SaaS platforms, cloud providers, developer tooling, and app-layer infrastructure are concentrated attack surfaces. One tech vendor breach can expose thousands of downstream customers. Below is every tech-sector breach LeakTrace has indexed.
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability — Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craf
Cisco Unified Communications Products Code Injection Vulnerability — Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Comm
72,742,892 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 2 more
8.7M customer records exposed via compromised customer portal at largest Korean telco
Business intelligence platform breached — ShinyHunters claimed responsibility
1.2M customer records from government IT contracts exposed via compromised ProjectWEB portal
3.4M CRM records from multiple tenants exposed via privilege escalation in Data Cloud module
2.8M customer records stolen via API vulnerability in self-service portal
10M+ dating records stolen by ShinyHunters via Okta SSO social engineering
150K enterprise zero-trust configurations exposed — test environment breach spread to prod
2.8M customer billing records and account metadata exposed via misconfigured internal tool
Microsoft Windows Information Disclosure Vulnerability — Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.
Gogs Path Traversal Vulnerability — Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.
75K employee records leaked by former staff to German newspaper — payroll, SSNs, complaints
APM and logging data from 340 enterprise customers exposed via compromised CI/CD pipeline
6,215,150 records exposed — Display names, Email addresses, Geographic locations, Phone numbers and 1 more
2.3M guest records compromised in phishing campaign targeting hotels
560K manufacturing and IoT device records exposed
560K corporate client records stolen
672,247 records exposed — Email addresses, Forum posts, Passwords, Private messages and 1 more
17.5M account records posted to BreachForums
450K customer records exposed in targeted attack
560K automation records exposed
120K workspace records exposed via OAuth misconfiguration