1News reports: One of the country’s largest patient information portals, Manage My Health, today confirmed the first 50% of up to 126,000 patients affected by a data breach had been notified. The privately-operated patient portal, used by some general practices around New Zealand, earlier this week confirmed it had identified a cyber security incident involving…
In July, DataBreaches reported that Qantas had obtained a preliminary injunction prohibiting the publication of any customer data stolen from it in a cyberattack by “persons unknown.” Those defendants were served with the injunction via email and online means. Although Qantas did not reveal who signed the ransom note, ShinyHunters and Scattered Spider didn’t hesitate……
Odia Kagan of FoxRothschild writes: If you are a government contractor offering government agencies products utilizing Large Language Models (LLM), your disclosure requirements just increased. Per a new memo from the Office of the Management of the Budget (OMB), when procuring LLM’s, government agencies must require vendors to provide sufficient information for the agencies to be able……
Admire Moyo reports on an insider wrongdoing case in South Africa: In a landmark case, a man was last week sentenced to eight years in jail for contravening South Africa’s Cyber Crimes Act. Lucky Majangandile Erasmus (36), a former employee of Ecentric Payment Systems, was sentenced by the Specialised Commercial Crimes Court after entering into…
Tushar Subhra Dutta reports: Russian Federal Security Service (FSB) officers have detained two hackers in Siberia who conducted cyberattacks on critical infrastructure facilities under direct orders from Ukrainian intelligence services. The simultaneous arrests in the Kemerovo and Tomsk regions exposed a sophisticated cyber espionage network targeting Russia’s governmental, industrial, and financial information systems. The primary suspect, a…
Google’s Mandiant Threat Defense on Monday said it discovered n-day exploitation of a now-patched security flaw in Gladinet’s Triofox file-sharing and remote access platform. The critical vulnerability, tracked as CVE-2025-12480 (CVSS score: 9.1), allows an attacker to bypass authentication and access the configuration pages, resulting in the upload and execution of arbitrary payloads. The
Occasionally, entities in other countries try to take legal action against DataBreaches.net to chill or censor this site’s reporting on their breaches. None of them have prevailed, in part due to the protections we have here under the First Amendment, and in part to the legal defense afforded this site by Covington and Burling. This…
