Data breaches, exposure incidents, and the organisations that have had customer data compromised.
Fashion retailer Resolve says hackers stole payment card information
Fashion retailer Revolve warned investors that hackers stole payment card information during a recent cyber incident, according to a filing with the S…
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Chainalysis, an American blockchain analysis firm, said it was the target of a cybersecurity incident. An external actor accessed non-sensitive custom…
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets. The world's biggest cryptocurrenc…
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ConnectWise disabled seven application identities on Saturday after discovering that unknown threat actors obtained unauthorized access to the identit…
FBI Arrests Founder of Ransomware Negotiation Firm
The FBI arrested the co-founder of a Canadian cybersecurity firm on Thursday in connection with an investigation into the ShinyHunters hacking group, …
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
A teenager from Amman, Jordan suspected of leading ShinyHunters, a prolific data theft and extortion group, has been detained and is cooperating with …
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
A suspect identified as Saif al-Din Khader, known online as "Rey," has been detained in Jordan and is cooperating with the FBI to identify members of …
FBI Probes Service Selling 153M+ Drivers Licenses
The FBI opened an investigation into a dark web service offering digital scans of over 153 million drivers licenses from the United States and Canada.…
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
# AI Coding Agents Leak 13,000 Internal Images to Public GitHub Repositories Security researchers at Glow uncovered a widespread data exposure proble…
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
A coordinated phishing campaign targeting U.S. executives has stolen Microsoft 365 session tokens and deployed remote monitoring and management (RMM) …
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
A threat actor breached France's tax administration using nothing more than stolen employee credentials, exfiltrating sensitive tax records on hundred…
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Dutch police arrested a 24-year-old man from Amsterdam this month in connection with ShinyHunters, the cybercriminal collective responsible for dozens…
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
Bitget, a major cryptocurrency exchange, lost approximately $388 million in a coordinated theft that hinged on a vulnerability in third-party security…
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Dutch police arrested a 23-year-old convicted cybercriminal this week on suspicion of supporting ShinyHunters, a prolific hacker collective known for …
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
A China-linked threat actor tracked as JadePuffer has successfully infiltrated an Azure tenant environment and executed a destructive attack against c…
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
ShinyHunters, a cyber extortion group operating on dark web forums, claims it has breached the Federal Bureau of Investigation and obtained sensitive …
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier received a 70-month federal prison sentence for conducting a coordinated extortion campaign against major telecommunications carri…
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
Cryptocurrency exchange Bitget reported a major theft of $351.6 million on September 24, 2026, allegedly perpetrated by North Korean state-sponsored h…
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
CrowdSec, a cybersecurity company specializing in threat intelligence and DDoS mitigation, confirmed that threat actors accessed 170 private GitHub re…
ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims?
ShinyHunters, a financially motivated threat actor group, breached Cl0p's infrastructure and compromised victim data stored on the ransomware operatio…
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
CrowdSec disclosed a significant data breach on September 18 revealing that attackers accessed approximately 170 private GitHub repositories on May 22…
Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
Helpfeel, a Kyoto-based company that operates the image-sharing platform Gyazo, disclosed a data breach affecting 23.62 million user records on Wednes…
Breaches context
Data breaches, exposure incidents, and the organisations that have had customer data compromised.