bazsec.news
Home
SOC Threat Dashboard
Subscribe
Category desk

Data Breaches

011 dispatches on file

All59Vulnerabilities & CVEs10Ransomware6Malware & Botnets2Phishing & Social Engineering1Data Breaches11Leaks & Extortion1Threat Intelligence & APTs1Cybercrime & Dark Web14Cloud & Infrastructure3Mobile & Endpoint1OT/ICS & Critical National Infrastructure1AI & Emerging Tech Security4Research & Analysis3Industry & Business1

38,628 Crypto Orders. 10,139 IPs. What Wagyu’s Alleged Leak Means for Monero Privacy.

HR HUDSON ROCK / INFOSTEALERS.COM Threat Intelligence • October 28, 2026 Research / Cryptocurrency privacy 38,628 Crypto Orders. 10,139 IPs. What Wagyu’s Alleged Leak Means for Monero Privacy. Monero’s cryptography was not broken. But newly examined order records show how a privacy-focused swap service can retain the exact connections its customers hoped to conceal. Hudson Rock Research Wagyu.xyz 11-minute read Original dataset analysis Can Monero users be traced through a hacked exchange? Not by magically decrypting Monero’s blockchain. But potentially by reading what a swap service knows before coins ever enter the privacy network — and what it records when those coins leave. That is the central finding of Hudson Rock’s review of purported Wagyu.xyz transaction data supplied alongside a

Infostealers··Data Breaches·Notable

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root

The Hacker News··Data Breaches·Notable

Scanner Poses as 32 AI Bots to Find Credentials and Private Keys

A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.

HackRead··Data Breaches·Notable

UK to look at making software companies liable for cyber breaches

The new U.K. budget says the government will "consider where liability for cyber breaches should sit," potentially a landmark shift for a country that has relied on voluntary codes to encourage software vendors to improve security.

The Record··Data Breaches·Notable

JPN: Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout

Maddie Baker and Spencer Landers As cyberattacks continue across Japan, companies are coming to realize the great financial risk of such attacks if their lax cybersecurity systems cause millions of peoples’ personal information to be leaked. Times Car, which saw personal data that included the driver’s licenses of 1.46 million people leaked in September, is learning...

DataBreaches.net··Data Breaches·Notable

Attacker Relentlessly Scans for Credentials by Impersonating AI Bots

The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.

Dark Reading··Data Breaches·Notable

345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD

Over 345,000 unique email addresses were exposed in the September 2026 breach at German far-right political party Alternative für Deutschland (AfD). Breach notification service Have I Been Pwned (HIBP) added the data to its database on 27 October, listing email addresses and email messages as the compromised information. HIBP has flagged the incident as a sensitive breach, so the data cannot be searched publicly. Only the verified owner of an email address can check whether … More → The post 345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD appeared first on Help Net Security .

Help Net Security··Data Breaches·Notable

KR: Bithumb discloses data leak after internal system breach; One of three financial firm breaches reported that day

CoinTelegraph reports: South Korea’s crypto exchange Bithumb is investigating the extent of a data leak caused by a hack of its internal mobile system earlier this week, Yonhap News Agency reported Wednesday. Bithumb discovered the breach of its in-house mobile system — the platform used by employees to communicate internally — on Tuesday and notified...

DataBreaches.net··Data Breaches·Notable

AU: Northern Territory Health backtracks on claim only five patients impacted by RDH privacy breach

Grace Atta reports: The Northern Territory health department has backtracked on its claim that only five patients were affected by a privacy breach that led to pregnant women’s confidential medical information being shared with 28,000 followers on Instagram by a “medical observer”. The admission comes after the ABC earlier this week contacted multiple women it...

DataBreaches.net··Data Breaches·Notable

Traceability becomes the new battleground in healthcare data breach litigation

Abbye Alexander, Esq., Henry Norwood, Esq., and Emily Taing, Esq. of Kaufman Dolowich LLP write: Recent caselaw suggests a shift in how courts analyze healthcare data breach claims. For years, defendants largely prevailed by arguing that plaintiffs could not demonstrate a sufficiently concrete injury because plaintiffs’ private information had not been misused following a data...

DataBreaches.net··Data Breaches·Notable

Court denies motions to dismiss in PowerSchool Data Breach Litigation

In previous litigation involving Illuminate (J.M. v. Illuminate Educ. Inc.), the district court held that Illuminate could be considered a provider of healthcare under the wording of the California Confidentiality of Medical Information Act. With that opinion as precedent, PowerSchool failed to get plaintiffs’ complaint referring to it as a provider of healthcare dismissed. But...

DataBreaches.net··Data Breaches·Notable