Skip to content
Breaches.

Exposed data breaches

126 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
GenNomisNudify AI image generator left 93,485 images and prompt logs in open databaseMar 31, 20251 year agoExposed dataUnverifiedUnknown
APIsecAPI testing firm APIsec left customer database exposed without passwordMar 31, 20251 year agoExposed dataUnverifiedUnknown
Common CrawlNearly 12,000 live API keys and passwords found in AI training datasetFeb 28, 20251 year agoExposed dataUnverifiedUnknown
Blue Shield of CaliforniaGoogle Analytics misconfiguration shared 4.7M members' health dataFeb 28, 20251 year agoExposed data4.7M
SpyzieSpyzie stalkerware exposes data from half a million phonesFeb 27, 20251 year agoExposed dataUnverified519K
CocospyStalkerware bug exposes victims' phone data and 3.2M customer emailsFeb 20, 20251 year agoExposed dataUnverified1.8Macct
AngelSenseGPS tracker maker AngelSense exposed users' location and personal dataJan 30, 20251 year agoExposed dataUnverifiedUnknown
DeepSeekUnauthenticated ClickHouse database exposed chat history and API secretsJan 29, 20251 year agoExposed dataUnverifiedUnknown
MSIJan 17, 20251 year agoExposed dataUnverified250Kacct
MyGiftCardSupplyGift card store left customer ID documents exposed onlineJan 3, 20251 year agoExposed dataUnverifiedUnknown
CariadVolkswagen software unit left location data of 800,000 EVs exposedDec 27, 20241 year agoExposed dataUnverified800K
French CitizensDec 20, 20241 year agoExposed dataUnverified28Macct
Character.AIConfiguration change exposed parts of some users' accounts and chats to othersDec 17, 20241 year agoExposed dataUnknown
HopamediaDec 16, 20241 year agoExposed dataUnverified24Macct
MC2 DataDec 15, 20241 year agoExposed dataUnverified2.1Macct
OptumInternal AI claims chatbot used by Optum staff was exposed to the internetDec 13, 20241 year agoExposed dataUnverifiedUnknown
WotNotAI chatbot builder left 346,381 customer files in public cloud bucketNov 28, 20241 year agoExposed dataUnverifiedUnknown
DemandScience by Pure IncubationLeak from decommissioned DemandScience system exposes 122 million business contactsNov 13, 20241 year agoExposed dataUnverified122Macct
Confidant HealthAI-powered addiction care provider exposed 5.3TB of therapy records in open databaseSep 6, 20242 years agoExposed dataUnverifiedUnknown
FlightAwareFlightAware configuration error exposes customer data including SSNsAug 13, 20242 years agoExposed dataUnknown
SAPSAPwned: SAP AI Core flaws gave researchers access to customer cloud keys and AI artifactsJul 17, 20242 years agoExposed dataUnverifiedUnknown
RabbitHardcoded API keys in Rabbit R1 code exposed users' AI assistant responsesJun 26, 20242 years agoExposed dataUnverifiedUnknown
ReplicateTenant isolation flaw could expose all Replicate customers' AI prompts and resultsMay 23, 20242 years agoExposed dataUnverifiedUnknown
Kaiser PermanenteTracking code on Kaiser websites and apps shared data of 13.4 million membersApr 25, 20242 years agoExposed dataUnverified13M
BMWMisconfigured BMW Azure storage bucket exposes private keys and internal dataFeb 14, 20242 years agoExposed dataUnverifiedUnknown
SpoutibleFeb 5, 20242 years agoExposed dataUnverified207Kacct
Mercedes-BenzExposed GitHub token gave unrestricted access to Mercedes-Benz source codeJan 26, 20242 years agoExposed dataUnverifiedUnknown
Hugging Face1,681 exposed Hugging Face API tokens gave write access to Meta Llama and other reposDec 4, 20232 years agoExposed dataUnverifiedUnknown
MemeChatOct 29, 20232 years agoExposed dataUnverified4.3Macct
GoogleShared Bard conversations were indexed in Google Search resultsSep 27, 20232 years agoExposed dataUnverifiedUnknown
MicrosoftAI research team's overly permissive SAS token exposed 38TB of internal dataSep 18, 20233 years agoExposed dataUnverifiedUnknown
Police Service of Northern IrelandFOI spreadsheet exposed all 9,483 PSNI officers and staff; ICO fine of GBP 750,000Aug 8, 20233 years agoExposed data9,483
RobloxJul 23, 20233 years agoExposed dataUnverified52Kacct
Office of the Registrar General, Birth and Death RegistrationBangladesh government website leaks personal data of over 50 million citizensJul 7, 20233 years agoExposed dataUnverifiedUnknown
Toyota MotorCloud misconfiguration exposed vehicle data of 2.15 million Toyota customers for a decadeMay 12, 20233 years agoExposed dataUnverified2.1M
OpenAIChatGPT Redis bug exposed chat titles and Plus subscriber payment detailsMar 24, 20233 years agoExposed dataUnknown
DC Health LinkDC Health Link data including members of Congress posted on hacking forumMar 8, 20233 years agoExposed dataUnverified48Kacct
Cutout.ProOpen Elasticsearch instance leaked 9GB of Cutout.pro AI image editor user logsFeb 16, 20233 years agoExposed dataUnverifiedUnknown
Hotai MotorCar rental app left 400,000+ customers' data in open database; Taiwan finesJan 30, 20233 years agoExposed dataUnverified400K
MicrosoftMisconfigured Microsoft storage exposes prospective customer business dataOct 19, 20223 years agoExposed dataUnverifiedUnknown
Toyota MotorT-Connect source code on GitHub exposed 296,019 customer emails for five yearsOct 7, 20223 years agoExposed data296K
StripchatAug 31, 20224 years agoExposed dataUnverified10Macct
WegmansMisconfigured cloud storage exposed 3M+ customers for years; USD 400,000 NY AGJun 30, 20224 years agoExposed data3M
PlaybookOct 11, 20214 years agoExposed dataUnverified51Kacct
TwitchTwitch source code and streamer payout data leaked onlineOct 6, 20214 years agoExposed dataUnverifiedUnknown
TwitterProtected tweets bug notified late; Irish DPC fine of EUR 450,000Dec 15, 20205 years agoExposed dataUnknown
Lead HunterJun 3, 20206 years agoExposed dataUnverified69Macct
CovveMay 15, 20206 years agoExposed dataUnverified23Macct
StrafficFeb 27, 20206 years agoExposed dataUnverified49Macct
First American FinancialWebsite design defect exposed title insurance document imagesMay 28, 20197 years agoExposed data32

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.