8+ hour, 7+ min ago   (310+ words) Revolut disclosed personal and financial information of customers after receiving fraudulent information requests sent from an email account hosted on a legitimate government agency domain. The fintech company says its systems and customer funds were not compromised. Blockchain investigator ZachXBT…...

3+ day, 6+ hour ago   (306+ words) Hibbett Retail, Inc. is notifying employees that an unknown third party gained unauthorized access to its systems and may have acquired files containing personnel records during an April 2026 security incident. The company said in a breach notification dated September 8, 2026, that…...

1+ week, 4+ day ago   (453+ words) The FBI is investigating an apparent breach involving identity verification provider IDScan after a dark web service began selling access to more than 153 million US and Canadian driver’s license scans, according to an exclusive KrebsOnSecurity report. The marketplace, called Nexus,…...

1+ week, 5+ day ago   (337+ words) Healthcare data migration and archiving provider Aesto has disclosed to the US Department of Health and Human Services (HHS) that a data breach announced earlier this year affected 9,540,683 individuals. Aesto detected the intrusion on or about December 18, 2025, contained the activity,…...

2+ week, 1+ day ago   (459+ words) The ShinyHunters threat group claims it compromised McKesson and obtained data on over 284 million patient records, including highly sensitive medical, identity, prescription, and healthcare provider information. CyberInsider reviewed samples privately provided by the threat actor that appear consistent with the…...

2+ week, 6+ day ago   (346+ words) ASOS is notifying US customers that attackers gained unauthorized access to accounts using credentials obtained outside the company. This access potentially exposed personal, contact, and partial payment card information. According to an investigation published by Srourian Law Firm, the incident…...

2+ week, 6+ day ago   (404+ words) ReliaQuest says it contained a social engineering attack that briefly gave a threat actor access to a single employee identity session but did not allow access to company applications, systems, or customer data. The attacker was not identified in the…...

3+ week, 3+ day ago   (239+ words) Apple American Group LLC, a major Applebee’s franchise operator in the United States, has disclosed a data breach incident. The total number of affected people remains unclear, but state filings indicate that at least 8,447 people were notified across Vermont, Rhode…...

4+ week, 1+ day ago   (368+ words) France's tax authority has confirmed that an attacker gained unauthorized access to its information systems and extracted data belonging to individuals and businesses. Separately, a hacker using the name ZeroBytes claims to have obtained cadastral records linked to more than…...