Skip to content

Breaches that exposed internal documents

136 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
MicrosoftRussian state hackers access Microsoft senior leadership email accountsJan 19, 20242 years agoHackingUnknown
BoeingLockBit ransomware gang hits Boeing parts and distribution businessNov 2, 20232 years agoRansomwareUnverifiedUnknown
British LibraryRhysida ransomware attack on British Library leaks staff and user dataOct 31, 20232 years agoRansomwareUnverifiedUnknown
MicrosoftAI research team's overly permissive SAS token exposed 38TB of internal dataSep 18, 20233 years agoExposed dataUnverifiedUnknown
OfcomMOVEit hack exposes data of 412 Ofcom staff and regulated firmsJun 12, 20233 years agoSupply chainUnverified412
SamsungStaff pasted sensitive internal data into ChatGPT, prompting a generative AI banMay 2, 20233 years agoInsiderUnverifiedUnknown
RedditPhishing attack on Reddit employee leads to theft of internal documents and codeFeb 9, 20233 years agoPhishingUnverifiedUnknown
Royal MailLockBit ransomware attack halts Royal Mail international shipping and leaks staff dataJan 17, 20233 years agoRansomwareUnverifiedUnknown
MicrosoftMisconfigured Microsoft storage exposes prospective customer business dataOct 19, 20223 years agoExposed dataUnverifiedUnknown
Rockstar GamesNetwork intrusion leaks early Grand Theft Auto VI development footageSep 19, 20224 years agoHackingUnverifiedUnknown
UberLapsus$-linked hacker breaches Uber internal systems via contractor accountSep 16, 20224 years agoHackingUnknown
CiscoYanluowang-linked attacker breaches Cisco via employee's synced Google accountAug 10, 20224 years agoPhishingUnknown
AdvancedLockBit ransomware at NHS software vendor Advanced disrupts 111 and care systemsAug 4, 20224 years agoRansomwareUnverifiedUnknown
EntrustEntrust tells customers files were stolen from internal systems in June attackJul 21, 20224 years ago4,182
Marriott InternationalSocial engineering at a Marriott hotel leads to theft of guest and card dataJul 6, 20224 years agoPhishingUnverifiedUnknown
Government of Costa RicaConti ransomware cripples Costa Rica's finance ministry and other agenciesApr 18, 20224 years agoRansomwareUnverifiedUnknown
OktaLapsus$ accesses Okta support engineer's machine at vendor SitelMar 22, 20224 years agoVendor breachUnknown
SamsungLapsus$ leaks about 190GB of Samsung data including Galaxy source codeMar 7, 20224 years agoHackingUnverifiedUnknown
NvidiaLapsus$ steals Nvidia proprietary data and employee credentialsFeb 25, 20224 years agoHackingUnverified71Kacct
TwitchTwitch source code and streamer payout data leaked onlineOct 6, 20214 years agoExposed dataUnverifiedUnknown
Colonial PipelineDarkSide ransomware forces shutdown of largest US fuel pipelineMay 7, 20215 years agoRansomware5,810
QualysQualys customer files taken through Accellion FTA serverMar 4, 20215 years agoSupply chainUnknown
AccellionZero-day attacks on legacy FTA file transfer appliance hit dozens of organizationsFeb 1, 20215 years agoSupply chainUnknown
Australian Securities and Investments CommissionASIC server breached through Accellion file transfer softwareJan 25, 20215 years agoSupply chainUnverifiedUnknown
UbiquitiInsider steals gigabytes of Ubiquiti data and poses as extortionistJan 11, 20215 years agoInsiderUnknown
Reserve Bank of New ZealandFiles illegally downloaded from central bank's Accellion file sharing systemJan 10, 20215 years agoSupply chainUnverifiedUnknown
US Federal GovernmentLikely Russian APT compromised fewer than ten US agencies via SolarWinds OrionJan 5, 20215 years agoSupply chainUnknown
SolarWindsBuild system compromise plants backdoor in Orion updates shipped to customersDec 14, 20205 years agoSupply chainUnknown
FireEyeNation-state attacker steals FireEye red team assessment toolsDec 8, 20205 years agoSupply chainUnknown
T-MobileCyberattack steals data of tens of millions of T-Mobile customers and applicantsOct 9, 20205 years agoHacking54M
DeloitteHackers access Deloitte email system holding confidential client dataSep 25, 20179 years agoHackingUnverifiedUnknown
Mossack FonsecaPanama Papers: 11.5 million files leaked from offshore law firmApr 3, 201610 years agoUnverifiedUnknown
Hacking TeamSurveillance vendor Hacking Team breached, 400GB of data leakedJul 5, 201511 years agoHackingUnverified32Kacct
Sony Pictures EntertainmentDestructive attack on Sony Pictures leaks films, emails and employee dataNov 24, 201411 years agoHackingUnknown
RSA SecurityAttackers steal SecurID token information in targeted intrusion at RSAMar 17, 201115 years agoPhishingUnknown
HBGary FederalAnonymous hacks HBGary, publishing tens of thousands of company emailsFeb 6, 201115 years agoHackingUnverifiedUnknown

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.