Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentJapan's telecom breaches exposed millions of records, revealing critical detection delays and third-party risks that amplify data exposure and phishing threats.
Breach & Risk AssessmentResearch platforms repeatedly fail output controls, risking sensitive health data. Manual reviews, clear authority, and sanctions are vital to prevent breaches.
Breach & Risk AssessmentA 12-year-old test account using 'Password1' enabled attackers to breach Data Cymru, exposing personal data of 3,300 children and families.
Breach & Risk AssessmentThe UK s Legal Aid Agency discovered attackers had exfiltrated around 250,000 records dating back to 1978. This breach included nearly five decades of personal data that should never have been accessi
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentA small Danish company had legal access to Denmark s Central Register of Persons. For about 10 days in September 2026, attackers used that access to query 8.8 million records. The system charged per l
Breach & Risk AssessmentWhen Denmark s Central Population Register (CPR) breach exposed 8.8 million records through misused third-party access, it highlighted how myths about registry security create vulnerabilities that att
Breach & Risk AssessmentUnderstanding the Dilemma The recent breach at Times Car, where 6.6 million user accounts were compromised, highlights a critical question for data governance teams: should you hash passwords or encry
Breach & Risk AssessmentThe Challenge On July 16, 2026, the Defense Manpower Data Center (DMDC) discovered a security vulnerability in its file-sharing system. This vulnerability had been exploited since October 2025, leadin
Breach & Risk AssessmentYour team published aggregate statistics on a public-facing website. The dashboard shows enrollment counts, demographic breakdowns, and service utilization rates. No names or Social Security numbers a
Breach & Risk AssessmentOn September 11, 2026, attackers exploited a server vulnerability in Gyazo s infrastructure, stealing 23.62 million user records before the company detected the breach the following day. The stolen da
Breach & Risk AssessmentThe Question at Hand The AdaptHealth breach, which affected over 4 million individuals, began with a social engineering attack on a third-party contractor s user session. This contractor had access to
Breach & Risk AssessmentYour compliance team needs actionable answers, not theoretical case studies. When IDScan confirmed on September 4, 2023, that unauthorized parties accessed data tied to over 153 million driver s licen
Breach & Risk AssessmentYour organization probably stores copies of driver s licenses, passports, or national ID cards. You might keep them for age verification, employment eligibility checks, or account security. The questi
Breach & Risk AssessmentWhen Thomson Reuters disclosed unauthorized access to its C-Track platform in June 2026, three months after the breach began, the incident exposed court records across at least 12 US states, the US Vi
Breach & Risk AssessmentThe Challenge On August 28, McKesson confirmed unauthorized access to third-party applications serving its Oncology Multispecialty and Medical-Surgical business units. ShinyHunters, the threat actor c
Breach & Risk AssessmentThese questions come from conversations with data governance and privacy teams after Manchester Airports Group disclosed a third-party database breach that exposed about 8.7 million customers details.
Breach & Risk AssessmentThe problem / why this matters now Your customer database is secure behind firewalls and encryption, but what about your third-party vendors? They often have access to the same data, and you don t con
Breach & Risk AssessmentThe Challenge SafePal discovered unauthorized access to customer order information, affecting 39,798 customers who placed orders between March 2, 2025, and April 11, 2026. The breach exposed names, em
Breach & Risk AssessmentThe conventional wisdom says third-party vendors are the weak link in your security chain. After a breach like the one at Manchester Airports Group , where 8.7 million email addresses leaked from a th
Breach & Risk AssessmentWhat Happened In August 2026, attackers breached Manchester Airports Group s (MAG) systems, stealing personal information from about 8.7 million customers at Manchester Airport, London Stansted, and E
