Massive ransomware attack on government contractor Conduent may have exposed data of tens of millions across multiple states ...

A third-party data breach occurs when malicious actors compromise a vendor, supplier, contractor, or other organization to gain access to sensitive information or systems of the victim’s customers, ...

An expanded data breach definition and the telcos’ desire to link notifications to “concrete harm” are among the most controversial aspects of the proposed FCC data breach reporting rules.

When a healthcare data breach is first disclosed, the number of people affected is often far lower than the final tally. That figure frequently climbs as investigations continue. That's exactly what ...

On October 3, 2025, Governor Gavin Newsom signed into law Senate Bill No. 446, which makes important changes to the California data breach notification statute. The new law, which takes effect on ...