Cyber Security News

On January 6, Methodist Homes of Alabama and Northwest Florida (‘Methodist Homes’) reported that a compromised employee email account had been accessed between May 8 and May 21, 2025. For residents and patients, the account information included first and last name, Social Security number, date of birth, Medicare number, or medical treatment and condition information…….

David DiMolfetta reports: The Equal Employment Opportunity Commission was impacted in an internal data security incident that occurred around a year ago, and involved a contractor’s employees mishandling sensitive information in one of the agency’s systems, according to a notification email obtained by Nextgov/FCW. The breach in the EEOC’s Public Portal system, which the agency was……

BOSTON – An Illinois man has been charged in federal court in Boston with phishing the Snapchat access codes of nearly 600 women in an effort to hack their Snapchat accounts and steal nude photos, which he kept, sold, or traded on the internet. Kyle Svara, 26, of Oswego, Ill., is charged with aggravated identity……

1News reports: One of the country’s largest patient information portals, Manage My Health, today confirmed the first 50% of up to 126,000 patients affected by a data breach had been notified. The privately-operated patient portal, used by some general practices around New Zealand, earlier this week confirmed it had identified a cyber security incident involving……

Jonathan Greig reports: A Russian basketball player accused of being involved in a ransomware gang was freed in a prisoner exchange between Russia and France. Daniil Kasatkin, 26, was seen in a video shared by Russian state news outlet TASS emerging from a plane that was then used to send French researcher Laurent Vinatier back to France…….

This has not been a great week for hackers whose claims have been refuted. First, ScatteredLapsus$Hunters’ claim about Resecurity was refuted, and now claims by another threat actor that NordVPN has been hacked have also been refuted. Davey Winder reports on the false NordVPN claims: The hacker, using the name of 1011, claimed to have brute-forced a……

Published by DataBreaches.net in collaboration with North Country Communications, LLC. January 6, 2026 On December 15, North Country Communications launched as a consultancy dedicated to helping small and mid-sized HIPAA-regulated entities comply with HIPAA’s privacy, security, and breach notification requirements. DataBreaches took the opportunity to interview its founder, Rachel Klugman Seeger, about the services she provides……

City News reports: A man wanted Canada-wide in connection with a multimillion-dollar fraud and data theft of Desjardins clients was arrested in Spain, according to Quebec provincial police. The Sûreté du Québec says Juan Pablo Serrano, considered among the province’s most wanted fugitives, was arrested Nov. 6, 2025. He remains in custody in Spain. Authorities……

Cybersecurity researchers have discovered two new malicious extensions on the Chrome Web Store that are designed to exfiltrate OpenAI ChatGPT and DeepSeek conversations alongside browsing data to servers under the attackers’ control. The names of the extensions, which collectively have over 900,000 users, are below – Chat GPT for Chrome with GPT-5, Claude Sonnet &…

The CERT Coordination Center (CERT/CC) has disclosed details of an unpatched security flaw impacting TOTOLINK EX200 wireless range extender that could allow a remote authenticated attacker to gain full control of the device. The flaw, CVE-2025-65606 (CVSS score: N/A), has been characterized as a flaw in the firmware-upload error-handling logic, which could cause the device…