HPE / Hewlett Packard Enterprise
Russian Midnight Blizzard accessed email and SharePoint
2024 Data Breaches (863 indexed)
Microsoft (Midnight Blizzard)
Russian SVR hackers accessed senior executive email accounts for months via legacy OAuth app
Michaels Craft Stores
330K customer records including custom framing orders with home addresses exposed
Schneider Electric (France)
Cactus ransomware stole 1.5TB — sustainability business division impacted
Naz.API
70,840,771 records exposed — Email addresses, Passwords
View incident → Indexed 2 years, 3 months ago
Naz.API Compilation
26B records compiled from credential-stuffing logs and stealer malware — largest compilation ever
Comcast / Xfinity (2024)
36M customer records from Citrix Bleed breach notifications
Trello (2024)
15.1M user records scraped via public API endpoint
Jason's Deli
345K customer records compromised in credential stuffing
Trello (Atlassian)
15M user records scraped via exposed API endpoint
City of Fort Worth TX
500K resident records leaked from public portal
Wollongong City Council (Australia)
Ransomware disrupted council services — resident data at risk
Discord (Third-Party Leak)
600M user messages and metadata scraped and posted to dark web marketplace
Select Medical Holdings
380K patient records from rehabilitation hospitals exposed via compromised EHR vendor
Atlassian (Confluence breach)
3.2M workspace records exposed via CVE exploitation
Trillium Health Partners (Ontario)
420K patient records compromised in ransomware attack
SoFi
240K customer records exposed via third-party vendor
City of Savannah GA
Ransomware disrupted city services
Edmonds School District (WA)
14K student records exposed in data breach
Sam's Club
90K customer records exposed in credential stuffing
Cravath Swaine & Moore LLP
SEC insider trading investigation — Chinese hackers targeted deal data in M&A cases
Regal Medical Group
3.3M patient records exposed in data exfiltration incident
Hathway
4,670,080 records exposed — Device information, Email addresses, IP addresses, Names and 5 more
Ivanti VPN (Multiple Victims)
Critical zero-day chain exploited by state-sponsored actors — CISA emergency directive