Breaches that exposed messages

118 breaches

Uber FreightExtortion exposed messages, financial details and internal documents.ExtortionTransportUSUnverifiedAug 12Brinks HomePhishing exposed dates of birth, emails, names, payment cards, phone numbers, addresses, financial details, messages and employment records.Phishing732K accountsTechUSJul 30AnthropicShared Claude conversations appeared in Google search resultsExposed dataAIUSUnverifiedJul 27LastPassSupply chain exposed names, phone numbers, emails, addresses and messages.Supply chainTechUSJun 23KlueSupply chain exposed credentials and tokens, API keys, names, emails and messages.Supply chainTechCAJun 19TinyPulseExtortion exposed names, emails, financial details, messages and employment records.ExtortionTechUSUnverifiedJun 18ServiceNowExposed data exposed internal documents, employment records and messages.Exposed dataTechUSUnverifiedJun 9DINUMFrench government Tchap messenger breach affects 73,467 officialsPhishing73K affectedGovernmentFRUnverifiedJun 9MetaEmployee keystroke and screen data collected to train AI was widely exposed inside MetaExposed dataTechUSJun 5Pay Tel CommunicationsPrison phone provider Pay Tel exposed IDs of over 300,000 callersExposed data1,717 affectedTelecomUSMay 28Charter CommunicationsCharter confirms breach as ShinyHunters claims 40 million customer recordsPhishing4.9M accountsTelecomUSUnverifiedMay 26ZaraVendor breach exposed emails, location data, financial details and messages.Vendor breach197K accountsRetailESUnverifiedMay 8InstructureExtortion exposed names, emails, messages, children's data and education records.ExtortionEducationUSUnverifiedMay 2Hims & HersPhishing exposed names, emails, phone numbers, messages and health records. Reported to the California AG.Phishing3,385 affectedHealthcareUSApr 2European CommissionSupply chain exposed names, emails, messages and internal documents.Supply chainGovernmentBEMar 27CrunchyrollVendor breach exposed emails, names, IP addresses, location data, messages and payment cards.Vendor breach1.2M accountsMediaUSUnverifiedMar 23Sears Home ServicesAI repair chatbot 'Samantha' left 3.7M chat logs and 1.4M call recordings exposedExposed dataRetailUSUnverifiedMar 17Telus DigitalSupply chain exposed messages, credentials and tokens, source code and financial details.Supply chainTechCAUnverifiedMar 11McKinsey & CompanyOffensive AI agent got read-write access to McKinsey's Lilli AI platform databaseAI or modelTechUSUnverifiedMar 9LexisNexis Legal & ProfessionalLexisNexis confirms breach via React2Shell flaw as FulcrumSec leaks filesHackingData brokersUSUnverifiedMar 3KomikoAIAI comic generator breach linked user prompts to email addressesHacking1.1M accountsAIUnverifiedMar 2ManoManoVendor breach exposed names, emails, phone numbers and messages.Vendor breach38M affectedRetailFRUnverifiedFeb 26TengaHacking exposed names, emails and messages.Hacking600 affectedRetailJPUnverifiedFeb 19MicrosoftAI or model exposed messages.AI or modelTechUSUnverifiedFeb 18Toy BattlesExposed messages, emails and IP addresses.1,017 accountsTechUnverifiedFeb 10MoltbookVibe-coded AI agent social network exposed 1.5M API tokens and 35,000 emailsExposed dataAIUnverifiedFeb 2NationStatesHacking exposed emails, passwords, IP addresses and messages.HackingGamingUnverifiedJan 30CodewayFirebase misconfiguration exposed 300M messages from Chat & Ask AI usersExposed dataAITRUnverifiedJan 29BBonduAI plush toy's open web console exposed 50,000 children's chat logsExposed dataAIUSUnverifiedJan 29PcComponentesCredential stuffing exposed names, addresses, phone numbers, IP addresses and messages.Credential stuffingRetailESJan 21InstagramAttackers tricked Meta AI support assistant into hijacking 20,225 Instagram accountsAI or model20K affectedTechUSUnverifiedJan 11BreachForumsExposed data exposed emails, passwords, dates of birth, messages, names and IP addresses.Exposed data324K affectedTechUnverifiedJan 10WhiteDateExposed dates of birth, education records, emails, location data, financial details, IP addresses, passwords and messages.20K accountsTechUnverifiedJan 6MAMalicious AI sidebar Chrome extensionsTwo Chrome AI sidebar extensions with 900,000 users stole ChatGPT and DeepSeek chatsSupply chainTechUnverifiedDec 30, 2025UCUrban Cyber SecurityFeatured VPN browser extension harvested AI chats of millions and sent them to data brokerInsiderTechUnverifiedDec 15, 2025Congressional Budget OfficeForeign hackers breach Congressional Budget OfficeHackingGovernmentUSUnverifiedNov 6, 2025NikkeiHacking exposed names, emails and messages.Hacking17K affectedMediaJPNov 4, 2025IIImagime InteractiveAI companion apps Chattee Chat and GiMe Chat exposed 43M intimate messagesExposed dataAIHKUnverifiedOct 9, 2025DiscordVendor breach exposed government IDs, IP addresses, names, emails, messages, payment cards, dates of birth and addresses. Reported to the California AG.Vendor breach75K affectedTechUSOct 3, 2025PMpostmark-mcpFirst malicious MCP server on npm secretly BCC'd every email to attackerSupply chainTechUnverifiedSep 25, 2025NeonCall-recording app selling audio to AI firms exposed users' recordings and transcriptsExposed dataAIUSUnverifiedSep 25, 2025xAIGrok website exposed system prompts for its AI personasAI or modelAIUSUnverifiedAug 18, 2025OpenAIShared ChatGPT conversations were indexed by Google and other search enginesExposed dataAIUSUnverifiedJul 31, 2025ChatGPTShared ChatGPT conversations indexed by Google and other search enginesAI or modelAIUSUnverifiedJul 31, 2025Tea Dating AdviceTea app exposed 72,000 user images and over a million private messagesExposed data4,244 affectedTechUSJul 25, 2025Paradox.aiMcHire AI hiring chatbot admin flaw exposed McDonald's applicant chatsExposed dataAIUSJul 9, 2025McDonald'sMcHire AI hiring bot's "123456" password exposed 64M applicant recordsExposed dataRetailUSUnverifiedJul 9, 2025CatwatchfulExposed data exposed emails, passwords, messages and location data.Exposed data62K accountsTechUnverifiedJul 2, 2025AsanaBug in Asana's AI MCP server exposed customer data to other organizationsAI or modelTechUSUnverifiedJun 18, 2025LLockBitHacking exposed internal documents and messages.HackingUnverifiedMay 7, 2025