As part of an investigation, the company discovered there had been unauthorized access since 2014 and that an "unauthorized party" had...

Dunkin' says its own systems were not compromised. The company was tipped off to the potential breach by one of its security vendors on...

Hackers attempted to lift patient information over a weeklong period from Sept. 22-29. The data was stored in a third-party system...

Urban Massage, an app that offers "wellness that comes to you" inadvertently left its entire customer database online: enabling anyone...

A year ago, KrebsOnSecurity warned that “Informed Delivery,” a new offering from the U.S. Postal Service (USPS) that lets residents view...

The Dutch Data Protection Authority (Dutch DPA) just announced it’s imposing a €600,000 fine on Uber and its Dutch subsidiary Uber B.V....

It’s Germany’s first GDPR fine, for an incident that affected millions of accounts. The social chat service, Knuddels, saw about 808,000...

The Lands Authority website last Friday leaked over 10 gigabytes of personal information including ID card details, emails, affidavits,...

The e-commerce giant said the website inadvertently disclosed the data because of a technical error.  The breach came just two days...

Through our July study, we found that nearly half of surveyed US consumers admitted to reusing passwords across multiple websites. This...

Instagram exposed user credentials in plain text. THe number of users is not yet disclosed, but the company says it affected "a very...

Attackers have compromised Vision Direct customers’ contact information and financial details, including complete card numbers, expiry...

Seattle-based retailer Nordstrom is notifying employees of an information-security breach that exposed their names, Social Security...

The Hill reported that HSBC bank confirmed it experienced a data breach, and the perpetrators may have access to sensitive...

The New Jersey-based charity has plagued the American airwaves for years with the “most hated” jingle to try to get consumers to trade in...

The OCS has contacted some 4,500 customers after a supply chain data breach resulted in buyer addresses being offered for sale on the...

According to an Oct. 31 letter sent by RenPSG to a Wispact client, names and Social Security numbers of clients may have been viewed by...

The data breach notification, released under freedom of information laws, said that “the company believes approximately 3,977,385...

The malicious actor, on an unnamed date, managed to access some employee email and phone numbers and then tried to sell the illegally...

A former Chicago Public Schools worker is facing several felony charges after officials allege the worker stole personal information on...

The hotel chain's advisory suggests that potentially employee accounts, which had permission to access this data, were at fault and...