Mubadala Investment (UAE)
210K investment records stolen
Latest Disclosures
Zilvia.net
287,863 records exposed — Email addresses, IP addresses, Passwords, Usernames
University of Warsaw
180K student records compromised
Baker & Hostetler (Law Firm Sector)
Law firm cyberattacks nearly doubled in 2025 — average breach cost $5.08M
OpenPLC ScadaBR
OpenPLC ScadaBR Cross-site Scripting Vulnerability — OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.
China Software Developer Network
6,414,990 records exposed — Email addresses, Passwords, Usernames
ADDA
1,829,314 records exposed — Email addresses, Names, Passwords, Phone numbers
CodeStepByStep
103,077 records exposed — Email addresses, Names, Usernames
Exxon Mobil Corporation
340K employee records exposed via compromised HR onboarding system — global impact
Staples Inc.
Customer order data and employee information compromised in November cyberattack
Oracle Fusion Middleware
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability — Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attack
International Kiteboarding Organization
340,349 records exposed — Email addresses, Geographic locations, Names, Usernames
Vultr
187,872 records exposed — Email addresses, Geographic locations, IP addresses, Names
Beckett Collectibles
1,041,238 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
Eurofiber
10,003 records exposed — Email addresses, Names, Phone numbers
Google Chromium V8
Google Chromium V8 Type Confusion Vulnerability — Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.
Walmart (eCommerce)
3.5M marketplace seller records exposed via compromised Walmart Connect advertising platform
Datadog Monitoring Platform
240K customer APM configurations exposed via compromised CI/CD signing key
Kaplan Education
230K+ people affected — SSNs and driver's license numbers stolen from test prep provider
Fortinet FortiWeb
Fortinet FortiWeb OS Command Injection Vulnerability — Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via c
Denver Health
480K patient records stolen in targeted attack
Fortinet FortiWeb
Fortinet FortiWeb Path Traversal Vulnerability — Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted
NewYork-Presbyterian Hospital
850K patient records exposed via compromised clinical documentation vendor
American Express (AMEX)
680K card member records exposed via compromised merchant processing partner system