Origin Energy, Australia's largest energy retailer, confirmed unauthorized access to and disclosure of some customer data, including names, addresses, and partial payment details. The breach, affecting millions, was reported after an alleged hacker contacted The Australian. CEO Frank Calabria apologized, stating system security is a key priority.
Origin Energy confirmed a hack accessed customer names, addresses, phone numbers, and partial bank data for an unspecified number of its 4.8m Australian accounts. The company is investigating with authorities, while experts warn of identity theft risks.
UK-based healthcare billing software maker Craneware announced a cyberattack resulted in the theft of a "significant volume" of customer, employee, and partner data. The breach affects a company whose software is widely used in the U.S. healthcare sector, and its investigation is ongoing.
Klue confirmed hackers used a 2022 pilot credential to steal data from corporate customers, including cybersecurity firms. The credential's long-standing use raises security concerns. The breach, detected June 12, allowed access to OAuth tokens, enabling data theft and extortion.
Cloud tech giant ServiceNow disclosed a bug allowing unauthenticated internet access to customer data. The company stated security researchers, not bad actors, discovered the issue while seeking bug bounties. The bug affected Australia releases, but users report wider impact.
Trump Mobile T1 smartphone customers' personal data, including phone numbers and addresses, was exposed online. The company admitted the leak after customers found their information publicly available, and has yet to directly notify affected users.
Trump Mobile confirmed it exposed customer names, emails, phone numbers, and addresses online due to a third-party platform issue. The company is investigating and has not found evidence of financial data loss or network breaches.
Trump Mobile, President Trump's cell phone provider, is reportedly leaking customer data, including mailing and email addresses. YouTubers Coffeezilla and penguinz0 confirmed their own information was exposed after ordering the T1 phone.
GitHub confirmed a hack affecting 3,800 internal code repositories. Attackers used a poisoned VS Code extension to compromise an employee device. The group TeamPCP claimed responsibility and is selling the data.
Nishinippon City Bank employee accidentally leaked personal customer data and company information on the social media app BeReal. The bank has apologized and banned private smartphone use in branches.
Community Bank discloses cybersecurity incident exposing customers' personal data due to unauthorized AI software use
Community Bank disclosed a cybersecurity incident exposing customers' names, dates of birth, and Social Security numbers due to an unauthorized AI-based software application.
Finance Minister Nirmala Sitharaman has directed Indian banks to strengthen cybersecurity systems to counter emerging threats from advanced AI models, particularly Anthropic's Claude Mythos. Chairing a high-level meeting with bank chiefs and IT minister Ashwini Vaishnaw, she urged lenders to take all necessary pre-emptive measures to secure IT systems, protect customer data and establish real-time threat intelligence sharing with IndianCERT and other agencies. The Indian Banks' Association will develop a coordinated mechanism led by the SBI chairman.
Vercel discovered hackers accessed customer data before its early-April breach was found, expanding the incident's scope. The company identified a small number of customer accounts with evidence of prior compromise predating the incident, potentially from social engineering or malware. An employee download from Context AI led to the breach, with CEO Guillermo Rauch confirming hackers were active beyond that compromise.
Vercel disclosed that hackers breached its internal systems through a third-party app from Context AI, compromising customer credentials. A Vercel employee downloaded a Context AI app that connected to their Google corporate account, allowing attackers to hijack the account and access unencrypted credentials. The breach may affect hundreds of users across multiple organizations. Next.js and Turbopack were not affected.
A class-action lawsuit in Norway alleges Telenor shared customer data with Myanmar’s military after the 2021 coup, exposing activists and opposition figures to arrest and abuse. Telenor says it complied with legal orders for metadata under extreme pressure.
