Microsoft Office
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability — Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized
Latest Disclosures
Banco de Chile
450K customer records exposed in credential harvesting
Emirates Airlines
640K Skywards member records including travel history and contact data compromised
BridgePay Confirms Ransomware Attack, No
The services of Florida-based payments platform BridgePay are offline due to a ransomware attack
Researchers Find 40,000+ Exposed OpenClaw
SecurityScorecard has identified over 40,000 OpenClaw deployments exposed to potential attack
Thales Group (France)
340K defense and aerospace employee records exposed via LockBit 3.0 ransomware
Robinhood Markets (2026)
2.8M customer trading records and SSNs exposed via social engineering attack on support staff
Cathay Pacific Airways
9.4M passenger records re-exposed as 2018 breach data reappears on new dark web marketplace
Instacart Grocery Delivery
680K shopper and customer records exposed via third-party payment processor compromise
ServiceNow ITSM Platform
620K enterprise workflow configurations exposed via compromised instance admin accounts
ATO Australia (Tax)
1.1M taxpayer records exposed via zero-day in myGov authentication system
Baystate Health
440K patient records exposed in spear-phishing attack on Massachusetts health system
CVS Health / Aetna
3.4M patient pharmacy and insurance records exposed via compromised prescription gateway
University of Toronto
380K student and staff records compromised in targeted phishing campaign
BridgePay Network Solutions
Payment gateway ransomware attack causes widespread merchant and municipal outages
Fortinet (Security Vendor)
440K customer records from FortiGate management portal exposed via zero-day authentication bypass
Substack Confirms Data Breach, "Limited
Substack did not specify the number of users affected by the data breach
Goldman Sachs (Contractor)
180K client portfolio records accessed by compromised contractor with elevated privileges
Substack
697K subscriber records exposed — email addresses, phone numbers, internal metadata
Substack
663,121 records exposed — Email addresses, Phone numbers
Generali Group
890K insurance records stolen in targeted attack
Swiss Re (Insurance)
340K reinsurance policyholder records from global operations exposed in targeted attack
Capital One (2025)
3.2M credit card applicant records exposed via new cloud misconfiguration — second incident
Discovery Health (South Africa)
560K medical records compromised