PharMerica Corporation — one of the largest pharmacy services providers in the United States, serving nursing homes, assisted living facilities, and other long-term care settings — agreed to a $5.275 million settlement to resolve a class action lawsuit stemming from…
Southeast Series of Lockton Companies — one of the largest insurance brokerages in the world — agreed to a $9.9 million settlement to resolve a class action lawsuit stemming from a data breach that occurred on or around November 20,…
Kaiser Permanente agreed to a $47.5 million settlement to resolve a class action alleging that the health insurance giant secretly shared members private health data with Google, Microsoft, and Twitter/X through tracking pixels embedded in its member-facing websites and mobile…
Lingerie and apparel retailer Victoria’s Secret suffered a significant cyberattack in May 2025 that forced the company to take its website offline for days and disrupted operations at retail stores nationwide. The breach is expected to cost the company approximately…
European railway pass operator Eurail B.V. has confirmed that data stolen in a breach earlier this year is now being sold on the dark web. Eurail, which provides access to over 250,000 kilometers of European railways through its Eurail and…
Newsletter platform Substack has confirmed a data breach that resulted in user data being accessed without authorization. The incident exposed user records and internal metadata from the popular publishing platform used by millions of writers and subscribers. The breach was…
Northern Michigan health system Munson Healthcare has notified approximately 120,000 patients that their data may have been compromised in a breach involving one of the hospital’s third-party vendors. The incident is part of a growing pattern of healthcare data breaches…
Comcast has agreed to a $117.5 million settlement to resolve 24 class action lawsuits stemming from a 2023 data breach that potentially impacted over 30 million Xfinity customers. The breach exploited the “Citrix Bleed” vulnerability, a critical security flaw in…
Healthcare claims processor Signature Performance has reached an $8.5 million class action settlement to resolve claims arising from a data breach that exposed the personal and medical information of individuals who had health insurance claims processed through the company. Affected…
Healthcare data analytics company Gryphon Healthcare has agreed to a $2.8 million settlement to resolve a class action lawsuit over a data breach discovered in August 2024. The breach exposed sensitive patient data including names, Social Security numbers, medical records,…