Data Breaches
UK minister warns AI agents will likely breach national cyber defenses
The UK AI minister states that unauthorized AI agents will likely breach cyber defenses, calling for stricter regulations and better safety controls before release.
Threat Times Disclosure Desk
The Threat Times Disclosure Desk is the part of the Threat Times newsroom that covers data breaches, leaks, privacy and regulators. It is a newsroom desk, not a single person. Sections: Data Breaches, Privacy & Policy. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 68 articles so far. See the editorial policy or report an error.
Data Breaches
Only 24% of Breach Notices Disclose Attack Vectors in H1 2026, Lowest Rate on Record
New data shows breach notifications are increasingly vague, omitting attack vectors and forcing recipients to guess their actual risk.
Data Breaches
Attacker held 21-day access to 8.8M Danish records via '123456' password at Pays ApS
An attacker used the password “123456” on an admin account at Pays ApS to access Denmark’s Central Person Register, exposing millions of records.
Privacy & Policy
noyb prepares first collective redress case against CRIF, files second OpenAI complaint
The European advocacy group noyb has started preparations for its first collective redress action against an Austrian credit agency while escalating legal pressure on major AI firms.
Data Breaches
H&M Group Investigates Claims of Data Breach by ShinyHunters
The fashion retailer is assessing online claims of a limited-scope incident, stating no evidence of compromise exists so far.
Data Breaches
Luna Moth leaks reveal social engineering scripts and team tactics
Check Point researchers analyzed leaked files showing how the ransomware group uses coordinated phone calls to steal remote access credentials.
Data Breaches
ShinyHunters Leaks 318k Sharecare Records, Exposing Brazilian IDs After Failed Extortion
The cybercrime group published data from the digital health firm after an August 2026 extortion campaign, exposing sales contacts and Brazilian user IDs.
Data Breaches
Elastic Security Labs details REF8801’s fake Web3 accelerator and malicious npm packages
Researchers found Apex Accelerator used fake audits and AI tools to deliver malware to crypto startups via compromised npm packages.
Data Breaches
iRhythm Data Breach Compromises Personal Data of Over 360,000 Patients
Hackers exfiltrated patient records from third-party apps in early June, prompting notifications and regulatory filings by the medical device maker.
Privacy & Policy
EU Cyber Resilience Act mandates security updates for all digital products by 2027
The European Union’s new Cyber Resilience Act requires manufacturers to design products with secure defaults and update capabilities, with reporting duties starting in September 2026.
Data Breaches
Daiichi Kosho Discloses Supply Chain Breach Exposing Eight Million Customer Records
A malware infection at a data processor has potentially leaked personal details of over eight million karaoke customers, prompting security warnings.
Data Breaches
CyberLeek Demands $30M Meme Coin Value to Release Full GTA 6 Build
An anonymous leaker threatens to dump a complete, playable Grand Theft Auto 6 build if their Solana-based cryptocurrency hits a specific market cap target.
Data Breaches
Gentlemen Ransomware Group Claims Breach of U.S. KFC Operations
The Gentlemen ransomware gang alleges it compromised U.S. KFC systems, though no evidence or company confirmation currently supports the claim.
Data Breaches
Norwegian Authority Fines Microsoft Xandr €8.5 Million for GDPR Violations
Regulators penalized the adtech unit for processing sensitive user data from Grindr without a valid legal basis.
Privacy & Policy
noyb ranks EU lawmakers on privacy amendments for Digital Omnibus reform
The privacy group analyzed over 1,000 amendments to reveal which MEPs support weakening data protections and which defend them.
Privacy & Policy
Andover probes data theft after August breach; systems restored but scope of exposure unknown
Town leaders admit attackers entered certain networks in August but have not yet determined if sensitive data was exfiltrated.
Privacy & Policy
EFF Launches DAF Day Campaign to Secure Funding for Digital Rights Advocacy
The Electronic Frontier Foundation encourages donors to use donor-advised funds to support its mission of protecting privacy and encryption on DAF Day.
Privacy & Policy
EFF warns age verification laws exclude millions lacking government ID
Electronic Frontier Foundation argues mandatory ID checks for age verification block access for users without passports or licenses.
Privacy & Policy
FBI Seizes Microscan and FishHub Tools Linked to China-Based Flax Typhoon Actors
U.S. authorities seized hacking tools used by Flax Typhoon actors to scan critical infrastructure networks on behalf of a Chinese firm.
Privacy & Policy
Turkey Blocks LGBTQ+ Sites, Detains Dozens of Activists in Widening Crackdown
Turkish courts have ordered the blocking of digital platforms for rights groups while authorities detain members and seize devices since mid-September.
Privacy & Policy
Keurig Coffee Maker Leaks Terabyte of Data in Ten Days, Sparking Privacy Concerns
An IT expert discovered his parents' smart coffee machine transmitted massive data volumes, highlighting risks of connected home appliances.
Privacy & Policy
EFF Co-Hosts Oakland Tech Week Event on Organizing Beyond Big Tech Influence
Electronic Frontier Foundation joined MediaJustice and Upturn for a September 30 panel on community-led tech policy in Oakland.
Privacy & Policy
EFF Reports Federal Government Unlawfully Consolidating Private Data
The Electronic Frontier Foundation states that federal agencies have merged private data in three waves, risking abuses against immigrants and protesters.
Data Breaches
AT&T to Pay $177 Million to Settle Lawsuits Over Two 2024 Data Breaches
A federal judge approved a $177 million settlement for AT&T regarding two major data breaches that exposed customer records in 2024.