Pii on CuraSec

LACMA discloses year-old breach exposing SSNs and medical data

Wed, 26 Aug 2026 11:42:13 +0000

Engineer — Skip
SOC/IR — Skip
Leader — Learn: A delayed disclosure involving SSNs and medical records is a useful benchmark for breach notification timelines and data-type risk classification, though no vendor exposure or systemic risk is indicated for enterprise security programs.

Mon, 17 Aug 2026 13:03:16 +0000

Engineer — Learn: Novel prompt-based technique for splitting LLM inference between local and cloud without leaking PII; worth tracking if you’re building hybrid AI pipelines, but no patch or config action required today.
SOC/IR — Skip
Leader — Learn: Relevant background for leaders defining AI data governance policies around cloud LLM usage, but no immediate risk register or vendor action required.

Mon, 17 Aug 2026 11:37:07 +0000

Engineer — Skip
SOC/IR — Learn: Government financial authority breach with no published IOCs or TTPs; monitor for follow-on phishing campaigns using stolen French taxpayer data but no actionable detection surface yet.
Leader — Learn: Large-scale government PII breach in the EU; useful context for board discussions on public-sector breach risk and GDPR notification timelines, but no direct vendor or operational exposure for a US/global enterprise.

Sat, 25 Jul 2026 12:08:50 +0000

Engineer — Skip
SOC/IR — Learn: No IOCs or TTPs disclosed; breach at a logistics vendor with no actionable detection surface for enterprise defenders at this time.
Leader — Act: If OnTrac is in your vendor portfolio or used by employees for business shipments, confirm exposure scope and request an incident report from OnTrac this week before customer or leadership questions surface.