Patelco Credit Union
726K member records exposed — SSNs, driver's license numbers, financial data
Latest Disclosures
Twilio Authy
33M phone numbers stolen in unauthenticated API endpoint abuse
Hudson's Bay Company (TheBay)
670K customer records compromised
Emirates NBD (Dubai)
890K customer banking records compromised
Rio Tinto
560K employee and mining records compromised
OTP Bank (Hungary)
560K customer records compromised
CaixaBank
1.2M customer records compromised in targeted attack
NHS Greater Glasgow and Clyde
560K patient records compromised in ransomware
State Bank of India
3.1M customer records exposed via vendor
Authy / Twilio (2024)
33M phone numbers associated with authenticator app exposed
TSMC Supplier (Kinmax)
Server configuration data for TSMC exposed via IT services provider Kinmax breach — LockBit claim
Hugging Face AI Platform
120K API tokens exposed — model training data and private repositories accessible
TeamViewer
Corporate network breached by APT29 (Russian intelligence) — internal systems accessed
LinkedIn (IntelBroker)
Scraped data of 35M users aggregated and sold
Evolve Bank & Trust (Fintech)
LockBit attack impacted fintech partners including Affirm, Mercury, and Wise customers
Rabbit R1
Hardcoded API keys exposed all user data including voice sessions
Affirm Financial (Fintech)
890K buy-now-pay-later records exposed via Evolve Bank vendor compromise
Suncor Energy (Petro-Canada)
Customer loyalty and payment data compromised in cyberattack on Petro-Points system
SpyX stalkerware
2M user records including those being tracked exposed
Advance Auto Parts
79,243,727 records exposed — Email addresses, Names, Phone numbers, Physical addresses
SSM Health (Missouri)
290K patient records exposed via compromised imaging vendor — radiology reports leaked
Vodafone Italy
310K customer records exposed via compromised dealer portal — contract and identity documents
SingHealth Polyclinics (Singapore)
440K patient prescription records exposed via SQL injection in pharmacy system
Lithia Motors
110K customer records exposed in CDK Global breach