Technology
MSG Data Breach Timeline: Cl0p, ShinyHunters, and the 45GB Dump
The Madison Square Garden breach timeline: Cl0p's Oracle attack, ShinyHunters' 45GB dump, biometric records, and what was in the leaked files.
Tag
data breach — Tagged Articles
Crisis Communications
Six AI Crisis Scenarios Every Brand Should Be War-Gaming
AI events develop and spread significantly faster than traditional reputation crises. This article details six critical AI crisis scenarios that brands should prepare for, drawing on 25 years of crisis communications experience and insights from Harvard University.
Technology
Data Breach Communications Archive: Equifax to Change Healthcare
Fifteen years of defining breach communications cases — Equifax, T-Mobile, PayPal, MOVEit, MGM, Change Healthcare — and the playbook every response team runs against.
Technology
PayPal's 2022 Breach: A Crisis Communications Case Study
The December 2022 PayPal credential-stuffing breach accessed approximately 35,000 customer accounts using credentials stolen from unrelated breaches on other platforms. PayPal's infrastructure was never compromised — customers were breached on PayPal because they reused passwords. The canonical fintech credential-stuffing case study.
Crisis Communications
T-Mobile's August 2021 Breach: 40 Million Records, John Binns, and the Fifth Incident in Four Years
T-Mobile disclosed a breach affecting ~40M former/prospective customers, 7.8M current postpaid, and 850K prepaid — SSNs, DOBs, driver's license data exposed. The fifth breach in four years. Mike Sievert's response and the pattern regulators are watching.
Crisis Communications
Equifax Breach: The Disclosure Window and Brand Recovery
The Equifax breach still teaches two lessons: an insider trading charge that redefined disclosure-window doctrine, and a reputation file that never closed even after the stock price fully recovered.
Crisis Communications
The 2009 RockYou Breach and the Birth of Modern Password Security
RockYou's 2009 breach exposed 32M plain-text passwords. The leaked list became the foundation of modern password security — still used in 2026 to crack the RockYou2024 megabreach.