55 results
Ace & Tate said logistics partner CEVA Logistics told it on August 1, 2026 that an unauthorized party accessed systems used to process its orders, and on September 10 CEVA confirmed customer data had been viewed and copied .
Veradigm told the SEC that one of its third-party vendors suffered a cybersecurity incident in which an unauthorized party obtained credentials to a Veradigm API from the vendor's environment, affecting data of a small number of customers .
US drug distributor McKesson said in an SEC 8-K filing that it discovered a cybersecurity incident affecting its information systems on August 25 and that the investigation is in its early stages .
S-Food Mall, which runs on NHN Commerce's Godomall platform, said Godomall's diagnostic management function was accessed without authorization, possibly exposing some customers' personal data .
According to BleepingComputer, German supermarket chain Lidl notified customers in Germany, Belgium and the Netherlands that attackers stole their personal information in a breach at a service provider; according to 01net, some French customers were also affected .
Texas Parks and Wildlife Department said Texas Cyber Command detected an incident on May 13 at its hunting and fishing license system vendor, and an unauthorized actor may have obtained driver license information, passport numbers, emails, phone numbers and addresses of more than 3 million license customers .
According to TechCrunch, market intelligence platform Klue confirmed hackers broke into its systems on June 12 and stole data from some customers, with affected customers including Gong, Jamf, HackerOne, LastPass, Recorded Future, Snyk and Tanium .
According to CyberInsider, data was downloaded without authorization from cardiac monitoring firm iRhythm's third-party-hosted business applications between June 3 and 8, 2026; its June 15 SEC filing says access came through social engineering and an attacker demanded payment on June 9 .
According to a client notice from AXIA Asset Management, an external IT service provider of V-Bank was hit by a cyberattack on June 10, 2026, leading to unauthorized access to V-Bank data .
According to franceinfo, French health third-party payment operator Almerys confirmed on May 25 a cyberattack giving unauthorized access to the care-authorization (PEC) site used by health professionals, which was shut down; VIASANTÉ Mutuelle says the intrusion followed the hijacking of a health professional's account .
According to BleepingComputer, French DIY marketplace ManoMano confirmed it identified unauthorized access linked to a customer-service subcontractor in January 2026, resulting in extraction of personal data tied to customer accounts and support interactions .
Google Threat Intelligence Group (GTIG) published a report in August 2025 revealing that threat actors used compromised OAuth tokens associated with Salesloft Drift to access Salesforce environments across multiple organizations .
On 2025-07-02, Qantas confirmed that a third-party servicing platform used by a contact center was breached and that the system has since been contained .
Cryptocurrency exchange Bybit disclosed in February 2025 that it suffered a severe security incident in which assets from one of its Ethereum cold wallets were transferred out .
According to Security NEXT, Fujikura announced that on July 2, 2024, it discovered unauthorized external access via a network maintenance VPN managed by NTT Communications .