Chainalysis Breach Exposes All User Credentials, Services Shut Down
Chainalysis confirmed a cyberattack exposed names, usernames, password hashes, and live tokens for all users, prompting shutdown of Reactor and Data Solutions platforms.
Category
Breach
58 published analyses.
DigiCert Data Breach Exposes Customer Info and Identity Documents
A misconfigured server exposure during DigiCert's migration led to unauthorized access to customer information and identity documents, highlighting risks in certificate authority data handling.
DreamHost Data Breach Exposes FTP Logins and Webmail Sessions
DreamHost suffered a data breach exposing customers' FTP/SFTP credentials and webmail session information, impacting website security.
Northflank Security Breach Exposes Customers' AI API Keys
Northflank suffered a security breach resulting in unauthorized use of customers' AI API keys, posing risks to AI asset security.
Chainalysis reports data breach via offensive agentic techniques
Chainalysis disclosed a data breach caused by attackers using offensive agentic techniques to access internal systems and expose customer identifiers.
Binance Security Breach Impacts $6.3B in Assets, Nearly $3B Frozen
Binance suffered a security breach affecting $6.3 billion in assets, with nearly $3 billion frozen on-chain including $2.3 billion in USDT and USDC tokens.
Sony ISP Subsidiary Breach Exposes 2.5 Million Customer Records
Sony Network Communications suffered a data breach exposing 2.5 million customer records, including personal information of current and former clients.
Hackers exploit Convertr analytics script to steal payment card data
Attackers compromised a shared Convertr analytics script on e-commerce sites to steal payment card data during checkout, affecting multiple retailers using this third-party script.
Microsoft 365 Token-Replay Attacks Hit 79 Organizations
Researchers uncovered a token-replay campaign exploiting adversary-in-the-middle relays to hijack Microsoft 365 session tokens across 79 organizations.
Hackers Breach Enterprise Firewalls and VPNs Exposing 70,000+ Credentials
A widespread campaign compromised Fortinet FortiGate and Palo Alto GlobalProtect firewalls, exposing over 70,000 credentials and affecting organizations globally.
Capcom Confirms Data Breach Affecting 11.7 Million Accounts
Capcom confirmed a data breach in its CAPCOM ID service, exposing email addresses and related data for over 11.7 million accounts, raising risks to customer security.
Japan's Onamae Desktop Cloud hacked, nearly 27,000 servers compromised
Hackers breached Onamae Desktop Cloud, infecting up to 26,739 servers with malware, risking disruption to hosted customer infrastructure.
Zeabur Shuts Down After Second Security Breach in Two Months
Zeabur disclosed a second security breach within two months resulting in leaked plaintext credentials and theft of over 3.2 million environment variables affecting more than 321,000 accounts.
OpenCode Console Breach May Have Exposed AI Provider API Keys
An unauthorized actor accessed a legacy OpenCode system on October 16, potentially exposing API keys for OpenAI, Anthropic, and Google AI services, risking abuse of these AI integrations.
Hackers Abuse Compromised ConnectWise Credential to Access 173 M365 Tenants
Attackers use stolen ConnectWise Cloud Backup credentials to access 173 Microsoft 365 tenants affecting multiple managed service providers.
Ledger Confirms Spy Chip Implant Behind Crypto Wallet Thefts
Ledger confirmed that hardware wallets sold via a Southeast Asian reseller were compromised with spy chip implants, enabling cryptocurrency thefts and demonstrating critical supply chain risks.
Nippon Columbia Malware Incident Exposes 8.7 Million Records
A malware infection at Nippon Columbia, a contractor to Japanese entertainment system maker Daiichi Kosho, led to exposure of over 8.7 million customer and employee records, underscoring third-party data security risks.
Hackers Hijack Google Domains via ccTLD Registry Breaches
Hackers breached third-party operators managing ccTLD registries for Ghana, American Samoa, and Sierra Leone, compromising Google domains through unauthorized HTTPS certificates and DNS record modifications.
ASOS confirms data breach after hacked in-app notifications
UK fashion retailer ASOS confirmed a data breach after attackers sent unauthorized push notifications via its mobile app, alleging access to customer data in its Snowflake environment.
Denmark's Population Registry Data Breach Affects 8.8 Million People
Denmark's Central Population Register suffered a data breach exposing personal information of approximately 8.8 million individuals, raising serious privacy and security concerns.
Danish University DTU Data Breach Exposes Info of 200,000 Users
A breach at the Technical University of Denmark exposed sensitive identity data of up to 200,000 students and staff via unauthorized access to its identity and access management system.
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Weeks
Attackers accessed tax data of hundreds of thousands in France using stolen staff passwords and remained undetected for seven weeks due to weak detection.
EvilTokens PhaaS Disrupted After Compromising 12,000 Microsoft Accounts
The EvilTokens phishing platform compromising over 12,000 Microsoft accounts across 10,000 organizations was disrupted through an operation led by Microsoft's Digital Crimes Unit, halting ongoing account takeovers.
ShinyHunters exploits zero-day to breach FBI, steal sensitive data
The ShinyHunters extortion group exploited an Oracle PeopleSoft zero-day vulnerability to breach FBI systems and steal sensitive employee and applicant data, exposing a critical weakness in enterprise software security.
BigCommerce Alerts Merchants of Data Breach via Ribon Apps
BigCommerce informed merchants of data breaches after attackers compromised credentials of third-party Ribon apps to inject malicious scripts into stores, highlighting risks from third-party applications in ecommerce.
CrowdSec Private GitHub Repos Copied in TanStack npm Supply Chain Attack
An attacker accessed about 170 private CrowdSec GitHub repositories using stolen credentials from the May TanStack npm supply chain attack, exploiting a compromised former employee account.
Gyazo Server Vulnerability Leads to Theft of 23.6 Million User Records
Gyazo confirmed a data breach after a server vulnerability was exploited to steal 23.6 million user records, underscoring risks in platform security.
Brevo Supply-Chain Attack Injected Malicious Scripts on Customer Sites
Attackers compromised Brevo by stealing a Cloudflare API key and injecting malicious scripts into Brevo and its customers' websites, resulting in malware distribution via a supply-chain attack.
CenterPoint Energy Confirms Customer Data Stolen in Cyberattack
CenterPoint Energy confirmed a breach where attackers exfiltrated customers' personal data, emphasizing the ongoing threats faced by critical utility providers.
3BB Attacker Leveraged MeshCentral Backdoor for Root Access
An attacker used a MeshCentral backdoor to gain root access to internal systems at 3BB, a major Thai broadband provider, exposing subscriber credentials and internal tools.
Florida DMV Database Breached via Stolen Police Credentials
Attackers accessed the Florida Department of Highway Safety and Motor Vehicles' DAVID database using stolen police department credentials, resulting in a data breach.
IDScan Confirms Breach Affecting 153 Million Driver’s License Records
IDScan confirmed that hackers accessed customer data on its cloud platform, exposing over 153 million driver’s license scans with sensitive personal identity information.
AdaptHealth Confirms Data Exposure of 4.1 Million in July Cyberattack
Healthcare provider AdaptHealth confirmed that data of 4.1 million people was exposed in a July cyberattack tied to the ShinyHunters threat group, highlighting ongoing risks to healthcare organizations.
Liquid Hackers Return Most of 3,400 BTC Stolen via Elements Bug
Hackers exploited a vulnerability in Liquid Network's Elements sidechain to steal nearly 4,000 BTC, returning 3,400 BTC, while around 598.5 BTC remain unrecovered and the network remains paused.
Attackers Breach JetBrains Cadence via Unpatched TeamCity
JetBrains suffered a breach after attackers exploited an unpatched TeamCity vulnerability to access Cadence and extract AWS credentials.
IDScan sued over breach exposing 153 million driver’s licenses
IDScan faces multiple lawsuits after hackers allegedly breached its identity verification service and sold data on over 153 million driver’s licenses, highlighting critical risks in personal data security.
Coder’s registry compromised to distribute malicious Terraform modules
Attackers breached Coder's Cloudflare infrastructure to push malicious Terraform modules that embed credential-stealing code, threatening developer credentials.
BGP Hijack Delivers Malicious Virtualizor Update with Root Access
Attackers leveraged a BGP hijack to redirect Softaculous update traffic, delivering a malicious Virtualizor update that established persistent root access on five hypervisors.
Aesto Health Data Breach Exposes Over 9.5 Million Patients
Aesto LLC, operating as Aesto Health, disclosed a data breach impacting over 9.5 million patients, highlighting critical risks to patient data security.
McKesson Breach Exposes 284M Patient Records, Claimed by ShinyHunters
McKesson confirmed unauthorized access to third-party applications, with ShinyHunters claiming theft of 284 million patient records, raising healthcare data security concerns.
Thousands of Active Leaked AWS Keys Expose Corporate Accounts
Over 9,300 AWS access keys leaked between 2022 and 2026 remain active, exposing corporate accounts to unauthorized access risks.
CareCloud Data Breach Exposes Records of 3.7 Million Patients
Healthtech firm CareCloud disclosed a data breach impacting over 3.7 million patients, exposing sensitive healthcare information.
Hacker Claims 3.6M Azure Account Records Stolen from Major Companies
A threat actor is selling employee databases stolen from Microsoft Azure infrastructure of multiple Fortune 500 companies using compromised credentials, exposing sensitive account records and presenting an enterprise security risk.
RingCentral Data Breach Exposes 1.6 Million User Accounts
The ShinyHunters group breached RingCentral in July, compromising personal data of 1.6 million user accounts.
Trezor reports data breach impacting nearly 14,000 customers
Trezor disclosed a data breach affecting nearly 14,000 customers after a logistics partner was hacked, exposing customer information but no wallet security or funds were compromised.
LexisNexis Shuts Down Services After Suspicious Server Activity
LexisNexis took down several services after detecting unusual activity on servers managed by a third-party vendor, raising concerns about potential data breaches.
North Carolina Ports Hit by Cyberattack Disrupting Operations
The North Carolina Ports Authority confirmed a cyberattack on IT systems at multiple ports causing operational delays and highlighting risks to critical infrastructure.
Unlimited Technology Systems Breach Affects 3.8 Million People
Healthcare software provider Unlimited Technology Systems disclosed an October 2025 breach impacting over 3.8 million individuals and sensitive healthcare data.
Canadian Pleads Guilty to Snowflake Cloud Data Theft
A Canadian individual admitted guilt in a data theft scheme targeting Snowflake cloud accounts, compromising sensitive data from at least 165 organizations and pursuing extortion.
Crypto Wallet RNG Flaw Linked to $88M Bitcoin Theft
A flaw in the COLDCARD hardware wallet's random number generator enabled theft of $88.6 million in Bitcoin, compromising wallet seed security for thousands of users.
Amgen Cloud Data Breach Exposes Patient and Corporate Information
Amgen reported a cloud data breach involving unauthorized access to patient health data and proprietary corporate information via third-party cloud systems.
ShinyHunters Gang Claims Ernst & Young Data Breach via Supply-Chain Attack
The ShinyHunters extortion gang claimed responsibility for a data breach at Ernst & Young obtained through a supply-chain attack involving stolen system credentials.
Upbound Hack Led to $13M in Fraudulent Acima Leases
Upbound Group disclosed that threat actors exploited stolen data to create $13 million in fraudulent leases on Acima's platform, illustrating data theft risks in fintech.
Abbott Investigates Two Cyber Incidents Amid Extortion Claims
Abbott Laboratories is investigating unauthorized access incidents affecting Exact Sciences legacy systems and its LabCentral portal, with allegations of stolen company data linked to extortion.
Two Scattered Spider Hackers Sentenced for £29M TfL Hack
Two hackers were sentenced for their 2024 attack on Transport for London, which disrupted 148 systems and forced a password reset for 27,000 employees, causing significant operational and financial impact.
KDDI Data Breach Exposes Emails and Passwords of 12 Million Users
Japanese telecom giant KDDI suffered a data breach affecting over 12 million people, with attackers accessing email addresses and passwords through a compromised platform used by multiple ISPs. The breach highlights significant risks in telecom infrastructure security.
Data Breach Exposes 14.2M Email Logins Across Six Japanese ISPs
Japanese ISP KDDI Corporation disclosed a data breach compromising up to 14.2 million email logins from one of its systems shared with five other ISPs. Threat actors gained unauthorized access, impacting multiple large providers.
Tata Electronics Confirms Cyberattack with Data Leak
Tata Electronics has confirmed a cyberattack impacting parts of its IT infrastructure, with hackers leaking some data. The incident highlights the ongoing risks to enterprise security from targeted attacks.