Skip to content
Breaches.

Breaches that exposed credentials and tokens

261 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Leonard's ExpressJun 17, 20242 years ago6,540
My Daily ChoiceJun 5, 20242 years agoRansomware89K
Hugging FaceUnauthorized access to Spaces platform exposed a subset of user secretsMay 31, 20242 years agoHackingUnknown
Dropbox SignThreat actor accesses Dropbox Sign production environment and all user dataMay 1, 20242 years agoHackingUnknown
Philadelphia Inquirer, PBCApr 29, 20242 years ago26K
SisenseSisense compromise prompts CISA to urge customers to reset credentialsApr 11, 20242 years agoHackingUnverifiedUnknown
Haverford TownshipApr 2, 20242 years ago35K
RokuCredential stuffing compromises about 15,000 Roku accountsMar 8, 20242 years agoCredential stuffing576K
Loan Depot.ComFeb 23, 20242 years ago17M
Trinity Universal InsFeb 9, 20242 years ago76K
International Center of PhotographyFeb 7, 20242 years ago5,985
Infosys McCamish SystemsFeb 2, 20242 years agoRansomware6.1M
AnyDeskAnyDesk production systems compromised, certificates revoked and passwords resetFeb 2, 20242 years agoHackingUnverifiedUnknown
CloudflareNation-state actor uses Okta-stolen tokens to breach Cloudflare Atlassian systemsFeb 1, 20242 years agoHackingUnknown
National Board of Osteopathic Medical ExaminersJan 31, 20242 years ago4,310
OpenAIHijacked ChatGPT account exposed strangers' chats containing portal passwordsJan 30, 20242 years agoUnverifiedUnknown
Mercedes-BenzExposed GitHub token gave unrestricted access to Mercedes-Benz source codeJan 26, 20242 years agoExposed dataUnverifiedUnknown
Comcast XfinityCitrixBleed exploit exposes data of about 36 million Xfinity customersDec 18, 20232 years agoHacking36M
OktaStolen credential gives attacker access to Okta customer support systemOct 20, 20232 years agoHacking4,961
MicrosoftAI research team's overly permissive SAS token exposed 38TB of internal dataSep 18, 20233 years agoExposed dataUnverifiedUnknown
Gunster, Yoakley & StewartAug 4, 20233 years agoHacking546K
AT&TDark web data set covers 73 million current and former AT&T account holdersJul 13, 20233 years ago73M
JumpCloudNorth Korean hackers breach JumpCloud to target its cryptocurrency customersJul 12, 20233 years agoHackingUnknown
RingFTC: Ring staff viewed private customer videos and used them to train algorithmsMay 31, 20233 years agoInsiderUnverifiedUnknown
Harvard Pilgrim Health CareMay 24, 20233 years agoRansomware2.7M
FakeGPT 'ChatGPT for Google' Chrome extensionFake ChatGPT browser extension hijacked Facebook accounts via stolen session cookiesMar 23, 20233 years agoSupply chainUnverifiedUnknown
First Merchants BankVendor MOVEit breach exposes online banking customers' dataMar 9, 20233 years agoVendor breach54
Prudential Insurance Company of AmericaDec 28, 20223 years agoPhishing2.6M
Steel River SystemsDec 22, 20223 years agoRansomware219K
LastPassAttacker steals LastPass customer vault backups after earlier dev breachNov 30, 20223 years agoHacking1.6M
PathwardOct 31, 20223 years agoHacking794K
Convergent OutsourcingOct 26, 20223 years agoRansomware641K
Community Powered Federal Credit UnionOct 24, 20223 years ago7,537
Mativ HoldingsOct 3, 20223 years ago9,268
UberLapsus$-linked hacker breaches Uber internal systems via contractor accountSep 16, 20224 years agoHackingUnknown
CORE CashlessSep 13, 20224 years ago45
Fulton Financial Corporation/Overby SeawellAug 30, 20224 years ago101K
NeopetsAug 29, 20224 years agoHacking69M
Community Loan ServicingAug 19, 20224 years agoHacking117K
Sturm, RugerAug 17, 20224 years agoHacking168K
SignalTwilio breach exposes phone numbers and SMS codes of about 1,900 Signal usersAug 15, 20224 years agoVendor breachUnverified1,900
Scott and ShumanAug 11, 20224 years agoUnknown
CiscoYanluowang-linked attacker breaches Cisco via employee's synced Google accountAug 10, 20224 years agoPhishingUnknown
Marymount Manhattan CollegeAug 3, 20224 years agoRansomware192K
Kohler & Eyre CPAJul 22, 20224 years ago4
AfniJul 11, 20224 years agoRansomware261K
EB SolutionsJul 8, 20224 years ago5
MangatoonJul 6, 20224 years agoUnverified23Macct
WegmansMisconfigured cloud storage exposed 3M+ customers for years; USD 400,000 NY AGJun 30, 20224 years agoExposed data3M
Fulton BankJun 22, 20224 years ago603

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.