CenterPoint Energy has confirmed in an SEC filing that an unauthorized party accessed customer personal information through one of its external-facing systems. The disclosure follows claims from a hacker who says they exfiltrated 7.49 million records—including names, addresses, account numbers, billing details and partial Social Security numbers—by exploiting an unprotected public API lacking rate limiting or firewall defenses.
bleepingcomputer.com
· 2026-09-15
AdaptHealth has confirmed that a cyberattack discovered in July, linked to the ShinyHunters group, exposed personal and health data belonging to about 4.1 million patients. The company says attackers gained access on June 5 through a social engineering attack that compromised a third-party contractor's privileged account, reaching cloud-based patient management and record systems. Exposed data includes names, contact and demographic details, health insurance information, and health records.
bleepingcomputer.com
· 2026-09-09
Veradigm, the Chicago-based healthcare technology firm formerly known as Allscripts, disclosed in an SEC filing that an attacker used stolen credentials from a third-party vendor to access a customer-service API and copy patient data. The exposed information includes personal details and Social Security numbers for a limited number of patients, though clinical records were not accessed. The Gentlemen ransomware group has claimed responsibility for the attack.
bleepingcomputer.com
· 2026-09-09
Grindr has agreed to pay £26m to resolve a High Court class action brought by more than 11,000 claimants who alleged the dating app shared sensitive personal data, including HIV status, with third parties. The company will pay £13m by the end of this year and another £13m by March 2027, admitting no liability. Grindr says the allegations concern data practices before 2020, when the app was owned by China's Kunlun.
bbc.co.uk
· 2026-09-07
Oura has acknowledged in SEC paperwork filed ahead of its IPO that some Ring 4 units suffered battery performance problems, which contributed to an $84.4 million rise in warranty expenses during fiscal 2025. The company replaced affected rings free of charge, sometimes even after the standard one-year warranty had lapsed. Oura has not specified which production batches were affected.
androidauthority.com
· 2026-09-07
Retro, a friend-focused photo-sharing app founded by former Instagram engineers Nathan Sharp and Ryan Olson, closed a Series A round of more than $21 million in December, according to an SEC filing spotted by Business Insider. The filing was made under the startup's legal name, Lone Palm Labs, and Pitchbook now pegs the company's valuation above $100 million.
techcrunch.com
· 2026-08-28
Boston Scientific disclosed in an SEC filing that a cyberattack beginning Tuesday has caused widespread outages across its IT systems, hampering its ability to ship and process orders. The medical device maker, which serves roughly 48 million patients annually, has not said whether implanted devices like pacemakers are affected, and has not given a timeline for restoring systems. Reports from Ireland indicate staff at its Cork campus were sent home after internal network communications went down.
techcrunch.com
· 2026-08-26
GoKawiil