The Lab · 2026-04-03 21:27:14 · GitHub Issues
A ransomware attack has compromised the sensitive personal data of more than 12,000 individuals connected to the Children’s Council of San Francisco. The breach, which began as a network disruption on August 3, 2025, was later confirmed to involve unauthorized access and the acquisition of protected health information ...
The Lab · 2026-04-03 22:26:53 · GitHub Issues
A fundamental authentication flaw in a healthcare application's backend exposes protected health information (PHI) to trivial impersonation attacks. The system currently authenticates users by blindly trusting a client-sent `X-User-ID` header. This means any user who knows or can guess a valid UUID—including an adminis...
The Lab · 2026-04-13 16:23:08 · GitHub Issues
Southern Illinois Dermatology has confirmed a significant data breach, with unauthorized actors accessing and potentially copying sensitive patient files from its network. The incident, first detected on November 28, 2025, exposed a trove of protected health information (PHI) and personal identifiers, including full na...
The Lab · 2026-04-16 00:23:01 · GitHub Issues
A major data security incident at Vital Imaging Medical Diagnostic Centers has exposed the protected health information of at least 260,000 patients, creating a significant privacy and regulatory risk. The breach, which involved unauthorized network activity discovered in February 2025, has compromised a trove of sensi...