Skip to content
Breaches.

Breaches that exposed internal documents

136 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Red HatCrimson Collective steals Red Hat consulting GitLab repositoriesOct 2, 202511 months agoHackingUnknown
OracleClop exploits Oracle E-Business Suite zero-day to steal data from dozensOct 2, 202511 months agoSupply chainUnknown
Ministry of Economy and Finance of PanamaINC ransomware claims attack on Panama's finance ministrySep 10, 20251 year agoRansomwareUnverifiedUnknown
xAIxAI sues ex-engineer accused of taking Grok trade secrets to OpenAIAug 29, 20251 year agoInsiderUnverifiedUnknown
SalesloftStolen Drift AI chatbot OAuth tokens used to raid customer Salesforce instancesAug 26, 20251 year agoSupply chainUnverifiedUnknown
Creative BoxQilin ransomware steals Nissan design studio filesAug 26, 20251 year agoRansomwareUnverifiedUnknown
xAIGrok website exposed system prompts for its AI personasAug 18, 20251 year agoAI or modelUnverifiedUnknown
Colt Technology ServicesWarlock ransomware steals and auctions Colt customer filesAug 14, 20251 year agoRansomwareUnknown
US Federal JudiciaryHackers breach federal courts' case management systemAug 7, 20251 year agoHackingUnknown
Ingram MicroSafePay ransomware attack shuts down Ingram Micro, exposes 42,000 peopleJul 5, 20251 year agoRansomware43K
RadixSarcoma ransomware at Swiss nonprofit Radix leaks federal office dataJun 30, 20251 year agoRansomwareUnverifiedUnknown
Scale AIScale AI left confidential AI training docs and contractor data in public Google DocsJun 24, 20251 year agoExposed dataUnverifiedUnknown
AsanaBug in Asana's AI MCP server exposed customer data to other organizationsJun 18, 20251 year agoAI or modelUnverifiedUnknown
Optima Tax ReliefChaos ransomware gang leaks Optima Tax Relief case filesJun 6, 20251 year agoRansomware20K
CoinbaseBribed support contractors leak Coinbase customer data, $20M extortionMay 14, 20251 year agoInsider69K
LockBitLockBit ransomware gang's affiliate panel hacked and database leakedMay 7, 20251 year agoHackingUnverifiedUnknown
4chan4chan hacked, source code and moderator data leakedApr 15, 20251 year agoHackingUnverifiedUnknown
Royal MailRoyal Mail data leaked after breach of supplier SpectosApr 2, 20251 year agoVendor breachUnverifiedUnknown
APIsecAPI testing firm APIsec left customer database exposed without passwordMar 31, 20251 year agoExposed dataUnverifiedUnknown
MicrosoftStorm-2139 used stolen customer credentials to hijack Azure OpenAI accountsFeb 26, 20251 year agoCredential stuffingUnknown
Orange RomaniaHacker leaks Orange Romania documents and 380,000 emailsFeb 24, 20251 year agoHackingUnverified557Kacct
Insight PartnersRansomware attack on VC firm Insight Partners exposes staff and LP dataFeb 18, 20251 year agoRansomware13K
UnimicronSarcoma ransomware claims 377GB theft from PCB maker UnimicronFeb 12, 20251 year agoRansomwareUnverifiedUnknown
Tata TechnologiesRansomware attack hits Tata Technologies, data later leakedJan 31, 20251 year agoRansomwareUnverifiedUnknown
DeepSeekUnauthenticated ClickHouse database exposed chat history and API secretsJan 29, 20251 year agoExposed dataUnverifiedUnknown
TelefonicaTelefonica confirms breach of internal Jira ticketing systemJan 10, 20251 year agoHackingUnverifiedUnknown
US Department of the TreasuryChinese state hackers access Treasury workstations via BeyondTrust keyDec 30, 20241 year agoSupply chainUnverifiedUnknown
OptumInternal AI claims chatbot used by Optum staff was exposed to the internetDec 13, 20241 year agoExposed dataUnverifiedUnknown
ArtivionRansomware-style attack on heart device maker Artivion encrypts and steals filesDec 9, 20241 year agoRansomwareUnknown
Blue YonderRansomware attack on Blue Yonder disrupts Starbucks and UK grocersNov 21, 20241 year agoRansomwareUnverifiedUnknown
FinastraHacker steals files from Finastra's internal file transfer platformNov 19, 20241 year agoHackingUnverifiedUnknown
Schneider-ElectricHackers breach Schneider Electric internal Jira project tracking platformNov 4, 20241 year agoHackingUnverifiedUnknown
UnisysSolarWinds-related intrusion understated in filings; USD 4M SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
MimecastSolarWinds-related intrusion minimized in disclosures; USD 990,000 SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
Check PointSolarWinds-related intrusion minimized in disclosures; USD 995,000 SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
AvayaSolarWinds-related intrusion minimized in disclosures; USD 1M SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
Game FreakPokemon developer Game Freak breach leaks staff data and game source codeOct 10, 20241 year agoHackingUnverified2,606
CasioRansomware attack on Casio steals employee, partner and some customer dataOct 7, 20241 year agoRansomwareUnverified8,500
HalliburtonHalliburton says intruder accessed and exfiltrated data from its systemsAug 23, 20242 years agoHackingUnknown
Trump presidential campaignHack-and-leak operation hands Trump campaign documents to reportersAug 10, 20242 years agoHackingUnverifiedUnknown
DisneyNullBulge leaks about 1.2 TB of internal Disney Slack messagesJul 15, 20242 years agoHackingUnverifiedUnknown
OpenAIHacker accessed OpenAI internal employee discussion forum in 2023Jul 5, 20242 years agoHackingUnverifiedUnknown
TeamViewerRussian APT29 breaches TeamViewer corporate IT networkJun 28, 20242 years agoHackingUnverifiedUnknown
MITREChinese state hackers breach MITRE research network via Ivanti zero-daysApr 19, 20242 years agoHackingUnverifiedUnknown
GoogleEx-engineer stole 2,000+ pages of AI supercomputing trade secrets for ChinaMar 6, 20242 years agoInsiderUnknown
BMWMisconfigured BMW Azure storage bucket exposes private keys and internal dataFeb 14, 20242 years agoExposed dataUnverifiedUnknown
AnyDeskAnyDesk production systems compromised, certificates revoked and passwords resetFeb 2, 20242 years agoHackingUnverifiedUnknown
CloudflareNation-state actor uses Okta-stolen tokens to breach Cloudflare Atlassian systemsFeb 1, 20242 years agoHackingUnknown
Mercedes-BenzExposed GitHub token gave unrestricted access to Mercedes-Benz source codeJan 26, 20242 years agoExposed dataUnverifiedUnknown
Hewlett Packard EnterpriseMidnight Blizzard exfiltrated data from HPE cloud email mailboxesJan 24, 20242 years agoHackingUnknown

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.