News
Page 2 of 29 — 853 updates. Back to latest · By industry · National audits
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the full technical report with remediation plan and compliance evidence for $99.
Zimperium’s RatHat Android Trojan uses smishing, fake overlays, and stolen OTP codes, and can reconstruct a screen lock. Audits (ideal 100%): zimperium.com 78%, malwarebytes.com 71%, google.com 55%, bankofamerica.com 53%.
Read Update
Multi-source breach data week of September 20, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +13 (454 → 467). 11 companies/entities from source roundups.
Read Update
Click2Houston warned Sept 15 that unsolicited Amazon-style packages can hide QR phishing. FTC Aug 20 alert and FBI IC3 PSA match. Audits (ideal 100%): ic3.gov 87%, usps.com 77%, ftc.gov 72%, amazon.com 54%.
Read Update
Texas AG Ken Paxton warned of suspicious California CIPA demand letters sent to Texas businesses. Audits (ideal 100%): uscourts.gov 67%, texasbar.com 60%, cacd.uscourts.gov 54%, texasattorneygeneral.gov 37%.
Read Update
Texas OAG published 7 new data security breach reports on September 17, 2026, affecting 15,484 Texans. TEXAS REGIONAL ASTHMA, ALLERGY & IMMUNOLOGY CENTER led the batch with 5,038 affected.
Read Update
Alta Resources sued Ace American (Chubb) in E.D. Wis. after paying Adidas more than $5M over help-desk credential claims. Adidas confirmed a May 2025 vendor incident. Audits (ideal 100%): adidas.com 68%, adidas-group.com 59%, chubb.com 58%, altaresources.com 37%.
Read Update
HHS OCR listed 3 large HIPAA breach submissions dated September 16, 2026, affecting 160,445 individuals nationally. AngMar Management Services led the batch with 126,196 individuals.
Read Update
Gamers Nexus and Level1Techs say a compromised LG OLED can capture mic audio in standby. LG disputes ambient recording. Audits (ideal 100%): malwarebytes.com 71%, lgads.tv 44%, lg.com 42%, gamersnexus.net 41%.
Read Update
CVE-2026-27540 in WooCommerce Wholesale Lead Capture (<=2.0.3.1) is under mass exploit. Patch is 2.0.3.2. Public-HTML store audits (ideal 100%): fjordpharm.com 64%, kalamazooindustries.com 52%, strohmedico.com 47%. Fingerprint is not a patch check.
Read Update
California's data breach list added 3 notices on September 15, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Attackers used verified u/hbomax ads for a 48-hour ClickFix blitz. Max streaming is not reported hacked. Audits (ideal 100%): ic3.gov 87%, reddit.com 85%, hbomax.com 67%, max.com 52%.
Read Update
Multi-source breach data week of September 13, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +11 (443 → 454). 12 companies/entities from source roundups.
Read Update
Have I Been Pwned added 1 breach on September 13, 2026, exposing 4,653,212 accounts globally. Chess.com (2026) led the batch with 4,653,212 accounts.
Read Update
A Chase-branded card-hold text hit a real Chase customer on the number tied to that account — coincidence or a purchased/stolen pairing, not proof Chase was hacked. Real Chase fraud SMS uses short codes. Audits (ideal 100%): ic3.gov 87%, chase.com 79%, jpmorganchase.com 65%, cruzovote.com 29%.
Read Update
Irving-based McKesson (MCK) posted a Sept 8 notice after an Aug 20–25 incident on employee accounts. ShinyHunters claimed vishing. N.D. Tex has 15 suits. Audits (ideal 100%): sec.gov 88%, ic3.gov 87%, mckesson.com 69%, covermymeds.com 58%.
Read Update
Texas OAG published 8 new data security breach reports on September 11, 2026, affecting 93,797 Texans. Quatrro Business Support Services, Inc. (“Quatrro”) led the batch with 51,717 affected.
Read Update
Scammers route fake work emails through real Google services before a sign-in page or remote-access install. Google is not reported hacked. Audits (ideal 100%): connectwise.com 77%, knowbe4.com 73%, microsoft.com 71%, google.com 55%.
Read Update
SEC EDGAR shows 1 Form 8-K Item 1.05 material cybersecurity disclosure filed September 8, 2026. BOSTON SCIENTIFIC CORP is among the filers.
Read Update
Krebs found Nexus listing 153M+ U.S. and Canadian license scans. FBI New Orleans is investigating. IDScan says a third party may have copied cloud records. Audits (ideal 100%): fbi.gov 64%, hertz.com 53%, veriscancloud.com 44%, idscan.net 42%.
Read Update
Multi-source breach data week of September 6, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +17 (426 → 443). 13 companies/entities from source roundups.
Read Update
California's data breach list added 3 notices on September 4, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
HHS OCR listed 2 large HIPAA breach submissions dated September 4, 2026, affecting 1,990 individuals nationally. Minuteman Press Macon led the batch with 1,489 individuals.
Read Update
Texas OAG published 4 new data security breach reports on September 4, 2026, affecting 22,252 Texans. LHC Group, Inc led the batch with 16,885 affected.
Read Update
Washington's Attorney General published 3 new data breach notifications on September 4, 2026, affecting 11,403 Washingtonians. LHC Group, Inc. led the batch with 6,602 affected.
Read Update
California's data breach list added 6 notices on September 2, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Have I Been Pwned added 1 breach on September 2, 2026, exposing 8,849,657 accounts globally. Manchester Airports Group led the batch with 8,849,657 accounts.
Read Update
Scammers abuse real ChatGPT share links with fake high-traffic notices. OpenAI is not reported hacked. Audits (ideal 100%): pushsecurity.com 74%, microsoft.com 71%, openai.com 70%, chatgpt.com 68%.
Read Update
Houston-based Nutex (NUTX) filed Item 1.05 after attackers stole patient, employee, provider, and financial files. The Gentlemen claimed the listing. Audits (ideal 100%): sec.gov 88%, bayoucityhospital.com 50%, nutexhealth.com 46%, sophos.com 44%. No public YubiKey or authenticator path.
Read Update
SEC EDGAR shows 1 Form 8-K Item 1.05 material cybersecurity disclosure filed September 1, 2026. Park Dental Partners, Inc. is among the filers.
Read Update
ATF confirmed a major incident on a standalone system holding investigation-target data. Qilin listed the bureau without samples; ATF has not attributed the actor. Audits (ideal 100%): atf.gov 66%, justice.gov 66%, login.gov 63%, eforms.atf.gov 43%. eForms MFA: password + PIN, no YubiKey.
Read Update