Technology
Pentagon Breach: 3 Million Records, Nine Months, No Encryption
A DMDC file-sharing server held unencrypted Social Security numbers that intruders read from October to July. Letters came in September. Nobody has said who.
Data Breach
Healthcare IT
McKesson Breach: 284 Million Rows, Unknown Number of Patients
McKesson confirmed data exfiltration after ShinyHunters claimed 284 million patient records — a figure the group itself says counts rows, not people.
Healthcare IT
DentaQuest Breach: 15 Million Notified, 2.6 Million Leaked
DentaQuest is notifying more than 15 million people after a three-day intrusion in May. The dataset ShinyHunters published covers 2.6 million.
Technology
The Telus Digital Breach Started in Someone Else's Repository
ShinyHunters compromised Salesloft's GitHub, found OAuth tokens with TruffleHog, pivoted through 700+ Salesforce instances, and landed in Telus Digital's Google Cloud — claiming close to a petabyte of stolen data.