Microsoft (Midnight Blizzard)
Russian SVR hackers accessed senior executive email accounts for months via legacy OAuth app
Latest Disclosures
Michaels Craft Stores
330K customer records including custom framing orders with home addresses exposed
Naz.API Compilation
26B records compiled from credential-stuffing logs and stealer malware — largest compilation ever
Naz.API
70,840,771 records exposed — Email addresses, Passwords
View incident → Indexed 2 years, 3 months ago
Schneider Electric (France)
Cactus ransomware stole 1.5TB — sustainability business division impacted
Comcast / Xfinity (2024)
36M customer records from Citrix Bleed breach notifications
Jason's Deli
345K customer records compromised in credential stuffing
Trello (2024)
15.1M user records scraped via public API endpoint
City of Fort Worth TX
500K resident records leaked from public portal
Trello (Atlassian)
15M user records scraped via exposed API endpoint
Discord (Third-Party Leak)
600M user messages and metadata scraped and posted to dark web marketplace
Atlassian (Confluence breach)
3.2M workspace records exposed via CVE exploitation
SoFi
240K customer records exposed via third-party vendor
Wollongong City Council (Australia)
Ransomware disrupted council services — resident data at risk
Select Medical Holdings
380K patient records from rehabilitation hospitals exposed via compromised EHR vendor
Trillium Health Partners (Ontario)
420K patient records compromised in ransomware attack
City of Savannah GA
Ransomware disrupted city services
Sam's Club
90K customer records exposed in credential stuffing
Regal Medical Group
3.3M patient records exposed in data exfiltration incident
Hathway
4,670,080 records exposed — Device information, Email addresses, IP addresses, Names and 5 more
Edmonds School District (WA)
14K student records exposed in data breach
Cravath Swaine & Moore LLP
SEC insider trading investigation — Chinese hackers targeted deal data in M&A cases
University of California system
3.4M student and staff records exposed via MOVEit
Montefiore Medical Center
260K patient records stolen by insider threat employee