News
Current events, industry audit reports, compliance watch updates, and technology alerts. By industry · National audits · Breach trackers · MFA directory · YouTube explainers · State collections: Texas · Florida · California · Illinois · New York · Pennsylvania — showing latest 30 of 923
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the Full Audit Report with Fix Kit steps and compliance evidence for $99.
Multi-source breach data week of November 8, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +13 (585 → 598). 11 companies/entities from source roundups.
Read Update
Texas OAG published 8 new data security breach reports on November 6, 2026, affecting 97,634 Texans. Amplifon (USA), Inc. led the batch with 85,804 affected.
Read Update
California's data breach list added 3 notices on November 4, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Tesla Wall Connector 2.4 GHz WPA2/3; Powerwall and Victron Cerbo IoT risks; Starlink WPA2 router CVEs. Audits: tesla.com 66%, starlink.com 87%, victronenergy.com 68%, span.io 52%; ideal 100%.
Read Update
Multi-source breach data week of November 1, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +29 (556 → 585). 22 companies/entities from source roundups.
Read Update
MSG sent employees a simulated phishing email offering complimentary Knicks championship rings; clickers were sent to training. MSG called it an unfortunate mistake and pledged 275+ rings worth $3.7M+. Audits (ideal 100%): msg.com 42%, msgsports.com 68%.
Read Update
An unsolicited PropelLend loan-verify SMS from short code 64152 used the wrong first name and a tiny dollar amount. Audits (ideal 100%): propellend.com 52%, lendhorizon.net 42%. Match FTC fake-loan-text red flags — do not tap the link.
Read Update
Ring documents mandatory two-step verification, passkeys, and Control Center reviews after years of camera account takeovers. Audits (ideal 100%): ring.com 63%, amazon.com 54%. Five-minute checkup for Texas shops and landlords.
Read Update
Ring’s Throw Away the Key (TAKE) encryption will become the worldwide default once rollout finishes; optional E2EE stays. Audits (ideal 100%): ring.com 63%, amazon.com 54%. Mandatory 2SV, passkeys, and account hygiene still matter for Texas offices with doorbell cameras.
Read Update
Roger Stone's team says StoneZONE.com was wiped Oct 26, 2026 and restored from backups within an hour; no attacker named. Audits (ideal 100%): stonezone.com 42%, stonecoldtruth.com 42% (Substack newsletter).
Read Update
Sept 2024 ransomware at UMC Health System diverted ambulances for weeks and later exposed 1.46M+ records on HHS OCR. Audits (ideal 100%): umchealthsystem.com 79%. No new lawsuit as of Nov 2026.
Read Update
Reuters and Binance confirm a record ~$6.3B exchange theft Oct 29–30, 2026. Compare Binance, Coinbase, Kraken, Gemini, Crypto.com, and Robinhood Crypto MFA and custody. Audits (ideal 100%): kraken.com 90%, coinbase.com 87%, gemini.com 85%, crypto.com 69%, binance.com 62%, robinhood.com 50%.
Read Update
DDoSecrets published the alleged Icepick archive Oct 28, 2026. WIRED reports 41,000+ DHS workers in an Okta-linked directory—Okta denies a platform breach. Audits (ideal 100%): ice.gov 81%, cbp.gov 81%, dhs.gov 70%, okta.com 70%.
Read Update
SEC EDGAR shows 1 Form 8-K Item 1.05 material cybersecurity disclosure filed October 30, 2026. Koil Energy Solutions, Inc. is among the filers.
Read Update
STP Nuclear Operating Co. filed with the Texas AG Oct 28, 2026 after a Sep 28–29 incident. Names, SSNs, and DOBs were exposed; notice went by email. Audits (ideal 100%): cpsenergy.com 57%, austinenergy.com 53%, stpegs.com 47%, constellationenergy.com 28%.
Read Update
Texas OAG published 13 new data security breach reports on October 30, 2026, affecting 442,972 Texans. Marathon Health led the batch with 234,534 affected.
Read Update
California's data breach list added 6 notices on October 27, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Have I Been Pwned added 1 breach on October 27, 2026, exposing 345,439 accounts globally. AfD led the batch with 345,439 accounts.
Read Update
Quest Diagnostics says an unauthorized party accessed patient records in Quanum Lab Services Manager on October 21, 2026. The portal was restored October 26. No patient count yet. Audits (ideal 100%): sec.gov 88%, identitytheft.gov 85%, questdiagnostics.com 85%, the Quanum host 43%.
Read Update
Multi-source breach data week of October 25, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +13 (543 → 556). 14 companies/entities from source roundups.
Read Update
CenterPoint’s Sept 14, 2026 Form 8-K says an unauthorized party obtained customer information through an external-facing system. Texas reports put the count above 1 million and say notice had not gone out yet. Audits (ideal 100%): sec.gov 88%, centerpointenergy.com 75%, khou.com 53%, abc13.com 46%, click2houston.com 45%, research.checkpoint.com 34%.
Read Update
Colorado County's Oct 13 and Oct 15, 2026 emergency notices describe a disruption of county information systems and a threat to public-safety operations. They do not name a cause. A NightSpire listing is unconfirmed. Audits (ideal 100%): cira.state.tx.us 69%, co.colorado.tx.us 68%, columbustexas.org 68%, dysruptionhub.com 58%, coloradocountycitizen.com 56%, dexpose.io 52%.
Read Update
On Oct 13, 2026 the Justice Department said FBI searches at more than 40 Texas residences seized about 187 laptops and KVM devices. An Ohio indictment charges a separate $3 million remote-IT scheme. Audits (ideal 100%): fbi.gov 82%, justice.gov 81%, knowbe4.com 73%, bleepingcomputer.com 63%, crowdstrike.com 62%, cbsnews.com 43%.
Read Update
MLD Mortgage, dba The Money Store, says an unauthorized party accessed mortgage files starting about Sept 8, 2026 through a vendor remote-monitoring platform. Texas filing summaries list 1,367 Texas residents. Audits (ideal 100%): idx.us 85%, oag.ca.gov 57%, themoneystore.com 53%, themoneystoreservicing.com 52%, mass.gov 43%, texasattorneygeneral.gov 37%.
Read Update
Texas OAG published 9 new data security breach reports on October 23, 2026, affecting 306,783 Texans. Motility Software Solutions led the batch with 194,755 affected.
Read Update
California's data breach list added 4 notices on October 22, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Straiker told The Information that CyberCartel used Claude, Grok, and Moonshot models against 400-plus Latin American financial targets. No bank list is public. Audits (ideal 100%): anthropic.com 77%, x.ai 74%, benzinga.com 71%, straiker.ai 60%, theinformation.com 59%, moonshot.ai 46%.
Read Update
Chrome blocked eight weak eMudhra intermediate CA keys on Oct 17. Non-browser clients still need a trust-store update. Audits (ideal 100%): mozilla.org 76%, sectigo.com 75%, curl.se 62%, google.com 55%, emudhra.com 52%, we-have-a-problem.com 48%.
Read Update
PHP patched two unauthenticated RCE bugs on Oct 21 (CVE-2026-109618, CVE-2026-109619). The only complete fix is PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35. Audits (ideal 100%): cloudflare.com 90%, ncsc.gov.uk 72%, wordpress.org 68%, apache.org 68%, bleepingcomputer.com 63%, php.net 42%.
Read Update
PingCAP says stolen service-account credentials copied TiDB Cloud account, SQL-editor, and billing records between Sept 9 and Oct 7. Larger leak totals are unverified. Audits (ideal 100%): microsoft.com 71%, github.com 66%, pingcap.com 60%, google.com 55%, tidbcloud.com 43%, tidb.io 28%.
Read Update