Daily Digest

Data Breaches at Healthcare, Government, and Retail; Phishing Evasion Technique Detailed

September 6, 2026
5 articles (4 new, 1 updated)
15 min read

Summary

Healthcare and Government Data Breaches:

  • Baylor Genetics Breach Exposes Medical Data of Over 2.8 Million: An investigation concluded that the Baylor Genetics breach, initially reported to expose medical data, also included health insurance information, government ID numbers, and employee financial data for a subset of individuals. New cyber observables for hunting include specific command-line patterns and file paths used for data staging.
  • Winona County, MN Paid Ransom Before Being Hit a Second Time: Winona County, Minnesota, confirmed paying a $128,539 ransom after a January 2026 ransomware attack. Despite the payment, the county experienced a second, unrelated ransomware attack in April 2026, highlighting the persistent threat and questions surrounding ransom payment effectiveness.

Retail and Staffing Firm Breaches:

  • See's Candies Hit by Qilin Ransomware, Sparking Investigations: Confectionery company See's Candies was targeted by the Qilin ransomware group in April 2026, involving file encryption and data exfiltration. Stolen data, potentially including customer and employee PII, has led to investigations into the company's data security practices, with scrutiny on the four-month delay in public disclosure.
  • Staffing Firm HumanEdge Discloses Breach Exposing SSNs: New York-based staffing firm HumanEdge, Inc. disclosed a breach detected in March 2026 that exposed sensitive personal information, including full names and Social Security numbers of employees, job applicants, and clients. The company began notifying affected individuals in September and is facing a class-action law firm investigation.

New Threat Tactics:

  • ASCII Smuggling Phishing Attack Evades Filters with Unicode: Microsoft detailed a high-volume phishing campaign that utilized 'ASCII smuggling' by inserting invisible Unicode characters into financial keywords. This technique split words at a code level, allowing emails to bypass security filters relying on exact keyword matching while appearing normal to users, linked to an SBA loan-themed operation.

Filter by Category

New Articles (4)

Winona County, MN Paid Ransom Before Being Hit a Second Time

HIGH

Winona County Paid Ransom, Then Attacked Again

Officials in Winona County, Minnesota, confirmed they paid a $128,539 ransom following a ransomware attack in January 2026 to restore services and protect resident data. Despite the payment, the county was targeted by a second, unrelated ransomware attack just three months later in April. The incident highlights the persistent threat ransomware poses to local governments and raises questions about the effectiveness of paying ransoms, as attackers often fail to delete stolen data or provide working decryptors.

September 6, 2026
5 min read
ransomwaregovernmentincident responseransom paymentcyberattack
Winona County, MN Paid Ransom Before Being Hit a Second Time

Staffing Firm HumanEdge Discloses Breach Exposing SSNs

HIGH

HumanEdge Staffing Firm Discloses Data Breach

The New York-based staffing and recruitment firm HumanEdge, Inc. has disclosed a data breach that exposed sensitive personal information, including full names and Social Security numbers. The incident, which was first detected in March 2026, was found to have compromised files containing PII of employees, job applicants, and clients. The company began notifying affected individuals in September and is now facing an investigation by a national class-action law firm.

September 6, 2026
4 min read
data breachpiisocial security numberstaffingclass action
Staffing Firm HumanEdge Discloses Breach Exposing SSNs

See's Candies Hit by Qilin Ransomware, Sparking Investigations

HIGH

See's Candies Hit by Qilin Ransomware Attack

The confectionery company See's Candies, Inc. was the victim of a ransomware attack in April 2026, attributed to the Qilin ransomware group. The attack involved both file encryption and data exfiltration, with stolen files later posted on the dark web. The compromised data, which may include customer and employee PII, has led to multiple class-action law firms launching investigations into the company's data security practices. The four-month delay between the attack and public disclosure is a key point of scrutiny.

September 6, 2026
5 min read
ransomwareqilindata breachdark webretail +1 more
See's Candies Hit by Qilin Ransomware, Sparking Investigations

ASCII Smuggling Phishing Attack Evades Filters with Unicode

MEDIUM

ASCII Smuggling Phishing Evades Email Filters

Microsoft has detailed a high-volume phishing campaign that sent up to 2.37 million emails on peak days by using an evasion technique called 'ASCII smuggling.' Attackers inserted invisible Unicode characters from the Tags block (U+E0000–U+E007F) into financial keywords like 'funding' and 'loan.' This split the words at a code level, allowing the emails to bypass security filters that rely on exact keyword matching, while the text appeared normal to the human eye. The campaign was linked to a broader SBA loan-themed phishing operation.

September 6, 2026
4 min read
phishingemail securityunicodeevasion techniqueascii smuggling +1 more
ASCII Smuggling Phishing Attack Evades Filters with Unicode

Updated Articles (1)

Baylor Genetics Breach Exposes Medical Data of Over 2.8 Million

HIGH

Baylor Genetics Data Breach Affects 2.8 Million Individuals

Update:

The investigation into the Baylor Genetics breach concluded on July 30, 2026, confirming that in addition to patient names, lab results, and Social Security numbers, the compromised data also includes health insurance information, government ID numbers, and employee financial data for a subset of affected individuals. This expands the scope of sensitive information exposed. New cyber observables for hunting include specific command-line patterns (`whoami`, `net user`) and file paths (`C:\Windows\Temp\`) used for data staging, providing more concrete detection patterns for similar incidents.

August 29, 2026
Updated: September 6, 2026
6 min read
Data BreachHealthcareGeneticsPIIPHI +1 more
Baylor Genetics Breach Exposes Medical Data of Over 2.8 Million

📢 Share This Publication

Help others stay informed about cybersecurity threats

📅 Daily Edition

Curated and deduplicated every day from dozens of trusted sources — giving you one clean, consolidated view of what matters in cybersecurity.

🔢 Deduplication Applied

Related stories are merged into a single evolving article rather than repeated as separate entries — cutting through noise so you only read what's new.

🔗 Full Articles Linked

Every entry links to its full enriched article — complete with MITRE ATT&CK mappings, extracted IOCs, and actionable detection and mitigation guidance.