Hackers disrupted services and stole names, email addresses, student ID numbers, and user messages. The post Edtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threats appeared first on SecurityWeek .
Sandhills Medical Foundation, a healthcare provider based in South Carolina, disclosed a ransomware attack that occurred on May 8, 2025, but only publicly revealed the breach nearly one year later. The ransomware group Inc Ransom targeted the organization, obtaining personal information of approximately 170,000 individuals, including sensitive data such as names, dates of birth, Social Security numbers, taxpayer IDs, government-issued IDs, financial information, and personal health information. The attackers listed Sandhills Medical on their leak site and made stolen files available for download. The organization has been cooperating with law enforcement and cybersecurity experts to investigate the incident. No specific technical vulnerability or exploit details are provided, and there is no indication of a patch or remediation status.
The ShinyHunters group is threatening to leak stolen files unless Vimeo agrees to pay a ransom. The post Vimeo Confirms User and Customer Data Breach appeared first on SecurityWeek .
The ShinyHunters cybercrime group claimed to have stolen 9 million records containing personal information from Medtronic, a major medical technology company. Medtronic confirmed a hack of its systems but stated there was no identified impact on its products, patient safety, manufacturing, distribution, or financial systems. The company is investigating whether any personal information was accessed. The data breach reportedly involved corporate and personal data, with ShinyHunters threatening to leak the information unless a ransom was paid. Medtronic's diabetes-focused subsidiary MiniMed reported its systems were unaffected. The company has not publicly confirmed the data theft but appears to have removed itself from the leak site, possibly indicating ransom payment. No specific technical vulnerability details or exploits have been disclosed.
Itron, which serves utilities and cities around the world, discovered unauthorized access to its systems on April 13. The post Energy and Water Management Firm Itron Hacked appeared first on SecurityWeek .
Luxury cosmetics company Rituals has disclosed a data breach affecting its My Rituals members. Hackers accessed and downloaded some member data, including names and addresses. There is no information about other types of data being compromised or the method of breach. The company is notifying affected members about the incident. No patch or remediation details are provided, and there is no indication of active exploitation beyond the disclosed breach.
Data breaches were disclosed by Southern Illinois Dermatology, Saint Anthony Hospital, and North Texas Behavioral Health Authority. The post Data Breaches at Healthcare Organizations in Illinois and Texas Affect 600,000 appeared first on SecurityWeek .
Vercel confirmed suffering a breach after a hacker claiming to be part of ShinyHunters offered to sell stolen data for $2 million. The post Next.js Creator Vercel Hacked appeared first on SecurityWeek .
DarkSword and Coruna are new iOS malware strains that infect devices through zero-click attacks. Learn how these threats operate, which iOS versions are at risk, and how to protect your devices.
&#;x26;#;x5b;This is a Guest Diary by Alec Jaffe, an ISC intern as part of the SANS.edu Bachelor&#;x26;#;39;s Degree in Applied Cybersecurity (BACS) program &#;x26;#;x5b;1].
Cookeville Regional Medical Center in Tennessee experienced a data breach caused by the Rhysida ransomware group, resulting in the theft of 500GB of data and impacting approximately 337,000 individuals. The incident was reported in 2026 and involves a significant data compromise but no specific vulnerability details or exploitation methods have been provided.
Basic-Fit has reported that hackers have stolen names, dates of birth, and even bank account details. The post Europe’s Largest Gym Chain Says Data Breach Impacts 1 Million Members appeared first on SecurityWeek .
The company said in an SEC filing that an IDOR vulnerability affecting RCI Internet Services exposed contractor data. The post Nightclub Giant RCI Hospitality Reports Data Breach appeared first on SecurityWeek .
In December 2025, hackers stole names and passport numbers from the European travel company’s network. The post 300,000 People Impacted by Eurail Data Breach appeared first on SecurityWeek .
This is the seventh update to the TeamPCP supply chain campaign threat intelligence report,&#;x26;#;xc2;&#;x26;#;xa0;"When the Security Scanner Became the Weapon"&#;x26;#;xc2;&#;x26;#;xa0;(v3.0, March 25, 2026).&#;x26;#;xc2;&#;x26;#;xa0;Update 006&#;x26;#;xc2;&#;x26;#;xa0;covered developments through April 3, including the CERT-EU European Commission breach disclosure, ShinyHunters&#;x26;#;39; confirmation of credential sharing, Sportradar breach details, and Mandiant&#;x26;#;39;s quantification of 1,000+ compromised SaaS environments. This update consolidates five days of intelligence from April 3 through April 8, 2026.
By targeting Grafana’s AI components, attackers can point to external resources and inject indirect prompts to bypass safeguards. The post GrafanaGhost: Attackers Can Abuse Grafana to Leak Enterprise Data appeared first on SecurityWeek .
The high-end casino and hotel operator has likely paid a ransom to avoid a data leak. The post Wynn Resorts Says 21,000 Employees Affected by ShinyHunters Hack appeared first on SecurityWeek .
Hackers stole over 300GB of data from the Commission’s AWS environment, including personal information. The post European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack appeared first on SecurityWeek .
This is the sixth update to the TeamPCP supply chain campaign threat intelligence report,&#;x26;#;xc2;&#;x26;#;xa0;"When the Security Scanner Became the Weapon"&#;x26;#;xc2;&#;x26;#;xa0;(v3.0, March 25, 2026).&#;x26;#;xc2;&#;x26;#;xa0;Update 005&#;x26;#;xc2;&#;x26;#;xa0;covered developments through April 1, including the first confirmed victim disclosure (Mercor AI), Wiz&#;x26;#;39;s post-compromise cloud enumeration findings, DPRK attribution of the axios compromise, and LiteLLM&#;x26;#;39;s release resumption after Mandiant&#;x26;#;39;s forensic audit. This update covers intelligence from April 1 through April 3, 2026.
The cybersecurity incident involved an insider and had a limited impact, the telecoms giant told SecurityWeek. The post T-Mobile Sets the Record Straight on Latest Data Breach Filing appeared first on SecurityWeek .
