News
Current events, industry audit reports, compliance watch updates, and technology alerts. By industry · National audits · Breach trackers · MFA directory · State collections: Texas · Florida · California · Illinois · New York · Pennsylvania — showing latest 30 of 853
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the full technical report with remediation plan and compliance evidence for $99.
KCEN Oct 15: fake 50% refund emails impersonate the Harker Heights Chamber. Festival ticket terms say no refunds. Audits (ideal 100%): ic3.gov 87%, ticketspice.com 54%, kcentv.com 53%, hhchamber.com 46%, harkerheights.gov 42%, hhfoodandwine.com 28%.
Read Update
Jeremiah Fowler found 13.7M previously leaked credentials on an unsecured host tied to Vibetech. MERENA Advisory Oct 16 wrap. Audits (ideal 100%): ic3.gov 87%, cybernews.com 59%, merena.com 54%, expressvpn.com 44%, vibetech.in 29%.
Read Update
CEO Brian Moynihan told CNBC the bank added 1,000 contractors in Q2 to patch flaws Anthropic’s Mythos and other frontier models exposed in bank and vendor code. Audits (ideal 100%): ic3.gov 87%, linkedin.com 77%, anthropic.com 74%, bankofamerica.com 53%. BofA documents a YubiKey; Claude.ai does not.
Read Update
Forbes: Microsoft gave the FBI BitLocker keys for three laptops and gets ~20 such requests a year. Audits (ideal 100%): ic3.gov 87%, fbi.gov 82%, microsoft.com 71%, forbes.com 66%.
Read Update
Wes Morrill’s noreply@x.ai “X Founders Private Program” mail passed SPF, DKIM, DMARC, and Gmail’s check. Grok Bot found a hidden link. Audits (ideal 100%): ic3.gov 87%, x.com 84%, x.ai 74%, grok.com 67%.
Read Update
Malwarebytes documented a fake Marketplace listing that uses your name as the seller. A reply proves the number is live. Audits (ideal 100%): ic3.gov 87%, malwarebytes.com 71%, facebook.com 62%, meta.com 42%.
Read Update
HeartMath told shoppers a third-party store app was accessed Sept 12–18. No cards or passwords, it says. Audits (ideal 100%): ic3.gov 87%, bigcommerce.com 67%, heartmath.com 65%, store.heartmath.com 35%.
Read Update
Ledger confirmed an unauthorized implant on a CryptoBilis-sold device after Oct 9 drains. Audits (ideal 100%): ic3.gov 87%, fbi.gov 82%, ledger.com 61%, cryptobilis.com 52%.
Read Update
Mansfield’s AngMar told patients July 18 access may have taken names, SSNs, and PHI. OCR lists 126,196; Texas OAG lists 35,916. Interlock claimed 710 GB. Audits (ideal 100%): hipaajournal.com 56%, angmarms.com 47%, OAG 37%, angmar.com 32%.
Read Update
Multi-source breach data week of October 11, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +9 (512 → 521). 10 companies/entities from source roundups.
Read Update
Clover’s July 17 Item 8.01 says social engineering hit three non-managerial health-plan accounts. HHS later listed 138,677. Audits (ideal 100%): sec.gov 88%, securityweek.com 71%, hipaajournal.com 56%, cloverhealth.com 54%. My Clover MFA is email or SMS.
Read Update
DOJ and FBI seized seven domains behind Integrity Tech’s FishHub spear-phishing kit and Microscan scanner. Houston outlets carried the Oct 8 disruption. Audits (ideal 100%): fbi.gov 82%, cisa.gov 70%, justice.gov 66%, login.gov 63%.
Read Update
Edward Dubrovsky was arrested Oct 8 in Pennsylvania on sealed extortion charges and transferred toward the Eastern District of Texas. Sources link the case to ShinyHunters. Audits (ideal 100%): fbi.gov 82%, cypfer.com 52%, cybersteward.com 48%, krebsonsecurity.com 32%.
Read Update
Harris County sued alleged deed thieves and tells homeowners to watch Clerk email alerts. The alert host scores 38%. Audits (ideal 100%): hcad.org 63%, harriscountytx.gov 52%, cclerk.hctx.net 38%, cao.harriscountytx.gov 28%.
Read Update
Joint Base San Antonio and TRICARE say scammers are spoofing benefits mail and texts. Official login is moving to myAuth. Audits (ideal 100%): militaryonesource.mil 85%, humanamilitary.com 78%, health.mil 71%, tricare.mil 68%.
Read Update
TXCC’s October campaign offers free MFA webinars while Harris County and Lavaca County warn about phishing. Audits (ideal 100%): co.lavaca.tx.us 78%, dir.texas.gov 49%, txcc.texas.gov 48%, constablepct4.com 31%.
Read Update
Have I Been Pwned added 1 breach on October 9, 2026, exposing 435,963 accounts globally. Neogen led the batch with 435,963 accounts.
Read Update
HHSC’s Oct 8 bulletin says a Gmail lure using the Provider Finance logo is not official. Audits (ideal 100%): tmhp.com 74%, hhs.texas.gov 48%, govdelivery.com 47%, pfd.hhs.texas.gov 35%. HHSC and TMHP IAMOnline MFA both grade Fail.
Read Update
Texas OAG published 9 new data security breach reports on October 6, 2026, affecting 311,033 Texans. iRhythm Technologies Inc. led the batch with 298,647 affected.
Read Update
Multi-source breach data week of October 4, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +19 (493 → 512). 23 companies/entities from source roundups.
Read Update
Texas OAG published 18 new data security breach reports on October 2, 2026, affecting 5,660,879 Texans. Cerner Corporation led the batch with 2,992,244 affected.
Read Update
California's data breach list added 4 notices on October 1, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Have I Been Pwned added 1 breach on September 30, 2026, exposing 423,947 accounts globally. Medela led the batch with 423,947 accounts.
Read Update
Google Chrome 154 (Sept 22) fixes 108 security issues, 11 Critical, including ANGLE and GPU bugs. Audits (ideal 100%): googleblog.com 82%, malwarebytes.com 71%, google.com 55%, chrome.google.com 35%.
Read Update
Multi-source breach data week of September 27, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +26 (467 → 493). 17 companies/entities from source roundups.
Read Update
Collin County city says two reviews found no unauthorized access after a ransomware group claimed municipal data. Audits (ideal 100%): sevnx.com 76%, princetontx.gov 44%, civicplus.com 43%, texasattorneygeneral.gov 37%. CivicPlus: Google Authenticator yes, YubiKey not documented.
Read Update
Texas OAG published 11 new data security breach reports on September 25, 2026, affecting 94,166 Texans. AngMar Management Services led the batch with 35,916 affected.
Read Update
California's data breach list added 5 notices on September 24, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
SEC EDGAR shows 1 Form 8-K Item 1.05 material cybersecurity disclosure filed September 23, 2026. Astrana Health, Inc. is among the filers.
Read Update
HHS OCR listed 2 large HIPAA breach submissions dated September 21, 2026, affecting 2,435 individuals nationally. Imagine the Possibilities led the batch with 1,693 individuals.
Read Update