Asus stated that stolen material involved camera source code used in its phone line, and that no internal systems, products, or customer data were affected. Exposed data includes names, addresses, dates of birth, Social Security numbers, bank account details, and debit or credit card numbers. The company confirmed that attackers exfiltrated email addresses and other information already visible on public user profiles, affecting about 20% of its user base. Global-e said an intruder copied personal data that can include names, postal addresses, email addresses, telephone numbers, and order details such as order number, product purchased, and price paid. ManageMyHealth later stated that approximately 6% to 7% of users may be impacted, roughly 108,000 to 126,000 people, with notifications expected within 48 hours.

• Asus said the affected material involved some phone camera source code from a supplier.
• Customer names and some information about their current Anthropic balances were the only types of information leaked in the incident, and customers impacted by the mistake have been notified.
• A threat actor posted an alleged WIRED database with about 2.3 million records and threatened more Condé Nast releases.
• The exposed data reportedly includes full names, contact details, addresses, job information, contracts, and internal business documents.

The company have said the stolen data includes basic https://indianhelpline.in/business-contact/24294-gajshield-infotech-india-private-limited/index.html personal information, such as names and contact details. At first, the group posted several batch of profiles of their young victims on their website. Discord hasn’t disclosed the exact amount, calling it “limited” – however, the platform has 200 million monthly active users, so even a small fraction could impact millions.

Medtronic confirmed on24 Apr, 2026 that an unauthorized third party accessed data in certain corporate IT systems after ShinyHunters claimed the theft of more than9 million records. Raccoon” claimed theft of 13M support tickets and 15,000 employee records, but the reporting still treats the incident as a threat-actor claim rather than an Adobe-confirmed disclosure. https://livechinanews.com/economics Bright Defense can help software companies test vendor access paths and validate compliance controls before third-party support environments become breach entry points.

July 23

Scan your email against 15B+ leaked records in seconds — see every breach you’re in, free. Chick-fil-A has confirmed a customer data breach after credential stuffing attacks compromised an undisclosed number of Chick-fil-A One accounts and exposed personal information. Five Below disclosed that a threat actor used social engineering to access an employee computer and exfiltrate files before the intrusion was contained.

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

• Stolen information potentially includes names, social security numbers, and dates of birth.
• The breach has affected an undisclosed number of users who have made purchases on Ledger.com.
• Financial firms Prosper Marketplace and 700Credit also reported incidents impacting large numbers of records.
• In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI agent system.
• Interestingly, 69% of the accounts were already in the website’s database, presumably from previous breaches.
• The sportswear giant revealed that unauthorized access was gained through a third-party customer service provider, compromising…

The incident mirrors recent phone-based attacks on development offices at Princeton, Penn, and Columbia that also targeted donor records and contact data. DoorDash said attackers accessed customer contact data after an employee was tricked, exposing names, phone numbers, physical addresses, and email addresses. The response team detected the intrusion, cut the attacker’s access, began an internal investigation, and notified law enforcement. The attacker gained access to internal systems that held names, phone numbers, physical addresses, and email details for an undisclosed number of customers. The safest wording is that Salesforce was not breached directly, but connected customer environments were affected. Salesforce revoked Gainsight-related tokens, while affected companies continued reviewing exposure.