Okta
Support system breach — session tokens of 134 customers accessed by threat actor
Technology & Software Data Breaches (1333 indexed)
Okta (UK/Global Impact)
Customer support system breach exposed session tokens — Cloudflare, 1Password impacted
Okta
Support system breach exposed customer session tokens
Phoenix
74,776 records exposed — Email addresses, IP addresses, Passwords, Usernames
Comcast Xfinity
35.9M customer records exposed via Citrix Bleed vulnerability
Xfinity / Comcast (CitrixBleed)
35.9M customers affected by Citrix Bleed exploitation
Indian Council of Medical Research
815M citizen records exposed — largest medical database breach globally
Public Business Data
27,917,714 records exposed — Dates of birth, Email addresses, Job titles, Names and 2 more
23andMe
6.9M user genetic ancestry profiles stolen via credential stuffing
23andMe (lawsuit)
6.4M users affected in credential stuffing — company bankrupt by 2025
Activision
16,006 records exposed — Email addresses, Geographic locations, Job titles, Names and 1 more
Progress WS_FTP
Critical vulnerability in another Progress Software file transfer product
Johnson Controls International
Dark Angels ransomware encrypted 27TB of corporate data — $51M ransom demanded
Optus Telecommunications (Australia)
9.8M customer records including passport numbers exposed via unauthenticated API
dBforums
363,468 records exposed — Dates of birth, Email addresses, IP addresses, Passwords and 1 more
JetBrains (TeamCity)
Critical auth bypass vulnerability led to supply chain compromises
Retool (SaaS Platform)
27 crypto customer accounts breached via AI-powered deepfake voice phishing attack
Retool
27 crypto customers compromised via Google Authenticator sync phishing
IFX Networks (Colombia)
Ransomware disrupted 700+ companies across Latin America through Colombian cloud provider
MGM Resorts
Scattered Spider attack caused $100M+ losses, 10 days of disruption
Caesars Entertainment
65M loyalty program member records stolen in social engineering
Hershey Company
2,214 employee records exposed in phishing
PlayCyberGames
3,681,753 records exposed — Email addresses, Passwords, Usernames
Phished Data via CERT Poland
67,943 records exposed — Email addresses, Passwords
View incident → Indexed 2 years, 10 months ago