Breaches that exposed credentials and tokens

263 breaches

OpenAIResearchers used Claude to chain bugs and take over OpenAI employee ChatGPT accountsHackingAIUSUnverifiedSep 17GyazoHacking exposed names, emails, passwords, credentials and tokens, IP addresses and location data.Hacking24M affectedTechJPSep 16GoogleGemini accessed three real companies' systems during Irregular security testsAI or modelTechUSUnverifiedSep 16Catalyst BrandsVendor breach exposed names, Social Security numbers, dates of birth, government IDs, financial details, credentials and tokens, emails, employment records, payment cards and addresses. Reported to the California AG.Vendor breach187K affectedRetailUSSep 4AnthropicInfostealer-stolen session cookies used to hijack Claude accountsHackingAIUSUnverifiedAug 31City of BerlinBerlin confirms data theft and extortion after Rhysida ransomware claimRansomwareGovernmentDEUnverifiedAug 28GOGovernment of TaiwanMulti-agent AI framework cracked 85 Taiwan government accounts and took 2,564 recordsHackingGovernmentTWUnverifiedAug 14Ministry of FinanceAttacker used Hermes AI agent to automate alleged breach of Thai Finance MinistryHackingGovernmentTHUnverifiedJul 24Hugging FaceAutonomous OpenAI agent breached Hugging Face and stole internal datasets and credentialsAI or modelAIUSJul 17AccentureHacking exposed source code, API keys and credentials and tokens.HackingTechIEUnverifiedJul 7National Association of Insurance CommissionersNAIC says ShinyHunters took public data in PeopleSoft zero-day breachHackingGovernmentUSUnverifiedJun 29KlueSupply chain exposed credentials and tokens, API keys, names, emails and messages.Supply chainTechCAJun 19DINUMFrench government Tchap messenger breach affects 73,467 officialsPhishing73K affectedGovernmentFRUnverifiedJun 9MicrosoftHijacked Microsoft GitHub repos pushed password stealers to AI coding tool usersSupply chainTechUSUnverifiedJun 8GitHubSupply chain exposed source code, credentials and tokens and API keys.Supply chainTechUSMay 20OpenAITanStack npm supply chain attack reached two OpenAI employee devices and internal reposSupply chainAIUSUnverifiedMay 14SAPOfficial SAP npm packages trojanized to steal developer credentialsSupply chainTechDEUnverifiedApr 29CheckmarxSupply chain exposed credentials and tokens, API keys and source code.Supply chainTechILApr 26BitwardenSupply chain exposed credentials and tokens and API keys.Supply chainTechUSUnverifiedApr 23France TitresHacking exposed credentials and tokens, names, dates of birth, emails, phone numbers and addresses.Hacking12M affectedGovernmentFRApr 21LovableAuthorization flaw exposed chat histories of public Lovable projectsExposed dataAISEUnverifiedApr 20Context AIAI startup Context AI's Office Suite app breach leaks users' OAuth tokensHackingAIUSUnverifiedApr 20VercelBreach at AI app maker Context AI led to theft of Vercel customer credentialsSupply chainTechUSApr 19AnodotSupply chain exposed credentials and tokens.Supply chainData brokersILUnverifiedApr 13Bitcoin DepotHacking exposed credentials and tokens. Reported to the SEC 8-K.HackingCryptoUSApr 8SongTrivia2Hacking exposed credentials and tokens, emails, names and passwords.Hacking292K accountsTechUnverifiedApr 4AxiosSupply chain exposed credentials and tokens.Supply chainTechUnverifiedMar 31LiteLLMMalware slipped into popular LiteLLM AI gateway package stole developer credentialsSupply chainAIUSUnverifiedMar 24Aqua SecurityTrivy scanner releases and GitHub Actions hijacked to push credential stealerSupply chainTechILUnverifiedMar 21Telus DigitalSupply chain exposed messages, credentials and tokens, source code and financial details.Supply chainTechCAUnverifiedMar 11McKinsey & CompanyOffensive AI agent got read-write access to McKinsey's Lilli AI platform databaseAI or modelTechUSUnverifiedMar 9CACal AIHacker claims 12GB leak of 3M Cal AI calorie app users' profiles and meal logsHackingAIUSUnverifiedMar 9MPMercadien PC Certified Public AccountantsExposed names, credentials and tokens, payment cards, financial details, Social Security numbers and addresses. Reported to the Delaware DOJ.403K affectedFinanceUSFeb 17OOpenClawMore than 135,000 OpenClaw AI agent instances found exposed to the internetExposed dataAIUnverifiedFeb 9MoltbookVibe-coded AI agent social network exposed 1.5M API tokens and 35,000 emailsExposed dataAIUnverifiedFeb 2CClawHubOver 230 malicious OpenClaw skills pushed info-stealing malware to AI agent usersSupply chainAIUnverifiedFeb 2Visual Studio Code MarketplaceMaliciousCorgi: AI coding extensions with 1.5M installs sent source files to ChinaSupply chainTechUSUnverifiedJan 23InstagramAttackers tricked Meta AI support assistant into hijacking 20,225 Instagram accountsAI or model20K affectedTechUSUnverifiedJan 11Monroe UniversityHacking exposed names, dates of birth, Social Security numbers, government IDs, health records, insurance details, credentials and tokens, financial details and education records. Reported to the California AG.Hacking321K affectedEducationUSJan 2Freedom ChatExposed data exposed phone numbers and credentials and tokens.Exposed dataTechUSUnverifiedDec 11, 2025PMProsper MarketplaceHacking exposed names, credentials and tokens, Social Security numbers, government IDs, payment cards, financial details and dates of birth. Reported to the California AG.Hacking13M affectedFinanceUSDec 9, 2025AnthropicChinese state group manipulated Claude Code to attack about 30 organizationsHackingAIUSNov 13, 2025PPillsburyExposed names and credentials and tokens. Reported to the Delaware DOJ.43K affectedUSNov 6, 2025University of PennsylvaniaHackers breach UPenn systems, send mass emails and steal donor dataHacking443K affectedEducationUSOct 31, 2025Smithery.aiPath traversal in MCP hosting registry exposed admin token to 3,000+ hosted AI serversExposed dataAIUnverifiedOct 22, 2025HFHermann Financial ServicesExposed names, government IDs, health records, insurance details and credentials and tokens. Reported to the Delaware DOJ.929 affectedFinanceUSOct 15, 2025Red HatCrimson Collective steals Red Hat consulting GitLab repositoriesHackingTechUSOct 2, 2025PMpostmark-mcpFirst malicious MCP server on npm secretly BCC'd every email to attackerSupply chainTechUnverifiedSep 25, 2025SonicWallState hackers stole SonicWall customers' firewall config backupsHackingTechUSSep 17, 2025Vyro AIUnprotected Elasticsearch server leaked 116GB of logs from ImagineArt and Chatly AI appsExposed dataAIUnverifiedSep 11, 2025