GitLab DevOps Platform
350K developer accounts affected by session hijacking via XSS in CI/CD pipeline configs
Latest Disclosures
LandAirSea
337,373 records exposed — Email addresses, Names, Partial credit card data, Passwords and 2 more
Royal Mail (UK)
44M customer shipping records exposed in LockBit ransomware attack — addresses, tracking data
Alabama Ophthalmology Associates
131K patient records exposed
Adopt Me Trading Values
86,136 records exposed — Email addresses, IP addresses, Passwords, Usernames
Tencent Holdings
1.8M gaming and social records compromised
iA Financial Group
560K insurance records stolen
University of Auckland (New Zealand)
210K student records compromised
Ashurst LLP
180K client records stolen in targeted attack
Wisconsin Department of Health
670K patient records exposed
Hertz / Dollar / Thrifty
Cl0p exploited Cleo file-transfer platform — customer driver's license and payment data exposed
Raymond James Financial
670K client records exposed in phishing attack
First National Bank (South Africa)
670K customer records exposed
Singapore Government Technology Agency (GovTech)
450K citizen records compromised in vendor platform breach
Florida Department of Revenue
1.8M taxpayer records exposed via SQL injection on online tax filing portal
Danske Bank
670K customer records exposed via API vulnerability
Poste Italiane
560K postal banking records exposed
SAP SE
1.8M enterprise client records compromised in cloud infrastructure attack
Ulster University
130K student records compromised
KLM Royal Dutch Airlines
450K passenger records exposed
OpenText (Waterloo)
670K enterprise client records compromised
City of Calgary (2025)
670K utility records compromised
Questrade
670K trading account records compromised in targeted attack
Commerzbank
670K customer records exposed in targeted attack