Microsoft Office
Microsoft Office PowerPoint Code Injection Vulnerability — Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineT
Latest Disclosures
Hewlett Packard Enterprise (HPE) OneView
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability — Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code ex
Bombardier Aerospace
Engineering documents and employee data stolen via Accellion FTA exploit — posted on CL0P leak site
WhiteDate
20,363 records exposed — Ages, Astrological signs, Bios, Device information and 18 more
Mapfre Insurance
450K policyholder records compromised
Bandai Namco (Japan)
340K gaming records exposed in ransomware
Banca Transilvania (Romania)
340K customer records stolen
NHS England (GP Surgeries)
2.6M patient records from 150+ GP surgeries exposed via shared IT platform compromise
Rice University
180K student records stolen
Takeda Pharmaceutical (Japan)
670K clinical records compromised
Sleep Country Canada
190K customer records compromised
Bank Leumi (Israel)
560K customer records exposed in credential harvesting
Minnesota State Government
Excessive internal access resulted in unauthorized personal data exposure
Falabella (Chile)
450K customer records stolen
Chicago Public Schools (2026)
670K student records stolen in ransomware attack
Illinois State Government
System failure exposed personal data of residents publicly for four years
ATCO Ltd (Alberta)
210K utility customer records compromised
ESB Networks (Ireland)
280K utility records compromised
Copenhagen University Hospital
280K patient records stolen
Conduent
Fortune 500 operational data — multiple state governments affected
View incident → Indexed 4 months ago
MongoDB MongoDB and MongoDB Server
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability — MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol head
WIRED
2,364,431 records exposed — Dates of birth, Display names, Email addresses, Genders and 4 more
Utair
401,400 records exposed — Dates of birth, Email addresses, Genders, Loyalty program details and 4 more