Data Security

Kenaitze Indian Tribe Discloses Data Breach Exposing Health Records

Kenai, Alaska – September 26, 2026 -- The Kenaitze Indian Tribe (KIT) has begun notifying individuals whose protected health information may have been compromised in a network intrusion detected on September 26, 2026.

Unauthorized actor accessed KIT network for 11 days in July 2026

KIT's investigation, conducted with cybersecurity specialists, determined that an unauthorized party gained access to the tribe's network between July 16 and September 26, 2026, and may have accessed or downloaded certain files during that window.

Exposed data includes Social Security numbers and medical records

A comprehensive file review identified that compromised information may include first and last names, Social Security numbers, driver's license or state identification numbers, financial account numbers, dates of birth, medical information, and health insurance details.

77% of Firms Hit by M365 Governance Incidents as AI Tools Multiply

Image
77% of Firms Hit by M365 Governance Incidents as AI Tools Multiply

Montreal – September 24, 2026 -- Seventy-seven percent of organizations experienced at least one Microsoft 365 governance incident in the past year, even as two-thirds now run multiple AI tools against the same tenant content, according to the second annual State of M365 report released by ShareGate.

Three-quarters of organizations report Microsoft 365 governance incidents in the past year

The survey of nearly 1,800 IT professionals and leaders across nine countries found 38% left former employees or guests with access they should have lost, 35% hit an audit or compliance gap, and 26% had sensitive content reach the wrong people. A fifth incident category -- users unable to find content -- was reported by 41% but excluded from the headline figure, which would otherwise reach 82%.

SecureSky Acquires London's Soveren to Add Real-Time DSPM

Image
SecureSky Acquires London's Soveren to Add Real-Time DSPM

Omaha – September 15, 2026 -- SecureSky has acquired Soveren, a London-based Data Security Posture Management (DSPM) provider, adding real-time sensitive-data discovery and classification to its Continuous Threat Exposure Management (CTEM) platform.

Soveren claims 98% accuracy detecting sensitive data in encrypted traffic

Soveren's architecture pairs eBPF-powered network analysis with ML-driven classification, enabling it to inspect and classify encrypted TLS traffic at scale without impacting application speed. The company positions this against legacy DSPM tools that rely on regex detection and static snapshots, which it says produce high false-positive rates.