Breach

Major Georgia-based healthcare firm ApolloMD, which has over 125 practices across the U.S., has reported the compromise of 626,540 patients' sensitive information following a cyberattack in May, which was later claimed by the Qilin ransomware operation, according to The Record, a news site by cybersecurity firm Recorded Future.

Conduent incidents reveal how third-parties must move to a disclosure-first model.

The compromised data includes transaction records for various tracking and monitoring apps, such as Geofinder, uMobix, Peekviewer, and Xnspy, all supplied by a Ukrainian company identified as Struktura, which also operates under the name Ersten Group.

Nearly 165,000 more accounts were discovered by leading South Korean e-commerce firm Coupang to have been impacted by the massive data breach in November, which was confirmed to have impacted 33.7 million users, reports Korea JoongAng Daily.

Automated investment platform Betterment was reported by data breach notification Have I Been Pwned to have had data from nearly 1.4 million user accounts compromised following a cyberattack last month, according to The Register.

TechCrunch reports that major U.S. government technology provider Conduent had data from over 25 million individuals confirmed to have been stolen as a result of a SafePay ransomware intrusion in January 2025, which resulted in government service outages.

Alleged sample records shared on BreachForums indicate the inclusion of complete user account details, such as account creation dates, update timestamps, notification preferences, and internal moderation flags like "is_global_admin" and "has_passed_captcha."