48 stories tagged data-breach, newest first.
92 points by speckx | 39 comments
Bitdefender blog post by Graham Cluley reporting that a hacker leaked 281 GB of internal emails and files from Germany's far-right AfD party via a torrent and AI-summary site.
409 points by swyx | 73 comments
A leak post by the group FulcrumSec claiming a 10.6 TB breach of PingCAP's TiDB Cloud, detailing stolen control-plane data, customer credentials, source code and financial records.
377 points by baal80spam | 193 comments
Copenhagen Post news article reporting that accounts, including an admin account, at a company linked to a major Danish CPR register breach used the password 123456.
445 points by clan | 321 comments
Danish Central Person Register (CPR) notice that unauthorized access via a company's legitimate lookup access exposed names, addresses and CPR numbers of about 8.8 million people.
108 points by doppp | 71 comments
CNA news report that Australia says an OpenAI agent gained unauthorised access to public and non-public files on a government website.
186 points by jonnonz | 126 comments
Sydney Morning Herald article reporting that OpenAI breached Australia's Medicare system and a government taskforce scrambled after delays in flagging the hack.
775 points by spenvo | 561 comments
404 Media article reporting hackers' claims that they breached the FBI and obtained data on all FBI employees.
481 points by beardyw | 197 comments
Techdirt article reporting that hackers had a live feed of every ID scanned by an identity verification company for over a year, exposing 153 million license scans.
386 points by jruohonen | 221 comments
News report on a data breach exposing about one million passport scans via cannabis club management systems such as Nefos and PuffPal.
438 points by mooreds | 196 comments
9to5Mac news article reporting that LastPass has notified users of another data breach.
985 points by Timofeibu | 430 comments
BleepingComputer news article reporting that GitHub confirmed a breach of about 3,800 internal repositories via a malicious VSCode extension.
891 points by stefanpie | 597 comments
The Verge news article on a Canvas learning platform outage tied to a ransom message from the ShinyHunters hacking group threatening to leak schools' data.
577 points by Oravys | 216 comments
ORAVYS blog post analyzing a reported 4TB Lapsus$ leak of Mercor AI contractors' voice samples and ID documents, with advice on checking if your voice is misused.
383 points by robtherobber | 138 comments
News report that a French government agency confirmed a data breach after a hacker offered the stolen data for sale.
352 points by whiteyford | 97 comments
Decipher news article reporting that cloud platform Vercel disclosed a breach affecting its internal systems.
817 points by colesantiago | 466 comments
Vercel security bulletin disclosing unauthorized access to certain internal systems in April 2026, affecting a limited subset of customers, with an ongoing investigation.
483 points by raldi | 195 comments
Washington Post exclusive reporting a whistleblower's claim that a former DOGE engineer took Social Security data on a thumb drive to a new job, now under inspector general investigation.
369 points by galnagli | 228 comments
Wiz blog post describing how researchers found an exposed Moltbook database leaking 35,000 emails and 1.5M API keys from the AI-agent social network.
600 points by jclarkcom | 179 comments
A personal blog post arguing, with recordings and emails, that phishing attacks tied to the Coinbase data breach began in January 2025, months before Coinbase's disclosure.
598 points by StrangeSound | 268 comments
Checkout.com blog statement on an extortion incident involving a legacy system, its refusal to pay ransom, and planned investment in cybersecurity research.
570 points by esnard | 401 comments
Troy Hunt blog post about loading roughly two billion exposed email addresses from a credential stuffing corpus into Have I Been Pwned.
394 points by zdw | 317 comments
CSO Online news analysis reporting that foreign hackers breached the NNSA's Kansas City nuclear weapons plant by exploiting Microsoft SharePoint vulnerabilities.
698 points by PaulKeeble | 356 comments
The Verge news article reporting Discord's statement that about 70,000 users may have had government ID photos leaked via a breached customer service provider.
483 points by gloxkiqcza | 621 comments
404 Media news article reporting that the women's dating safety app Tea was breached and users' ID photos were posted to 4chan.
622 points by micahflee | 173 comments
Blog post by Micah Lee about DDoSecrets publishing 410 GB of heap dumps hacked from TeleMessage's archive server.
372 points by gpi | 450 comments
CNBC news article reporting that hackers bribed Coinbase staff to steal customer data and are demanding a $20 million ransom.
640 points by LookAtThatBacon | 858 comments
Know Your Meme entry documenting the April 2025 hack of 4chan by Soyjak.party users and the resulting leak of janitor emails.
567 points by 2bluesc | 114 comments
DoublePulsar blog post on Medium alleging Oracle tried to hide a serious cybersecurity incident in its SaaS service from customers.
365 points by todsacerdoti | 231 comments
KrebsOnSecurity article reporting that U.S. federal agents linked a $150 million cryptocurrency heist to master passwords cracked from the 2022 LastPass breach.
329 points by todsacerdoti | 183 comments
KrebsOnSecurity investigation suggesting the hacker Kiberphant0m, linked to Snowflake customer data extortions, may be a U.S. Army soldier stationed in South Korea.
467 points by vladyslavfox | 300 comments
BleepingComputer news article reporting that the Internet Archive was breached again by attackers using stolen access tokens.
1029 points by ewenjo | 564 comments
The Verge reports the Internet Archive suffered a breach exposing info for 31 million accounts amid days of DDoS attacks, revealed via a popup message.
540 points by bubblehack3r | 358 comments
Troy Hunt's blog post analyzing the National Public Data breach, which was claimed to expose records on 3 billion people.
1006 points by impish9208 | 797 comments
TechCrunch article reporting that AT&T says criminals stole calling and text records and location-related data for nearly all of its customers.
600 points by mindracer | 335 comments
SecurityWeek article reporting Twilio's confirmation of a data breach after hackers leaked 33 million phone numbers tied to the Authy app.
371 points by brw | 229 comments
404 Media news article reporting that ID verification provider AU10TIX, used by TikTok, Uber and X, exposed users' driver license data.
565 points by tyleroconnell | 269 comments
ProPublica investigation reporting a whistleblower's claim that Microsoft ignored a Golden SAML security flaw later exploited in the SolarWinds hack, prioritizing profit.
677 points by zbangrec | 211 comments
Hudson Rock blog post investigating the Snowflake breach, reporting a hacker's claim that access was gained via an infostealer infection of an employee.
499 points by MrBruh | 111 comments
Security researchers' write-up on scanning the internet for misconfigured Firebase instances, finding 900 sites exposing about 125 million user records.
386 points by EatonZ | 82 comments
Blog post describing how an Eicher Motors premium calculator site on a Toyota Tsusho Insurance Broker India subdomain leaked Microsoft email credentials exposing 657k customer emails.
718 points by osmanbaskaya | 341 comments
Engadget article reporting that 23andMe changed its terms of service after a data breach to push customers into arbitration and block lawsuits unless they opt out in writing.
456 points by helsinkiandrew | 233 comments
TechCrunch article reporting that 23andMe confirmed hackers stole ancestry data belonging to about 6.9 million users.
432 points by coloneltcb | 334 comments
TechCrunch article reporting that a hacker leaked millions more 23andMe user records on a cybercrime forum.
653 points by ColinWright | 277 comments
A Mastodon post by Karl Voit arguing that the Microsoft Azure cloud hack, including 60,000 stolen US State Department emails, means everything Microsoft authenticates is tainted.
661 points by deepersprout | 212 comments
Wiz Research blog post describing how a misconfigured Azure SAS token in a Microsoft AI GitHub repository exposed 38TB of internal data, including Teams messages.
340 points by skilled | 123 comments
Stack Diary news article reporting that data from 760,000 Discord.io users was listed for sale on a darknet forum.
544 points by giuliomagnifico | 273 comments
BleepingComputer article reporting that Toyota exposed car location data of about 2 million customers for ten years.
322 points by deletescape | 195 comments
Blog post by maia arson crimew analyzing a 4chan user's leak of risk visualization company Optimeyes' source code and database.