IDScan Probe: 153M License Scans on Nexus
Unverified Nexus/Exploit sale claimed 153M+ US/Canada driver’s-license scans; Krebs and FBI probe point to suspected IDScan.net — company has not confirmed.
Blog
Technical writeups, breach analyses, and security insights from the BreachHistory team.
Thomson Reuters C-Track: Court Files Stolen
Thomson Reuters says an unauthorized party obtained C-Track court files in March 2026 (detected June 30), affecting courts in 11 U.S. states, the USVI, and Canada.
Aesto Health Breach: 9.54M Patients on HHS
Aesto Health’s Dec 2025 AWS intrusion now stands at 9.54M people on HHS — SSNs, medical, insurance, and government ID data for dozens of provider clients.
McKesson Breach: ShinyHunters Claims 284M Patients
McKesson confirms third-party app data exfiltration Aug 28, 2026. ShinyHunters claims 284M patients — count unverified. Investigation ongoing.
Dodo Payments Breach: Metabase Hack Hits Merchants
Dodo Payments confirms Aug 16 Metabase CVE-2026-72898 access to merchant reporting data. Cards, API keys, and payments not affected per notice.
Travala Breach: Passwords and Passport Data
Travala disclosed customer data theft incl. hashed passwords, passports, and crypto wallet addresses; state AG filings Jun–Jul 2026.
LACMA Class Action: SSN Breach Lawsuit Filed
Former LACMA employee sues over July 2025 breach exposing SSNs and medical fields; museum notice came ~a year later.
MAG Breach: 8.7M Airport Customer Records
Manchester Airports Group confirms ~8.7M customers hit; emails, phones, vehicle regs from parking, lounges, and WiFi — no card data.
Baylor Genetics Breach: 2.8M on HHS OCR
Baylor Genetics reports 2,810,878 people to HHS after June network intrusion; lab results, diagnoses, and SSNs may be exposed.
Boston Scientific Cyberattack Halts Device Shipments
Boston Scientific confirms an Aug 25 cyber incident that disrupted global medical-device orders. SEC 8-K filed; no confirmed data theft yet.