Data Breaches
Who was breached, what leaked, and the vendor checks a business should run afterwards.
Moldova Cyberattack: State Actor Suspected After Citizen Data Was Taken From Government Systems, What Is Confirmed and What to Check
Moldova says hackers accessed the personal data of about 450,000 citizens through government digital services. The prime minister suspects a state actor but has named none. Here is what is confirmed and what businesses should check.
Park Dental Data Breach Settlement: Up to $2,500 for Patients, a December 28 Claim Deadline, and Why the Case Is Still Not Over
Park Dental patients have until December 28, 2026 to claim up to $2,500 or $60, plus credit monitoring, over a January 2024 breach. The deal is not final, and it shows how long a breach can follow a company.
Rosstat Cyberattack: Russia's Statistics Agency Is Still Restoring Systems, What Is Confirmed and What Businesses Should Check
Rosstat says it is still restoring systems after cyberattacks from October 29 to November 1, 2026. Hackers claim months of access and mass data theft, which Rosstat disputes and nobody has independently verified.
Gnosis Pay Data Breach: Legacy Card System Hit, Card and Wallet Details Reported Exposed, 3D Secure Now Mandatory
Gnosis Pay says customer information was exposed in a breach of the legacy system behind its branded cards. Here is what is confirmed, what is only reported, and what to do before the cards stop on December 20.
Mercado Bitcoin Hack: Withdrawals Frozen, Balance Checks Only From November 9, and What to Do if an Exchange Holds Your Crypto
Mercado Bitcoin froze deposits and withdrawals on November 2 after an attack. Its website is due back November 9 for balance checks only. Here is what is confirmed and what businesses should do.
Queens Library Ransomware: Network Outage Hits All Locations, What Is Confirmed and What Businesses Should Plan For
Queens Public Library says ransomware caused a network outage affecting all locations. Branches are open, but the website, app and on-site computers are still down, with no restoration date.
What to Do After a Data Breach: Why a Password Reset Is Not Enough, and the Steps for Each Type of Leaked Data
A new password only fixes a leaked password. Here is what government guidance says to do when card numbers, Social Security numbers, IDs or contact details leak, and what a company should put in its breach plan.
Chainalysis Breach: Password Hashes and Live Tokens Exposed for All Users, What Is Confirmed and What to Reset
Chainalysis now says names, usernames, password hashes and live tokens for all users were exposed, reversing its first statement. Here is what is confirmed, what is not, and what to reset this week.
Amadeus Data Breach: Airline Booking Records and Some Passport Numbers Exposed, What Is Confirmed and What to Do This Week
Amadeus says a flaw exposed booking data, and airlines including Japan Airlines, ANA, Cathay Pacific and Singapore Airlines report customer records were accessed. Here is what is confirmed and what businesses should do.