Exposed Credential Elasticsearch DB
24B stolen credentials exposed publicly
2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.
24B stolen credentials exposed publicly
INC_RANSOM ransomware, firm data exfiltrated
Akira ransomware affiliates were seen using a new technique to evade endpoint detection and response (EDR), where they rebooted a compromised Windows system into Safe Mode with Networking enabled. According to Huntres
INC_RANSOM ransomware hit US IT firm
165 orgs breached, billions of records stolen
The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts. The post Over 1,000 Charities Hit by Beacon CRM Data Breach appeared first
Cybersecurity teams should be responsible for risk oversight, rather than for executing every corrective action. Assigning security teams the tasks of finding, prioritizing, assigning, implementing, tracking and validati
SSNs and health data stolen from Salesforce
BlackNevas breach confirmed Aug 14
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme. [...]
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared fir
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published. The post Trivy, Not LiteLLM Behind the 2,500 Org Compromise appeared first on SecurityWeek.
165 orgs compromised, billions of records stolen
Data breach exposed personal information from Xfinity customers; $117.5M settlement
1M+ customer records stolen in ransomware
750K investors' SINs and financials stolen
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those perpetrated by the extortion group ShinyHunters, Reco
Patient health information compromised in 2025 breach affecting hospital system
Cyberattack exposed personal information of Xfinity customers; resulted in $117.5M settlement
24B stolen credentials in 8.3TB public exposure
Data breach disclosed in securities filing; type and scope of exposed data not yet determined
100K+ police officer records leaked