News
Page 4 of 31 — 923 updates. Back to latest · By industry · National audits
Instant audit
Run a free scan at audit.emailmenow.com, then unlock the Full Audit Report with Fix Kit steps and compliance evidence for $99.
Have I Been Pwned added 1 breach on September 30, 2026, exposing 423,947 accounts globally. Medela led the batch with 423,947 accounts.
Read Update
Google Chrome 154 (Sept 22) fixes 108 security issues, 11 Critical, including ANGLE and GPU bugs. Audits (ideal 100%): googleblog.com 82%, malwarebytes.com 71%, google.com 55%, chrome.google.com 35%.
Read Update
Multi-source breach data week of September 27, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +26 (467 → 493). 17 companies/entities from source roundups.
Read Update
Collin County city says two reviews found no unauthorized access after a ransomware group claimed municipal data. Audits (ideal 100%): sevnx.com 76%, princetontx.gov 44%, civicplus.com 43%, texasattorneygeneral.gov 37%. CivicPlus: Google Authenticator yes, YubiKey not documented.
Read Update
HHS OCR listed 4 large HIPAA breach submissions dated September 25, 2026, affecting 7,304 individuals nationally. Center for bone and Joint Surgery of the Palm Beaches led the batch with 5,461 individuals.
Read Update
Texas OAG published 11 new data security breach reports on September 25, 2026, affecting 94,166 Texans. AngMar Management Services led the batch with 35,916 affected.
Read Update
California's data breach list added 5 notices on September 24, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
SEC EDGAR shows 1 Form 8-K Item 1.05 material cybersecurity disclosure filed September 23, 2026. Astrana Health, Inc. is among the filers.
Read Update
HHS OCR listed 2 large HIPAA breach submissions dated September 21, 2026, affecting 2,435 individuals nationally. Imagine the Possibilities led the batch with 1,693 individuals.
Read Update
Zimperium’s RatHat Android Trojan uses smishing, fake overlays, and stolen OTP codes, and can reconstruct a screen lock. Audits (ideal 100%): zimperium.com 78%, malwarebytes.com 71%, google.com 55%, bankofamerica.com 53%.
Read Update
Multi-source breach data week of September 20, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +13 (454 → 467). 11 companies/entities from source roundups.
Read Update
Click2Houston warned Sept 15 that unsolicited Amazon-style packages can hide QR phishing. FTC Aug 20 alert and FBI IC3 PSA match. Audits (ideal 100%): ic3.gov 87%, usps.com 77%, ftc.gov 72%, amazon.com 54%.
Read Update
Texas AG Ken Paxton warned of suspicious California CIPA demand letters sent to Texas businesses. Audits (ideal 100%): uscourts.gov 67%, texasbar.com 60%, cacd.uscourts.gov 54%, texasattorneygeneral.gov 37%.
Read Update
Texas OAG published 7 new data security breach reports on September 17, 2026, affecting 15,484 Texans. TEXAS REGIONAL ASTHMA, ALLERGY & IMMUNOLOGY CENTER led the batch with 5,038 affected.
Read Update
Washington's Attorney General published 3 new data breach notifications on September 17, 2026, affecting 16,469 Washingtonians. CallonDoc, Inc. led the batch with 12,186 affected.
Read Update
Alta Resources sued Ace American (Chubb) in E.D. Wis. after paying Adidas more than $5M over help-desk credential claims. Adidas confirmed a May 2025 vendor incident. Audits (ideal 100%): adidas.com 68%, adidas-group.com 59%, chubb.com 58%, altaresources.com 37%.
Read Update
HHS OCR listed 3 large HIPAA breach submissions dated September 16, 2026, affecting 160,445 individuals nationally. AngMar Management Services led the batch with 126,196 individuals.
Read Update
Gamers Nexus and Level1Techs say a compromised LG OLED can capture mic audio in standby. LG disputes ambient recording. Audits (ideal 100%): malwarebytes.com 71%, lgads.tv 44%, lg.com 42%, gamersnexus.net 41%.
Read Update
CVE-2026-27540 in WooCommerce Wholesale Lead Capture (<=2.0.3.1) is under mass exploit. Patch is 2.0.3.2. Public-HTML store audits (ideal 100%): fjordpharm.com 64%, kalamazooindustries.com 52%, strohmedico.com 47%. Fingerprint is not a patch check.
Read Update
California's data breach list added 3 notices on September 15, 2026. California does not publish residents-affected counts — this roundup tracks reporting visibility.
Read Update
Attackers used verified u/hbomax ads for a 48-hour ClickFix blitz. Max streaming is not reported hacked. Audits (ideal 100%): ic3.gov 87%, reddit.com 85%, hbomax.com 67%, max.com 52%.
Read Update
Multi-source breach data week of September 13, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +11 (443 → 454). 12 companies/entities from source roundups.
Read Update
Have I Been Pwned added 1 breach on September 13, 2026, exposing 4,653,212 accounts globally. Chess.com (2026) led the batch with 4,653,212 accounts.
Read Update
A Chase-branded card-hold text hit a real Chase customer on the number tied to that account — coincidence or a purchased/stolen pairing, not proof Chase was hacked. Real Chase fraud SMS uses short codes. Audits (ideal 100%): ic3.gov 87%, chase.com 79%, jpmorganchase.com 65%, cruzovote.com 29%.
Read Update
Irving-based McKesson (MCK) posted a Sept 8 notice after an Aug 20–25 incident on employee accounts. ShinyHunters claimed vishing. N.D. Tex has 15 suits. Audits (ideal 100%): sec.gov 88%, ic3.gov 87%, mckesson.com 69%, covermymeds.com 58%.
Read Update
Texas OAG published 8 new data security breach reports on September 11, 2026, affecting 93,797 Texans. Quatrro Business Support Services, Inc. (“Quatrro”) led the batch with 51,717 affected.
Read Update
Scammers route fake work emails through real Google services before a sign-in page or remote-access install. Google is not reported hacked. Audits (ideal 100%): connectwise.com 77%, knowbe4.com 73%, microsoft.com 71%, google.com 55%.
Read Update
SEC EDGAR shows 1 Form 8-K Item 1.05 material cybersecurity disclosure filed September 8, 2026. BOSTON SCIENTIFIC CORP is among the filers.
Read Update
Krebs found Nexus listing 153M+ U.S. and Canadian license scans. FBI New Orleans is investigating. IDScan says a third party may have copied cloud records. Audits (ideal 100%): fbi.gov 64%, hertz.com 53%, veriscancloud.com 44%, idscan.net 42%.
Read Update
Multi-source breach data week of September 6, 2026: Texas OAG, HHS OCR, SEC Form 8-K, HIBP, and state AG trackers. Texas YTD reports +17 (426 → 443). 13 companies/entities from source roundups.
Read Update