Data Breach

Data Breach | News, how-tos, features, reviews, and videos

Hackers exploit Vercel’s trust in AI integration

Compromised Context.ai integration let attackers inherit Vercel employee access and reach internal systems, exposing a limited set of customer credentials.

By Shweta Sharma

Apr 20, 20264 mins

CyberattacksCybercrimeData Breach

South Korea fines Louis Vuitton, Christian Dior, Tiffany $25M for SaaS security failures

By 이지현

Feb 13, 20263 mins

CyberattacksCybercrimeData Breach

Substack data breach leaks users’ email addresses and phone numbers

By John E. Dunn

Feb 5, 20264 mins

CyberattacksCybercrimeData Breach

Why non-human identities are your biggest security blind spot in 2026

By Anjali Gopinadhan Nair

Feb 2, 20268 mins

CyberattacksCybercrimeData Breach

Reports of GDPR violations have risen sharply

By Manfred Bremmer

Jan 29, 20262 mins

ComplianceData BreachLaws and Regulations

Spanish e-retailer PcComponentes denies report it was hacked

By Víctor Manuel Fernández

Jan 22, 20263 mins

CyberattacksCybercrimeData Breach

Articles

Ingram Micro admits 42,000 people impacted by ransomware attack

Hit by a serious cyberattack last year, the IT distributor has now quantified the extent of the damage.

By Julia Mutzbauer

Jan 21, 2026 1 min

CyberattacksData BreachRansomware

Vulnerability prioritization beyond the CVSS number

CVSS gives you the number, but context gives you the danger: It’s how vulnerabilities spread through trusted systems that really matters.

By Henry Sienkiewicz

Jan 21, 2026 6 mins

CyberattacksData BreachThreat and Vulnerability Management

The culture you can’t see is running your security operations

How to shift observable, non-observable and implicit culture in cyber operations.

By Maman Ibrahim and Gavriel Schneider

Jan 19, 2026 11 mins

Application SecurityCyberattacksData Breach

Eurail customer database hacked

Eurail has reported a data breach with customers’ passport details potentially involved.

By Julia Mutzbauer

Jan 15, 2026 2 mins

CyberattacksCybercrimeData Breach

Is Machine Learning Part of Your Security Strategy?

Machine learning technology is still an evolving area in security. But it has the potential to be a game changer.

May 22, 2018 3 mins

Data BreachInternetNetwork Security

Notorious BreachForums hacking site hit by ‘doomsday’ leak of 324,000 criminal users

After two years of arrests and takedowns, is this the end for the hacking forum?

By John E. Dunn

Jan 12, 2026 4 mins

CyberattacksData BreachHacker Groups

Cybersecurity firm turns tables on threat actors with decoy data trap

Resecurity said the alleged Scattered Lapsus$ Hunters hack was confined to a decoy environment designed to track attacker behavior.

By Shweta Sharma

Jan 5, 2026 3 mins

CyberattacksCybercrimeData Breach

South Korean firm hit with US investor lawsuit over data breach disclosure failures

Federal securities class action alleges that the ecommerce giant failed to report a data breach under SEC cybersecurity rules.

By Gyana Swain

Dec 23, 2025 5 mins

CyberattacksData BreachLaws and Regulations

D&O liability protection rising for security leaders — unless you’re a midtier CISO

Smaller firms are less likely to protect CISOs from personal liability for security breaches, ‘which can deter highly qualified professionals from accepting these roles,’ lawyer tells CSO.

By John Leyden

Dec 18, 2025 7 mins

CSO and CISOData BreachLaws and Regulations

Behind the breaches: Case studies that reveal adversary motives and modus operandi

These breach case studies reveal cybercriminals are messy, conflicted and recruiting openly. Understanding their motives is key to staying ahead.

By Suren Reddy

Dec 10, 2025 7 mins

CyberattacksCybercrimeData Breach

Coupang breach of 33.7 million accounts allegedly involved engineer insider

South Korea’s worst data breach in over a decade raises concerns about poor authentication key management and a potential insider threat.

By 이지현 and CSO Staff

Dec 4, 2025 5 mins

CyberattacksData BreachE-commerce Services

OpenAI admits data breach after analytics partner hit by phishing attack

Mixpanel warns of phishing attacks after criminals steal email addresses and organization IDs from some customer profiles.

By John E. Dunn

Nov 27, 2025 5 mins

APIsCyberattacksData Breach

JPMorgan, Citi, Morgan Stanley assess fallout from SitusAMC data breach

The breach underscores growing third-party cyber risks in financial services, with vendor-related incidents up 15% year-over-year.

By Gyana Swain

Nov 24, 2025 4 mins

CyberattacksCybercrimeData Breach

View all

Hackers exploit Vercel’s trust in AI integration

Anthropic employee error exposes Claude Code source

Telus Digital hit with massive data breach

Overly permissive ‘guest’ settings put Salesforce customers at risk

South Korea fines Louis Vuitton, Christian Dior, Tiffany $25M for SaaS security failures

Substack data breach leaks users’ email addresses and phone numbers

Why non-human identities are your biggest security blind spot in 2026

Reports of GDPR violations have risen sharply

Spanish e-retailer PcComponentes denies report it was hacked

Articles

Ingram Micro admits 42,000 people impacted by ransomware attack

Vulnerability prioritization beyond the CVSS number

The culture you can’t see is running your security operations

Eurail customer database hacked

Is Machine Learning Part of Your Security Strategy?

Notorious BreachForums hacking site hit by ‘doomsday’ leak of 324,000 criminal users

Cybersecurity firm turns tables on threat actors with decoy data trap

South Korean firm hit with US investor lawsuit over data breach disclosure failures

D&O liability protection rising for security leaders — unless you’re a midtier CISO

Behind the breaches: Case studies that reveal adversary motives and modus operandi

Coupang breach of 33.7 million accounts allegedly involved engineer insider

OpenAI admits data breach after analytics partner hit by phishing attack

JPMorgan, Citi, Morgan Stanley assess fallout from SitusAMC data breach

Resources

Modern Identity Security for Dummies

Peer insights on AI adoption and the disaster recovery gap

Checklist: Three Barriers Killing Your Strategy

Video on demand

Lessons from the SolarWinds attack on securing the software supply chain

The politics and policy of SolarWinds

SolarWinds, ransomware, critical infrastructure and more: CSO’s editors discuss regional challenges around the world

Facebook faces billions in potential fines | TECH(feed)