Claimdepot MagMutual Data Breach Exposes Sensitive Patient Information
Article Content
- •Unauthorized access to MAG Mutual's systems occurred between April 28 and May 4, 2026.
- •Sensitive information potentially exposed includes names, clinical, demographic, and financial data.
- •A threat actor named Leaknet claimed to have acquired MAG Mutual's data and threatened to publish it.
MAG Mutual Insurance Company reported a data breach involving unauthorized access to its systems from April 28 to May 4, 2026. The breach may have exposed names, clinical, demographic, and financial information of certain individuals. MAG Mutual discovered suspicious activity on April 28 and was alerted to ongoing unauthorized access on May 3. The company engaged third-party cybersecurity specialists to investigate the incident. On June 23, 2026, a threat actor named Leaknet claimed to possess the stolen data and threatened to publish it. MAG Mutual has established a dedicated hotline for affected individuals and is advising them to monitor their accounts for potential identity theft. The company is also reviewing its security policies to prevent future incidents.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track MAG Mutual Insurance Company in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…