Skip to content

Cyber Security Breach

Marquis Data Breach

Date of Incident: August 2025 Overview: The Marquis data breach, reported in December 2025, affected the finance sector, impacting over 400,000 customers across 74 U.S. banks and credit unions. Personal information, including Social Security numbers and financial account details, was exposed. Despite no evidence of data misuse, Marquis paid a ransom to prevent further data… Read More »Marquis Data Breach

University of Pennsylvania Oracle E-Business Suite Breach

Date of Incident: August 2025 Overview: In August 2025, the University of Pennsylvania experienced a data breach targeting its Oracle E-Business Suite, attributed to the Clop ransomware group. Attackers exploited a zero-day vulnerability, compromising personal information of 1,488 individuals, with a potential for more. The breach utilized advanced tactics such as SQL injection and remote… Read More »University of Pennsylvania Oracle E-Business Suite Breach

University of Phoenix Oracle E-Business Suite Data Breach

Date of Incident: 2025-11-21 Overview: The University of Phoenix experienced a data breach on November 21, 2025, which was reported on December 3, 2025. This breach affected the education sector, compromising sensitive personal and financial information of current and former students, employees, faculty, and suppliers. Attackers exploited vulnerabilities in the Oracle E-Business Suite, specifically through… Read More »University of Phoenix Oracle E-Business Suite Data Breach

Coupang Data Breach

Date of Incident: June 24, 2025 Overview: The Coupang Data Breach, reported on December 1, 2025, impacting the retail sector, involved the customer database being accessed without authorization on June 24, 2025. Abnormal activity was detected on November 14, 2025, with breaches potentially dating back to June 2025. Coupang announced the breach and provided details… Read More »Coupang Data Breach

North Korean IT Worker Schemes

Date of Incident: Ongoing (no specific date provided) Overview: In an ongoing insider threat scheme dubbed “North Korean IT Worker Schemes,” involving unidentified IT workers, unauthorized access using legitimate credentials has led to significant data theft and potential malware deployment within the software sector. The breach, targeting customer data, financial records, and intellectual property, also… Read More »North Korean IT Worker Schemes