Hacker Breach News Today

Instructure's Canvas learning management platform has been restored online following a disruption caused by a confirmed data breach. The ShinyHunters hacking group claimed responsibility for the incident and is threatening to leak sensitive school data if ransom demands are not met.

Dunwoody, Georgia residents are furious after learning that surveillance firm Flock accessed cameras inside a children's gymnastics room during a sales demonstration. The privacy breach has sparked intense backlash against the city's surveillance contract, prompting citizens to question whether local elected officials actually care about the incident.

Mercor, a company specializing in AI voice authenticity and deepfake detection, has suffered a data breach resulting in the theft of 4TB of voice samples. The compromised audio data belongs to 40,000 AI contractors whose recordings are used to train and verify the firm's audio forensics infrastructure.

Bitwarden CLI version 2026.4.0 was compromised after attackers abused a GitHub Action within Bitwarden's CI/CD pipeline. This breach is part of the ongoing Checkmarx supply chain campaign.

France Titres, the French government agency responsible for issuing administrative documents, has confirmed a data breach involving stolen citizen data. The disclosure follows claims from a threat actor who compromised the system and is now offering the stolen information for sale.

A recent OAuth supply chain compromise at Vercel highlights how trusted third-party applications and platform environment variables can bypass traditional defenses to significantly amplify a breach's impact. This incident underscores the critical need for developers to reassess software supply chain risks and the underlying design tradeoffs of modern PaaS environments.

Vercel suffered a significant data breach after an employee at the AI startup Context AI inadvertently installed malware from a Roblox cheat, enabling attackers to exploit an OAuth integration and access internal systems. The incident led to the exfiltration of non-sensitive environment variables and has forced thousands of developers to undertake massive credential rotation efforts. Ultimately, the attack underscores the severe security vulnerabilities introduced by granting broad access permissions to third-party AI productivity tools.

The European Commission recently launched a new age verification app, claiming the technology was fully prepared for deployment, but cybersecurity experts quickly identified critical flaws. Hackers successfully breached the application in just two minutes, exposing significant security vulnerabilities in the EU digital initiative.

Cloud development platform Vercel has disclosed a security incident after threat actors claimed to have breached its systems. The attackers are currently attempting to sell the stolen data.

Vercel disclosed a security breach impacting its internal systems that came to light on Sunday. The company has brought in an incident response provider to investigate the intrusion, though specific details regarding the scope of the attack remain scarce.

A newly compiled archive details a staggering timeline of major cybersecurity breaches that have largely flown under the radar this year. By documenting these underreported hacks, the collection sheds light on the escalating and often overlooked digital threats facing modern organizations.