Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentA Metabase vulnerability exposed data on 1,079,819 students and parents at Mathspace, with unauthorized access from August 10 to August 27, 2026. Attackers exploited an unpatched SQL injection flaw to
Breach & Risk AssessmentYou ve just learned that a third-party ID verification service your organization uses may have exposed 153 million driver s licenses. The FBI is investigating. Class-action lawsuits have been filed. Y
Breach & Risk AssessmentAfter major breaches hit the news, security and privacy teams often wonder, Could that happen here? The Hôpital privé de la Loire incident, where CNIL issued a €500,000 fine after an attacker extracte
Breach & Risk AssessmentThe IDscan.net breach exposed 153 million drivers licenses on the dark web. If you re using a vendor for identity verification, their security posture becomes your liability. The FBI is investigating,
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentWhen identity verification vendors handle millions of documents, you d expect them to secure those systems like a vault. Yet, lawsuits are filed, the FBI is investigating, and 153 million driver s lic
Breach & Risk AssessmentWhen Thomson Reuters disclosed unauthorized access to its C-Track platform in June 2026, three months after the breach began, the incident exposed court records across at least 12 US states, the US Vi
Breach & Risk AssessmentThe Challenge Manchester Airports Group (MAG) experienced a massive data breach when attackers exfiltrated 550 gigabytes of customer data from a third-party hosted database. This breach exposed 8.8 mi
Breach & Risk AssessmentWhen attackers claim a 33GB archive of your files, your first 72 hours determine whether you face regulatory penalties, class-action exposure, or both. This guide breaks down the technical and complia
Breach & Risk AssessmentThe Challenge Between December 2 and December 18, 2025, an unauthorized actor accessed Amazon Web Services infrastructure belonging to Aesto Health, a healthcare data management provider. Aesto stores
Breach & Risk AssessmentThe Conventional Wisdom Security teams often believe that human review of every alert, exception request, and policy change is essential for data protection. The logic seems sound: automated systems c
Breach & Risk AssessmentWhat Happened UK organizations are facing a surge in litigation following cyber incidents. Legal teams report increased exposure in three areas: individual personal data claims under data protection l
Breach & Risk AssessmentThe Challenge On August 28, McKesson confirmed unauthorized access to third-party applications serving its Oncology Multispecialty and Medical-Surgical business units. ShinyHunters, the threat actor c
Breach & Risk AssessmentThe Privacy Commissioner s investigation into Human Resources and Skills Development Canada s breach of student loan recipient information follows a familiar pattern: a sensitive data exposure, regula
Breach & Risk AssessmentA year into mandatory data breach reporting, many organizations are still getting the basics wrong. It s not because the regulations are unclear, GDPR Article 33 and similar frameworks are explicit, b
Breach & Risk AssessmentWhen your mobile banking platform exposes customer data mid-deployment, you face an immediate decision: roll back the update, suspend the service, or monitor and contain. The wrong choice worsens the
Breach & Risk AssessmentYour security team just confirmed unauthorized access to customer data. You don t yet know how many records, which fields, or whether the attacker is still in your environment. The clock on your 72-ho
Breach & Risk AssessmentWhat Changed On June 26, Nissan revealed a critical remote code execution flaw in Oracle PeopleSoft, CVE-2026-35273, had been exploited as a zero-day. This breach exposed Social Security numbers, bank
Breach & Risk AssessmentThese questions come from conversations with data governance and privacy teams after Manchester Airports Group disclosed a third-party database breach that exposed about 8.7 million customers details.
Breach & Risk AssessmentScope This guide outlines the technical controls and operational practices needed to prevent credential exposure in client-side JavaScript and secure API endpoints from unauthorized access. It focuses
Breach & Risk AssessmentWhen ShinyHunters demanded approximately $55 million from McKesson Corporation in late August, they exposed more than just stolen data. They highlighted a widespread misunderstanding of third-party ri
