DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Category: U.S.

Eyeware retailer Warby Parker forces password reset; notifies 198,000 customers of credential stuffing attack

Posted on December 21, 2018 by Dissent

Sam Woods reports: Eyewear retailer Warby Parker announced Thursday that it had suffered a cybersecurity breach that may have affected up to 198,000 customers.Hackers accessed customer usernames and passwords from unrelated cyber break-ins at other companies, according to a Warby Parker news release. The hackers then used that information to try to gain unauthorized access to client…

Read more

LifeBridge sued over 2016 breach

Posted on December 21, 2018 by Dissent

Remember the LifeBridge malware incident disclosed earlier this year where more than 500,000 patients were notified of a malware incident that had been discovered in March, 2018? LifeBridge’s notification indicated that their investigation had revealed that an unauthorized person had accessed the server in 2016. It wasn’t totally clear to me at the time whether…

Read more

Man pleads guilty to phishing scheme that victimized Connecticut school employees

Posted on December 21, 2018 by Dissent

A 36-year-old Nigerian citizen pleaded guilty Thursday before a federal judge to a conspiracy charge stemming from a scheme to obtain the personal identifying information of school employees, including some at Sacred Heart Academy in Hamden. Olukayode Ibrahim Lawal, last living in Smyrna, Georgia, pleaded guilty before U.S. District Judge Jeffrey A. Meyer in New…

Read more

DrBenLynch.com notifies customers of payment card compromise

Posted on December 20, 2018 by Dissent

DrBenLynch.com is a commercial site that focuses on naturopathic research and supplements. At least I think it does. The site is down right now “for maintenance,” which seems to be this generation’s euphemism for “OK, we were hacked and we’re fixing things.” As reported to at least a few state attorneys general, DrBenLynch.com experienced a…

Read more

MA: Payment Processor to Pay $155,000 Over Data Breach Affecting Thousands of Massachusetts Residents

Posted on December 20, 2018 by Dissent

Massachusetts Attorney General had a busy day yesterday announcing enforcement actions over data breaches that had been disclosed in 2015. In addition to her announcement about the McLean Hospital settlement, she also announced a second settlement stemming from another 2015 breach that had also been reported by DataBreaches.net at the time. A California company that…

Read more

MA: McLean Hospital to Implement New Security and Training Programs After Data Breach Exposed Sensitive Health Information

Posted on December 20, 2018 by Dissent

There’s a follow-up to a 2015 breach that was previously reported on this blog.  Massachusetts Attorney General Maura Healey made the announcement yesterday: BOSTON — McLean Hospital Corporation will implement new security and training programs and pay a total of $75,000 to resolve claims that it exposed the personal and health information of more than 1,500 people, Attorney General Maura Healey announced today.  According…

Read more
  • Previous
  • 1
  • …
  • 663
  • 664
  • 665
  • 666
  • 667
  • 668
  • 669
  • …
  • 1,914
  • Next

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Credit Control Corporation data allegedly from 9.1 million consumers listed for sale on forum
  • Copilot AI Bug Could Leak Sensitive Data via Email Prompts
  • FTC Provides Guidance on Updated Safeguards Rule
  • Sentara Health terminates remote employees after realizing they couldn’t be sure who was doing the work.
  • Hackers Break Into Car Sharing App, 8.4 Million Users Affected
  • Cyberattack pushes German napkin company into insolvency
  • WMATA Train Operators Arrested in Health Care Fraud Scheme
  • Washington Post investigating cyberattack on journalists, WSJ reports
  • Resource: State Data Breach Notification Laws – June 2025
  • WestJet investigates cyberattack disrupting internal systems

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Vermont signs Kids Code into law, faces legal challenges
  • Data Categories and Surveillance Pricing: Ferguson’s Nuanced Approach to Privacy Innovation
  • Anne Wojcicki Wins Bidding for 23andMe
  • Would you — or wouldn’t you?
  • New York passes a bill to prevent AI-fueled disasters
  • Synthetic Data and the Illusion of Privacy: Legal Risks of Using De-Identified AI Training Sets
  • States sue to block the sale of genetic data collected by DNA testing company 23andMe

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.