Skip to content
Breaches.

Breaches that exposed internal documents

136 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Services AustraliaOpenAI research agents breached Medicare statistics portalSep 24yesterdayAI or modelUnknown
Astrana HealthAstrana Health says phone-spoofing social engineering led to data theftSep 232 days agoPhishingUnknown
OpenAIResearchers used Claude to chain bugs and take over OpenAI employee ChatGPT accountsSep 178 days agoHackingUnverifiedUnknown
City of BerlinBerlin confirms data theft and extortion after Rhysida ransomware claimAug 284 weeks agoRansomwareUnverifiedUnknown
Bureau of Alcohol, Tobacco, Firearms and ExplosivesATF confirms major incident on separate system after Qilin listingAug 274 weeks agoRansomwareUnknown
Nutex HealthHospital operator Nutex Health says data was exfiltrated from serversAug 254 weeks agoHackingUnknown
Uber FreightUber Freight investigates Helix group claim of stolen mailboxes and filesAug 126 weeks agoExtortionUnverifiedUnknown
Levi StraussLevi's says social engineering of three employees led to corporate data theftAug 77 weeks agoPhishingUnknown
AmgenAmgen says patient health data exfiltrated from third-party cloud systemsJul 318 weeks agoVendor breach40K
Modu-ui ChangupKorean startup platform leaked 5,000 applicants' data via exposed API keyJul 318 weeks agoScrapingUnverifiedUnknown
Analog DevicesAnalog Devices discloses unauthorized access and file exfiltrationJul 308 weeks agoHackingUnknown
Ministry of FinanceAttacker used Hermes AI agent to automate alleged breach of Thai Finance MinistryJul 242 months agoHackingUnverifiedUnknown
Abbott LaboratoriesAbbott probes Exact Sciences legacy system breach amid ShinyHunters claimsJul 172 months agoPhishingUnverifiedUnknown
Hugging FaceAutonomous OpenAI agent breached Hugging Face and stole internal datasets and credentialsJul 172 months agoAI or modelUnknown
FairlifeCoca-Cola confirms data theft in Anubis ransomware attack on FairlifeJul 162 months agoRansomwareUnverifiedUnknown
AppleApple says engineer used zero-day to take confidential files after joining OpenAIJul 102 months agoInsiderUnverifiedUnknown
Department of Homeland SecurityDHS confirms cyber incident on HSIN intelligence-sharing networkJul 22 months agoHackingUnverifiedUnknown
National Association of Insurance CommissionersNAIC says ShinyHunters took public data in PeopleSoft zero-day breachJun 292 months agoHackingUnverifiedUnknown
8x88x8 says Klue integration abused to exfiltrate Salesforce customer dataJun 233 months agoSupply chainUnknown
KodakKodak confirms breach after ShinyHunters claims 2.2 million recordsJun 173 months agoExtortionUnverifiedUnknown
ServiceNowServiceNow unauthenticated API flaw exposed customer instance dataJun 93 months agoExposed dataUnverifiedUnknown
West Pharmaceutical ServicesWest Pharmaceutical says attackers stole data and encrypted systemsMay 74 months agoRansomwareUnknown
ItronUtility tech firm Itron discloses intrusion into internal IT systemsApr 275 months agoHackingUnknown
Rockstar GamesShinyHunters leaks Rockstar Games analytics data stolen via AnodotApr 135 months agoVendor breachUnverifiedUnknown
LA MetroLA Metro confirms March breach; Iran-linked group stole and deleted dataApr 25 months agoHackingUnverifiedUnknown
MercorAI training data contractor hit via compromised LiteLLM open source packageMar 315 months agoSupply chainUnverifiedUnknown
Die LinkeGerman party Die Linke confirms Qilin ransomware stole internal dataMar 276 months agoRansomwareUnknown
European CommissionEuropean Commission cloud breach via Trivy-stolen AWS key hits 30 EU bodiesMar 276 months agoSupply chainUnknown
StrykerHandala wiper attack on Stryker disrupts operations, data theft claimedMar 116 months agoHackingUnknown
McKinsey & CompanyOffensive AI agent got read-write access to McKinsey's Lilli AI platform databaseMar 96 months agoAI or modelUnverifiedUnknown
Federal Bureau of InvestigationFBI investigates breach of wiretap and surveillance warrant systemsMar 56 months agoHackingUnverifiedUnknown
AkzoNobelAkzoNobel confirms cyberattack on US site after Anubis leak claimMar 36 months agoRansomwareUnverifiedUnknown
Ufp TechnologiesUFP Technologies discloses cyberattack that compromised IT systems and dataFeb 247 months agoHackingUnknown
OptimizelyOptimizely confirms CRM data breach after vishing attackFeb 237 months agoPhishingUnverifiedUnknown
Washington HotelJapan's Washington Hotel chain discloses ransomware infection of serversFeb 167 months agoRansomwareUnknown
Spain Ministry of Science, Innovation and UniversitiesSpain's Ministry of Science shuts systems after hacker offers stolen recordsFeb 57 months agoHackingUnknown
Iron MountainIron Mountain says Everest breach limited to one folder of marketing filesFeb 37 months agoExtortionUnverifiedUnknown
NikeNike investigates World Leaks claim of 1.4 TB corporate data theftJan 278 months agoExtortionUnverifiedUnknown
SitusAMCHack of SitusAMC exposes data tied to major US banksNov 22, 202510 months agoHackingUnverifiedUnknown
CrowdStrikeCrowdStrike fires insider who shared internal screenshots with hackersNov 21, 202510 months agoInsiderUnverifiedUnknown
AlmavivaHacker leaks 2.3TB from Italian IT firm Almaviva including FS rail dataNov 20, 202510 months agoHackingUnverifiedUnknown
ProteiSurveillance tech maker Protei hacked, data stolen and site defacedNov 17, 202510 months agoHackingUnverifiedUnknown
Checkout.comShinyHunters breach Checkout.com legacy cloud storage, firm refuses ransomNov 14, 202510 months agoExtortionUnknown
LogitechLogitech confirms data theft in Clop Oracle zero-day campaignNov 14, 202510 months agoSupply chainUnknown
AnthropicChinese state group manipulated Claude Code to attack about 30 organizationsNov 13, 202510 months agoHackingUnknown
Congressional Budget OfficeForeign hackers breach Congressional Budget OfficeNov 6, 202510 months agoHackingUnverifiedUnknown
Tata MotorsExposed AWS keys in Tata Motors portal left customer data openOct 28, 202511 months agoExposed dataUnverifiedUnknown
Ribbon CommunicationsNation-state hackers lurked in telecom firm Ribbon's network for monthsOct 23, 202511 months agoHackingUnverifiedUnknown
F5Nation-state hackers steal F5 BIG-IP source code and bug detailsOct 15, 202511 months agoHackingUnknown
AvnetAvnet EMEA sales tool cloud storage accessed by attackersOct 7, 202511 months agoHackingUnverifiedUnknown

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.