AI-assisted desk

Nina Alvarez

Breaches & Ransomware Desk

AI-assisted desk · AI-drafted, source-checked, released by the publisher. How we use AI

Nina Alvarez is an AI-assisted desk byline covering data breaches and ransomware for ZeroDayFeed. The desk works from breach-notification filings, SEC 8-K disclosures, state attorney general portals, and victim statements to report what was taken, who is affected, and what readers should do next. Every article under this byline is AI-drafted, checked against its cited sources, and released by the publisher.

Data Breaches Ransomware Extortion Groups Incident Disclosure

Editorial tips and corrections: [email protected]

Articles by Nina Alvarez

Astrana Health files Item 1.05 8-K over impersonation calls that spoofed its main phone number
Breaches · 2026-10-19

Astrana Health told the SEC that threat actors impersonated staff and spoofed its main corporate phone number in an effort to get system access, and that confidential data was like…
Upbound mails breach notices for July cloud-file theft after 8-K cited "non-sensitive" data
Breaches · 2026-10-19

Upbound Group, parent of Rent-A-Center and Acima, began mailing breach notices on September 23 for files taken from its cloud apps on July 3–6, after a July 21 8-K said "non-sensit…
FBI, Secret Service: FortiBleed credential campaign locks out FortiGate admins and feeds ransomware
Ransomware · 2026-10-19

A joint FBI and Secret Service advisory says the FortiBleed credential campaign against FortiGate firewalls and SSL VPNs is still active. Attackers are locking out real admins, and…
iRhythm notifies patients of June breach; Texas and South Carolina filings alone show about 368,000
Breaches · 2026-10-19

Zio patch maker iRhythm began notifying patients on Oct. 2 about a June social-engineering intrusion and extortion demand that exposed health data. Texas and South Carolina filings…
UIC confirms ransomware attack on College of Medicine; Booba gang claims 344 GB of stolen data
Ransomware · 2026-10-19

UIC says ransomware hit parts of its College of Medicine network and attackers took some data from its servers, while the Booba gang claims 344 GB, a figure UIC has not verified.
DOJ: MonsterCloud Owner Secretly Paid Ransomware Gangs $8M While Billing Victims $19M
Ransomware · 2026-10-19

Federal prosecutors allege MonsterCloud owner Zohar Pinhasi sold ransomware victims decryption technology he did not have, secretly paying attackers more than $8 million while bill…
Oracle Health Breach Tally Reportedly Nears 20 Million After Cerner's Texas AG Filing
Breaches · 2026-10-19

A Cerner entry on the Texas Attorney General's breach portal lists 2,992,244 Texans, and news reports put the nationwide count for the 2025 intrusion into legacy Cerner servers at …
CenterPoint Energy tells Texas AG 1,062,060 residents hit by breach, a month after its SEC filing
Breaches · 2026-10-19

CenterPoint Energy told the Texas Attorney General that 1,062,060 Texans had names, addresses, SSNs and driver's license numbers exposed, a month after an SEC 8-K that disclosed th…
Stolen ConnectWise Cloud Backup credential opened Microsoft 365 tenants; ConnectWise suspends three services
Breaches · 2026-10-19

Attackers used a compromised ConnectWise Cloud Backup (formerly SkyKick) app credential to get app-only Graph access to at least 173 Microsoft 365 tenants, prompting ConnectWise to…
Anne Arundel County confirms files were copied in August intrusion after Rhysida ransomware claim
Ransomware · 2026-10-19

Anne Arundel County, Md., says an unauthorized actor got into a limited number of systems in August and copied files. The Rhysida gang claimed the attack and says it wants $2 milli…
Cyber incident at contractor BAE Systems knocks out federal bankruptcy court noticing systems
Breaches · 2026-10-19

A cybersecurity incident at BAE Systems, which runs the federal judiciary's Bankruptcy Noticing Center, has stopped the production and distribution of bankruptcy notices and taken …
Compromised Login Exposes California Student Testing Data Held by ETS; Notifications Begin
Breaches · 2026-10-19

An unauthorized party used a compromised credential to copy California student records from an ETS-run SFTP site between May and September 2026; the state began notifying families …