Fiserv Data Breach 2026: Everest Ransomware Claims Attack
Was Fiserv hacked? In May 2026 the Everest ransomware group claimed a breach of the fintech giant. Card-number exposure is unconfirmed. What we know.
Breaches & threats, page 2 of 5
Newest first. Back to the first page.
Booking.com Data Breach 2026: What Travelers Need to Know
Booking.com confirmed hackers accessed reservation data including names, emails and phone numbers, though no payment card details were exposed.
25,000+ Endpoints Exposed in Dragon Boss Solutions Update Breach
A misconfigured update domain tied to Dragon Boss Solutions left more than 25,000 endpoints in 124 countries open to hijacked software updates.
CareCloud Data Breach Puts Healthcare Records at Risk After Eight-Hour Intrusion
CareCloud, whose systems support 45,000+ healthcare providers, disclosed an eight-hour intrusion into one of its electronic health record environments.
Mercor Data Breach Tied to LiteLLM Supply Chain Attack
A supply chain attack on LiteLLM exposed Mercor.io data, with Lapsus$ claiming 4TB of stolen Slack messages, candidate profiles, and API keys.
China Supercomputing Center Breach Exposes 10 Petabytes of Sensitive Data
A hacker group claims to have stolen more than 10 petabytes of data from China's National Supercomputing Center, including defence and aerospace research.
Nova Scotia Power Data Breach Began with Malware Download, Report Reveals
A Privacy Commissioner report found the Nova Scotia Power breach began with a malicious pop-up, exposing SINs and financial data for 915,000 customers.
Wynn Resorts Data Breach Affected Over 21,000 Employees Despite “Deleted Data” Claim
Wynn Resorts confirmed a data breach affecting 21,775 employees after attackers linked to ShinyHunters accessed HR systems for months before detection.
Nike Data Breach Sparks Class Action Lawsuit Over Exposed Customer Data
A class action lawsuit accuses Nike of failing to secure customer data after a breach exposed 1.4TB of names, addresses and payment card details.
Hims & Hers Data Breach Linked to Zendesk Platform Access
An unauthorized user accessed Hims & Hers customer service tickets in Zendesk over four days in February 2026, exposing names and contact details.
LinkedIn Accused of Secretly Scanning Users' Browsers for Installed Extensions
An investigation alleges LinkedIn secretly scans browsers for over 6,000 extensions and shares data with a security firm; LinkedIn denies the claims.
Kaplan North America Data Breach Impacts 173,000 Individuals
A Kaplan North America breach exposed the names, Social Security numbers and driver's license numbers of 173,676 people during a multi-week intrusion.
Freedom Mobile Reports Customer Data Breach Following Unauthorized Access
Freedom Mobile said a third party used a subcontractor's credentials to access customers' names, addresses, dates of birth and account numbers.
Loblaw breach affected about two million Canadians; privacy commissioner secures security commitments
Loblaw is notifying about two million Canadians of a March 2026 breach. What was exposed, what to do now, and what the privacy commissioner's deal means.
Iran-Linked Hackers Claim Responsibility for Cyberattack on Medical Device Giant Stryker
An Iran-linked hacking group claimed a cyberattack on medical device maker Stryker that disrupted systems and allegedly wiped some Windows devices.
Critical Vulnerabilities & the Rise of AI-Assisted Warfare
A roundup of late-February 2026 threats: critical VMware and Cisco flaws, breaches at Canadian Tire and CarGurus, and AI's growing role in cyber operations.
Conduent Data Breach Grows to 25 Million Affected: Key Lessons for Organizations
Conduent's 2025 ransomware attack now affects more than 25 million people across several U.S. states, exposing SSNs, health data, and home addresses.
PayPal Confirms Data Exposure: What Businesses Can Learn from the App Bug Incident
A coding bug in the PayPal Working Capital loan app exposed names, SSNs and dates of birth for about 100 customers over five months before it was fixed.
Canada Goose Data Breach: 600,000 Customer Records Leaked
ShinyHunters leaked more than 600,000 Canada Goose customer records, including names, addresses and partial payment card details from a vendor system.
Attackers Access France's National Bank Account Database
A threat actor used stolen civil-servant credentials to query France's FICOBA bank account registry, potentially exposing 1.2 million accounts.
Massive Global Data Leak Exposes Over One Billion Records
An unsecured IDMerit database exposed over one billion identity records across 26 countries, found by Cybernews researchers in an open MongoDB instance.
How Cruise Line Cyberattacks Expose Enterprise Security Weaknesses
Cruise line breaches show that complexity, not size, drives cyber risk, weak credentials, fragmented IT, vendor gaps and slow detection apply to any business.
Food Importer Atalanta Corporation's Current and Former Employee Data Compromised in Ransomware Attack
A July 2021 ransomware attack on food importer Atalanta Corporation exposed personal data belonging to current and former employees and some visitors.
Critical Vulnerability in Remote Desktop Services announced by Microsoft (CVE-2019-0708)
Microsoft's BlueKeep flaw (CVE-2019-0708) is a wormable, pre-authentication RDP bug scoring 9.8/10 that could spread like WannaCry on older Windows systems.
Want to know what this would look like for you?
A 30-minute call. No slides, no audit fee, no obligation. We ask what is breaking and tell you honestly whether we are the right fit.