Trezor, a manufacturer of cryptocurrency wallets, has reported that a data breach at its supplier ShipMonk has affected around 81,000 customers. Initially believed to be a minor incident, the breach has revealed that sensitive customer information, including email addresses and shipping details, may have been compromised. This situation raises significant concerns for Trezor users, as attackers could potentially use the stolen data for phishing scams or other malicious activities. The incident underscores the vulnerabilities in supply chain security, emphasizing the need for companies to ensure their third-party vendors are secure. Trezor is urging affected customers to be vigilant and take precautions to protect their accounts.
A significant security incident has emerged involving the exposure of an Advance Passenger Information System (APIS) database linked to Vietnam. Researchers discovered that this database contained 220 million records of passengers and crew members, including sensitive information such as names, passport numbers, dates of birth, nationalities, and flight details from 2017 to 2026. The researchers accessed the database through a cloud-based path, exploiting default credentials that had not been changed. This breach raises serious concerns about the privacy and security of travelers' data, as it could potentially be used for identity theft or other malicious purposes. The incident highlights the importance of securing sensitive databases and ensuring that default security measures are updated to prevent unauthorized access.
Mathspace, an online math learning platform, has reported a data breach that has compromised the information of over 1 million individuals, including students, staff, and parents. The breach occurred due to attackers accessing Mathspace's Metabase internal reporting system. The stolen data potentially includes sensitive personal information, which raises concerns about privacy and the security of educational platforms. This incident highlights the risks associated with online learning environments, especially as they store large amounts of personal data. Users and educational institutions need to be vigilant and consider enhancing their security measures to protect against similar attacks in the future.
The ransomware group Rhysida has leaked sensitive data from the Berlin government after their demand for a €2 million ransom was rejected. The published dataset reportedly includes personal information about state employees and critical emergency plans, raising serious concerns about the security of public services in the region. This incident not only exposes the vulnerabilities in governmental cybersecurity measures but also poses potential risks to public safety, as emergency plans can be crucial during crises. The breach highlights the ongoing challenges organizations face in defending against ransomware attacks, especially when dealing with sensitive data. Authorities are now tasked with assessing the damage and implementing stricter security protocols to prevent future incidents.
Berlin's refusal to pay a ransom of 30 Bitcoin has led to a significant data breach, with the Rhysida ransomware group leaking approximately 6 terabytes of sensitive state administration and national defense information on the dark web. This incident raises serious concerns about the security of governmental data and the potential implications for national security. The leaked information includes critical documents that could be exploited by malicious actors, putting both public officials and citizens at risk. The breach serves as a stark reminder of the vulnerabilities that exist within state systems and the potential consequences of ransomware attacks. As the situation evolves, it will be crucial for authorities to assess the damage and implement stronger cybersecurity measures to prevent future incidents.
Trezor, a manufacturer of hardware wallets, announced that a data breach at its shipping provider, ShipMonk, has compromised the personal information of approximately 67,000 U.S. customers. The leaked data includes names, email addresses, phone numbers, shipping addresses, and order numbers from transactions made between November 2019 and August 2021. Despite this breach, Trezor stated that the security of its hardware wallets remains intact, meaning users' funds are not at risk. This incident raises concerns about how third-party vendors can impact customer data security and highlights the importance of robust data protection practices in supply chains. Customers affected by this breach should remain vigilant for potential phishing attempts or other malicious activities using their exposed information.
Thomson Reuters experienced a data breach involving its C-Track Canada court management system, which was detected on June 30. The breach compromised sensitive files from three Ontario courts, potentially exposing personal and legal information of individuals involved in court cases. This incident raises concerns about the security of court records and the potential misuse of the exposed data. It highlights the vulnerability of critical public systems to cyberattacks, which can have far-reaching implications for privacy and trust in legal processes. Users of the C-Track system, as well as the affected courts, need to be aware of the risks and take precautions to safeguard their information.
The Manchester Airports Group (MAG) has confirmed a data breach affecting 8.8 million individuals after a third-party database was compromised. The leaked information includes sensitive details like emails and phone numbers, which were allegedly exposed by a group called FulcrumSec. MAG operates several major airports, including Manchester, London Stansted, and East Midlands, but asserts that the breach does not impact airport operations, passenger safety, or aviation security. This incident raises concerns about the security of customer data held by third-party vendors, emphasizing the need for stronger data protection measures in the aviation sector. Affected individuals should be vigilant for potential phishing attempts or other malicious activities stemming from this exposure.
IDScan, a company specializing in identity verification, is facing multiple lawsuits after hackers reportedly breached its system and are now attempting to sell over 153 million driver's license records. This massive data breach raises serious concerns about the security of personal information held by third-party verification services. The affected individuals could be at risk of identity theft and fraud if their data falls into the wrong hands. As these lawsuits unfold, it’s crucial for users to monitor their financial accounts and consider additional protections against identity theft. This incident not only impacts those whose data has been compromised but also puts a spotlight on the security practices of identity verification companies.
The Manchester Airports Group (MAG) has suffered a significant data breach, with hackers leaking around 550GB of sensitive information related to 8.8 million individuals. This incident occurred after MAG reportedly declined to meet the ransom demand from the attacking group. The hackers claimed they accessed the data through exposed administrative keys, raising concerns about the security measures in place at the airport group. This breach not only compromises the personal information of millions but also highlights the ongoing risks organizations face from ransomware attacks and the importance of securing sensitive data. As the fallout from this incident unfolds, it serves as a reminder for companies to reinforce their cybersecurity practices and be vigilant against potential vulnerabilities.
Thomson Reuters has reported a significant data breach involving its C-Track court case management software, which may have exposed sensitive information, including Social Security numbers and sealed court records. The breach, which was discovered on June 30, 2026, actually took place back in March 2026, affecting courts across 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada. This incident raises serious concerns about the protection of personal data within the judicial system, as a subset of the compromised records contains individuals' names. The delayed discovery and disclosure of the breach highlight potential vulnerabilities in the security measures around court management systems. Users and stakeholders in the affected regions need to be aware of the risks associated with this exposure and consider steps to mitigate potential identity theft or misuse of their information.
Cybercriminals are reportedly selling digital scans of approximately 153 million driver’s licenses from the US and Canada on the dark web. These images are believed to have been stolen from a company called IDScan.net, which specializes in identity verification technology. The leaked data includes sensitive information that could be used for identity theft and fraud, putting millions of individuals at risk. The incident raises concerns about the security measures in place at IDScan.net and the potential for further breaches if such data can be easily accessed. This situation serves as a reminder for individuals to monitor their personal information closely and for companies to strengthen their data protection practices.
Nutex Health, a US healthcare provider, has reported a data breach where sensitive information belonging to both patients and employees was stolen. The breach also involved the exfiltration of financial and business data by an unidentified third party. Following the incident, the hackers are threatening to leak this stolen information if their demands are not met. This situation raises serious concerns about patient privacy and the security of healthcare data, as such breaches can lead to identity theft and further exploitation of the affected individuals. The incident underscores the ongoing risks that healthcare organizations face in protecting sensitive information from cybercriminals.
A recent security incident has exposed vulnerabilities in the Philippines' nuclear agency, where attackers exploited weaknesses in the ownCloud software. This breach allowed them to gain initial access, leading to the theft of sensitive data, including reactor databases, personnel records, and credential stores. The implications of this breach are serious, as it not only compromises national security but also raises concerns about the protection of critical infrastructure. Authorities are now faced with the urgent task of assessing the damage and reinforcing security measures to prevent future incidents. This situation serves as a reminder of the importance of patching known vulnerabilities in software systems.
A new service on the dark web is offering digital scans of over 153 million drivers licenses from individuals in the U.S. and Canada. This data appears to have been obtained from a well-known identity verification company based in Louisiana. The FBI's New Orleans field office has initiated an investigation to trace the source of these images. This incident raises significant concerns about identity theft, as the availability of such personal information can lead to fraudulent activities. Individuals whose licenses are compromised may face risks to their financial and personal security, highlighting the need for enhanced security measures in data handling by verification companies.