Sangoma FreePBX
Sangoma FreePBX OS Command Injection Vulnerability — Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known
Latest Disclosures
Block Inc (Square)
1.4M merchant records compromised in insider incident
Atrium Health (2026)
1.8M patient records exposed in supply chain attack
Infosys (India)
6.5M client records from BPO division exposed via compromised McCamish Systems subsidiary
Horizon Health (New Brunswick)
290K patient records stolen
City of Nashville
450K resident records compromised in vendor breach
Japan Post Holdings
1.5M postal banking records exposed
Baptist Health (Florida)
340K patient records compromised
DISA Global Solutions
3.3M employee records — background screening provider
View incident → Indexed 5 months ago
Singtel (Singapore)
1.8M customer records exfiltrated from subsidiary Optus-linked systems via shared infrastructure
Panera Bread
5,112,502 records exposed — Email addresses, Names, Phone numbers, Physical addresses
Rio Tinto (Mining)
210K employee records and joint venture data compromised via compromised collaboration platform
Cigna Group
1.4M member pharmacy and benefits records accessed via compromised business associate
Province of Ontario (ServiceOntario)
2.1M citizen records from drivers license and health card renewal system compromised
Ivanti Endpoint Manager Mobile (EPMM)
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code executi
Johnson & Johnson
620K patient medical device registration records exposed via compromised portal
Deutsche Bank
1.8M customer records from private banking division exposed via compromised document management
Woolworths Group (Australia)
860K Everyday Rewards member records exposed via supply chain software vulnerability
Target Corporation (2026)
890K customer credit applications and RedCard data exposed via compromised credit processor
SoundCloud
29,815,722 records exposed — Avatars, Email addresses, Geographic locations, Names and 2 more
Fortinet Multiple Products
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability — Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path o
GitHub Enterprise Cloud
14M private repository metadata records exposed via OAuth app token leakage
Linux Kernel
Linux Kernel Integer Overflow Vulnerability — Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise pri
Uber Technologies (2026)
570K driver records including SSNs and banking details accessed via compromised HR system