Skip to content
Breaches.

Breaches that exposed messages

118 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Uber FreightUber Freight investigates Helix group claim of stolen mailboxes and filesAug 126 weeks agoExtortionUnverifiedUnknown
Brinks HomeBrinks Home confirms breach as ShinyHunters claims 4.9M Salesforce recordsJul 308 weeks agoPhishing732Kacct
AnthropicShared Claude conversations appeared in Google search resultsJul 272 months agoExposed dataUnverifiedUnknown
LastPassLastPass support case data stolen via Klue OAuth tokensJun 233 months agoSupply chainUnknown
KlueKlue legacy credential breach leads to OAuth token theft and Salesforce raidsJun 193 months agoSupply chainUnknown
TinyPulseTinyPulse survey platform hack exposes Nintendo of America employee dataJun 183 months agoExtortionUnverifiedUnknown
DINUMFrench government Tchap messenger breach affects 73,467 officialsJun 93 months agoPhishingUnverified73K
ServiceNowServiceNow unauthenticated API flaw exposed customer instance dataJun 93 months agoExposed dataUnverifiedUnknown
MetaEmployee keystroke and screen data collected to train AI was widely exposed inside MetaJun 53 months agoExposed dataUnknown
Pay Tel CommunicationsPrison phone provider Pay Tel exposed IDs of over 300,000 callersMay 284 months agoExposed dataUnverifiedUnknown
Charter CommunicationsCharter confirms breach as ShinyHunters claims 40 million customer recordsMay 264 months agoPhishingUnverified4.9Macct
ZaraZara data stolen via Anodot tokens, 197,400 customers affectedMay 84 months agoVendor breachUnverified197Kacct
InstructureInstructure Canvas breach exposes students' messages at nearly 9,000 schoolsMay 24 months agoExtortionUnverifiedUnknown
Hims & HersHims & Hers support tickets stolen via Okta SSO and Zendesk compromiseApr 25 months agoPhishing3,385
European CommissionEuropean Commission cloud breach via Trivy-stolen AWS key hits 30 EU bodiesMar 276 months agoSupply chainUnknown
CrunchyrollCrunchyroll support tickets stolen via BPO agent's Okta accountMar 236 months agoVendor breachUnverified1.2Macct
Sears Home ServicesAI repair chatbot 'Samantha' left 3.7M chat logs and 1.4M call recordings exposedMar 176 months agoExposed dataUnverifiedUnknown
Telus DigitalTelus Digital confirms breach after ShinyHunters claims 1 PB data theftMar 116 months agoSupply chainUnverifiedUnknown
McKinsey & CompanyOffensive AI agent got read-write access to McKinsey's Lilli AI platform databaseMar 96 months agoAI or modelUnverifiedUnknown
LexisNexis Legal & ProfessionalLexisNexis confirms breach via React2Shell flaw as FulcrumSec leaks filesMar 36 months agoHackingUnverifiedUnknown
KomikoAIAI comic generator breach linked user prompts to email addressesMar 26 months agoHackingUnverified1.1Macct
ManoManoManoMano says Zendesk subcontractor breach exposed 38 million customersFeb 267 months agoVendor breachUnverified38M
TengaTenga says hacker used employee mailbox to steal US customer dataFeb 197 months agoHackingUnverified600
MicrosoftMicrosoft 365 Copilot Chat bug processed confidential-labeled emails for weeksFeb 187 months agoAI or modelUnverifiedUnknown
Toy BattlesFeb 107 months agoUnverified1,017acct
MoltbookVibe-coded AI agent social network exposed 1.5M API tokens and 35,000 emailsFeb 27 months agoExposed dataUnverifiedUnknown
NationStatesNationStates takes game offline after player exploits RCE and copies user dataJan 307 months agoHackingUnverifiedUnknown
BonduAI plush toy's open web console exposed 50,000 children's chat logsJan 297 months agoExposed dataUnverifiedUnknown
CodewayFirebase misconfiguration exposed 300M messages from Chat & Ask AI usersJan 297 months agoExposed dataUnverifiedUnknown
PcComponentesPcComponentes denies database breach but confirms credential stuffing attackJan 218 months agoCredential stuffingUnknown
InstagramAttackers tricked Meta AI support assistant into hijacking 20,225 Instagram accountsJan 118 months agoAI or modelUnverified20K
BreachForumsBreachForums user database leaked, exposing 323,988 membersJan 108 months agoExposed dataUnverified324K
WhiteDateJan 68 months agoUnverified20Kacct
Malicious AI sidebar Chrome extensionsTwo Chrome AI sidebar extensions with 900,000 users stole ChatGPT and DeepSeek chatsDec 30, 20258 months agoSupply chainUnverifiedUnknown
Urban Cyber SecurityFeatured VPN browser extension harvested AI chats of millions and sent them to data brokerDec 15, 20259 months agoInsiderUnverifiedUnknown
Congressional Budget OfficeForeign hackers breach Congressional Budget OfficeNov 6, 202510 months agoHackingUnverifiedUnknown
NikkeiNikkei Slack compromise exposes data of 17,368 peopleNov 4, 202510 months agoHacking17K
Imagime InteractiveAI companion apps Chattee Chat and GiMe Chat exposed 43M intimate messagesOct 9, 202511 months agoExposed dataUnverifiedUnknown
DiscordDiscord vendor breach exposes ID photos of about 70,000 usersOct 3, 202511 months agoVendor breach75K
NeonCall-recording app selling audio to AI firms exposed users' recordings and transcriptsSep 25, 20251 year agoExposed dataUnverifiedUnknown
postmark-mcpFirst malicious MCP server on npm secretly BCC'd every email to attackerSep 25, 20251 year agoSupply chainUnverifiedUnknown
xAIGrok website exposed system prompts for its AI personasAug 18, 20251 year agoAI or modelUnverifiedUnknown
ChatGPTShared ChatGPT conversations indexed by Google and other search enginesJul 31, 20251 year agoAI or modelUnverifiedUnknown
OpenAIShared ChatGPT conversations were indexed by Google and other search enginesJul 31, 20251 year agoExposed dataUnverifiedUnknown
Tea Dating AdviceTea app exposed 72,000 user images and over a million private messagesJul 25, 20251 year agoExposed data4,244
McDonald'sMcHire AI hiring bot's "123456" password exposed 64M applicant recordsJul 9, 20251 year agoExposed dataUnverifiedUnknown
Paradox.aiMcHire AI hiring chatbot admin flaw exposed McDonald's applicant chatsJul 9, 20251 year agoExposed dataUnknown
CatwatchfulCatwatchful stalkerware bug spills customer logins and victims' dataJul 2, 20251 year agoExposed dataUnverified62Kacct
AsanaBug in Asana's AI MCP server exposed customer data to other organizationsJun 18, 20251 year agoAI or modelUnverifiedUnknown
LockBitLockBit ransomware gang's affiliate panel hacked and database leakedMay 7, 20251 year agoHackingUnverifiedUnknown

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.