Data Breaches
California students’ disability and test data stolen via ETS contractor breach
Hackers accessed millions of student records through compromised login details at a testing service contractor, exposing sensitive educational information.
Data Breaches
Data Breaches coverage from Phish Herald holds 23 articles, 16 of them reference guides. The newest was published on October 20, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include FTC: Data Breach Response, A Guide for Business and Have I Been Pwned.
Data Breaches
FBI Jobs Site Breach Exposes Staff Records; Feds Probe Ransom Negotiators
Federal investigators suspect ransomware negotiators aided the ShinyHunters group in pressuring victims after the theft of sensitive FBI recruitment data.
Data Breaches
Florida DMV Breach: Sensitive Records Exposed for Residents After Credential Theft
Current and former residents face exposure of sensitive identity records after an international group accessed state motor vehicle systems using stolen credentials.
Data Breaches
OpenCode Users Face API Key Exposure Risk After Legacy System Breach Tied to Distillation Attack
A small fraction of OpenCode Console users face potential exposure of third-party API keys after an unauthorised access incident involving a legacy system.
Data Breaches
Arm faces royalty pause after jury finds breach of Qualcomm licence
A Delaware jury ruled Arm breached its agreement with Qualcomm, awarding nominal damages but triggering potential five-year royalty withholding.
Data Breaches
Burger King Japan breach exposes data for 11.18 million app members
The fast-food chain confirmed an outsider accessed its member management system, leaking personal details for millions of users in Japan.
Data Breaches
Backup Strategy Mistakes: 7 Errors That Cause Data Loss
Organisations lose data not because backups fail to run, but because the recovery process lacks verification and isolation from active threats.
Data Breaches
Database Exposure Prevention Checklist for Infrastructure Security
Most data leaks occur because configuration errors leave ports open, not because encryption algorithms fail or hackers break mathematical barriers.
Data Breaches
Data Scraping Prevention Checklist for Web Assets
Automated bots harvest your public data faster than manual attackers, turning your own marketing content into a target for credential stuffing and social engineering.
Data Breaches
Mobile Device Management Examples: Policy, Security and Control
Mobile device management examples reveal that policy enforcement often fails when devices bridge personal and professional data without clear technical boundaries.
Data Breaches
Account Takeover Fraud Detection: Signals That Beat Automated Attacks
Most account takeover fraud detection fails because teams monitor login success rates while attackers rely on credential stuffing to bypass standard alarms.
Data Breaches
Danish national register breach exposes 8.8 million via weak vendor password
An IT firm’s authorised access to Denmark’s central registry was abused through a simple password, exposing data for millions of citizens.
Data Breaches
Do I Need PCI DSS? Determine Your Scope and Compliance Obligations
You remain liable for cardholder data breaches even if you outsource processing to a third-party payment gateway or cloud provider.
Data Breaches
How Tax Identity Theft Works: The Step-by-Step Attack Chain
Attackers rarely break into tax systems directly; they steal credentials from unrelated breaches and use them to file returns before the legitimate taxpayer notices.
Data Breaches
Identity Theft Protection: Answers to Critical Security Questions
Identity theft protection fails when it relies solely on passwords, as attackers exploit the gap between authentication and authorisation in modern systems.
Data Breaches
Public File Share Exposure: Debunking Six Common Security Myths
Visibility controls do not equal security, and internal permissions often fail when storage moves to public cloud infrastructure without reconfiguration.
Data Breaches
Password Hashing and Salting: Correcting Common Architectural Errors
Salting prevents pre-computed attacks but fails to stop real-time cracking if the underlying hashing algorithm lacks deliberate computational resistance.
Data Breaches
File Integrity Monitoring Best Practices for Critical Infrastructure
Most organisations monitor only configuration files, leaving the executable code that attackers modify to bypass detection completely unwatched.
Data Breaches
Protected Health Information: Answering Your Most Pressing Questions
Most protected health information breaches stem from misconfigured access controls rather than external hackers, requiring rigorous internal auditing.
Data Breaches
How Accidental Data Disclosure Happens: Step-by-Step Mechanics
Most accidental disclosures fail because human error bypasses automated security controls that assume users act with perfect rationality and intent.
Data Breaches
Full Disk Encryption Checklist: Verify Protection Against Physical Theft
Full disk encryption protects data at rest but fails to prevent breaches caused by compromised credentials or unencrypted network traffic.
Data Breaches
Prevent Third-Party Data Breaches: The Vendor Risk Framework
Most organisations focus on their own perimeter, yet the weakest link is invariably the supplier who holds your keys but not your standards.
Data Breaches
Database Activity Monitoring Checklist: Detect Threats Before Breach
Most database activity monitoring fails because teams configure alerts for every query, creating noise that hides the actual theft of sensitive records.