Data Breaches
How Did CenterPoint Energy Lose Over 1 Million Customer Records?
A utility firm disclosed that personal data including Social Security numbers was stolen, with hackers boasting on forums before the company filed reports.
Data Breaches coverage from CloudSec Press holds 18 articles, 15 of them reference guides. The newest was published on October 15, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include FTC: Data Breach Response, A Guide for Business and Have I Been Pwned.
A utility firm disclosed that personal data including Social Security numbers was stolen, with hackers boasting on forums before the company filed reports.
Processors face direct legal penalties for security failures, while controllers remain liable for choosing negligent partners and failing to audit them.
Criminals stitch real and fake data to build credit profiles that vanish before you detect the theft.
Misconfigured cloud storage and unpatched plugins expose card data far more often than sophisticated hacking attempts ever do.
Hackers exfiltrated patient records from third-party apps. iRhythm says no identity theft evidence exists, suggesting a possible ransom payment.
A ransomware listing for US KFC lacks technical proof, showing only branding and public business details rather than stolen files.
Treating personal data as a high-value asset forces you to build strict access controls that stop both external hackers and careless internal employees.
Most organizations label data by file extension rather than content, creating blind spots that attackers exploit to bypass security controls and exfiltrate sensitive information.
Most insider theft succeeds because defenses focus on external attackers, leaving internal data access paths wide open and unmonitored for unusual behavior.
You can lock data while it moves across networks, yet most teams fail because they trust the network path instead of verifying the cryptographic handshake.
Storing credentials in code repositories creates a permanent attack surface that persists even after you rotate the keys, because historical commits remain accessible.
Source code leaks expose internal logic and hidden credentials, turning a software asset into a direct pathway for attackers to bypass standard defenses.
Your immediate goal is not to find the leak source but to sever the attacker’s access by resetting credentials and enabling multi-factor authentication across all linked services.
Synthetic identities are not fake people but hybrid profiles that slip past standard identity verification checks by blending real and fabricated data points.
A data breach is not just a lost password; it is the permanent loss of control over your digital identity, which attackers monetize long after the initial event.
The CIA triad is not about espionage agencies but a structural framework for defining how data behaves when systems fail or policies are ignored.
SOC 2 is not a single test you pass but a continuous framework that proves how your vendors handle customer data behind the scenes.
Most card theft fails not at the point of sale, but during the quiet period when stolen data sits idle in a compromised server before being sold.