
Only 24% of Breach Notices Disclose Attack Vectors in H1 2026, Lowest Rate on Record
New data shows breach notifications are increasingly vague, omitting attack vectors and forcing recipients to guess their actual risk.
Data Breaches coverage from Threat Times holds 42 articles, 6 of them reference guides. The newest was published on October 13, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include Have I Been Pwned and NIST Cybersecurity Framework.

New data shows breach notifications are increasingly vague, omitting attack vectors and forcing recipients to guess their actual risk.

An attacker used the password “123456” on an admin account at Pays ApS to access Denmark’s Central Person Register, exposing millions of records.

The fashion retailer is assessing online claims of a limited-scope incident, stating no evidence of compromise exists so far.

Check Point researchers analyzed leaked files showing how the ransomware group uses coordinated phone calls to steal remote access credentials.

The cybercrime group published data from the digital health firm after an August 2026 extortion campaign, exposing sales contacts and Brazilian user IDs.

Researchers found Apex Accelerator used fake audits and AI tools to deliver malware to crypto startups via compromised npm packages.

Hackers exfiltrated patient records from third-party apps in early June, prompting notifications and regulatory filings by the medical device maker.

A malware infection at a data processor has potentially leaked personal details of over eight million karaoke customers, prompting security warnings.

An anonymous leaker threatens to dump a complete, playable Grand Theft Auto 6 build if their Solana-based cryptocurrency hits a specific market cap target.

The Gentlemen ransomware gang alleges it compromised U.S. KFC systems, though no evidence or company confirmation currently supports the claim.

Regulators penalized the adtech unit for processing sensitive user data from Grindr without a valid legal basis.

Tokenization replaces data with irreversible references for security, while chunking splits text into smaller blocks for processing efficiency.

A federal judge approved a $177 million settlement for AT&T regarding two major data breaches that exposed customer records in 2024.

Authorities have charged a former cyber extortion consultant with committing the very crimes he wrote about, complicating the FBI’s probe into recent website hacks.

A Canadian executive was arrested for extortion. Authorities say the case aligns with the ShinyHunters investigation into FBI IT systems.

A former infrastructure engineer was imprisoned after deleting admin accounts and demanding 20 bitcoin to prevent further sabotage of company servers.

A teenager suspected of leading the ShinyHunters extortion group has been detained and is reportedly working with US authorities to identify other members.

An affiliate of the The Gentlemen ransomware-as-a-service group double-crossed its operator and victims by running a separate leak site during extortion.

Mistral AI’s new open-weight model aims to give enterprises direct control over AI-driven security against rising agent breaches.

Internal communications from a Russian extortion group show operatives coordinating with domestic agents to extract multimillion-dollar payments from legal firms.

The Danish Central Register of Persons suffered a significant data breach affecting millions, highlighting the persistent vulnerabilities inherent in complex supply chains.

New images show the design of smart locks, cameras, and thermostats that Apple and LG are preparing to launch under the LG brand.

The number of individuals impacted by the Oracle Health data breach has increased significantly, far exceeding initial estimates provided in earlier filings.

FBI Director Kash Patel announced on October 9 that authorities have detained another individual suspected of conspiring with the ShinyHunters extortion group.