Obsidian Lake // US Data Breach Feed

[INFO] Possible cyber incident disrupts Monroe schools in Wisconsin

Mon, 14 Sep 2026 17:44:59 +0000

Joseph Topping reports an incident at the School District of Monroe in Wisconsin has resulted in the district pulling the plug on internet connections: Students powered down computers, school phone service failed and a scheduled ACT session was canceled after a possible network security issue disrupted the School District of Monroe in Wisconsin. Classes continued...

Source

// Severity: info // Records (est.): 2,026 // Source: databreaches.net // Original: https://databreaches.net/2026/09/14/possible-cyber-incident-disrupts-monroe-schools-in-wisconsin/

[CRITICAL] Hacking Incident Affects 46,000 Hawaii Family Dental Patients

Mon, 14 Sep 2026 15:27:35 +0000

A hacking incident at Hawaii Family Dental has affected almost 46,000 individuals. Data breaches have also been announced by Life […]

The post Hacking Incident Affects 46,000 Hawaii Family Dental Patients appeared first on The HIPAA Journal.

// Severity: critical // Records (est.): 46,000 // Source: hipaajournal // Original: https://www.hipaajournal.com/hacking-incident-hawaii-family-dental/

[INFO] FTC Rescinds 2021 Policy Statement on Health App Data Breaches

Mon, 14 Sep 2026 14:24:32 +0000

In September 2021, the U.S. Federal Trade Commission (FTC) issued a policy statement extending the FTC Health Breach Notification Rule […]

The post FTC Rescinds 2021 Policy Statement on Health App Data Breaches appeared first on The HIPAA Journal.

// Severity: info // Records (est.): 8,230 // Source: hipaajournal // Original: https://www.hipaajournal.com/ftc-rescinds-policy-statement-health-app-data-breaches/

[INFO] Conti Ransomware Member Sentenced to 4 Years in Jail

Mon, 14 Sep 2026 12:46:28 +0000

A Ukrainian national who deployed Conti ransomware on the networks of at least 12 organizations in the United States and […]

The post Conti Ransomware Member Sentenced to 4 Years in Jail appeared first on The HIPAA Journal.

// Severity: info // Records (est.): 8,230 // Source: hipaajournal // Original: https://www.hipaajournal.com/conti-ransomware-member-sentenced-4-years/

[INFO] Delaware Consumer Privacy and Data-Breach Law Updates

Sun, 13 Sep 2026 14:50:40 +0000

Joseph J. Lazzarotti of JacksonLewis writes: On September 2, 2026, Delaware’s Governor signed House Bill (HB) 380 and HB 381. HB 380 amends the Delaware Personal Data Privacy Act (DPDPA), which was enacted in 2023 and became effective January 1, 2025. HB 381 separately amends Delaware’s computer security breach notification law. In short, what changes...

Source

// Severity: info // Records (est.): 2,026 // Source: databreaches.net // Original: https://databreaches.net/2026/09/13/delaware-consumer-privacy-and-data-breach-law-updates/

[INFO] TX: Two Lamesa ISD employees arrested over security breach

Fri, 11 Sep 2026 18:53:51 +0000

Urijah Jaushlin reports: Two Lamesa ISD employees were arrested in connection with a law enforcement investigation involving allegations of a breach of computer security, according to a press release by the Lamesa Independent School District Friday morning. The Lamesa Police Department announced in a press release that authorities, along with the Texas Rangers, arrested 54-year-old...

Source

// Severity: info // Records (est.): 2,026 // Source: databreaches.net // Original: https://databreaches.net/2026/09/11/tx-two-lamesa-isd-employees-arrested-over-security-breach/

[CRITICAL] Central Maine Medical Center & Susan B. Allen Memorial Hospital Settle Data Breach Lawsuits

Fri, 11 Sep 2026 10:00:28 +0000

Central Maine Medical Center & Susan B. Allen Memorial Hospital have agreed to settle class action lawsuits stemming from data […]

The post Central Maine Medical Center & Susan B. Allen Memorial Hospital Settle Data Breach Lawsuits appeared first on The HIPAA Journal.

// Severity: critical // Records (est.): 8,230 // Source: hipaajournal // Original: https://www.hipaajournal.com/central-maine-medical-center-susan-b-allen-memorial-hospital-data-breach-settlements/

[INFO] Veradigm Discloses Third Party Data Breach as Hackers Threaten to Publish Data

Thu, 10 Sep 2026 16:43:40 +0000

The Chicago, Illinois-based practice management and electronic health record company Veradigm (formerly Allscripts Healthcare Solutions) has disclosed a cybersecurity incident in […]

The post Veradigm Discloses Third Party Data Breach as Hackers Threaten to Publish Data appeared first on The HIPAA Journal.

// Severity: info // Records (est.): 8,230 // Source: hipaajournal // Original: https://www.hipaajournal.com/veradigm-data-breach-2026/

[HIGH] AdaptHealth Data Breach Affects 4.1 Million Individuals

Thu, 10 Sep 2026 11:07:59 +0000

In early July, we reported that AdaptHealth had notified the U.S. Securities and Exchange Commission that it had experienced a […]

The post AdaptHealth Data Breach Affects 4.1 Million Individuals appeared first on The HIPAA Journal.

// Severity: high // Records (est.): 4,099,999 // Source: hipaajournal // Original: https://www.hipaajournal.com/adapthealth-data-breach/

[INFO] Lessons Learned from CISA’s Recent GitHub Leak

Mon, 13 Jul 2026 15:03:28 +0000

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including AWS Govcloud keys -- in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency's initial response provide important lessons that all security teams should absorb. // Severity: info // Records (est.): 0 // Source: krebsonsecurity // Original: https://krebsonsecurity.com/2026/07/lessons-learned-from-cisas-recent-github-leak/

[INFO] Lawmakers Demand Answers as CISA Tries to Contain Data Leak

Fri, 22 May 2026 16:34:24 +0000

Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets on a public GitHub account. The inquiry comes as CISA is still struggling to contain the breach and invalidate the leaked credentials. // Severity: info // Records (est.): 38 // Source: krebsonsecurity // Original: https://krebsonsecurity.com/2026/05/lawmakers-demand-answers-as-cisa-tries-to-contain-data-leak/

[INFO] CISA Admin Leaked AWS GovCloud Keys on Github

Mon, 18 May 2026 20:48:21 +0000

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files detailing how CISA builds, tests and deploys software internally, and that it represents one of the most egregious government data leaks in recent history. // Severity: info // Records (est.): 38 // Source: krebsonsecurity // Original: https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/

[INFO] Social Insecurity: Billions of Social Security Number and Passwords | UpGuard

Thu, 19 Feb 2026 18:18:05 +0000

UpGuard research found a trove of sensitive information in an exposed Elastic database. Getting to the bottom of what it meant led us down an interesting path. // Severity: info // Records (est.): 0 // Source: upguard // Original: https://www.upguard.com/breaches/social-insecurity-billions-of-social-security-number-and-passwords

[INFO] The Aggregate IQ Files, Part One: How a Political Engineering Firm Exposed Their Code Base | UpGuard