in the theft of sensitive corporate data from a Washington D.C.-based technology company. As his six-month contract was ending, Curry reportedly stole data and demanded a ransom of $2.5 million. This incident raises significant concerns about insider threats, where employees exploit their access to company information for personal gain. Companies need to be vigilant about monitoring employee activities, especially as contracts come to a close, to prevent similar attacks in the future. The case serves as a reminder of the potential risks posed by trusted employees and the importance of cybersecurity measures in protecting sensitive information.