Skip to content
Breaches.

Exposed data breaches

126 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
LimeLeadsSep 223 days agoExposed dataUnverified18Macct
AnthropicShared Claude conversations appeared in Google search resultsJul 272 months agoExposed dataUnverifiedUnknown
ServiceNowServiceNow unauthenticated API flaw exposed customer instance dataJun 93 months agoExposed dataUnverifiedUnknown
MetaEmployee keystroke and screen data collected to train AI was widely exposed inside MetaJun 53 months agoExposed dataUnknown
Pay Tel CommunicationsPrison phone provider Pay Tel exposed IDs of over 300,000 callersMay 284 months agoExposed dataUnverifiedUnknown
Active LeadgenUnofficial UK visa portal exposed 100,000 passport and selfie filesMay 274 months agoExposed data295
ReqreaHotel check-in startup left over 1 million passports and IDs in open bucketMay 154 months agoExposed dataUnverifiedUnknown
LovableAuthorization flaw exposed chat histories of public Lovable projectsApr 205 months agoExposed dataUnverifiedUnknown
ExpressExpress order page flaw exposed customer contact and order detailsApr 165 months agoExposed dataUnverifiedUnknown
McGraw HillMcGraw Hill data from Salesforce misconfiguration leaked, 13.5M accountsApr 145 months agoExposed dataUnverified14Macct
DualesMoney transfer app Duc left 360,000 ID and selfie files on open serverApr 25 months agoExposed dataUnverifiedUnknown
AnthropicClaude Code source code accidentally published in npm packageMar 315 months agoExposed dataUnverifiedUnknown
Sears Home ServicesAI repair chatbot 'Samantha' left 3.7M chat logs and 1.4M call recordings exposedMar 176 months agoExposed dataUnverifiedUnknown
PayPalPayPal Working Capital code error exposed SSNs of about 100 customersFeb 207 months agoExposed dataUnverified100
CodewayAndroid AI video app bucket exposed 8.27M media files including 2M private uploadsFeb 197 months agoExposed dataUnverifiedUnknown
VenturEd SolutionsAdmissions platform bug exposed over 1.6 million student recordsFeb 197 months agoExposed dataUnverifiedUnknown
OpenClawMore than 135,000 OpenClaw AI agent instances found exposed to the internetFeb 97 months agoExposed dataUnverifiedUnknown
MoltbookVibe-coded AI agent social network exposed 1.5M API tokens and 35,000 emailsFeb 27 months agoExposed dataUnverifiedUnknown
BonduAI plush toy's open web console exposed 50,000 children's chat logsJan 297 months agoExposed dataUnverifiedUnknown
CodewayFirebase misconfiguration exposed 300M messages from Chat & Ask AI usersJan 297 months agoExposed dataUnverifiedUnknown
BreachForumsBreachForums user database leaked, exposing 323,988 membersJan 108 months agoExposed dataUnverified324K
Illinois Department of Human ServicesIllinois DHS map settings expose data of 704,017 residentsJan 98 months agoExposed data705K
Flock SafetyLivestreams and admin panels of 60+ AI-enabled Flock Condor cameras left open onlineDec 22, 20259 months agoExposed dataUnverifiedUnknown
The Home DepotLeaked GitHub token exposed Home Depot internal systems for a yearDec 12, 20259 months agoExposed dataUnverifiedUnknown
Freedom ChatFreedom Chat flaws exposed users' phone numbers and PINsDec 11, 20259 months agoExposed dataUnverifiedUnknown
DreamXAI image generator database exposed over 1M mostly explicit images, some of minorsDec 4, 20259 months agoExposed dataUnverifiedUnknown
PetcoPetco security lapse exposed customers' SSNs and driver's licensesDec 4, 20259 months agoExposed dataUnverifiedUnknown
Tyler TechnologiesFlaw in Tyler juror websites exposed potential jurors' personal dataNov 26, 202510 months agoExposed dataUnverifiedUnknown
Secret DesiresErotic AI chatbot left nearly 2M user photos and videos in open storageNov 19, 202510 months agoExposed dataUnverifiedUnknown
Tata MotorsExposed AWS keys in Tata Motors portal left customer data openOct 28, 202511 months agoExposed dataUnverifiedUnknown
Smithery.aiPath traversal in MCP hosting registry exposed admin token to 3,000+ hosted AI serversOct 22, 202511 months agoExposed dataUnverifiedUnknown
Imagime InteractiveAI companion apps Chattee Chat and GiMe Chat exposed 43M intimate messagesOct 9, 202511 months agoExposed dataUnverifiedUnknown
NeonCall-recording app selling audio to AI firms exposed users' recordings and transcriptsSep 25, 20251 year agoExposed dataUnverifiedUnknown
Vyro AIUnprotected Elasticsearch server leaked 116GB of logs from ImagineArt and Chatly AI appsSep 11, 20251 year agoExposed dataUnverifiedUnknown
TeaOnHerTeaOnHer app left users' driver's licenses and selfies exposedAug 6, 20251 year agoExposed dataUnverifiedUnknown
OpenAIShared ChatGPT conversations were indexed by Google and other search enginesJul 31, 20251 year agoExposed dataUnverifiedUnknown
LovenseLovense flaws leaked user emails and allowed account takeoversJul 28, 20251 year agoExposed dataUnverifiedUnknown
Tea Dating AdviceTea app exposed 72,000 user images and over a million private messagesJul 25, 20251 year agoExposed data4,244
MetaMeta AI bug let users view other people's private prompts and responsesJul 15, 20251 year agoExposed dataUnverifiedUnknown
McDonald'sMcHire AI hiring bot's "123456" password exposed 64M applicant recordsJul 9, 20251 year agoExposed dataUnverifiedUnknown
Paradox.aiMcHire AI hiring chatbot admin flaw exposed McDonald's applicant chatsJul 9, 20251 year agoExposed dataUnknown
CatwatchfulCatwatchful stalkerware bug spills customer logins and victims' dataJul 2, 20251 year agoExposed dataUnverified62Kacct
Scale AIScale AI left confidential AI training docs and contractor data in public Google DocsJun 24, 20251 year agoExposed dataUnverifiedUnknown
MetaMeta AI app Discover feed surfaced users' personal chatbot conversationsJun 12, 20251 year agoExposed dataUnverifiedUnknown
VantaVanta code change exposed customer integration data to other customersJun 2, 20251 year agoExposed dataUnverifiedUnknown
NaukriNaukri app API exposed recruiters' email addressesMay 23, 20251 year agoExposed dataUnverifiedUnknown
Australian Human Rights CommissionAustralian Human Rights Commission documents indexed by search enginesMay 14, 20251 year agoExposed dataUnverifiedUnknown
ServiceaideUnsecured Serviceaide database exposed 483,126 Catholic Health patientsMay 9, 20251 year agoExposed data483K
RawDating app Raw exposed users' precise locations and birth datesMay 2, 20251 year agoExposed dataUnverifiedUnknown
xAIxAI employee leaked API key on GitHub giving access to private Grok modelsMay 1, 20251 year agoExposed dataUnverifiedUnknown

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.