Confluent
180K streaming platform records exposed
Latest Disclosures
Weil Gotshal & Manges
280K restructuring records stolen
Capital One (2025)
3.2M credit card applicant records exposed via new cloud misconfiguration — second incident
Kinaxis (Ottawa)
210K enterprise supply chain records exposed
Couche-Tard (Circle K Canada)
1.2M customer payment records exposed in POS breach
Discovery Health (South Africa)
560K medical records compromised
Equinor (Norway)
780K employee and operations records compromised
National Taiwan University
210K student records exposed
Zara (Inditex)
890K customer records stolen
Generali Group
890K insurance records stolen in targeted attack
Lonza Group (Switzerland)
280K pharmaceutical manufacturing records exposed
Indian Council of Medical Research
81M citizen health records from Aadhaar-linked database exposed via API vulnerability
Home Depot (2026)
3.2M customer records exposed via SaaS vendor breach affecting loyalty program data
Toyota Motor (Global)
2.15M customer records from connected vehicle services exposed via misconfigured cloud database
ServiceNow
1.7M ITSM records from enterprise customers exposed via zero-day in Washington DC instance
Sangoma FreePBX
Sangoma FreePBX Improper Authentication Vulnerability — Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services
Sangoma FreePBX
Sangoma FreePBX OS Command Injection Vulnerability — Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known
Vibe-Coded Moltbook Exposes User Data,
Wiz Security claims Moltbook misconfiguration allowed full read and write access
GitLab Community and Enterprise Editions
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability — GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized exte
SolarWinds Web Help Desk
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability — SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow a
Horizon Health (New Brunswick)
290K patient records stolen
Infosys (India)
6.5M client records from BPO division exposed via compromised McCamish Systems subsidiary
Atrium Health (2026)
1.8M patient records exposed in supply chain attack
Baptist Health (Florida)
340K patient records compromised