57
57
57
57
57
57
57
Revolut Data Breach Exposes Customers’ Passport Copies and Full Transaction Histories to Hackers
Revolut leaked KYC documents and full transaction histories after a fraudulent, domain-authenticated email request impersonating a government agency.
Revolut disclosed that an attacker using an unauthorized email account on a legitimate government domain, with valid domain-authentication credentials, tricked the fintech into releasing customer data. The exposed data includes passport and driver's license copies, identity-verification selfies, full names, dates of birth, addresses, IBANs, and complete transaction histories including Bitcoin activity. Revolut says core systems, accounts, and funds were not compromised, and it blocked the email source and notified authorities. On-chain investigator ZachXBT and others indicated the operation targeted high-net-worth users facing elevated phishing, SIM-swap, and extortion risk.
62
57
57
57
57
57
57
57
57
AdaptHealth confirms 4.1 million people exposed in July cyberattack
AdaptHealth confirmed a ShinyHunters-attributed cyberattack exposed data of 4.1 million patients via a compromised third-party contractor account.
Healthcare company AdaptHealth confirmed 4,115,802 individuals were exposed in an intrusion first disclosed in an SEC filing on July 2, 2026, with the compromise beginning June 5. Attackers used social engineering to compromise a privileged third-party contractor account, accessed cloud-based patient management, document storage and EHR portals, and exfiltrated names, contact details, demographic, insurance and health information before a June 15 ransom demand. The attack was attributed to the ShinyHunters group, though the company no longer appears on the gang's extortion portal. Impacted individuals are being offered 12 months of free credit monitoring and identity protection.
78
McKesson copes with fallout from data theft extortion attack
McKesson discloses a data theft extortion attack by ShinyHunters affecting oncology and medical-surgical customers, with a reported $55 million demand.
McKesson disclosed that attackers gained access to some of its third-party applications and stole data associated with a subset of customers in its oncology, multispecialty, and medical-surgical business units; the intrusion ran for four days from August 21 and was discovered August 25. ShinyHunters claimed responsibility and listed McKesson on its data-leak site, reportedly demanding more than $55 million with a September 1 deadline. Flashpoint analysts say the group typically uses social engineering and identity weaknesses with valid credentials to access cloud-hosted environments, making the intrusion hard to detect. McKesson, which distributes about one-third of pharmaceuticals used in North America with $403.4 billion in annual revenue, says operations continue and it has reasonable assurance of no ongoing unauthorized activity.
80
57
57
UAT-10608: Inside a large-scale automated credential harvesting operation targeting web applications
60
57
57
57
57
57
57
57
57
57
57
57
57
IDScan confirms breach tied to 153 million stolen driver’s licenses
IDScan confirmed hackers accessed customer data in its cloud, linked to over 153 million stolen driver's license scans offered on a dark-web platform.
Identity verification firm IDScan disclosed on September 4 that an unauthorized third party may have accessed or copied customer data in its IDScan.net cloud, including full names and government-issued ID numbers. The incident was linked to a dark-web 'Nexus' platform advertising over 153 million US and Canadian driver's license scans, plus 10 million ID cards, 3 million travel documents, and 579,000 medical cards. Multiple lawsuits have been filed, the FBI confirmed it is investigating, and IDScan is offering free credit monitoring to potentially affected individuals.
88
57
57
57
57
57
57