Skip to content
Breaches.

Breaches that exposed credentials and tokens

261 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
PlexPlex user database breach exposes emails and hashed passwordsSep 8, 20251 year agoHackingUnverifiedUnknown
New York Blood Center EnterprisesSep 5, 20251 year agoRansomware194K
ElasticElastic Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnknown
CloudflareCloudflare Salesforce data stolen via Salesloft Drift OAuth tokensSep 2, 20251 year agoSupply chainUnknown
AnthropicCybercriminal used Claude Code to steal and extort data from at least 17 organizationsAug 27, 20251 year agoExtortionUnknown
SalesloftStolen Drift AI chatbot OAuth tokens used to raid customer Salesforce instancesAug 26, 20251 year agoSupply chainUnverifiedUnknown
Nxs1ngularity: malicious Nx npm releases used AI CLIs to hunt and leak developer secretsAug 26, 20251 year agoSupply chainUnknown
Columbia UniversityHacker steals data of 868,969 Columbia students, applicants and staffAug 7, 20251 year agoHacking3.1M
LovenseLovense flaws leaked user emails and allowed account takeoversJul 28, 20251 year agoExposed dataUnverifiedUnknown
AWSHacker slipped data-wiping prompt into Amazon Q coding assistant extensionJul 23, 20251 year agoSupply chainUnverifiedUnknown
Krispy Kreme DoughnutJun 16, 20251 year ago162K
McLean MortgageJun 11, 20251 year ago30K
Kelly and Associates Ins. Group, Inc. Supplemental 3May 30, 20251 year agoUnknown
Water ProMay 21, 20251 year ago15K
Alera GroupMay 21, 20251 year agoRansomware174K
Kettering HealthInterlock ransomware cripples Kettering Health, exposes 1.7M peopleMay 20, 20251 year agoRansomware1.7M
ServiceaideUnsecured Serviceaide database exposed 483,126 Catholic Health patientsMay 9, 20251 year agoExposed data483K
TeleMessageHacker extracts archived messages from Signal clone used by US officialsMay 4, 20251 year agoHackingUnverifiedUnknown
Kelly and Associates Ins. Group, Inc. Supplemental 2May 2, 20251 year agoUnknown
Berkeley Research GroupApr 30, 20251 year agoRansomware1.2M
Kelly and Associates Ins. Group, Inc. SupplementApr 21, 20251 year agoUnknown
HertzCleo zero-day breach exposes Hertz customers' licenses and card dataApr 11, 20251 year agoSupply chain1.2M
Kelly & Associates Insurance GroupApr 9, 20251 year agoHacking553K
AustralianSuperCredential stuffing wave breaches Australian super fund accountsApr 4, 20251 year agoCredential stuffingUnverifiedUnknown
OracleHacker steals Oracle Cloud SSO login data; Oracle blames obsolete serversMar 21, 20251 year agoHackingUnverifiedUnknown
Pennsylvania State Education AssociationTeachers union PSEA says July 2024 hack exposed 517,000 membersMar 17, 20251 year agoHacking517K
Common CrawlNearly 12,000 live API keys and passwords found in AI training datasetFeb 28, 20251 year agoExposed dataUnverifiedUnknown
MicrosoftStorm-2139 used stolen customer credentials to hijack Azure OpenAI accountsFeb 26, 20251 year agoCredential stuffingUnknown
OmniGPTHacker leaked 34M lines of OmniGPT AI chat logs and 30,000 user contactsFeb 12, 20251 year agoHackingUnverifiedUnknown
BAYHEALTHFeb 3, 20251 year ago588K
Berman & RabinJan 28, 20251 year agoRansomware152K
GoDaddyRepeated hosting breaches since 2018 led to FTC data security orderJan 15, 20251 year agoHackingUnknown
Avery ProductsCard skimmer on Avery website steals customers' payment dataJan 10, 20251 year agoHacking61K
MedusindMedical billing firm Medusind discloses breach of patient dataJan 7, 20251 year agoHacking701K
CyberhavenHackers push malicious Cyberhaven Chrome extension update to steal sessionsDec 27, 20241 year agoSupply chainUnverifiedUnknown
AscensionAscension patient data stolen from former business partnerDec 19, 20241 year agoVendor breach437K
SelectBlindsOct 29, 20241 year agoHacking206K
Healthcare Services GroupHealthcare Services Group breach exposes data of 624,000 peopleOct 16, 20241 year agoHacking624K
MoneyGram Payment SystemsOct 7, 20241 year agoHacking160
ADTSecond ADT intrusion via partner credentials takes employee account dataOct 7, 20241 year agoVendor breachUnknown
Slim CDSep 5, 20242 years ago1.7M
Avis Rent A Car SystemSep 5, 20242 years ago299K
Capitol OneAug 15, 20242 years ago2
Godwin FirmJul 26, 20242 years ago4,550
Artisans' BankJul 24, 20242 years ago1,690
SAPSAPwned: SAP AI Core flaws gave researchers access to customer cloud keys and AI artifactsJul 17, 20242 years agoExposed dataUnverifiedUnknown
DisneyNullBulge leaks about 1.2 TB of internal Disney Slack messagesJul 15, 20242 years agoHackingUnverifiedUnknown
HubSpotHubSpot investigates attacks on a limited number of customer accountsJun 28, 20242 years agoHackingUnverifiedUnknown
Evolve Bank & TrustLockBit ransomware attack on Evolve Bank exposes data of 7.6 million peopleJun 26, 20242 years agoRansomware7.6M
Landmark AdminRansomware at insurance administrator Landmark Admin encrypts and exfiltrates dataJun 24, 20242 years agoRansomware1.6M

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.