Educational company Infrastructure reports cyber incident

2026-05-05T08:52:00Zfa9e40c689b74458cf99b75bab5d934271b704d8ac1fb2b39dcb4b204e26d93d
CVE-2026-41940ai-safetycisacpaneldata-breacheducation-sectorforbesguard-actincident-responselegislationmedia-breachpatchingpiiprivacy-settlementransomwarevulnerability

What happened

Multiple security and privacy incidents reported: an education company called Infrastructure confirmed a breach exposing user PII (names, emails, student ID numbers) and internal messages; a ransomware group claimed a breach of Hungarian media firm Mediaworks with significant data exposure; CISA ordered federal agencies to urgently patch a critical cPanel vulnerability (CVE-2026-41940) that Rapid7 warns can give attackers full control of the host and managed sites; separately, Forbes preliminarily agreed to a $10M settlement over tracker/recording practices; and the Senate Judiciary advanced a

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
therecord_media
Record identifier
fa9e40c689b74458cf99b75bab5d934271b704d8ac1fb2b39dcb4b204e26d93d
Enrichment time
2026-05-05T08:52:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.