Fortinet FortiClient EMS
Fortinet FortiClient EMS SQL Injection Vulnerability — Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically
Law Firm Data Breaches (10313 indexed)
Hallmark
1,736,520 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
View incident → Indexed 4 months, 2 weeks ago
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code executi
My Lovely AI
106,271 records exposed — Email addresses, Social media profiles
View incident → Indexed 4 months, 3 weeks ago
SongTrivia2
291,739 records exposed — Auth tokens, Avatars, Email addresses, Names and 2 more
View incident → Indexed 4 months, 3 weeks ago
Crunchyroll
1,195,684 records exposed — Email addresses
View incident → Indexed 4 months, 3 weeks ago
TrueConf Client
TrueConf Client Download of Code Without Integrity Check Vulnerability — TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path ca
165 organizations breached via compromised Snowflake credentials; ShinyHunters exploited
165 organizations breached via compromised Snowflake credentials; ShinyHunters exploited Anodot access
Intesa Sanpaolo S.p.A.
Employee unlawfully accessed customer data over two years; insider threat breach
ADT
Cybercriminals breached systems and stole limited set of customer and prospective customer data
Intesa Sanpaolo S.p.A.
Employee unlawfully accessed customer data over two years; €31.8m fine for breach transparency failure
Ryanair
Breach exposed legal emails, flight data, and banking details; data claimed on hacker forums
165 organizations breached via Snowflake platform by ShinyHunters through compromised
165 organizations breached via Snowflake platform by ShinyHunters through compromised Anodot access
Bank of Baroda (BoB)
Alleged data breach involving sensitive banking and corporate information
ANTS (French ID Agency)
Cyberattack exposed 19 million personal identity records including government data
Unnamed U.S. Department (CISA)
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed unauthorized access through March
Nissan
Data breach via compromise of third-party vendor file-transfer system
River Financial Corporation
Ransomware attack with data stolen; hackers confirmed data deletion
CISA/US Government Agency
Unnamed U.S. department breached through Cisco vulnerability; FIRESTARTER backdoor provided persistent access through March 2026
ANTS (French ID Agency)
Cyberattack exposed 19 million records containing personal data linked to national identity
Paidwork
22 million user records exposed including emails, passwords, and banking data
SISVISA (Brazil)
102,215 Brazilian health surveillance records leaked including IDs and tax data
U.S. Federal Agency (CISA)
Unnamed U.S. department breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
Rockstar Games
Breach through compromised Anodot Snowflake access by ShinyHunters group; 165 organizations affected in cascading attack.