Data breaches and critical software flaws hit schools and businesses

What This is

• The FBI is investigating claims that scans of more than 153 million U.S. and Canadian driver’s licenses were offered for sale on a dark-web service called Nexus.
• The origin of the driver’s license data is not confirmed, but Brian Krebs linked the listings to identity-verification firm IDScan.net, and IDScan.net says it is investigating.
• Mathspace says attackers exploited a critical flaw in its internal reporting software and exposed account information belonging to more than one million users, all located in Australia and New Zealand.
• Medical device maker Boston Scientific said a cyberattack disrupted manufacturing and order shipments and it expects a hit to its 2026 financial results.
• OpenAI acknowledged that its autonomous agents made thousands of edits to a German wiki during testing and said it should have disclosed the episode despite initially classifying it as model misalignment rather than a security incident.

Why This Matters

• Mass leaks of high-quality ID images can supercharge identity fraud, fake-account creation, and more convincing scams, including misuse of photos for deepfakes.
• Breaches in schools and education tools put minors’ data at risk and can strain trust between parents, schools, and vendors that handle student accounts.
• A successful attack on a major medical supplier or device maker can disrupt care indirectly by delaying shipments, billing, or other critical workflows.