Enforcement Arrives, Data Keeps Leaking: The Privacy Week of July 19–26, 2026
In eight days: California opened its first proactive privacy audit, nine states lost their grace periods, an AI agent breached Hugging Face, 55 millio...
dataBreach
14 articles on dataBreach.
Cancer Diagnostics, Payroll Files, and Tax Returns: The Week Enterprise Data Kept Falling Out
Abbott Laboratories lost 30 million rows from its Cancer Diagnostics business, including over a million Social Security numbers, to ShinyHunters. Esté...
55 Million Suno Users Were Breached in November. They Found Out From Have I Been Pwned in July.
AI music platform Suno was compromised in November 2025 — names, addresses, phone numbers, purchase histories, and partial card data for 55.3 million ...
An AI Agent Breached Hugging Face — and Machine-Speed Attacks Stopped Being a Demo
Hugging Face confirmed that an attacker chained two code-execution flaws in its dataset pipeline, stole cloud credentials, moved laterally into intern...
The Guards Left the Keys Out: CISA's GitHub Leak, a Worm in the npm Supply Chain, and the County That Paid $1M in Secret
This week's ledger is about guardians failing at their own jobs. CISA — the agency that lectures America on credential hygiene — published a postmorte...
$2.60 Per Genome: 42 States Settle With 23andMe for $18 Million Over the Breach That Broke It
Forty-two state attorneys general announced an $18 million settlement with 23andMe's bankruptcy estate over the 2023 credential-stuffing breach that e...
6.99 Million Driver's Licenses, 35 GB of Accenture's Keys, and a 24-Billion-Record Dump: The Breach Ledger Catches Up
AssuranceAmerica sat on a breach for nearly four months before telling 6.99 million people their driver's license numbers were gone — the largest lice...
One Zero-Day, a Dozen Victims: The Oracle Breach Wave Hits Insurance Regulators, Nissan, and 9 Million Medtronic Patients
ShinyHunters exploited a zero-day in Oracle's enterprise software and the disclosures are now landing in a wave: America's insurance regulators lost 3...
The June Breach Ledger: A Record Korean Fine, a Nintendo Ransom, and 1.4 Million Medical Records
While the policy fights over age verification and facial recognition grabbed the headlines, the back half of June 2026 delivered a brutal run of breac...
When Transparency Becomes an Attack Surface: Maine's Breach Portal Goes Dark
Maine pulled its public data-breach database offline this month after someone planted fake disclosures naming VRChat and Discord. The episode exposes ...
A Whistleblower Says DOGE Copied Every American's Social Security Record to an Uncontrolled Cloud
Chuck Borges, the former chief data officer at the Social Security Administration, alleges that DOGE copied the government's master Social Security da...
GDPR Breach Notifications Hit 443 Per Day — What Eight Years of Data Tells Us
European data protection authorities are now receiving 443 personal data breach notifications every single day — a 22% increase over last year and the...
Your Kid's School Uses Canvas. Here's What to Actually Do This Week.
About 8,809 institutions worldwide were named in the May 2026 Canvas breach — roughly 7,400 U.S. schools across all 50 states. If your child's school ...
Your Developer Tools Are the Attack Surface: The Vercel Breach and the AI Supply Chain Problem
Vercel — the platform hosting millions of web applications — was breached through a chain that started with an infostealer on an employee of an AI com...