Amtrak
2,147,679 records exposed — Email addresses, Names, Physical addresses, Support tickets
View incident → Indexed 4 months, 2 weeks ago
2026 Data Breaches Year-to-Date (3100 indexed)
McGraw Hill
13,500,136 records exposed — Email addresses, Names, Phone numbers, Physical addresses
View incident → Indexed 4 months, 2 weeks ago
Apache ActiveMQ
Apache ActiveMQ Improper Input Validation Vulnerability — Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.
Microsoft SharePoint Server
Microsoft SharePoint Server Improper Input Validation Vulnerability — Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a networ
Microsoft Office
Microsoft Office Remote Code Execution — Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially craft
Adobe Acrobat
Adobe Acrobat Use-After-Free Vulnerability — Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
Fortinet FortiClient EMS
Fortinet FortiClient EMS SQL Injection Vulnerability — Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically
Adobe Acrobat and Reader
Adobe Acrobat and Reader Prototype Pollution Vulnerability — Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability —
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability — Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution
Microsoft Exchange Server
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability — Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. —
Hallmark
1,736,520 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
View incident → Indexed 4 months, 3 weeks ago
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code executi
My Lovely AI
106,271 records exposed — Email addresses, Social media profiles
View incident → Indexed 4 months, 4 weeks ago
SongTrivia2
291,739 records exposed — Auth tokens, Avatars, Email addresses, Names and 2 more
View incident → Indexed 5 months ago
TrueConf Client
TrueConf Client Download of Code Without Integrity Check Vulnerability — TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path ca
165 organizations breached via compromised Snowflake credentials; ShinyHunters exploited
165 organizations breached via compromised Snowflake credentials; ShinyHunters exploited Anodot access
SplitVPN
Data breach exposed personal records of approximately 865,000 users (Russian VPN provider)
ANTS (French ID Agency)
Cyberattack exposed 19 million personal identity records including government data
CISA/US Government Agency
Unnamed U.S. department breached through Cisco vulnerability; FIRESTARTER backdoor provided persistent access through March 2026
Bank of Baroda (BoB)
Alleged data breach involving sensitive banking and corporate information
ANTS (French ID Agency)
Cyberattack exposed 19 million records linked to personal identity data
Google Dawn
Google Dawn Use-After-Free Vulnerability — Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML pag
Valley Kidney Specialists
Data breach compromised personal and health information of patients