Match Group (Hinge / OkCupid)
10M+ dating records stolen by ShinyHunters via Okta SSO social engineering
Latest Disclosures
Alimentation Couche-Tard (Canada)
620K Circle K loyalty customer records stolen from Canadian convenience store operator
Zscaler Cloud Security
150K enterprise zero-trust configurations exposed — test environment breach spread to prod
Harvard University
520K alumni and donor records exposed via compromised advancement office database
Conduent (Government Contracts)
4.3M individuals affected via Fortune 500 contractor — multiple state governments impacted
Ally Financial (Auto Lending)
1.1M auto loan records exposed via compromised dealer management system integration
Amazon Web Services (Customer Data)
2.8M customer billing records and account metadata exposed via misconfigured internal tool
Rogers Bank (Canada)
320K credit card applicant records exposed via compromised underwriting platform
JPMorgan Chase (Vendor)
4.7M customer records exposed via compromised third-party payment processing vendor
Telus Health (Canada)
1.8M employee benefits records from Canadian health benefits platform compromised
Microsoft Windows
Microsoft Windows Information Disclosure Vulnerability — Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.
Costco Wholesale
1.9M customer records stolen from payment processing system via skimming malware at warehouses
New Zealand Ministry of Health
890K patient vaccination records exposed via misconfigured COVID-era data sharing portal
Gogs Gogs
Gogs Path Traversal Vulnerability — Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.
Kirkland & Ellis LLP
Client M&A deal documents and litigation files exposed via compromised document management system
Tesla Inc.
75K employee records leaked by former staff to German newspaper — payroll, SSNs, complaints
Datadog Inc.
APM and logging data from 340 enterprise customers exposed via compromised CI/CD pipeline
6,215,150 records exposed — Display names, Email addresses, Geographic locations, Phone numbers and 1 more
Bosch Group
560K manufacturing and IoT device records exposed
Government of Prince Edward Island
78K health card records compromised
Societe Generale (2026)
1.5M customer records compromised in second incident
Utah Division of Technology
670K citizen records exposed
Shinhan Financial Group
780K banking records stolen
Scotiabank (Canada)
2.1M customer records from Caribbean and Central American operations exposed