Microsoft Windows
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability — Microsoft MSHTML Framework contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feat
2026 Data Breaches Year-to-Date (645 indexed)
Microsoft Windows
Microsoft Windows NULL Pointer Dereference Vulnerability — Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny service locally.
Microsoft Windows
Microsoft Windows Shell Protection Mechanism Failure Vulnerability — Microsoft Windows Shell contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature ov
Microsoft Windows
Microsoft Windows Improper Privilege Management Vulnerability — Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker to elevate privile
Microsoft Windows
Microsoft Windows Type Confusion Vulnerability — Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to elevate privileges locally.
Microsoft Office
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability — Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized
Rio Tinto (2026)
670K mining operational records exposed in targeted espionage
Deutsche Telekom (Germany)
3.1M customer records accessed via compromised customer service platform
Banco de Chile
450K customer records exposed in credential harvesting
Oman Ministry of Health
280K patient records exposed
SaskPower (Canada)
340K customer utility records exposed via compromised billing system vendor
Weston Foods (George Weston)
340K employee and supply records exposed
Gowling WLG
210K client records compromised via vendor
Robinhood Markets (2026)
2.8M customer trading records and SSNs exposed via social engineering attack on support staff
Researchers Find 40,000+ Exposed OpenClaw
SecurityScorecard has identified over 40,000 OpenClaw deployments exposed to potential attack
Emirates Airlines
640K Skywards member records including travel history and contact data compromised
BridgePay Confirms Ransomware Attack, No
The services of Florida-based payments platform BridgePay are offline due to a ransomware attack
Thales Group (France)
340K defense and aerospace employee records exposed via LockBit 3.0 ransomware
Baystate Health
440K patient records exposed in spear-phishing attack on Massachusetts health system
ATO Australia (Tax)
1.1M taxpayer records exposed via zero-day in myGov authentication system
ServiceNow ITSM Platform
620K enterprise workflow configurations exposed via compromised instance admin accounts
Instacart Grocery Delivery
680K shopper and customer records exposed via third-party payment processor compromise
Cathay Pacific Airways
9.4M passenger records re-exposed as 2018 breach data reappears on new dark web marketplace
University of Toronto
380K student and staff records compromised in targeted phishing campaign