Skip to content
Breaches.

Breaches that exposed other

353 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
HarrodsThird-party breach exposes 430,000 Harrods e-commerce customer recordsSep 26, 202512 months agoVendor breachUnverified430K
NeonCall-recording app selling audio to AI firms exposed users' recordings and transcriptsSep 25, 20251 year agoExposed dataUnverifiedUnknown
Kido InternationalRadiant hackers steal photos and data of 8,000 London nursery childrenSep 25, 20251 year agoExtortionUnverifiedUnknown
ToastToast Salesforce data stolen via Salesloft Drift OAuth tokensSep 18, 20251 year agoSupply chainUnknown
SonicWallState hackers stole SonicWall customers' firewall config backupsSep 17, 20251 year agoHackingUnknown
ProsperHackers steal data of 17.6 million Prosper accounts including SSNsSep 17, 20251 year agoHacking18Macct
FinWise BankFormer FinWise employee accessed data of 689,000 AFF customersSep 12, 20251 year agoInsiderUnverified689K
AvalaraAvalara Salesforce data stolen via Salesloft Drift OAuth tokensSep 12, 20251 year agoSupply chainUnknown
Vyro AIUnprotected Elasticsearch server leaked 116GB of logs from ImagineArt and Chatly AI appsSep 11, 20251 year agoExposed dataUnverifiedUnknown
PantheonPantheon Salesforce data stolen via Salesloft Drift OAuth tokensSep 5, 20251 year agoSupply chainUnknown
FastlyFastly Salesforce data stolen via Salesloft Drift OAuth tokensSep 5, 20251 year agoSupply chainUnknown
TenableTenable Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnknown
RubrikRubrik Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnverifiedUnknown
QualysQualys Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnknown
PagerDutyPagerDuty Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnknown
JFrogJFrog Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnverifiedUnknown
CyberArkCyberArk Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnverifiedUnknown
Cato NetworksCato Networks Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnverifiedUnknown
BeyondTrustBeyondTrust Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnverifiedUnknown
WorkivaWorkiva customer data stolen from third-party CRMSep 3, 20251 year agoVendor breachUnverifiedUnknown
NutanixNutanix Salesforce data stolen via Salesloft Drift OAuth tokensSep 3, 20251 year agoSupply chainUnknown
Chess.comHackers access Chess.com third-party file transfer app, 4,500 users hitSep 3, 20251 year agoVendor breach4,541
ProofpointProofpoint Salesforce data stolen via Salesloft Drift OAuth tokensSep 2, 20251 year agoSupply chainUnknown
Palo Alto NetworksPalo Alto Networks Salesforce data stolen via Salesloft Drift OAuth tokensSep 2, 20251 year agoSupply chainUnknown
Jaguar Land RoverCyberattack halts Jaguar Land Rover production for weeks, data stolenSep 2, 20251 year agoHackingUnverifiedUnknown
CloudflareCloudflare Salesforce data stolen via Salesloft Drift OAuth tokensSep 2, 20251 year agoSupply chainUnknown
SpyCloudSpyCloud Salesforce data stolen via Salesloft Drift OAuth tokensSep 1, 20251 year agoSupply chainUnknown
EskerEsker Salesforce data stolen via Salesloft Drift OAuth tokensSep 1, 20251 year agoSupply chainUnknown
ZscalerZscaler Salesforce data stolen via Salesloft Drift OAuth tokensAug 30, 20251 year agoSupply chainUnknown
BugcrowdBugcrowd Salesforce data stolen via Salesloft Drift OAuth tokensAug 27, 20251 year agoSupply chainUnknown
AnthropicCybercriminal used Claude Code to steal and extort data from at least 17 organizationsAug 27, 20251 year agoExtortionUnknown
Creative BoxQilin ransomware steals Nissan design studio filesAug 26, 20251 year agoRansomwareUnverifiedUnknown
MiljödataAttack on Swedish municipal IT supplier Miljödata exposes 1.5M peopleAug 25, 20251 year agoExtortion1.5M
AuchanAuchan loyalty account data of hundreds of thousands exposedAug 21, 20251 year agoHackingUnverifiedUnknown
Orange BelgiumOrange Belgium hack exposes SIM and PUK data of 850,000 customersAug 20, 20251 year agoHacking850K
InotivQilin ransomware attack on Inotiv exposes 9,542 peopleAug 18, 20251 year agoRansomware10K
Colt Technology ServicesWarlock ransomware steals and auctions Colt customer filesAug 14, 20251 year agoRansomwareUnknown
ManpowerManpower franchise breach claimed by RansomHub hits 144,189 peopleAug 12, 20251 year agoRansomwareUnverified144K
US Federal JudiciaryHackers breach federal courts' case management systemAug 7, 20251 year agoHackingUnknown
Columbia UniversityHacker steals data of 868,969 Columbia students, applicants and staffAug 7, 20251 year agoHacking3.1M
TeaOnHerTeaOnHer app left users' driver's licenses and selfies exposedAug 6, 20251 year agoExposed dataUnverifiedUnknown
Bouygues TelecomCyberattack exposes data of 6.4 million Bouygues Telecom accountsAug 6, 20251 year agoHacking6.4M
Air France-KLMAir France and KLM customer service platform breachedAug 6, 20251 year agoVendor breachUnknown
GoogleShinyHunters steal business contact data from Google Salesforce instanceAug 5, 20251 year agoPhishingUnverifiedUnknown
CiscoVishing attack on Cisco CRM exposes Cisco.com user profilesAug 4, 20251 year agoPhishingUnverifiedUnknown
Tea Dating AdviceTea app exposed 72,000 user images and over a million private messagesJul 25, 20251 year agoExposed data4,244
AMEOS GroupHospital operator AMEOS discloses breach of patient and staff dataJul 22, 20251 year agoHackingUnverifiedUnknown
ReplitReplit AI coding agent deleted SaaStr's production database during code freezeJul 21, 20251 year agoAI or modelUnverifiedUnknown
Meta AIMeta AI bug let users view other people's private prompts and outputsJul 15, 20251 year agoAI or modelUnverifiedUnknown
Louis VuittonLouis Vuitton customer data stolen in ShinyHunters SaaS attackJul 10, 20251 year agoHackingUnverifiedUnknown

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.