Coles Group (Australia)
1.1M flybuys loyalty member records stolen via compromised marketing platform
Latest Disclosures
Rockwell Multiple Products
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability — Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to
Europol Operation Seizes LeakBase Data
A global operation has resulted in the takedown of popular cybercrime forum LeakBase
Apple Multiple Products
Apple Multiple products Use-After-Free Vulnerability — Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory cor
Hikvision Multiple Products
Hikvision Multiple Products Improper Authentication Vulnerability — Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and
Apple iOS and iPadOS
Apple iOS and iPadOS Use-After-Free Vulnerability — Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.
Anthem Blue Cross (2026)
2.7M member records exposed via compromised claims analytics vendor
Marriott International (2026)
1.3M guest reservation records exposed via compromised property management vendor
Provecho
712,904 records exposed — Email addresses, Usernames
Siemens Energy
670K employee and project records from energy division exposed via CL0P exploitation
LexisNexis (Government Legal Data)
Federal judges, DOJ attorneys, SEC staff data accessed — 118 .gov accounts compromised
Qualcomm Multiple Chipsets
Qualcomm Multiple Chipsets Memory Corruption Vulnerability — Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.
Leaked Database Sheds Light on
Ariomex database reveals potential sanctions evasion and capital transfers tied to Iranian actors
Broadcom VMware Aria Operations
Broadcom VMware Aria Operations Command Injection Vulnerability — Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated at
PayPal Holdings (2026)
35K customer accounts compromised via credential-stuffing attack on checkout integration
Quitbro
22,874 records exposed — Email addresses, Partial dates of birth, Usernames
Slack (Salesforce)
2.1M workspace messages and uploaded files exfiltrated from compromised enterprise workspace
Lovora
495,556 records exposed — Display names, Email addresses, Profile photos
View incident → Indexed 1 month, 1 week ago
KomikoAI
1,060,191 records exposed — AI prompts, Email addresses, Forum posts, Names
LVMH Group
210K luxury retail customer records exposed
Cenovus Energy
450K employee and operations records compromised
Pembina Pipeline
280K customer and pipeline records exposed
LG Electronics
780K customer records compromised in supply chain attack
Rexall Pharmacy
340K patient records compromised