Ernst & Young (EY)
Third-party IT service breach exposed client tax data (March 28 - April 12, 2026)
Law Firm Data Breaches (10629 indexed)
UK Biobank
Confidential health records exposed online and advertised for sale on Chinese website
Żabka Polska
Data breach exposing 541,000 Jira issues and customer data from major Polish retailer
CISA (US Agency)
Breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March
Major cyberattack exposing 19 million French citizen identity records
Major cyberattack exposing 19 million French citizen identity records
Adams County
Ransomware attack crippled county servers, week-long restoration
CISA/Unnamed US Federal Department
Breach via Cisco vulnerability with FIRESTARTER backdoor malware allowing access through March
Paidwork
22 million user records exposed including emails, passwords, and banking data
CISA (US Agency)
Unnamed US department breached via Cisco vulnerability, FIRESTARTER backdoor allowed persistent access
Instructure Canvas
ShinyHunters breach claimed 275 million records from 8,809 schools, exposing student and staff data
Cuties AI
144,250 records exposed — Avatars, Display names, Email addresses
View incident → Indexed 4 months, 4 weeks ago
Citrix NetScaler
Citrix NetScaler Out-of-Bounds Read Vulnerability — Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability wh
BreachForums Version 5
339,778 records exposed — Email addresses, Passwords, Usernames
View incident → Indexed 5 months ago
F5 BIG-IP
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability — F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution.
Scuf Gaming
128,683 records exposed — Display names, Email addresses, IP addresses, Passwords and 1 more
View incident → Indexed 5 months ago
Aquasecurity Trivy
Aquasecurity Trivy Embedded Malicious Code Vulnerability — Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, includin
Sound Radix
292,993 records exposed — Email addresses, Names, Passwords
Langflow Langflow
Langflow Code Injection Vulnerability — Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.
RuneScape Boards
222,762 records exposed — Email addresses, IP addresses, Passwords, Usernames
View incident → Indexed 5 months ago
Apple Multiple Products
Apple Multiple Products Improper Locking Vulnerability — Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected change
Craft CMS Craft CMS
Craft CMS Code Injection Vulnerability — Craft CMS contains a code injection vulnerability that allows a remote attacker to execute arbitrary code.
Laravel Livewire
Laravel Livewire Code Injection Vulnerability — Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in specific scenarios.
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability — Cisco Secure Firewall Management Center (FMC) Software a
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability — Synacor
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability — Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abuse Cascading