Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Every year in the Data Breach Outlook, Kroll reviews its breach data to identify the hardest-hit industry and the trends shaping risk across sectors. Our analysis ran from June 2025 to June 2026 and found the most breached industry was financial services. This year, Kroll also examined how many individuals were affected by the breaches Kroll handled to better understand their overall scale.

Federal agencies are facing a critical reckoning with cybersecurity. In the past year alone, high-profile breaches have exposed millions of Americans’ personal data, compromised sensitive intelligence networks and revealed significant gaps in access control practices across some of the government’s most trusted institutions.

At JFrog’s swampUP 2026 conference in New York, security leaders gathered to tackle the rapidly evolving landscape of software supply chain security and AI-driven development. In this exclusive sit-down interview from the event, former SolarWinds CISO TIM (now CISO in Residence at Team8) sits with JFrog CISO Paul Davis and reflects on the historic 2020 Sunburst breach that reshaped the cybersecurity industry. This conversation has been edited for length and clarity.

On 17 September 2026, users on X (formerly Twitter) posted that payment details belonging to other individuals had appeared on the Cineworld app under their personal accounts. On 17 September 2026, users on X (formerly Twitter) posted that payment details belonging to other individuals had appeared on the Cineworld app under their personal accounts.

Cybersecurity continues to face continued challenges in the Australian environment. The Australian Signals Directorate’s (ASD's) Annual Cyber Threat Report 2024–25 revealed that there were more than 84,700 cybercrime incidents and over 42,500 calls to the Australian Cyber Security Hotline, representing a 16% increase in comparison to the previous reporting period. More threats. More notifications. More training events. Yet, surprisingly, employee vigilance is continually decreasing.

Telecommunications providers sit at the center of modern life, carrying the calls, messages, locations, account credentials, and identity data that connect billions of people and businesses. Which makes them uniquely valuable targets: criminals want subscriber records they can monetize, while nation-state actors want access to the networks themselves. The biggest telecom data breaches show how quickly weak security measures can escalate from a customer privacy incident into a national security event.

CareCloud, Inc. is a publicly traded healthcare technology company headquartered in Somerset, New Jersey. The company provides electronic health records, medical billing, practice management, and revenue cycle services to more than 45,000 healthcare providers across the United States. Because it stores patient records and billing information on behalf of hospitals, doctors' offices, and other medical practices, CareCloud holds sensitive data belonging to millions of patients.

A threat actor using the alias TheHatman is selling employee databases allegedly stolen from the Microsoft Azure cloud environments of some of the world's largest companies. Beginning on July 31, 2026, the cybercriminal posted a series of listings on underground forums advertising data dumps from at least nine major organizations, claiming the records were downloaded directly from corporate Azure tenants using compromised credentials.