Breach
A named organization confirms an incident or data loss
-
Capcom narrows the confirmed data loss to 19 records and calls the impact investigation complete, still without saying how 196 passwords were changed
The nineteen records include saved address book information, which reaches people who never held a Capcom account. What happened Capcom published an update today, October 23, 2026, titled…
-
Quest’s 8-K says the breach did not materially disrupt operations, and its client notice the same day tells Quanum clients to fax paper orders
The client-facing notice also confirms what the filing did not: protected health information and personally identifiable information were part of the access. What happened Quest Diagnostics has published…
-
Capcom says customer-set passwords were not compromised, and 196 accounts had their passwords changed without authorization
The same notice that counts 11,774,247 exposed records also says the login passwords on 196 accounts were changed without authorization. What happened Capcom Co., Ltd. published a notice…
-
Quest Diagnostics disclosed its Quanum breach in a day, and the one materiality sentence in the filing is about operations, not the patient records
The filing confirms a breach in a day, names no scale, and the one sentence containing the word “materially” is about operations. What happened Quest Diagnostics Incorporated filed…
-
State Bank of India calls its data loss immaterial in a filing that says the extent is not yet established
State Bank of India told the exchanges it has lost customer data and that the incident is not material, in a filing that also says the authenticity, completeness,…
-
Microsoft ties the ConnectWise compromise to agentic AI, and the AI-accelerated password spray produced zero successful logins
Microsoft says a China-state-aligned actor used an open-source agentic AI framework to accelerate the campaign behind the ConnectWise compromise, and the part the AI accelerated produced 151,000 failed…
-
Nikkei’s 1.83 million leaked records include 1.68 million its own notice says identify nobody
Nikkei’s own notice breaks the figure down: about 150,000 records carry a name or contact detail, and the other 1.68 million carry identifiers the company says cannot identify…
-
Fireworks AI says customer API keys were captured from evaluation-job environment variables, and deleting the stored secret does not revoke them
Fireworks AI’s October 9, 2026 bulletin confirms an intruder read the environment variables of customer evaluation jobs, capturing API keys and third-party secrets. It names no account count,…
-
Conduent’s $80 million breach settlement funds medical data monitoring, and names no number of people anywhere in the filing
Conduent filed the agreement under Item 1.01 on Friday evening, and the filing names a dollar figure, a court, and a fund — but no number of people.…
-
Park Dental Partners confirms patient data was taken 46 days after finding the intrusion, and 40 days after the first class action was filed over it
The dental group’s October 13 filing is the first time it has said data was taken, and by the time it said so, four putative class actions were…
-
Upbound disclosed its July intrusion to investors in nine days and to customers in 72
The 8-K filed nine days after discovery called the accessed customer information “non-sensitive” and booked roughly $13 million in fraud losses as not material; the notification letters dated…