In early January 2026, millions of Instagram users around the world woke up to unrequested password reset emails. This wave of notifications, which came directly from the platform’s legitimate systems, prompted major confusion amongst users; is someone trying to hack my Instagram account? Here’s what we know so far. Was Instagram breached? Since the emails […]
Data security news & resources
Update: LastPass fined £1.2 Million: A costly reminder to strengthen security
The UK Information Commissioner’s Office (ICO) has fined LastPass £1.2 million for security failures tied to its 2022 breach—nearly three years after attackers first gained access. The message is clear: data protection failures don’t expire when headlines fade. Regulators are still watching, and accountability can arrive long after the damage is done. For security leaders, […]
Update: Qantas breach escalates as hackers leak stolen customer data
When we first covered the Qantas data breach in July—in which up to six million customer records were accessed via a third-party contact center platform—it was not yet clear whether that data would ever see the light of day. Qantas, at the time, reassured customers that sensitive credentials like passwords, login tokens, and card data […]
Allianz Life data breach impacts 1.4 million customers
Allianz Life has announced it suffered a data breach that impacted the personal data of the majority of its 1.4 million customers. The company, a major provider of life insurance and annuities, is part of Allianz SE—one of the world’s largest financial services groups, serving more than 128 million people globally. Here’s everything we know […]
Misconfigured server exposes PII of millions of European citizens
A misconfigured cloud database has exposed hundreds of millions of sensitive business records linked to individuals and organizations in Sweden, in what experts are calling a serious lapse in data security. The exposed server, which used the open-source search and analytics engine Elasticsearch, was discovered by cybersecurity researchers who found it accessible without any authentication. […]
Secure AI usage: Why policies aren’t enough
Every organization understands that AI is central to competing and thriving in the future of work. But with that opportunity comes risk. For every gain in speed, efficiency, and output, AI introduces new vulnerabilities: data leakage, regulatory exposure, ethical concerns, and the potential misuse of sensitive information. Governing this technology is critical to long-term success. […]
Qantas data breach exposes six million customers
Qantas is warning millions of customers that their personal data could be exposed after a cyber attack hit a third-party platform used by one of its offshore contact centers. Here’s everything we know about the breach so far. How did the breach happen? Qantas says it detected unusual activity on the affected third-party system earlier […]
Human risk management: The key to a culture of cybersecurity
All employees make mistakes—whether that’s a typo in an email, sending a document to the wrong person or missing a deadline. Some mistakes, though, have greater consequences than others, especially when it comes to cybersecurity and compliance. Sending a sensitive document to the wrong recipient, for example, can be an immediate data breach and compliance […]
Zoomcar data breach impacts 8.4 million users
Zoomcar, the peer-to-peer car-sharing platform that lets users rent vehicles from everyday car owners, has confirmed a major data breach. According to the company, unauthorized actors accessed its systems, compromising the personal data of roughly 8.4 million users. Here’s everything we know about the breach so far. Zoomcar data breach: What we know so far […]
Texas Department of Transportation breach shows passwords aren’t enough
The Texas Department of Transportation (TxDOT) has disclosed a data breach after a threat actor accessed and downloaded 300,000 crash records from its database. The breach took place on May 12, 2025, and stemmed from a login using compromised credentials—yet another example of how a single weak link in identity security can put huge amounts […]
Coinbase insider data breach: What we know so far
Crypto exchange giant Coinbase has confirmed a significant data breach involving bribed support contractors, compromised customer information, and a $20 million extortion demand. The attack is expected to cost the company up to $400 million in remediation and reimbursements—and it didn’t involve a single line of malware. Here’s everything we know so far. How did […]