--- title: One Insider, Three Email Accounts, and 200,000 Files... description: A roundup of recent security incidents illustrating how breaches expand once initial access is gained. Cases covered include email compromise at Aitkin County... canonical: https://daily.dev/posts/one-insider-three-email-accounts-and-200-000-files-show-how-breaches-expand-wftbfn2ng twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: One Insider, Three Email Accounts, and 200,000 Files Show How Breaches Expand | daily.dev og:description: A roundup of recent security incidents illustrating how breaches expand once initial access is gained. Cases covered include email compromise at Aitkin County... og:url: https://daily.dev/posts/one-insider-three-email-accounts-and-200-000-files-show-how-breaches-expand-wftbfn2ng og:image: https://api.daily.dev/og/posts/wFtbFn2ng.png og:image:alt: One Insider, Three Email Accounts, and 200,000 Files Show How Breaches Expand og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # One Insider, Three Email Accounts, and 200,000 Files Show How Breaches Expand **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 5 min read · 0 upvotes · 0 comments ## Summary A roundup of recent security incidents illustrating how breaches expand once initial access is gained. Cases covered include email compromise at Aitkin County Health and Human Services exposing PHI for 83,114 individuals, an insider access incident at Washington DSHS affecting 8,600 records, the FortiBleed campaign targeting Fortinet devices with 86,000+ stolen credentials, a CVE in Microsoft Defender enabling privilege escalation, and a Tata Electronics supply chain breach leaking 200,000+ files including Apple and Tesla data. The post recommends microsegmentation, restricting lateral movement, removing stored credentials, and extending incident response plans to cover insider and contractor compromise scenarios. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [One Foothold, 25 Million Victims: The Risk Inside Modern Breaches](https://daily.dev/posts/one-foothold-25-million-victims-the-risk-inside-modern-breaches-vblscqz3s) · Security Boulevard · 0 upvotes · 0 comments - [Top 10 Breaches of the Week](https://daily.dev/posts/top-10-breaches-of-the-week-ct6besfbj) · Security Boulevard · 0 upvotes · 0 comments - [Nikkei discloses breaches of employees’ Microsoft, Google email accounts](https://daily.dev/posts/nikkei-discloses-breaches-of-employees-microsoft-google-email-accounts-qtw0uk8sn) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/one-insider-three-email-accounts-and-200-000-files-show-how-breaches-expand-wftbfn2ng) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"One Insider, Three Email Accounts, and 200,000 Files Show How Breaches Expand","url":"https://daily.dev/posts/one-insider-three-email-accounts-and-200-000-files-show-how-breaches-expand-wftbfn2ng","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/one-insider-three-email-accounts-and-200-000-files-show-how-breaches-expand-wftbfn2ng"},"datePublished":"2026-07-16T10:02:06.378Z","dateModified":"2026-07-16T10:02:48.480Z","description":"A roundup of recent security incidents illustrating how breaches expand once initial access is gained. Cases covered include email compromise at Aitkin County...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8fe9eeb967de205fd6743e2535f16178?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8fe9eeb967de205fd6743e2535f16178?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/one-insider-three-email-accounts-and-200-000-files-show-how-breaches-expand-wftbfn2ng","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"One Insider, Three Email Accounts, and 200,000 Files Show How Breaches Expand"}]} ```