Conduent Business Services, LLC (“Conduent”) is a third-party service provider for services related to printing and mailroom, document processing, payment integrity, government benefits, and other back-office support services. On January 13, Conduent discovered...
Modernizing Medicine, Inc. (ModMed) discovered unauthorized activity in certain computer servers used by its podiatry practice clients. Between July 9 and July 10, 2025, a threat actor accessed and copied sensitive information stored on these internal servers.
Central Jersey Medical Center, Inc. (CJMC) announced a data breach in which personally identifiable information and protected health information of certain patients may have been compromised. On August 25, 2025, a threat actor gained unauthorized access to the CJMC...
On or around May 5, 2025, The Institute of Culinary Education (“The Institute”) detected suspicious activity that initiated an investigation. The findings revealed that an unauthorized threat actor gained access to certain systems and copied files containing information relating to students.
The Cybersecurity and Infrastructure Security Agency (CISA) released this Alert to provide guidance in response to a widespread software supply chain compromise involving the world’s largest JavaScript registry, npmjs.com. A self-replicating worm—publicly known as Shai-Hulud...
FinWise Bank partners with American First Finance (AFF) to offer consumer financing products, including installment loans and lease-to-own programs. FinWise Bank, on behalf of AFF, disclosed a data breach involving a former employee who accessed sensitive data...
TransUnion, one of the major US credit reporting agencies, disclosed a data breach that took place in July 2025, impacting 4.4 million customers. The data breach involved a third-party application that stored personal customer data and served its US consumer support operations.
The US insurance company, Farmers Insurance, disclosed a data breach of its database at a third-party vendor, impacting 1.1 million customers. On May 29, an unauthorized threat actor accessed the vendor’s database and acquired specific data. The vendor’s monitoring tools detected...
The Federal Bureau of Investigation (FBI) and the Multi-State Information Sharing & Analysis Center (MS-ISAC) are releasing this Joint White Paper to raise awareness of cyber threat actors (CTAs) activity targeting vendor accounts within vendor portals belonging to US state, local, tribal...
Scattered Spider threat actors have been known to use various ransomware variants in data extortion attacks, most recently including DragonForce ransomware. While Scattered Spider often changes tactics, techniques, and procedures (TTPs) to remain undetected.
