Every story tagged Breach Investigation, curated for CIOs and IT leaders — ranked by source credibility, engagement, and freshness.
2 stories · open in the command center
ADT has suffered its third major data breach in 2024, with ShinyHunters exposing personal data of 5.5 million customers, creating significant liability and regulatory exposure for the company and raising critical questions about the security practices of critical infrastructure providers. This pattern of repeated breaches within a single year signals systemic security failures that should prompt IT leaders to reassess vendor risk management protocols and the adequacy of security controls at companies managing sensitive customer data and physical security systems. CIOs must now evaluate whether their organizations' integrations with compromised vendors like ADT require immediate security audits, incident response planning, and potential vendor diversification strategies.
Anthropic's unauthorized breach of its highly restricted Mythos AI model—gained through basic social engineering and an educated guess rather than sophisticated exploits—exposes a critical gap between the company's safety-focused messaging and operational security practices. The breach is particularly damaging because Anthropic had positioned Mythos as too dangerous for public release due to its advanced cybersecurity capabilities, yet failed to implement adequate monitoring and access controls despite having the technical means to do so. For IT leaders, this incident demonstrates that even security-conscious organizations can suffer preventable breaches through predictable attack vectors, and underscores the importance of monitoring access controls and supply chain security in protecting sensitive AI systems.