NEC Corporation (Japan)
540K defense contractor employee records and project data accessed over multi-year intrusion
Latest Disclosures
Microsoft Windows
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability — Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constr
Odido Breach Impacts Millions of
Dutch telco Odido has revealed a major data breach impacting over six million customers
Bupa (UK/Global)
780K international health insurance member records exposed via insider data theft
APOIA.se
450,764 records exposed — Email addresses, Names, Physical addresses
Metro Inc. (Canada)
740K customer records from Jean Coutu pharmacy division exposed in ransomware attack
University of Pennsylvania
623,750 records exposed — Charitable donations, Dates of birth, Email addresses, Genders and 7 more
Equinix Data Centers
740K enterprise customer metadata and colocation records exposed in Netscaler vulnerability exploit
Nike Inc.
1.2M SNKRS app user records exposed — sneaker purchase history and payment data stolen
Mayo Clinic
900K patient research records exposed via compromised genomics analysis platform
IRS (Tax Vendor Breach)
1.8M taxpayer records exposed via compromised e-filing software vendor
Province of British Columbia
1.4M citizen records from provincial health and education systems compromised
Barclays Bank
780K customer records from wealth management division exposed via insider threat
Zoom Communications (2026)
780K enterprise meeting recordings and transcripts accessed via compromised admin portal
Odido (Dutch Telecom)
6.2M customer records including passport and bank account numbers leaked by ShinyHunters
Fake AI Assistants in Google
Hundreds of thousands of users have downloaded malicious AI extensions masquerading as ChatGPT, Gemini, Grok and others, warn cybersecurity researchers at LayerX
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Suc
Brookfield Asset Management
480K investor records from Canadian asset manager exposed via compromised fund admin portal
Lockheed Martin (Subcontractor)
Defense subcontractor breach exposes classified program metadata and personnel clearance records
World Leaks Ransomware Group Adds
Accenture Cybersecurity warns over difficult to detect, “sophisticated toolset” being deployed as part of extortion campaigns
Delta Air Lines
870K SkyMiles member records and passport data exposed via compromised CrowdStrike integration
State of Ohio Unemployment System
890K unemployment claimant records exposed via compromised benefits administration portal
Notepad++ Notepad++
Notepad++ Download of Code Without Integrity Check Vulnerability — Notepad++ when using the WinGUp updater, contains a download of code without integrity check vulnerability that could allow an attacker to intercept or r
Lyft Inc.
290K driver and rider records exposed via compromised third-party background check vendor