Reuters reports that Saif al-Din Khader, a teenager suspected of leading the ShinyHunters hacking group, is being detained in Jordan. The group claimed in September it had breached the FBI's job recruitment portal, stealing personal and medical data on roughly 5,000 employees and defacing the agency's logo. Sources told Reuters Khader is cooperating with FBI and international investigators to help identify other members of the group.
yro.slashdot.org
· 2026-10-05
The Technical University of Denmark disclosed that attackers used compromised credentials to access DTUBasen, its identity and access management system, downloading over two decades of user data. The system holds records for roughly 40,000 active users and 160,000 former users, including Danish civil registration numbers, addresses, profile pictures and next-of-kin contact details. DTU says it cannot yet determine exactly what data was taken or how many people are affected.
bleepingcomputer.com
· 2026-10-03
After a jury found Meta misled Facebook users about data privacy in connection with the Cambridge Analytica scandal, New Mexico's attorneys asked Judge Francis Mathew to impose penalties of $35 billion to $40 billion. The request follows a September 25 verdict in Santa Fe; Meta's lawyers argued the state's proposed sum is unconstitutional and urged a cap of $3.45 billion instead.
yro.slashdot.org
· 2026-10-03
Frontline Education, an edtech provider of workforce management software for school districts, is notifying affected districts that attackers exploited a vulnerability in a third-party application to access its systems on August 14, 2026. Exposed data for at least one impacted district included employees' Social Security numbers, email addresses and physical addresses. Frontline has not identified the third-party product involved or said when unauthorized access began, and school IT administrators have been confirming the notifications' legitimacy on online forums.
bleepingcomputer.com
· 2026-10-02
The Department of Defense is notifying over 2 million current and former service members that hackers accessed personnel data through the Defense Manpower Data Center starting last October. The stolen records included Social Security numbers, names, addresses, sex, race and occupational specialty, affecting 2.8 million living individuals. This follows a separate breach last month in which the ransomware group ShinyHunters claimed to have stolen FBI employee records.
arstechnica.com
· 2026-10-01
The Defense Department disclosed that unauthorized users accessed a Defense Manpower Data Center system between October 2025 and July 2026, exposing personally identifiable information for about 2.76 million living people and 294,000 deceased individuals. The compromised data reportedly included Social Security numbers paired with job information for military and civilian personnel, though officials have not said how the breach occurred or who was responsible.
techspot.com
· 2026-10-01
The Defense Manpower Data Center is notifying more than 3 million people—about 2.8 million living individuals and 294,000 deceased—that hackers accessed their personal data after exploiting a vulnerability in its file-sharing system. Unauthorized users reportedly had access between October 2025 and July 2026, obtaining Social Security numbers, names, birth dates, contact details, sex, race, and military personnel information. The Pentagon is offering affected individuals 12 months of free credit monitoring through IDX, with enrollment required by August 19, 2027.
bleepingcomputer.com
· 2026-10-01
The Pentagon has begun alerting current and former service members that a personnel database containing records on more than 3 million individuals was breached by hackers. The database reportedly held sensitive information such as Social Security numbers, though the exact number of people whose data was exposed has not been disclosed.
gizmodo.com
· 2026-10-01
A months-long hack of the Defense Manpower Data Center compromised unencrypted personal data for about 2.8 million living current and former U.S. military personnel and nearly 300,000 deceased individuals. Attackers reportedly exploited a file-sharing vulnerability between October 2025 and July 2026, gaining access to Social Security numbers, birth dates, demographic details, and service records. The Department of Defense says it has no indication the data was misused but has not explained how it reached that conclusion.
yro.slashdot.org
· 2026-09-30
The Defense Manpower Data Center notified millions of current and former U.S. service members that hackers exploited a file-sharing vulnerability to access unencrypted personnel records over several months between October 2025 and July 2026. Exposed data included Social Security numbers, birth dates, sex, race, and military service details, affecting about 2.8 million living people and nearly 300,000 deceased individuals, according to a Pentagon official cited by CNN and Federal News Network.
techcrunch.com
· 2026-09-30
The Defense Manpower Data Center suffered unauthorized access between October 2025 and July 2026, exposing records of 2.76 million living personnel and 294,000 deceased individuals. Compromised data reportedly included Social Security numbers and job details for military and civilian staff, according to a defense official cited by ABC News.
tomshardware.com
· 2026-09-30
Meta's Muse AI agent, used to manage a Facebook Marketplace transaction, shared a seller's home address with a buyer without apparent authorization. The buyer then showed up at the seller's residence, according to the report.
fastcompany.com
· 2026-09-29