2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme. [...]
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared fir
The exfiltrated data may be related to misconfiguration of Microsoft Power Page portals, according to a new report.
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned. [...]
AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords, cookies and data while giving attackers live control of the browser. Jamf Threat Labs researchers disclosed AmnesiaStealer, a new multi-st
1M+ customer records stolen in ransomware
Data breach affected approximately 900,000 current and former customers; personal information exposed
165 orgs compromised, billions of records stolen
Data breach disclosed in securities filing; type and scope of exposed data not yet determined
Cyberattack exposed personal information of Xfinity customers; $117.5M settlement reached
24M customer breach due to lack of basic security controls; three major GDPR violations
100K+ officer and staff contacts leaked
Data storage platform hacked; 165 breaches affecting over 165 million records total across multiple organizations
2500 orgs and 434K CI/CD pipelines exposed
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published. The post Trivy, Not LiteLLM Behind the 2,500 Org Compromise appeared first on SecurityWeek.
Cyberattack exposed personal information of Xfinity customers; resulted in $117.5M settlement
SSNs and health data from Salesforce breach
Canadian software firm breached by BlackNevas
Client documents exfiltrated via third-party platform
Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents
24B stolen credentials in 8.3TB public exposure
100K+ officers' PII exposed by ExfilSquad