Bitcoin Depot Data Breach: $3.6M in Bitcoin Stolen
The Bitcoin Depot data breach has put one of North America's largest crypto ATM operators in the spotlight for all the wrong reasons. Hackers broke into the company's internal systems and walked away with approximately 50.9 Bitcoin — worth around $3.665 million — from corporate settlement accounts. The company disclosed the incident via an SEC filing on April 8, 2026,

Eurail Confirms 308,000 Affected in December Data Breach
A data breach at European rail pass provider Eurail B.V. has compromised the personal information of 308,777 people worldwide. The Eurail data breach began on December 26, 2025, when an unauthorized actor accessed the company's systems and transferred files containing sensitive customer data. The stolen records have since appeared for sale on the dark web, making this one of the
CareCloud Data Breach Exposes Patient Health Records
Healthcare IT firm CareCloud has confirmed a data breach that gave attackers unauthorized access to one of its electronic health record systems for roughly eight hours. The New Jersey-based company disclosed the incident to the U.S. Securities and Exchange Commission on March 24, more than a week after the intrusion on March 16. Patient health records were stored in the

Ajax Data Breach Exposes Fans and Ticket Data
Dutch football club AFC Ajax Amsterdam has confirmed an Ajax data breach that exposed fan records and left tens of thousands of season tickets vulnerable to theft. The club learned about the security failure not from its own systems, but from a journalist tipped off by the hacker. The breach has raised serious questions about how sports organizations handle fan

Dutch Government Cyberattack Hits Finance Ministry
The Dutch government is under fire again after a cyberattack breached the Ministry of Finance's internal systems. The Ministry of Finance confirmed on March 24 that unauthorized access to its internal systems was detected on March 19. The breach reached systems described as primary processes within the ministry's policy department, though the full extent of the intrusion remains unknown. The

Navia Data Breach Hits 2.7 Million People
A benefits administrator most people have never heard of has exposed the sensitive personal data of nearly 2.7 million individuals across the United States. The Navia data breach is one of the largest employee benefits-related incidents in recent memory. And the ripple effects are still expanding. Navia Benefit Solutions, headquartered in Renton, Washington, manages healthcare and spending account benefits on

Stryker Cyberattack Wiped 80,000 Devices in Hours
The Stryker cyberattack did not follow the usual playbook. There was no ransomware, no malicious code, and no encrypted files waiting on a ransom demand. Instead, attackers turned a legitimate Microsoft tool against one of the world's largest medical device companies and wiped approximately 80,000 employee devices in less than three hours. The incident, which began on March 11, 2026,

England Hockey Hit by AiLock Ransomware Attack
England Hockey is investigating a potential data breach after the AiLock ransomware gang listed the organization as a victim on its public leak site. The group claims to have stolen 129GB of data from the national governing body's systems. And is now threatening to publish it unless a ransom is paid. AiLock ransomware is a relatively new but technically capable

Starbucks Data Breach Exposes Employee SSNs and Bank Details
The Starbucks data breach disclosed this week is more serious than a scheduling glitch or a vendor outage. This time, attackers got into the coffee chain's internal HR portal and walked away with some of the most sensitive personal data an employer holds: Social Security numbers, bank account details, and financial routing numbers. Moreover, the breach affected 889 employees and

Star Citizen Data Breach Exposes User Data
Star Citizen data breach disclosures have raised concerns about how game developers secure user information stored in backup systems. Cloud Imperium Games confirmed that attackers accessed part of its infrastructure in January 2026, exposing certain account details linked to player profiles. The company stated that no passwords or payment information were compromised, but the incident still highlights the risks tied
