Fox35 in Orlando, Florida, reports that a school district is suing a parent after the district mistakenly sent them unredacted data in 47,000 records: The Lake County School Board filed a lawsuit against a parent after an employee mistakenly shared the confidential education and disability records of approximately 47,000 students. The district is asking a...

VRT reports: Brussels University Hospital UZ Brussel (VUB) was the first hospital to report network problems. These are affecting the hospital’s IT infrastructure and telephone systems. There are also problems at AZ Monica in Antwerp, at the Heilig Hart Hospital in Lier and Sint-Andries Hospital in Tielt. As a result, at UZ Brussel scheduled operations...

HIPAA Journal has a convenient table of HIPAA enforcement actions by state attorneys general. Most entries involve violations of the Security Rule and/or HITECH, but a few appear to relate more to the Privacy Rule or access to records. You can find the table at https://www.hipaajournal.com/hipaa-enforcement-by-state-attorneys-general/ DataBreaches.net has reported on most of the incidents or...

Tess Ikonomou and Josh Butler report: OpenAI will not face criminal penalties over the Medicare data breach, but the prime minister has flagged changes to Australia’s criminal law to crack down on future breaches by artificial intelligence companies. Anthony Albanese on Tuesday released the recommendations of a “rapid review” into the June breach of a...

CNA reports: SPH Media has been hit by cyberattacks on five of its systems, but no customer financial information or account access was compromised, the company said on Tuesday (Nov 10). “(The cyberattacks) are believed to be a concerted effort that was carried out by the same threat actor,” an SPH Media spokesperson said in...

Othel V. Campos & Rex Espiritu report: The National Privacy Commission (NPC) said Tuesday it has received personal data breach notifications from 10 government agencies, including the Bureau of Internal Revenue (BIR), the Department of Information and Communications Technology (DICT) and the Securities and Exchange Commission (SEC). The other agencies are the Presidential Commission on...

Yonhap News reports: Korea’s state-run Financial Security Institute (FSI) reported a data leak following a hacking attack targeting its security assessment system, officials said on Tuesday. The FSI, which oversees financial information provided by banks and insurers, detected the breach the previous day, according to financial authorities. The leaked information reportedly came from the FSI’s...

Seen on Epichealth: 4 November 2026 What has happened Epichealth operates four medical clinics including the Warrnambool Medicare Urgent Care Clinic,  Epichealth Ocean Grove Marketplace, Epichealth Ocean Plaza, and Epichealth Portarlington. Epichealth recently experienced a cyber incident, during which an unauthorised third party accessed a part of our IT systems. As soon we became aware...

Zack Whittaker reports: Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone to access, potentially allowing outsiders to launch cyberattacks against unsuspecting targets. The hacking software, called Artex, is an open source autonomous penetration testing tool, meaning software that automatically probes computer systems for...

From Norway’s aid agency, Norad, November 3: Norad has been targeted by a cyberattack in which the perpetrators may have gained access to the names and email addresses of 20,614 registered users of Norad’s Grant Portal. In addition, they extracted information related to grant applications submitted by at least three organizations. Norad is still working...

A press release from NYS Attorney General Letitia James: NEW YORK – New York Attorney General Letitia James and a coalition of three other attorneys general today secured $10 million from Perry Johnson & Associates, Inc. (PJ&A), Perry Johnson, Inc. (PJI), Perry Johnson & Associates Coding, Inc., Perry Johnson & Associates Radiology, Inc., and Medical...

Robbie Meredith reports: Parents have been told to be alert for unexpected emails or phone calls after a Northern Ireland school app used by almost 50,000 people was affected by a data breach. The Equipple app is used by many schools to schedule and book meetings between parents and teachers. There have been concerns that...

Claire E. Castles, Amanda Fitzsimmons, Nathaniel P. Garrett, Rebekah Byers Kcehowski, Mary Alexander Myers, and Alexander H. Southwell of Jones Day write: Departing from the risk-based approach many courts have applied since TransUnion, and in tension with other circuits, the Ninth Circuit held that health plan participants whose confidential health information was disclosed without authorization...

Lee Trewhela reports: The Royal Cornwall Hospitals Trust (RCHT) has admitted a huge data breach has led to many affected staff experiencing “significant distress, loss of trust and ongoing anxiety”. The breach exposed sensitive personal health information relating to almost 8,000 current and former staff. An Excel spreadsheet published in February 2023 exposed hidden sickness...

There’s yet another update in the Coupang data breach case. Previous coverage on DataBreaches.net of the incident, enforcement actions, and Coupang’s objections to the fines and enforcement actions can be found in links under this update. Now Jeong Hye-Jeong reports: A Seoul court on Thursday rejected Coupang’s request to suspend a 423.6 billion won ($315.6 million) fine...

November 3, 2026: ROCHESTER, N.Y.-U.S. Attorney Michael DiGiacomo announced today that a federal grand jury has returned an indictment charging Ryan James Roach, 35 of Saskatchewan, Canada, and Mathiew James Stubbings, 41, of Ontario, Canada, with conspiracy to obtain information from a protected computer and to cause damage to a protected computer, obtaining information from a...

Iceland Review reports: A security breach affected Inna, the student-information system used by Icelandic upper-secondary schools. It allowed a student to attempt to alter other pupils’ grades and attendance records. Iceland’s Data Protection Authority has received three notifications, while schools and the system operator are still investigating what information may have been accessed. Schools discovered...

Nicole Wootton-Cane reports: At least 320,000 school files stolen during a cyber attack on Bristol City Council’s servers have been found posted to the dark web. Hackers targeted the council’s Trading with Schools platform and accessed data from 39 schools across the region in September. The council said specialist investigations have now identified a “significant...

Daryna Antoniuk reports: A major Russian web hosting provider is struggling to restore its services after a cyberattack destroyed data across its cloud infrastructure and disrupted hundreds of websites. Beget, one of Russia’s largest domain registrars and hosting companies, said Wednesday that it had begun bringing some servers back online following the attack, which took...

OMM reports: Cold-storage facilities used by France’s national blood service were targeted in a cyberattack, with units containing blood samples reportedly programmed to reach 110 degrees Celsius (230 degrees Fahrenheit), French weekly Le Canard enchaîné reported on Tuesday. Anadolu Agency also reported the incident. The attack took place overnight from Sunday to Monday and targeted...