Hello. With thin tech budgets and troves of data for identity thieves, rehabs, hospices and other facilities are vulnerable—and hackers know it.

These facilities often lack sophisticated cyber or tech staff, and if a breach happens, it can take months for companies to figure out how and whether sensitive data was accessed or stolen. The elderly are a prime target for text, phone and email scams, as well as identity theft. Read our full story.

Other news: 

• Qantas details data breach
• Tariffs on Chinese cranes might decrease national security threat
• U-Haul blasts cyber fines
• And more

Qantas says 5.7 million customers had their data breached in a cyberattack disclosed last week at the Australian airline. That includes:

• 1.2 million records with names and email addresses
• 2.8 million records with names, email addresses and Qantas frequent flyer numbers
• 1.7 million records with some combination of physical addresses, dates of birth, phone numbers, gender and meal preferences

Cyber risk will soar at small and rural hospitals set to lose Medicaid funding under the Trump administration's megabill, witnesses testified Wednesday at a Senate hearing on healthcare cybersecurity. (CyberScoop)

Cyberstarts, an Israeli venture-capital group, said it launched a new $300 million fund to help portfolio companies hold onto cyber talent. Employees could sell vested shares without leaving the startup. (Reuters)

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten, James Rundle and Catherine Stupp (@catstupp). Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.