ATF Isolated the Breached System. It Still Contained Investigation Targets.
ATF says a standalone system breach did not reach its enterprise network or eForms, but the isolated environment contained information about investigation targets.
Data Breach
Manchester Airports Said No to the Ransom. The Attackers Answered With the Passenger Data.
Manchester Airports Group kept operations running, but reporting says the attackers published stolen passenger data after MAG refused a ransom demand.
LACMA Detected the Breach in July 2025. The Notice Came 13 Months Later.
LACMA says a July 2025 network breach exposed identity, financial and medical data. Public notification followed more than 13 months after detection.
The Outage Lasted Eight Hours. The Patient Exposure Reached 3.75 Million.
CareCloud first described an eight-hour disruption affecting one of six electronic health record environments. The same incident is now listed as affecting 3,756,469 people.
They Never Became Customers. Their Identity Data Was Still in the Breach.
A Heights Finance cloud-platform breach reached borrowers, applicants and people who only enquired. Data retention turned a past interaction into a present risk.
The Hosting Systems Were Separate. 1.36 Million Customer Accounts Were Still in Scope.
Sakura Internet's investigation expanded from 583 rented-server accounts to a separate sales system holding 1.36 million customer accounts. Access was possible, but data exfiltration was not confirmed.
A Breach Reached 1.2 Million Latvians. The Records Went Back to 2008.
Attackers stole historical CSDD payment-receipt data affecting 1.2 million people. The breach combined national-scale identity data with vehicle, address, and payment history dating back to 2008.
A Payment Archive From 2008 Exposed Two-Thirds of Latvia.
A cyberattack on Latvia’s Road Traffic Safety Directorate exposed payment-receipt records belonging to 1.2 million people and 200,000 legal entities. The archive stretched back to 2008 and linked identity data to addresses, vehicle registration plates, payment dates, and amounts. The…
Another 67,000 Trezor Customers Were Exposed by Data ShipMonk Said It Had Deleted
Trezor says ShipMonk retained data it had promised to delete, exposing another 67,000 US customers to phishing and potential physical-security risk.
Every Ryde Account Was Exposed. The Ride History Wasn’t.
Nordic electric-scooter operator Ryde says an intruder copied customer data from every account on its platform. The breach may affect about 4.5 million accounts across Norway, Sweden, Finland and Germany, including 1.6 million Norwegian customers. The important detail is not…