Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.

The post Revolve Puts Data Breach Victim Count at 1.5 Million appeared first on SecurityWeek.

Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.

The post Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers appeared first on SecurityWeek.

Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems.

The post Amplifon Americas Data Breach Impacts 1.3 Million appeared first on SecurityWeek.

Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students.

The post Over 3 Million People Hit by Frontline Education Data Breach appeared first on SecurityWeek.

Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.

The post Malicious cPGuard Updates Served in OpsShield Supply Chain Attack appeared first on SecurityWeek.

Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.

The post Frontline Education Data Breach Impacts Over 1.3 Million appeared first on SecurityWeek.

The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website.

The post Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk appeared first on SecurityWeek.

Hackers accessed its online shopping platform and stole customers’ personal and payment card information.

The post Revolve Data Breach Impacts at Least 200,000 People appeared first on SecurityWeek.

The attackers used offensive agentic techniques to access the company’s systems and internal tools.

The post Chainalysis Discloses Data Breach Following AI-Driven Cyberattack appeared first on SecurityWeek.

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted.

The post Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack appeared first on SecurityWeek.

The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.

The post Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net appeared first on SecurityWeek.

A leaked SquareML access key could have been used to access a database containing personal and health information.

The post Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk appeared first on SecurityWeek.

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

The post Genesys Hack Exposes Customer Data From Internal Systems appeared first on SecurityWeek.

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

The post 11 Million Impacted by Capcom Data Breach appeared first on SecurityWeek.

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

The post Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ appeared first on SecurityWeek.

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.

The post One Compromised Login Exposed Millions of California Students’ Records appeared first on SecurityWeek.

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.

The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek.

Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.

The post CenterPoint Energy Data Breach Impacts 1 Million Texans appeared first on SecurityWeek.

Luis Monzon reports: Ampath Laboratories, one of South Africa’s largest pathology service providers, has been hit by a cyberattack, with the attacker claiming that more than 80 million patient records have been exfiltrated. Threat actor ByteToBreach, which has attacked other major entities across Africa, including major targets in Nigeria, claimed responsibility for the breach. The...

Source

Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.

The post Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach appeared first on SecurityWeek.