Netcrook
Breaches & Data Leaks
Healthcare Billing’s Soft Underbelly: A Network Breach With Million-Patient Reach
A 2025 intrusion at a medical billing company shows how one vendor network can become a large-scale privacy event when regulated health and identity data sit in the same place.
Old Breach Data Is Being Turned Into Fresh Fear
A sextortion campaign is reusing exposed email addresses and personal details to sound credible, while the payment demand stays fixed at $2,000 in Bitcoin.
Customer Data, Big Numbers, and a Claim That Outran Proof
A reported breach affecting 900,000 Australians sits alongside an unverified claim of information from 2 million customers, underscoring how quickly scale can be framed before it is verified.
ShinyHunters Claim Puts EY Breach in the Spotlight, But the Path Remains Unproven
The alleged credential theft tied to Ernst & Young is a reminder that supply-chain claims can signal risk even before the technical details are confirmed.
When a Prayer App Forgot Its Locks, 700,000 Profiles Became a Privacy Problem
A Vatican-linked app case shows how broken access control can turn ordinary web requests into large-scale data exposure, even when the interface looks harmless.
Leak Threat Looms After Coca-Cola Links Breach to Fairlife Ransomware Case
Coca-Cola has confirmed a data breach tied to a ransomware incident involving Fairlife, while Anubis has claimed the attack and threatened to leak data.
Inside the Benefits File Heist: Why Dental Data Is Now High-Value Criminal Currency
A breach at DentaQuest puts a spotlight on a less visible target class: the claims and benefits systems that can concentrate identity, billing, and health-related records in one place.
MCBS Breach Claim Turns Into a Scale Test for Ransomware Truth
MCBS has linked a breach to 1.2 million affected individuals, while the PEAR ransomware group claimed to have taken 3 TB of information - a reminder that volume claims and verified exposure are not the same thing.
The Search Engine Side Door That Turned Claude Chats into Open Web Pages
A link-sharing feature can be convenient for collaboration, but if the resulting page is crawlable, a private conversation can drift into search results with no attacker required.
When a Shared AI Chat Becomes Searchable: The Claude Link Problem
A convenience feature can turn into an exposure surface when a public chat link is reachable by crawlers, reminding users that AI collaboration tools can create web objects, not private notes.
When an API Leaks, a Prayer App Becomes a Privacy Problem
A browsable API endpoint appears to have exposed personal details for more than 700,000 users, underscoring how quickly weak data controls can turn an ordinary service into a sensitive data source.
When Reused Passwords Turn a Restaurant App Into an Attack Surface
More than 13,000 Chick-fil-A customer accounts were caught in a credential-stuffing campaign, a reminder that the weakest link in many consumer platforms is often the login box itself.
Origin Breach Puts Energy Customers at the Center of a Leak Threat
A confirmed security incident at an Australian energy company has turned into a privacy and fraud problem, with attackers claiming customer data and threatening to publish it.
Origin Energy Data Breach Leaves a Privacy Clock Ticking
The company has confirmed customer data was compromised, but the unresolved question is how many Australians are in the blast radius and what the stolen records could be used for next.
When Reused Passwords Raid the Rewards Drawer
A loyalty-account incident shows how credential stuffing can turn a consumer login into a privacy problem and a stored-value problem at the same time.
When a Breach Pays Twice: How Stolen Customer Data Turned into $13 Million in Fraud Losses
A reported breach at Upbound Group shows how even data described as non-sensitive can become a fraud tool when criminals target contract origination and verification workflows.
Supplier File Share Becomes the Pressure Point in a $12.3 Million Extortion Case
Stadler Rail says it will not pay the ransom demand after technical data was reportedly taken from a supplier’s file-sharing platform, leaving the scope of the incident under scrutiny.
When Reused Passwords Open the Door: The Loyalty Account Breach That Exposes a Familiar Weak Point
A confirmed incident affecting Chick-fil-A One accounts shows how credential stuffing can turn ordinary password reuse into a serious account-security and payment-risk problem.
Security Weaknesses May Have Put KNDA Personnel Data at Risk
A cyber incident at the Korea National Diplomatic Academy shows how a routine government training portal can become a high-value target when authentication and access controls are weak.
Origin’s Data Breach Shows How One Access Path Can Put a Utility’s Customer Records at Risk
A confirmed unauthorised-access incident at an energy retailer is a reminder that identity data, billing records, and trust in official communications can all become attack surfaces at once.