Mailchimp
133 customer accounts compromised in social engineering
Technology & Software Data Breaches (1333 indexed)
Mailchimp (Intuit)
133 customer accounts accessed via social engineering — third breach in 12 months
LG Uplus (Korea)
290,000 customer records stolen — national IDs, IMEI numbers, contact info
Duolingo
2.6M user records scraped via API
Twitter (200M)
211,524,284 records exposed — Email addresses, Names, Social media profiles, Usernames
Twitter / X (200M)
200M email-to-username mappings leaked on dark web
CircleCI CI/CD Platform
Engineer laptop malware led to customer secret theft — all secrets needed rotation
Chick-fil-A
71K customer account records compromised in credential stuffing
Twitter / X (Scraped Data)
200M+ email addresses and profile data compiled from API vulnerability
CircleCI
All customer secrets and tokens potentially compromised in platform breach
Deezer
229M user records exposed in historical breach data surfacing
Slack / GitHub (2022)
Employee tokens stolen, private code repositories accessed
LastPass
Encrypted password vaults and customer metadata stolen via compromised developer account
SevenRooms
400K restaurant reservation records exposed
TPG Telecom (Australia)
15,000 email accounts compromised — business customer data accessed
Norton LifeLock (Gen Digital)
6,450 customer password vaults potentially accessed via credential-stuffing campaign
Norton LifeLock / Gen Digital
925K customer password manager vaults potentially compromised
Abandonia (2022)
919,790 records exposed — Email addresses, IP addresses, Passwords, Usernames
Wyze
2.4M smart home camera user records exposed
Activision
Employee data and game development plans stolen via SMS phishing
Rackspace Technology
Play ransomware encrypted Exchange email servers — customer hosted email disrupted
Rackspace
Hosted Exchange environment taken down by Play ransomware
GoDaddy
Multi-year breach — source code stolen, malware installed on hosting servers
Mercury IT (New Zealand)
14,500 patient records leaked from major NZ IT services provider — Rhysida ransomware