Intelligence desk

Data Protection

A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.

2026-09-10Springfield keeps schools closed as cyber disruption reaches student-safety systemsResilience

2026-09-10Vendor-held API credentials expose Veradigm patient dataThird-Party Risk

2026-09-09Veradigm vendor credentials expose patient data through a limited APIThird-Party Risk

2026-09-08SmartHRMS ransomware leaves customers without a recovery pointResilience

2026-09-07Berlin’s second leak package adds credential containmentRansomware

2026-09-04C-Track breach exposes the limits of court-vendor assuranceThird-Party Risk

2026-09-04CNIL fine makes healthcare access and monitoring evidence mandatoryRegulatory

2026-09-02Aesto breach count exposes healthcare vendor concentrationThird-Party Risk

2026-09-01ATF says CALEA data-publication claims remain unverifiedIncident Response

2026-09-01Jack Henry confirms vishing-led extortion incidentIdentity

2026-08-31McKesson confirms third-party data theft but leaves customers without application scopeThird-Party Risk

2026-08-25TikTok settlement turns children’s-data controls into a board assurance testRegulatory

2026-08-21Canvas findings reset the evidence standard for SaaS assuranceRegulatory

2026-08-20CareCloud breach scope rises to 3.76 million peopleData Protection

2026-08-19Expanded Mabna charges sharpen the research-espionage threat modelThreat Intelligence

2026-08-19Heights Finance breach exposes the risk outside core systemsThird-Party Risk

2026-08-18France escalates tax-data breach response after containment missed extractionSecurity Leadership

2026-08-17RingCentral exposure gains scale as 1.6 million addresses are cataloguedThird-Party Risk

2026-08-14Trezor breach exposes the risk hidden in fulfilment dataThird-Party Risk

2026-08-12Saint Paul’s incident moves from operational recovery to disclosed data exposureIncident Response

2026-08-07Snowflake campaign guilty plea turns an old cloud-account failure into a verified legal recordThird-Party Risk

2026-08-07WebKit paths can bypass Apple Private Relay and expose real IP addressesData Protection

2026-08-06PURPOSE shows how RAG poisoning can evade contradiction checksAI Security

2026-08-04Amgen disclosure exposes a third-party cloud assurance gapThird-Party Risk

2026-08-04Liechtenstein ownership-register theft creates downstream identity riskData Protection

2026-08-03EY extortion deadline passes with third-party support-platform scope still unresolvedThird-Party Risk

2026-07-31Analog Devices confirms file exfiltrationIncident Response

2026-07-31KT penalty exposes telecom control and evidence failuresRegulatory

2026-07-30Analog Devices confirms files were exfiltrated in June intrusionIncident and Enterprise Risk

2026-07-29Origin Energy says approximately 900,000 customers were affected by data incidentData Protection and Incident Response

2026-07-28MCBS breach extends healthcare exposure through seven clientsThird-Party and Healthcare Security

2026-07-28Origin Energy says approximately 900,000 customers were affectedData Protection and Critical Services

2026-07-23US post-quantum programme moves from policy to named ownershipPolicy, Architecture and Cryptography

2026-07-14Lidl breach reinforces the narrowest-link problemThird-party risk