The Breach News

Why You Should Pay Attention to PCI DSS 4.0 in 2023

In today’s digital economy, safeguarding customer data is paramount for businesses handling online transactions. The Payment Card Industry Data Security Standard (PCI DSS) has been established by leading credit card companies to outline the essential best practices for securing consumer information. Adopting these guidelines enables companies to protect their clients’…

Read MoreWhy You Should Pay Attention to PCI DSS 4.0 in 2023

Back-Office Service Provider Reports Data Breach Impacting 10.5 Million People

Third-Party Risk Management, Data Breach Notification, Data Security Conduent Data Breach Affects Millions, Including Clients Humana and BCBS Montana Marianne Kolbasuk McGee (HealthInfoSec) • October 27, 2025 Conduent is informing over 10.5 million individuals about a breach identified in January. (Image: Conduent) A significant cybersecurity incident has emerged as Conduent…

Read MoreBack-Office Service Provider Reports Data Breach Impacting 10.5 Million People

Swedish Power Grid Operator Acknowledges Breach Following Everest Ransomware Allegations

Svenska kraftnät, the national operator of Sweden’s power grid, has reported a data breach that has exposed sensitive information to unauthorized individuals. The breach was publicly disclosed on October 26, 2025, and is linked to the notorious Everest ransomware group. This incident marks a significant concern amid a rising tide…

Read MoreSwedish Power Grid Operator Acknowledges Breach Following Everest Ransomware Allegations

LastPass Confirms Major Data Breach, Stolen Encrypted Password Vaults

In an alarming update on the cybersecurity landscape, LastPass has reported that the security breach from August 2022 appears to have compromised more data than previously acknowledged. This breach involved unauthorized access to customer data, specifically their encrypted password vaults, following a successful acquisition of sensitive information from an earlier…

Read MoreLastPass Confirms Major Data Breach, Stolen Encrypted Password Vaults

Data Breach Strikes Iranian Intel-Linked Cybersecurity School

Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime Ravin Academy’s Data Breach Exposes Identities of Over 1,000 Participants Chris Riotta ( @chrisriotta) • October 27, 2025 Image: Shutterstock Recent revelations from a cyber training facility affiliated with Iranian intelligence have exposed sensitive personal information of over 1,000 individuals enrolled in…

Read MoreData Breach Strikes Iranian Intel-Linked Cybersecurity School

Restricted Access

Data Breach Exposes 183 Million Email Credentials, Including Gmail Passwords In a significant cybersecurity incident, recent reports reveal that approximately 183 million email credentials, including passwords for Gmail accounts, have been compromised in a data breach. This alarming breach has raised concerns among users and business owners regarding the robustness…

Read MoreRestricted Access

HPE Releases Urgent Security Updates for Aruba Access Point Vulnerabilities

HPE Addresses Critical Vulnerabilities in Aruba Networking Access Points Hewlett Packard Enterprise (HPE) recently unveiled a series of security updates aimed at remedying multiple vulnerabilities in its Aruba Networking Access Point products. Among these are two significant critical vulnerabilities that may allow for unauthenticated command execution, compromising the integrity of…

Read MoreHPE Releases Urgent Security Updates for Aruba Access Point Vulnerabilities

Iranian Hackers Exploit Dropbox in Cyberattacks Targeting Aerospace and Telecom Industries

Recent investigations have revealed a sophisticated cyber espionage campaign specifically targeting the aerospace and telecommunications sectors in the Middle East. This operation aims to compromise sensitive information relating to critical assets, corporate infrastructures, and advanced technologies while eluding detection by existing security measures. The Boston-based cybersecurity firm, Cybereason, has characterized…

Read MoreIranian Hackers Exploit Dropbox in Cyberattacks Targeting Aerospace and Telecom Industries