Data breach news from ZeroDayFeed — who was hit, what was taken, how it was disclosed, and what affected customers and organizations should do next.
Zio patch maker iRhythm began notifying patients on Oct. 2 about a June social-engineering intrusion and extortion demand that exposed health data. Texas and South Carolina filings alone show about 368,000 people affected.
Read the story →A Cerner entry on the Texas Attorney General's breach portal lists 2,992,244 Texans, and news reports put the nationwide count for the 2025 intrusion into legacy Cerner servers at 19,929,149, a total Oracle has not confirmed.
CenterPoint Energy told the Texas Attorney General that 1,062,060 Texans had names, addresses, SSNs and driver's license numbers exposed, a month after an SEC 8-K that disclosed the breach without saying how many people were affected.
Attackers used a compromised ConnectWise Cloud Backup (formerly SkyKick) app credential to get app-only Graph access to at least 173 Microsoft 365 tenants, prompting ConnectWise to disable seven app identities and suspend Cloud Backup, SaaS Security and Cloud Management.
A cybersecurity incident at BAE Systems, which runs the federal judiciary's Bankruptcy Noticing Center, has stopped the production and distribution of bankruptcy notices and taken four uscourts.gov services offline, with no restoration timeline yet.
An unauthorized party used a compromised credential to copy California student records from an ETS-run SFTP site between May and September 2026; the state began notifying families Oct. 16 and is offering two years of Experian IdentityWorks.
Free daily briefing — breaches, actively exploited bugs, ransomware, and the patches to prioritize.
You're in. ✓
Check your inbox to confirm your subscription.No spam. Unsubscribe any time. Read our privacy policy.
