Episource is notifying millions of people that their health data was stolen

Medical billing giant Episource is notifying millions of people across the United States that their personal and health information was stolen in a cyberattack earlier this year.

The breach affects more than 5.4 million people, according to a listing with the U.S. Department of Health and Human Services, making it one of the largest healthcare breaches of the year so far. 

Episource, owned by health insurance giant UnitedHealth Group’s subsidiary Optum, provides billing adjustment to the doctors, hospitals, and other organizations that work in the healthcare industry. As such, the company handles large amounts of patients’ personal and medical data to process claims through their health insurance.

In notices filed in California and Vermont on Friday, Episource said a criminal was able to “see and take copies” of patient and member data from its systems during the weeklong breach ending February 6.

The stolen information includes personal information, such as names, postal and email addresses, and phone numbers, as well as protected health data, including medical record numbers, and data relating to doctors, diagnoses, medications, test results, imaging, care, and other treatment. The stolen data also contains health insurance information, like health plans, policies, and member numbers.

Episource did not describe the nature of the incident, but Sharp Healthcare, one of the companies that works with Episource and was affected by the cyberattack, told its customers that the Episource hack was caused by ransomware. 

This is the latest cybersecurity incident to hit UnitedHealth in recent years. 

Change Healthcare, one of the largest companies in the U.S. healthcare industry that processes billions of health transactions each year, was hacked by a ransomware gang in February 2024, leading to the theft of more than 190 million Americans’ personal and health information. The cyberattack was the largest healthcare data breach in U.S. history. 

Several months later, UnitedHealth’s Optum unit left an internal chatbot used by employees to ask about claims exposed to the internet.

Techcrunch event

Boston, MA
|
July 15

Read More

As the browser wars heat up, here are the hottest alternatives to Chrome and Safari in 2025

Google Chrome and Apple’s Safari currently dominate the web browser market, with Chrome holding a significant share due to the tech giant’s ongoing innovations, particularly in integrating generative AI into its search functionalities. 

However, users seeking alternatives will find a variety of browsers aiming to challenge these industry giants.

To help navigate the competitive landscape of the browser wars, we’ve compiled an overview of some of the top alternative browsers available today. This includes browsers leveraging AI, open-source browsers that promote customization and privacy, and “mindful browsers”—a new term that refers to browsers designed to enhance user well-being.

AI-powered browsers

Image Credits:Perplexity

Perplexity’s Comet

Perplexity is the most recent startup in the space to launch an AI-powered web browser. Called Comet, the company’s new product acts as a chatbot-based search engine, and can perform actions like summarizing emails, browsing web pages, and performing tasks such as sending calendar invites. It’s currently only available to users with Perplexity’s $200/month Max plan, but there’s also a waitlist where people can sign up.

The Browser Company’s Dia

Image Credits:The Browser Company

The Browser Company, the startup behind the Arc browser, recently introduced Dia, its AI-centric browser that looks similar to Google Chrome but with an AI chat tool. 

Currently available as an invite-only beta, Dia is designed to help users navigate the web more easily. It’s able to look at every website that a user has visited and every website they’re logged into, enabling it to help you find information and perform tasks. For instance, Dia can provide information about the page a user is currently browsing, answer questions about a product, and summarize uploaded files. 

To get early access to Dia, users have to be an Arc member. Non-members can join the waitlist.  

Opera’s Neon

Image Credits:Opera

Another recent entry into the AI agentic browser war is Opera’s Neon, which has contextual awareness and can do things like researching, shopping, and writing snippets of code. Notably, it can even perform tasks while the user is offline. 

Neon has yet to become available, but people can join the waitlist. It will be a subscription product; however, Opera hasn’t announced pricing yet. 

OpenAI’s rumored browser 

According to Reuters, OpenAI may also be releasing an AI-powered web browser as soon as July. The browser is reported to operate inside ChatGPT, letting users browse websites inside the chatbot instead of directing to outside links. 

Privacy-focused browsers

Image Credits:Brave

Brave

Brave is among the more well-known privacy-first browsers, popular for its built-in ad and tracker blocking capabilities. It also has a gamified approach to browsing, rewarding users with its own cryptocurrency called Basic Attention Token (BAT). When users choose to opt in to view ads, supporting their favorite websites, they get a share of the ad revenue. Additional features include a VPN service, an AI assistant, and a video calling feature. 

DuckDuckGo

Image Credits:DuckDuckGo

DuckDuckGo is another browser that many people are probably already familiar with, thanks to its search engine by the same name. Launched in 2008, the company recently made significant investments in its browser to stay competitive by introducing generative AI features, such as a chatbot. It also enhanced its scam blocker to detect a wider range of scams, including fake cryptocurrency exchanges, scareware tactics, and fraudulent e-commerce websites. In addition to blocking scams, DuckDuckGo prevents trackers and ads, and it doesn’t track user data, resulting in fewer pop-ups for users.

Ladybird

Image Credits:Ladybird

Ladybird, led by GitHub co-founder and former CEO Chris Wanstrath, has an ambitious mission compared to other rivals: it aims to build an entirely new open-source browser from scratch. This means it will not rely on code from existing browsers, a feat that has rarely been accomplished. Most alternative web browsers depend on the Chromium open-source project maintained by Google, which is the most widely used base for many browsers. 

Like other privacy-focused browsers, Ladybird will offer features to minimize data collection, such as a built-in ad blocker and the ability to block third-party cookies. The browser has yet to be launched, with an alpha version scheduled for release in 2026 for early adopters, available on Linux and macOS.

Vivaldi

Image Credits:Vivaldi

Vivaldi is a Chromium-based browser created by one of the original developers of the Opera browser. Its biggest selling point is its customizable user interface, which allows users to change the appearance and enable or disable features. One unique feature is that the browser window changes color to match the website being viewed. Other key features include ad blocking, a password manager, no user data tracking, and productivity tools such as a calendar and notes.

Niche browsers

Image Credits:Opera

Opera Air

Opera launched the Air browser in February, becoming one of the first mindfulness-themed browsers in the space. While Opera Air functions like a typical web browser, it includes unique features designed to support mental well-being. These features consist of break reminders and breathing exercises. Another feature, called “Boosts,” provides a selection of binaural beats to either help improve focus or relaxation.

SigmaOS

Image Credits:SigmaOS

SigmaOS is a Mac-only browser featuring a workspace-style interface that emphasizes productivity. It displays tabs vertically, allowing users to treat them like a to-do list that can be marked as complete or snoozed for later. Users can create workspaces—essentially groups of tabs—to better organize different activities, such as separating work from entertainment.

This Y Combinator-backed browser has been around for a few years now and has most recently begun introducing more AI features, including the ability to summarize various elements of a web page, such as ratings, reviews, and prices. It also has an AI assistant that can answer questions, translate text, and rewrite content.

SigmaOS is free to use, but users who want more than three workspaces can subscribe to a plan for $8 per month, which provides unlimited workspaces.

Zen Browser

Image Credits:Zen Browser

Zen Browser aims to create a “calmer internet” with its open-source browser. Zen lets users organize tabs into Workspaces, offers Split View to view two tabs side by side, among other productivity-focused features. Users can also enhance their browsing experience with community-made plugins and themes, such as a mod that makes the tab background transparent.

Read More

The Spanish Government wants Huawei to monitor for system wiretaps

Huawei has won a contract to provide digital storage for the Spanish GovernmentThe Chinese tech giant will store and classify court-ordered wiretaps This contrasts other western states that now largely avoid Huawei, and Chinese techAny Spanish government wiretaps carried out by law enforcement agencies will soon be managed by Chinese telecom giant Huawei thanks to a recently-won contract.The €12.3 million contract was awarded to Huawei after a standard public procurement procedure – and the contract includes digital storage of judicially-ordered wiretaps, reports The Objective.Huawei will supply its own high performance storage servers, OceanStor 6800 V5 for the project, which will store and classify intercepted communications and data collected through state agencies.

You may like

Mixed messagesSectors of the National Police in Spain have grown uneasy with Huawei’s involvement in sensitive systems, with sources expressing concern over strategic inconsistencies regarding China and the state’s access to data and a potential threat to national security.Huawei points out that no backdoor has ever been identified within its telecommunications equipment, and the company asserts that it would not answer CCP requests for intelligence, nor would its equipment be used to spy (unless you count government wiretapping contracts).Spain’s PM Pedro Sánchez has been one of the least combative towards Huawei’s presence, with Spain remaining a close partner within the EU for the company – holding several contracts with public administrations.Interestingly enough though, the recent procurement comes in contrast to Spain’s de facto banishment of the Chinese telecom giant from all critical infrastructure, having reduced Huawei’s presence in the 5G cores of the largest three Spanish operators to 0%, according to Euronews.Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!European and American governments have been increasingly distancing themselves from Chinese technology firms in recent months, primarily citing national security concerns and the threat of exfiltrated data.An ongoing trade war between the US and China has seen firms on both sides cut off from the opposing market, with market leaders like chipmaker Nvidia saying US tariffs mean it faces a multi-billion dollar hit.You might also like

Read More

Week in Review: X CEO Linda Yaccarino steps down

Welcome back to Week in Review! We’ve got tons of news for you this week, including a shakeup at X, Hugging Face’s new robot, new phones from Nothing and Samsung, and a whole lot more. Have a great weekend!

Off to do something else: X CEO Linda Yaccarino stepped down this week after a tumultuous two-year tenure marked by advertiser backlash, Elon Musk’s controversies, and the platform’s AI troubles. The company’s ad business improved under her leadership, but the road ahead will still be tough.

See-through: Apple continues to tweak its new Liquid Glass design in iOS 26 beta 3, dialing back transparency in areas like Notifications and Apple Music after user complaints about readability. It’s the latest step in finding the right balance before the OS launches this fall.

The cutest: Hugging Face has opened orders for its new open source desktop robot, Reachy Mini, aimed at AI developers. Starting at $299, the build-it-yourself bots are fully programmable in Python and integrated with the Hugging Face Hub.

This is TechCrunch’s Week in Review, where we recap the week’s biggest news. Want this delivered as a newsletter to your inbox every Saturday? Sign up here.

News

Nothing Phone 3 Image Credits:Ivan Mehta

Whole lot of Nothing: Nothing’s $799 Phone (3) is its most ambitious yet, with a quirky new second screen, AI features, and flagship specs aimed at rivaling Samsung and Apple. But mixed reactions to the design and pricing may keep it in “alternative to” rather than “replacement for” territory, at least for now.

Samsung, too: Samsung also released new foldable phones this week, the new Z Fold7 and the Z Flip7. It also released a cheaper foldable phone, the Z Flip7 FE.

Techcrunch event

Boston, MA
|
July 15

I want this car: Rivian’s new quad-motor R1T and R1S EVs are here, boasting 1,025 horsepower, getting you from 0 to 60 in under 2.5 seconds, and flashy new software tricks like “kick turn” and RAD Tuner for custom driving modes. With in-house motors and a deeper software stack, Rivian’s betting this $115,000+ flagship can hold the line until its more affordable R2s arrive in 2026.

Cool, awesome: Elon Musk says xAI’s new Grok 4 is a “maximally truth-seeking AI,” but testing shows the chatbot often consults Musk’s own X posts and public opinions when answering controversial questions. The model’s alignment with its founder raises fresh concerns about objectivity and about Grok’s readiness for prime time, including being featured in Teslas, which Musk says is coming next week. 

And another one: Apple’s head of AI models, Ruoming Pang, has left for Meta, where he’ll join Zuckerberg’s growing AI superintelligence unit. The move signals ongoing trouble in Apple’s AI efforts and adds more on-device AI expertise to Meta’s expanding bench.

Safety first? Jack Dorsey spent last weekend building a Bluetooth-based messaging app called Bitchat, which operates through Bluetooth mesh networks, letting users chat without Wi-Fi or cell service. The app is now in closed beta, but the claims that the app is secure are already facing scrutiny by security researchers.

It’s time: After 14 years inside Intel, RealSense is spinning out as an independent company with $50 million in funding to scale its 3D stereoscopic imaging tech used in robotics, drones, and more. CEO Nadav Orbach aims to boost go-to-market efforts and improve safety features for human-robot interaction as AI-driven demand surges.

Analysis

Slate Auto’s electric truck.Image Credits:Slate Auto

Pulling back the curtain: Slate Auto, a stealthy Michigan-based EV startup backed by Jeff Bezos, stunned the industry by unveiling plans for an ultra-affordable, customizable electric pickup truck. After three years in the shadows, the company aims to shake up the market with production targeted for late 2026.

Read More

France is investigating X over foreign interference, while an MP also criticizes Grok

France is launching a criminal investigation into Elon Musk’s X over alleged instances of algorithm manipulation for foreign interference purposes. The national gendarmerie will be tasked with the investigation, the Paris prosecutor’s office announced. 

In a statement, Paris prosecutor Laure Beccuau said that the investigation is looking at X as a legal entity as well as unnamed individuals. 

Within the investigation’s scope, she highlighted the two following potential offenses: “alteration of the operation” and “fraudulent extraction of data” of an automated data processing system “by an organized group.”

Beccuau added that the move followed “verifications, contributions from French researchers and elements brought by various public institutions.”

In February, her office opened an initial probe into X following two reports made by the cybercrime section of the Paris prosecutor’s office over the social network’s alleged use of algorithm manipulation for foreign interference purposes.

These reports were made by an unnamed senior official from a French public institution, which French journalists described as a cybersecurity manager, and by a member of parliament, Éric Bothorel.

In a statement, Bothorel welcomed news of the investigation moving forward, which he said “comes at a time when the new Grok update seems to be tipping over to the dark side of the force, with a predominance of questionable, even nauseating, content.”

Techcrunch event

Boston, MA
|
July 15

On July 9, X took the automated account for its AI chatbot offline after it spent Tuesday afternoon pushing antisemitic narratives, which weren’t a first. The European Commission is “in touch” with X over this very topic it said; but Bothorel’s concern is broader.

“I was convinced that information bias, which is particularly strong on the X platform, was serving Elon Musk’s political opinions, and that this could only be achieved through algorithmic manipulation,” the elected official stated.

Bothorel said he filed his report as an MP, but also as “a citizen who does not want Moscow, Silicon Valley, or anyone else to distort our democratic conversations.” He praised “the work of an efficient prosecutor’s office, particularly its cyber section, which will likely need to be strengthened at a time when cyber threats continue to increase.”

As Paris prosecutor, Beccuau has coordinated prosecutions related to the hacking forum BreachForums. She is also overseeing the ongoing judicial investigation into Telegram and its CEO Pavel Durov, who was arrested for alleged facilitation of criminal activity on the platform. Durov has since obtained court approval to leave France for Dubai, but the investigation continues.

Read More

Sarah Smith launches $16M fund, says AI can ‘unlock’ so much for solo GPs like herself

Sarah Smith, founder and managing partner of the eponymous Sarah Smith Fund, announced Thursday the final closing of a $16 million Fund I. 

Smith launched her eponymous fund in 2022 and is a solo GP. She said she’s “stunned” by what AI can unlock for firms like hers, solo and next generation. “I can’t imagine doing venture any other way now,” she said. “While I believe company building still requires a team effort, I believe early-stage investing is best done solo.”

She appreciates how she can make fast decisions that don’t require committee approval. She’s also taken to using AI to help her throughout this journey. 

“Every day I’m dreaming of more ways to support my founders, combining my experience and network with AI,” she said.

“For example, just last week, I led a values articulation project for one of my founders,” Smith continued. “It took me two to three hours of time when it previously would have taken 20. When you have an AI-native firm that can deliver 10x value in 1/10 of the time, you can scale up a large portfolio with just one person.” 

She said she previously had a $3 million rolling fund and spent a year raising this Fund I. Fund I hopes to invest in 50 companies and has already backed 17, with the average check size standing at $250,000. Limited partners include Pear VC, Ulu Ventures, and Verdis Investment Management. 

Fund I focuses mainly on startups in the Stanford ecosystem (Smith is an alumnus of the university). She has research there, too, to back up her focus. “It has produced more unicorns and exit value than any other university in the world,” she said, citing the research done by Ilya Strebulaev that shows that 11% of unicorn founders have an association with Stanford. “While much of the legacy Sand Hill firms spend most of their time up in SF, 45 minutes north, I’m doubling down on Stanford campus.”

Techcrunch event

Boston, MA
|
July 15

Read More

CISA warns hackers are actively exploiting critical ‘Citrix Bleed 2’ security flaw

U.S. cybersecurity agency CISA says hackers are actively exploiting a critical-rated security flaw in a widely used Citrix product, and has given other federal government departments just one day to patch their systems.

Security researchers have dubbed the bug “Citrix Bleed 2” for its similarity to a 2023 security flaw in Citrix NetScaler, a networking product that large companies and governments rely on for allowing their staff to remotely access apps and other resources on their internal networks. Much like the earlier bug, Citrix Bleed 2 can be remotely exploited to extract sensitive credentials from an affected NetScaler device, allowing the hackers broader access to a company’s wider network.

In an alert on Thursday, CISA said it had evidence that the bug was being actively used in hacking campaigns, adding to the raft of research and findings pointing to widespread exploitation, with some reporting hacks dating back as far as mid-June. Akamai said it saw a “drastic increase” in efforts to scan the internet for affected devices after details of the NetScaler exploit were published earlier this week.

CISA said the NetScaler bug poses a “significant risk” to the federal government’s systems, and ordered federal government agencies to patch any Citrix device affected by the bug by Friday.

For its part, Citrix has not yet acknowledged that the vulnerability is being exploited. The company’s security advisory urges customers to update affected devices as soon as possible. 

Citrix representatives did not respond to TechCrunch’s request for comment.

Read More

AI chatbot’s simple ‘123456’ password risked exposing personal data of millions of McDonald’s job applicants

Security researchers found that they could access the personal information of 64 million people who had applied for a job at McDonald’s, in large part by logging into the company’s AI job hiring chatbot with the username and password “123456.”

Ian Carroll and Sam Curry wrote in a blog post that “during a cursory security review of a few hours,” they found the password issue and another simple security vulnerability in an internal API, which allowed access to job applicants’ past conversations with the chatbot, called McHire, supplied to McDonald’s by Paradox.ai. 

The personal data seen by the researchers included applicants’ names, email addresses, home addresses, and phone numbers.

Paradox.ai wrote in a blog post that it resolved the issues “within a few hours” after the researchers’ report, and that “at no point was candidate information leaked online or made publicly available.”

The researchers’ findings were first reported by Wired.

Read More

This 19-year-old’s space company just raised millions to keep satellites connected 24/7

Apolink, a Y Combinator-backed space-tech startup founded by a 19-year-old Indian-origin entrepreneur, has raised $4.3 million in an “oversubscribed” seed round at a $45 million post-money valuation to build a real-time connectivity network for satellites in low Earth orbit (LEO).

The startup is tackling a persistent problem in space communications. Satellites frequently go offline during parts of their orbit due to dead zones — periods when they are not in the line of sight of a ground station. While relay satellites and global ground station networks help reduce this downtime, they only provide partial solutions.

That gap has become critical as the space industry evolves. For years, NASA relied on its Tracking and Data Relay Satellite (TDRS) system to maintain near-continuous contact with satellites in geostationary orbit. But in 2022, the agency announced it would gradually phase out TDRS and transition to commercial providers for satellite communications. Most of these commercial systems still focus on geostationary or medium Earth orbits. Apolink, formerly known as Bifrost Orbital, aims to change that by providing 24/7 connectivity to LEO satellites — with each orbital ring designed to handle 256 users at 9.6kbps.

“LEO has its own advantages,” said Apolink founder Onkar Singh Batra in an exclusive interview. “It’s much closer than geostationary orbit, which means closing the link between the customer satellite and our constellation is way easier… that’s where you make the power requirements limited, and that’s where the compatibility comes in as well.”

Apolink’s approach stems from Batra’s early recognition of this connectivity challenge. At the age of 14 in 2020, he developed an interest in space. In 2022, when he was in 12th grade at a defense school in the northern Indian city of Jammu, he created a satellite system named InQube, which emerged as India’s first open source satellite. He also taught space ecosystems to engineering students as a guest professor at IIT Jammu between 2022-23.

Apolink team, with founder Onkar Singh Batra second from Left Image Credits:Apolink

While working on his first satellite system, Batra recognized the satellite connectivity problem and noticed that existing solutions did not provide backward compatibility, requiring specific hardware to enable network access in orbit.

According to Batra, the issue remains because all other inter-satellite links (ISLs) lack interoperability and are not compliant with the Space Development Agency’s requirements.

Techcrunch event

Boston, MA
|
July 15

“We solve this [through] our hybrid-RF optical architecture and no user terminal, hardware-independent approach,” he stated.

Some startups have tried to address dark zones by building new ground stations. However, Batra noted that ground stations are “very cumbersome to work with and can’t guarantee a 24/7 link.”

“The maximum you can afford is a reliable continuous link to the ground during the window,” he said.

Founded in 2024, the Palo Alto-based startup plans to solve the problem with a constellation of 32 satellites that include lasers and radios to enable connectivity even for satellites that lack specific hardware.

Apolink, which literally means Apogee-plus-link, aims to offer almost 99% uptime and 10-15 seconds of latency. The latency will be further reduced to 2-3 seconds once the network is established.

Companies, including Amazon’s Kuiper and SpaceX’s Starlink, are also building inter-satellite links to address connectivity issues for satellite customers. However, Batra said that most players with multipurpose constellations do not dedicate them to virtual relays, resulting in limited bandwidth available for customers. They also require customers to have an optical terminal installed on their site for connectivity.

“Other ISL players focus on Ku/Ka-band and use optical terminals for EO image downlink, and we don’t,” he told TechCrunch.

The startup has its own FCC license, eliminating the need for customers to fulfill additional licensing requirements. Furthermore, it produces satellite components, including lasers and radios, in-house to ensure they are compatible with its algorithms.

In Q2 2026, Apolink aims to launch its initial demo mission via a SpaceX rideshare. The mission will feature a 3U technology demonstration satellite, LinkONE/IPoS, designed to confirm the backward-compatible radio-frequency relay in low Earth orbit, Batra said.

A second demo is expected in June 2027, featuring two satellites. In 2028, the startup will roll out its commercial constellation, with the entire constellation of 32 satellites expected to be launched in 2029.

Despite being in the early stages, the startup has already secured more than $140 million in letters of intent from companies in the Earth observation, communication, and spatial data sectors, including Astro Digital, Hubble Network, and Star Catcher Industries.

Its new seed round was backed by Y Combinator, 468 Capital, Unshackled Ventures, Rebel Fund, Maiora Ventures, and several angel investors, including Laura Crabtree (CEO of Epsilon3), Benjamin Bryant (co-founder of Pebble Tech), and Kanav Kariya (president of Jump Crypto).

Apolink operates with a core team of four (each with more than five years of industry experience and from companies including Maxar, Audacy, and Astra), located within a 4,000-square-foot R&D facility. The company currently focuses on spacecraft integration and testing and is working with early partners to validate its system in orbit.

Read More

Mockly made a fake DM generator that’s actually user-friendly

Developer Maurice Kleine shipped a web app on Thursday that could be either a boon for meme-making or the bane of your existence, depending on how you look at it. Mockly can generate believable images of fake conversations on apps like iMessage, Discord, Instagram, X, Tinder, WhatsApp, and more.

Tools like Mockly have existed since the dawn of instant messaging, but they generally aren’t the most user-friendly apps — many of the results when you Google “fake iMessage generator” are those websites where there are three download buttons, and you have to guess which one is real and which are ads that potentially contain malware.

Mockly manages to set itself apart while iterating on such a popular idea by simply being usable. Postfully, another user-friendly option, only supports iMessage, while Mockly supports 13 platforms at launch.

Some of Mockly’s templates are more believable than others. Its Slack template, for example, feels a little barren, while its Instagram template looks pretty legit. Another limitation at play is that Mockly is mostly reproducing what conversations on these platforms would look like on the web, and not on mobile.

Image Credits:Mockly

Maybe it’s for the best if Mockly’s fake message generator is not 100% perfect. People still can and will be duped by fake message screenshots. But it is widely known that it’s possible to fake an image of a DM conversation, and people on social media are mostly primed to question the legitimacy of a DM screenshot. In the age of AI, where synthetic videos of world events are going viral and creating widespread disinformation … perhaps we have bigger fish to fry.

Read More

1 2 3 51