CASTLER CYBER WATCH
Data breaches, cyberattacks, exploited vulnerabilities and supply-chain failures — what happened, what is actually confirmed, and what it means for the software and vendors you depend on.
Coverage may be out of date. No successful source check has been recorded in the past 36 hours.
IDScan has acknowledged unauthorized access to information in its cloud platform, according to The Record. Reports have linked the incident to a marketplace advertising millions of identity-document scans, but the company has not specified how many people were affected. The distinction between advertised scans and confirmed victims remains important.
Veradigm says credentials obtained from a third-party vendor were used to access a limited customer-service interface and copy patient information. BleepingComputer reports that the company has not identified the attacker and says operations were not disrupted. A ransomware group's separate claims about the volume of stolen records remain unverified.
CISA's September 8 alert adds four exploited vulnerabilities spanning Adobe Commerce and Magento, Microsoft Windows, and N-able N-central. The advisory is a patch-prioritization signal for affected deployments, not a single breach report. One Windows issue also appears in separate reporting on the BlueMoon exploit chain.
Dates refer to source reporting, not necessarily when an incident occurred. Coverage is selective and may include multiple developments about the same event.