The hackers had access to the network for more than two months before detection, stealing biometric data that affected individuals cannot replace. The breach originated through an unnamed third-party ...

Hackers claim to have leaked 32M Bumble user records, but security researchers express doubt. The alleged breach includes ...

The data breach at education tech giant Instructure includes students' private data, according to a sample of the allegedly stolen data seen by TechCrunch.

ADT confirmed a data breach exposing customer names, addresses, phone numbers, and partial SSNs, with millions of records reportedly affected.

A third-party data breach occurs when malicious actors compromise a vendor, supplier, contractor, or other organization to gain access to sensitive information or systems of the victim’s customers, ...

In January 2026, researchers and the media reported a data breach affecting 72.7 million Under Armour customers’ records with ...

Brightspeed, one of the largest fiber broadband providers in the United States, is investigating claims that hackers stole sensitive data tied to more than 1 million customers. The allegations ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. This voice experience is generated by AI. Learn more. This ...

Correction: After publishing, Red Hat confirmed that it was a breach of one of its GitLab instances, and not GitHub. Title and story updated. An extortion group calling itself the Crimson Collective ...

Around four months is the average time it takes for a company to report a data breach but certain industries take even longer, an analysis of ransomware attacks since 2018 finds. Companies often take ...

Karen Scarfone is the principal consultant for Scarfone Cybersecurity. She provides cybersecurity publication consulting services to organizations and was formerly a senior computer scientist for the ...