Verizon 2025 Data Breach Investigations Report shows rise in cyberattacks

After the stolen data was dumped on a hacker forum, a threat actor claimed to have uncovered 158,000 hashed SHA-256 passwords. This database was not connected to Bonobo’s private data, which was siloed for protection. Highly sensitive PII, including customer names, Social Security numbers, and addresses, was compromised. In the healthcare sector, speed in patching and the use of network segmentation (to prevent lateral movement of a threat actor) are paramount, as a breach can paralyze essential public services. LinkedIn claims that, because personal information was not compromised, this event was not a ‘data breach but, rather, just a violation of their terms of service through prohibited data scraping. The Real Estate Wealth Network leak resulted from an unsecured database totaling 1.16 terabytes that was left exposed on the internet without a password.

First American Financial Corporation Data Breach

Cambridge Analytica acquired data from Aleksandr Kogan, a data scientist at Cambridge University, who harvested it using an app called “This Is Your Digital Life”. One of the most controversial elements of this breach was that users did not appreciate or consent to the political usage of data from a seemingly-innocuous lifestyle app. UpGuard’s researchers also discovered and disclosed a related breach by AggregateIQ, a Canadian company with close ties to Cambridge Analytica. Details about these discoveries can be found in our Aggregate IQ breach series (part 1, part 2, part 3 and part 4). In https://www.softforsale.com/67244/buy-pakeysoft-zip-password-recovery.html July 2013, Capital One identified a security breach of its customer records that exposed the personal information of its customers, including credit card data, social security numbers, and bank account numbers. A threat actor claimed to have exploited a vulnerability in the ICMR’s systems to steal a database containing sensitive citizen data.

Purchase cyber insurance

Whoever is at fault for this breach will likely suffer tough financial regulatory consequences for their security negligence. Impact Team claimed the breach was easy to achieve with little to no security to bypass. Penetration was achieved by the hacker posing as a private investigator from Singapore and convincing staff to relinquish access to the internal database. This database was leaked on the dark web for free in April 2021, adding a new wave of criminal exposure to the data originally exfiltrated in 2019. This makes Facebook one of the recently hacked companies 2021, and therefore, one of the largest companies to be hacked in 2021.

• The company emphasized that no funds were stolen and all accounts remained secure.
• Enjoy full access to our latest web application scanning offering designed for modern applications as part of the Tenable One Exposure Management platform.
• Pornhub says a “select” number of Premium users had viewing behavior and search activity exposed after an unauthorized party accessed Mixpanel analytics data, not Pornhub’s own systems.
• This negative press coupled with a loss in consumer trust can cause irreparable damage to the breached company.

Yahoo disclosed that a breach in August 2013 by a group of hackers had compromised 1 billion accounts. In this instance, security questions and answers were also compromised, increasing the risk of identity theft. The breach was first reported by Yahoo while in negotiations to sell itself to Verizon, on December 14, 2016. Yahoo forced all affected users to change passwords and to reenter any unencrypted security questions and answers to re-encrypt them. This includes regular audits of security and data protection policies, adapting controls, evolving response plans and investing in employee training. As newly appointed Chief AI Officers (CAIOs) gradually join the C-suite ranks, security leaders need to be right there next to them.

The impact of a data breach

RansomHub’s activity has since subsided, with no updates on its leak site after April 2025. Reports suggest that its affiliates may have been absorbed into the DragonForce group, raising concerns about the continuity of stolen data operations under a different banner. On desktop, users can sign in, go to “Manage your Google Account,” open the security section, and reset their password under “Signing in to Google.” The Gmail app on mobile devices follows the same process. If a password is forgotten, Google’s recovery flow can send reset instructions to a backup email or phone. Public outrage quickly followed the release of the material, prompting the group to first blur the images and then remove all data.

While larger organizations experience ransomware in 39% of breaches, SMBs face ransomware in a staggering 88% of breach incidents. The Ticketmaster breach is a stark reminder of the persistent threat posed by cybercriminal groups like ShinyHunters. Organizations must remain vigilant, continually updating their security measures and educating employees about the latest cyber threats. As the frequency and severity of data breaches continue to rise, we anticipate more of these group cases tied to the consequences of data breach being brought to court. According to the district, “This was a vendor-side incident. The internal networks and systems of Wayzata Public Schools were not breached or compromised.”

Cyber intelligence sources attribute the attack to the hacking group ShinyHunters, which has recently been linked to similar Salesforce-related cybersecurity breaches impacting Google, Adidas, Allianz Life, and Farmers Insurance. Researchers believe the group exploited stolen OAuth tokens from integrations like Salesloft’s Drift AI chat tool, using them to exfiltrate data from multiple Salesforce environments. A major cybersecurity incident struck Europe’s aviation sector on 19 September 2025, disrupting operations at several major airports, including Heathrow, Brussels, and Berlin. The outage stemmed from a ransomware attack on Collins Aerospace’s passenger processing system, known as MUSE and vMUSE. Since this system is widely used across multiple airlines and airports, the attack spread quickly across borders and caused large-scale operational failures.

Massive Data Google & Apple Breach Exposes 184 Million Passwords

PowerSchool, the student information platform used by the Toronto District School Board (TDSB), was breached between December 22 and 28, 2024. On June 12, 2025, procurement vendor Chain IQ Group AG suffered a sophisticated cyberattack. Hackers accessed data from Chain IQ and at least 19 of its clients, uploading files to the dark web shortly afterward.

Early reports from Tweakers.net highlighted the exposure, but the authenticity of all files has not been independently verified. No technical details have been confirmed, but the threat suggests possible exposure of internal files. Security teams are monitoring dark web activity while investigators check for persistence and assess the impact. The incident occurred in September and stemmed from Red Hat’s role in developing customer management systems for Nissan sales operations.

• The breach appears connected to a ransomware attack on Dodd Group, a maintenance and construction contractor working with the MoD.
• These experts can provide additional insights and ensure compliance with legal obligations.
• India’s central government confirmed that seven major airports were targeted in a cyber attack involving GPS spoofing that affected aircraft navigation during landing procedures.
• State entities and persons or businesses conducting business who own or license computerized data which includes private information must disclose any breach of the data to New York residents whose private information was exposed.

Home Depot announced that its POS (point-of-sale) systems had been infected with a custom-built malware, which posed as antivirus software, affecting customers from across the US and Canada. In mid 2012, Dropbox suffered a data breach which exposed 68 million records that contained email addresses and salted hashes of passwords (half SHA1, half bcrypt). The attack also affected other brands through the Anthem network, including Blue Cross, Blue Shield, Amerigroup, Caremore, and Unicare. The breach was undiscovered and undetected for weeks while the hackers stole information from Anthem servers. Although the data was not required to be encrypted, Anthem still faced backlash for failing to protect user data. Sociallarks’ server wasn’t password-protected, wasn’t encrypted, and it was a publicly exposed asset.