Intelligence desk

Data Protection

A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.

2026-11-02Arara breach expands from one mail system to 97 client serversSupply Chain

2026-11-02Chainalysis says offensive agentic techniques reached internal toolsAI Security

2026-10-30Florida financial-aid breach may affect 4.9 million peopleData Protection

2026-10-30iRhythm breach count raises the third-party assurance thresholdThird-Party Risk

2026-10-29So-net breach exposes email passwords as well as customer recordsData Protection

2026-10-28Convertr skimmer turns analytics governance into payment-incident responseSupply Chain

2026-10-27Frontline begins breach notifications covering government, Medicaid and student identifiersData Protection

2026-10-26Quest patient-record exposure remains unscopedData Protection

2026-10-23Quest portal breach leaves healthcare clients waiting for patient-record scopeData Protection

2026-10-22Railway secret-store incident forces credential rotation while deployments are pausedCloud Security

2026-10-20Nikkei’s third credential incident demands a cross-cloud identity resetIdentity

2026-10-16Legal Aid Agency scope expansion tests long-term breach governanceData Protection

2026-10-14Xandr fine makes consent verification an intermediary obligationData Protection

2026-10-13Ledger implant case makes hardware provenance an incident-response controlSupply Chain

2026-10-13Norway’s Xandr decision makes inherited consent an enterprise control failureRegulatory

2026-10-09Denmark's CPR breach invalidates identifier-only verificationIdentity

2026-10-08DSG Retail case closes with security duty intactRegulatory

2026-10-07ASOS incident turns customer messaging into a control-plane riskThird-Party Risk

2026-10-06Denmark’s national register breach turns delegated access into population-scale identity riskIdentity

2026-10-06Princeton exfiltration finding shows why preliminary clean reviews cannot close an incidentIncident Response

2026-10-01Bitget forensics put trusted security appliances inside a US$387.5 million attack pathThird-Party Risk

2026-09-29DC health-data exposure puts publication controls under reviewData Protection

2026-09-29Facebook privacy verdict raises the price of unsupported assuranceRegulatory

2026-09-28DMDC breach tests whether personnel-data controls extend to file sharesData Protection

2026-09-25AI-orchestrated retail campaign pairs card theft with destructive cleanupThreat Intelligence

2026-09-24Astrana Health discloses material cyber incident after phone spoofingRegulatory

2026-09-24FBIJobs.gov compromise claim leaves breach origin and PII impact unresolvedThird-Party Risk

2026-09-23Miljödata ruling raises the evidence bar for supplier securityThird-Party Risk

2026-09-22Google location-data ruling turns privacy evidence into a board deadlineRegulatory

2026-09-22LMU incident joins sensitive data exposure with service disruptionIncident Response

2026-09-21Gyazo disclosure exposes authentication and image metadata at scaleData Protection

2026-09-17AI-agent breach enters the regulatory recordAI Security

2026-09-17CenterPoint breach shifts focus to external customer systemsData Protection

2026-09-15Fraudulent government requests bypassed Revolut’s disclosure controlsData Protection

2026-09-14Revolut released customer records after fraudulent government requestsData Protection

2026-09-11AdaptHealth breach scope reaches 4.1 million peopleData Protection

2026-09-10Springfield keeps schools closed as cyber disruption reaches student-safety systemsResilience

2026-09-10Vendor-held API credentials expose Veradigm patient dataThird-Party Risk

2026-09-09Veradigm vendor credentials expose patient data through a limited APIThird-Party Risk

2026-09-08SmartHRMS ransomware leaves customers without a recovery pointResilience

2026-09-07Berlin’s second leak package adds credential containmentRansomware

2026-09-04C-Track breach exposes the limits of court-vendor assuranceThird-Party Risk

2026-09-04CNIL fine makes healthcare access and monitoring evidence mandatoryRegulatory

2026-09-02Aesto breach count exposes healthcare vendor concentrationThird-Party Risk

2026-09-01ATF says CALEA data-publication claims remain unverifiedIncident Response

2026-09-01Jack Henry confirms vishing-led extortion incidentIdentity

2026-08-31McKesson confirms third-party data theft but leaves customers without application scopeThird-Party Risk

2026-08-25TikTok settlement turns children’s-data controls into a board assurance testRegulatory

2026-08-21Canvas findings reset the evidence standard for SaaS assuranceRegulatory

2026-08-20CareCloud breach scope rises to 3.76 million peopleData Protection

2026-08-19Expanded Mabna charges sharpen the research-espionage threat modelThreat Intelligence

2026-08-19Heights Finance breach exposes the risk outside core systemsThird-Party Risk

2026-08-18France escalates tax-data breach response after containment missed extractionSecurity Leadership

2026-08-17RingCentral exposure gains scale as 1.6 million addresses are cataloguedThird-Party Risk

2026-08-14Trezor breach exposes the risk hidden in fulfilment dataThird-Party Risk

2026-08-12Saint Paul’s incident moves from operational recovery to disclosed data exposureIncident Response

2026-08-07Snowflake campaign guilty plea turns an old cloud-account failure into a verified legal recordThird-Party Risk

2026-08-07WebKit paths can bypass Apple Private Relay and expose real IP addressesData Protection

2026-08-06PURPOSE shows how RAG poisoning can evade contradiction checksAI Security

2026-08-04Amgen disclosure exposes a third-party cloud assurance gapThird-Party Risk

2026-08-04Liechtenstein ownership-register theft creates downstream identity riskData Protection

2026-08-03EY extortion deadline passes with third-party support-platform scope still unresolvedThird-Party Risk

2026-07-31Analog Devices confirms file exfiltrationIncident Response

2026-07-31KT penalty exposes telecom control and evidence failuresRegulatory

2026-07-30Analog Devices confirms files were exfiltrated in June intrusionIncident and Enterprise Risk

2026-07-29Origin Energy says approximately 900,000 customers were affected by data incidentData Protection and Incident Response

2026-07-28MCBS breach extends healthcare exposure through seven clientsThird-Party and Healthcare Security

2026-07-28Origin Energy says approximately 900,000 customers were affectedData Protection and Critical Services

2026-07-23US post-quantum programme moves from policy to named ownershipPolicy, Architecture and Cryptography

2026-07-14Lidl breach reinforces the narrowest-link problemThird-party risk