Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28buhnu2fiqpu3o5Reported to the California Attorney General on 09/18/2026. Date of breach: 12/28/2025, 01/22/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28bthnu28ze7airqReported to the California Attorney General on 09/18/2026. Date of breach: 08/18/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28bshnu29yoyrpqeReported to the California Attorney General on 09/21/2026. Date of breach: 06/07/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28brhnu2gp3yxhrfReported to the California Attorney General on 09/21/2026. Date of breach: 10/27/2025.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl38q700e3hmu2mq4j65drAccording to the newly-published study, phishing and social engineering are becoming more expensive to recover from, trickier to detect, and increasingly augmented by artificial intelligence. Read more in my article on the Fortra blog.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7003ehku2reb1wvj4Semiconductor firm Analog Devices discloses data breach Copilot for Word POC copies hidden prompts into new documents Microsoft Teams vishing attacks lead to Chaos ransomware attacks Get the show notes here: https://cisoseries.com/cybersecurity-news-analog-devices-breach-copilot-ai-worm-teams-ransomware-vishing/ Huge thanks to our sponsor, Pindrop A finance worker joined a video call with their CFO and wired $25 million to attackers. This isn't fiction—it happened. Deepfake video. AI voice.…
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1ycq0010hnu273ch24peSecurity experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user's Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones clicking ads on AI-generated websites as part of sprawling operation that seeks to defraud online merchants and advertising networks.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031yhmu2vmqaxt1oReported to the Washington Attorney General on 07/30/2026. Date of breach: 01/19/2026. 4,096 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Medical Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl38q700e4hmu2yo755x9vFor years, North Korea's state-trained hackers have been one of the world's most prolific robbers of banks - stealing huge sums of money from foreign financial instituions, draining cryptocurrency exchanges of billions, and funnelling the proceeds into the country's weapons programme. But now, in a remarkable twist, some of the same elite hackers appear to have decided to rob their own government instead. And, it doesn't sound as if it has ended that well for them. Read more in my article on…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7003fhku26a24mx2aOpenAI agent's escape reaches a Modal customer Hackers hit Minnesota water systems Fake Russian companies, real stolen money Get the show notes here: https://cisoseries.com/cybersecurity-news-openai-agent-reaches-modal-minnesota-water-systems-hacked-fake-russian-companies-steal-real-money/ Huge thanks to our sponsor, Pindrop TIME named Pindrop one of the 10 Most Influential Software Companies of 2026. Deepfakes slip into your video meetings, contact centers, and hiring pipelines. Pindrop…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7003ghku20qf6r28eThousands of server BMCs leak password hashes Claude finds flaws in encryption Google gives old threat actors new names Get the show notes here: https://cisoseries.com/cybersecurity-news-leaky-bmcs-claude-finds-encryption-flaws-googles-new-names/ Huge thanks to our sponsor, Pindrop AI attacks on the enterprise are skyrocketing. Is your tech stack keeping up? Deepfake and synthetic voices are slipping through a channel your defenses were never built to cover—stealing credentials and exposing…
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031zhmu2psc5qgzxReported to the Washington Attorney General on 07/28/2026. Date of breach: 04/20/2026. 5,129 Washington residents affected. Information compromised: Name; Social Security Number; Full Date of Birth.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7003hhku250uzsqzoNvidia opens the AI security tent Microsoft puts a cyber sprinter in MDASH Fairlife ransomware spills data Get the show notes here: https://cisoseries.com/cybersecurity-news-nvidia-opens-ai-security-tent-microsoft-adds-cyber-sprinter-to-mdash-fairlife-ransomware-spills-data/ Huge thanks to our sponsor, Pindrop A finance worker joined a video call with their CFO and wired $25 million to attackers. This isn't fiction—it happened. Deepfake video. AI voice. Completely convincing. It could be…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00hahmu2oiinsobhAttackers used Microsoft Teams vishing, custom malware, and remote access tools to facilitate ransomware deployment Categories: Threat Research Tags: Microsoft Teams, vishing, Ransomware, Chaos
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0321hmu25mvjhs7kReported to the Washington Attorney General on 07/27/2026. Date of breach: 03/26/2026. 5,667 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Military ID Number; Passport Number; Other.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0320hmu2m20ig48zReported to the Washington Attorney General on 07/27/2026. Date of breach: 05/08/2026. 1,190 Washington residents affected. Information compromised: Name; Financial & Banking Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7003ihku2wp9zut1oU.S. agencies warn of Iran-linked actors targeting water and energy control systems ChatGPT suffered brief global outage on Saturday Malvertising sends malware in pieces for an unsuspecting browser to build Get the show notes here: https://cisoseries.com/cybersecurity-news-iran-infrastructure-warning-chatgpt-global-outage-self-assembling-malware/ Huge thanks to our sponsor, Pindrop Your hiring processes are the newest entry point for security risks. Pindrop's data shows one in six engineering…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00hbhmu2xwgdw7sdWhat that means for Customer Protections Categories: Threat Research, AI Research
Link — click to select, then copy:
https://breachfeed.com/article/cmttl4j1w00eghmu2joibobqdThe Origin Energy breach down here in Aus is all over the news this week, and as with many breaches, it's multi-faceted. You've got them leading with "don't worry, your credit card is fine", the hacker leading with "they didn&
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7003jhku2fjyptzerThis week's Department of Know is hosted by Rich Stroffolino, with guests Nick Espinosa, host, Deep Dive Radio Show, and Dennis Pickett, vp, CISO, Westat. Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com. Huge thanks to our sponsor, QuilrAI AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission…
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0324hmu2ocwh0umsReported to the Washington Attorney General on 07/24/2026. Date of breach: 02/12/2026. 1,704 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Health Insurance Policy or ID Number; Medical Information; Protected Health Information owned or licensed by a HIPAA covered entity.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0323hmu2b1yolpdeReported to the Washington Attorney General on 07/24/2026. Date of breach: 03/10/2026. 20,706 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0322hmu2j2ly2lgdReported to the Washington Attorney General on 07/24/2026. Date of breach: 03/05/2026. 640 Washington residents affected. Information compromised: Name; Social Security Number; Full Date of Birth; Other; Protected Health Information owned or licensed by a HIPAA covered entity.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp9003khku2yp5u188hAI Agents become fastest growing exposed attack surface Consumer finance company Upbound Group blames data breach for millions in losses Dolphin X Stealer uses AI profiling to prioritize targets Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-agents-risk-upbound-group-breach-dolphin-x-stealer/ Huge thanks to our sponsor, QuilrAI AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had.…
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0326hmu2w9dgpkjjReported to the Washington Attorney General on 07/23/2026. Date of breach: 01/16/2026. 1,157 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0325hmu28nly5e3mReported to the Washington Attorney General on 07/23/2026. Date of breach: 06/12/2026. 8,955 Washington residents affected. Information compromised: Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp9003lhku2zae6u26fOpenAI behind Hugging Face hack TrickBot tunnels through DNS Acrobat extension opens WhatsApp Get the show notes here: Huge thanks to our sponsor, QuilrAI AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had. Its Decision Engine evaluates the content, context, and intent of every action - before it completes. Alerts tell you later. QuilrAI decides now. Visit quilr.ai.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0327hmu2jdl8hjtwReported to the Washington Attorney General on 07/22/2026. 746 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Biometric Data.