Data breaches, exposure incidents, and the organisations that have had customer data compromised.
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
A suspect identified as Saif al-Din Khader, known online as "Rey," has been detained in Jordan and is cooperating with the FBI to identify members of …
FBI Probes Service Selling 153M+ Drivers Licenses
The FBI opened an investigation into a dark web service offering digital scans of over 153 million drivers licenses from the United States and Canada.…
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
# AI Coding Agents Leak 13,000 Internal Images to Public GitHub Repositories Security researchers at Glow uncovered a widespread data exposure proble…
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
A coordinated phishing campaign targeting U.S. executives has stolen Microsoft 365 session tokens and deployed remote monitoring and management (RMM) …
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
A threat actor breached France's tax administration using nothing more than stolen employee credentials, exfiltrating sensitive tax records on hundred…
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Dutch police arrested a 24-year-old man from Amsterdam this month in connection with ShinyHunters, the cybercriminal collective responsible for dozens…
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
Bitget, a major cryptocurrency exchange, lost approximately $388 million in a coordinated theft that hinged on a vulnerability in third-party security…
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Dutch police arrested a 23-year-old convicted cybercriminal this week on suspicion of supporting ShinyHunters, a prolific hacker collective known for …
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
A China-linked threat actor tracked as JadePuffer has successfully infiltrated an Azure tenant environment and executed a destructive attack against c…
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
ShinyHunters, a cyber extortion group operating on dark web forums, claims it has breached the Federal Bureau of Investigation and obtained sensitive …
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier received a 70-month federal prison sentence for conducting a coordinated extortion campaign against major telecommunications carri…
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
Cryptocurrency exchange Bitget reported a major theft of $351.6 million on September 24, 2026, allegedly perpetrated by North Korean state-sponsored h…
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
CrowdSec, a cybersecurity company specializing in threat intelligence and DDoS mitigation, confirmed that threat actors accessed 170 private GitHub re…
ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims?
ShinyHunters, a financially motivated threat actor group, breached Cl0p's infrastructure and compromised victim data stored on the ransomware operatio…
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
CrowdSec disclosed a significant data breach on September 18 revealing that attackers accessed approximately 170 private GitHub repositories on May 22…
Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
Helpfeel, a Kyoto-based company that operates the image-sharing platform Gyazo, disclosed a data breach affecting 23.62 million user records on Wednes…
Black Hat USA 2026 | OpenAI's Deep Dive Into Hugging Face Incident
OpenAI engineers presented a technical reconstruction of the 2023 Hugging Face security incident at Black Hat USA 2026, detailing how attackers compro…
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
# N0va Phishkit Poses Stealthy Threat to US and EU Organizations A phishing operation tracked as N0va is actively targeting organizations across Nort…
Breaches context
Data breaches, exposure incidents, and the organisations that have had customer data compromised.