News
Page 7 of 29 — 853 updates. Back to latest · By industry · National audits
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the full technical report with remediation plan and compliance evidence for $99.
JCPenney appears on Have I Been Pwned with 368,418 accounts after a June 2026 ShinyHunters pay-or-leak campaign tied to Oracle PeopleSoft HR data. Audits score jcpenney.com at 58% with 15% transport security.
Read Update
Lake Region Healthcare Corporation reported a Texas OAG breach on July 3, 2026 affecting 294 Texans. SSNs and medical records were exposed after May 2025 unauthorized network access. lrhc.org audits at 78% with 15% transport security.
Read Update
Moody Bible Institute appears on Have I Been Pwned with 2.3M accounts after a June 2026 ShinyHunters pay-or-leak campaign. Donor and alumni PII was published. Audits score moody.edu at 64% with 15% transport security.
Read Update
Q2 Artificial Lift Services reported a Texas OAG breach on July 3, 2026 affecting 630 Texans after Payload ransomware claimed 80GB stolen. Audits score q2als.com at 74% identity but 15% transport security.
Read Update
RealLedgers Financial PLLC filed a Texas OAG breach report on July 3, 2026 affecting one Texas resident. Names were exposed. Audits score realledgers.com at 48% with 15% transport security.
Read Update
Glucobit Inc., maker of the Reframe alcohol-reduction app, reported a May 1, 2026 breach to the California AG on June 30. User-uploaded personal data was downloaded. Audits score joinreframeapp.com at 48% and glucobit.com at 51%.
Read Update
Kubota North America says hackers accessed HR files for five weeks in March–April 2026, exposing employee and dependent SSNs and bank data. California AG filing June 30. Audits score kubotausa.com at 56% with 15% transport security.
Read Update
Monmouth University reported a February 2026 breach to the California AG on June 30. The PEAR ransomware group claimed 16 TB of exfiltrated data. Audits score monmouth.edu at 87% — strong email identity, but ransomware still penetrated campus systems.
Read Update
North Los Angeles County Regional Center filed a November 2024 ransomware breach with the California AG on June 30, 2026 — a 19-month reporting gap. SSNs, medical records, and photos were copied. nlacrc.org audits at 66% with 45% transport security.
Read Update
American Tower appears on Have I Been Pwned with 216,601 accounts after a ShinyHunters pay-or-leak campaign. Independent audit scores americantower.com at 64% with 15% transport security.
Read Update
Berkadia appears on Have I Been Pwned with 305,216 accounts after a ShinyHunters Salesforce extortion leak. Independent audit scores berkadia.com at 58% with 25% identity and 15% transport security.
Read Update
CFGI appears on Have I Been Pwned with 248,235 accounts after a ShinyHunters Salesforce extortion leak. Independent audit scores cfgi.com at 64% with strong identity but 15% transport security.
Read Update
Challenge Manufacturing disclosed a Chaos ransomware breach affecting 24,211 people, including 1,661 Texans. SSNs and medical data were exposed. An independent audit scores challenge-mfg.com at 52% with 15% transport security.
Read Update
Infinite Campus appears on Have I Been Pwned with 137,123 accounts after a ShinyHunters Salesforce extortion leak. Independent audit scores infinitecampus.com at 50% with 5% identity spoofing.
Read Update
Ralph Lauren appears on Have I Been Pwned with 139,903 accounts after a ShinyHunters Salesforce extortion leak. Independent audit scores ralphlauren.com at 54% with 15% transport security.
Read Update
San Antonio patients sued South Texas Spinal Clinic and Soniva Dental after The Gentlemen ransomware group claimed June 2026 breaches. SSNs and medical records were exposed. Independent audits score spinaldoc.com at 54% and sonivadental.com at 56%.
Read Update
Madison Square Garden Sports (msgsports.com) appears on Have I Been Pwned with 9.8M accounts after a ShinyHunters leak. Independent audits score msgsports.com at 70% with strong identity but 15% transport security — while msg.com and nyknicks.com score far lower.
Read Update
Chaos ransomware claims to have stolen 315GB from Universal Plant Services, a $615M Texas industrial contractor. Cybernews reports a final-notice extortion threat. An independent audit scores universalplant.com at 54% with 15% transport security.
Read Update
Have I Been Pwned added 1 breach on July 3, 2026, exposing 2,303,416 accounts globally. Moody Bible Institute led the batch with 2,303,416 accounts.
Read Update
Texas OAG published 5 breach reports on July 3, 2026 affecting 2,155 Texans. Deep dives cover Advantive (700), Q2 Artificial Lift (630), CNO Services (530), Lake Region Healthcare (294), and RealLedgers Financial — with domain audit scores.
Read Update
California's data breach list added 5 notices on July 2, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
HHS OCR listed 2 large HIPAA breach submissions dated July 1, 2026, affecting 12,394 individuals nationally. Wisconsin Department of Health Services led the batch with 8,157 individuals.
Read Update
California's AG breach list added Glucobit, Kubota, Monmouth University, and NLACRC on June 30, 2026. Independent audits score monmouth.edu at 87% and joinreframeapp.com at 48%. Deep-dive reports with email security scores for each filer.
Read Update
AssuranceAmerica MGA says a March employee-targeted attack copied policyholder files affecting 1.1M+ people across seven states. Post-incident audits score assuranceamerica.com at 34% with 0% Identity & Spoofing.
Read Update
Comcast Xfinity Home Hotspot and Cox Panoramic gateways still broadcast public Wi-Fi from rented customer equipment by default. Combined with guest-network isolation flaws like AirSnitch, that creates real SMB risk. Audits score xfinity.com at 64% and charter.com at 54%.
Read Update
California's AG breach list added AssetMark, Blank Rome LLP, MCBS, and Nissan North America on June 26, 2026. Independent domain audits score nissanusa.com at 47% and blankrome.com at 54%.
Read Update
Scammers inject fake purchase receipts into the Shop order-tracking app, impersonating Norton, Apple, and PayPal to push callback phishing. Gen Digital reported the campaign in June 2026. Audits score shopify.com at 60% and shop.app at 54%.
Read Update
Texas OAG published 10 new data security breach reports on June 26, 2026, affecting 3,624,570 Texans. Texas Parks and Wildlife led the batch with 3,087,721 affected.
Read Update
Island researchers found a Chrome extension with 11M+ installs can execute arbitrary JavaScript via server-side config — no store update required. Audits score chrome.google.com at 36% and adblock-for-youtube.com at 44%.
Read Update
LastPass says hackers stole names, addresses, and support case records via OAuth tokens compromised at vendor Klue. Password vaults were not accessed, but stolen PII enables convincing phishing. Audits score lastpass.com at 71% and klue.com at 78%.
Read Update