Recent fake data breach reports for Discord and VRChat filed with the state of Maine have demonstrated that data breach reporting portals can instead become a source of fast-spreading disinformation if not managed properly.
A record-setting fine of 624 billion won just handed down for ecommerce giant Coupang’s 2025 data breach demonstrates that South Korea’s privacy regulators continue to move in an even more strict direction.
Proposed harsh penalties for Coupang in the wake of its late 2025 data breach have spooked numerous US investors in the company, who have now filed a class action suit seeking to force South Korea’s Ministry of Justice into arbitration.
Reports of a new Instagram data breach several days ago are being walked back as it becomes increasingly likely that a mysterious wave of password reset requests was caused by a new dark web compilation of very old information.
Anyone still concerned about wild claims of 2.5 billion or 183 million Gmail passwords stolen that have appeared in recent weeks can relax and breathe easy. Google has confirmed that it has not suffered any kind of mass data breach.
Hacking group Crimson Collective was able to breach a self-managed GitLab instance used by the Red Hat consulting division, making off with about 570 GB of compressed data. The stolen data has since been seen for sale on Telegram channels.
Australia’s rules provide for fines of up to AUD 2.2 million per impacted customer. And the privacy regulator is seeking to treat each of the about 9.5 million Optus customers as an individual data breach for fine purposes, as it looks to make examples of some of the largest breach victims believed to have been negligent in their cybersecurity duties.
Google’s own Salesforce hack involved the contact information of an unspecified number of small to medium businesses and was not considered a serious issue as the tranche of data was “largely public” anyway. The company did not disclose the data breach until two months after it began warning about the ShinyHunters campaign, however.
Follow-up investigation by the Ministry of Science and ICT found that some 28 Linux servers were compromised during this extended campaign with about 26.96 million subscriber identity records stolen.
Australia’s Qantas has been contacting customers about a data breach that appears to be tied to its loyalty rewards program. The airline says that a third-party contact center was compromised and at least some of its customers, potentially up to six million, are impacted.