Amateur adult content website Frivol.com had 479,000 unique user emails, including some corporate email addresses, inadvertently exposed by an unprotected Kibana instance last month, reports Cybernews.
Online car shopping platform CarGurus had a 6.1GB stolen archive containing 12.4 million records posted online by the ShinyHunters extortion group on Feb. 21, BleepingComputer reports.
The ICO's investigation found that prior to January 2025, Reddit had not conducted a Data Protection Impact Assessment (DPIA) on the risks associated with processing the data of users aged 13 to 18, including those under 13.
Organizations have lost $19.5 million on average due to insider risk incidents last year, with 53% or $10.3 million associated with employee negligence concerning shadow AI, Infosecurity Magazine reports.
Burger King France and Wendy's UK were alleged to have been compromised by the threat actor "Eliasxy," who published datasets allegedly stolen from the fast food chains on the dark web over the weekend, reports Cybernews.
South Carolina-based molecular diagnostics firm Vikor Scientific, which has since been rebranded as Vanta Diagnostics, was noted by the Department of Health and Human Services' health breach tracker to have had information from 139,964 individuals compromised in a November data security incident against its revenue cycle management solutions provider Catalyst RCM, which was claimed by the Everest ransomware gang, SecurityWeek reports.
