data-breach

Breaches & attacks · Real loss · since 13 Nov 2026

The City of Osaka announced a data breach affecting one million people and warned residents about suspicious phishing emails. Officials are investigating the intrusion and urging vigilance against fraudulent messages.

Do:Warn residents to ignore suspicious emails claiming to be from the local government.

Breaches & attacks · Exploited · since 13 Nov 2026

The University of Texas at Arlington confirmed that personal information was stolen during a recent cyberattack. An investigation verified the data theft, though specific details on the compromised records remain undisclosed.

Breaches & attacks · Exploited · since 13 Nov 2026

TSMC confirmed an employee data breach linked to a third-party cloud service provider. Investigators found the exposed data matched cloud system records, though internal TSMC systems remained uncompromised.

Breaches & attacks · Real loss · since 12 Nov 2026

A major data breach at Scandinavian Airlines potentially exposed booking details for approximately 350,000 passengers. The airline is investigating the incident to determine the full scope of compromised personal information.

Breaches & attacks · Real loss · since 11 Nov 2026 · updated 13 Nov 2026

Baker Tilly Advisory Group has begun notifying clients that a third-party data breach has exposed personal information regarding clients and their dependents. The organization is responding to the security incident.

Breaches & attacks · Exploited · since 11 Nov 2026 · updated 12 Nov 2026

Maersk confirmed that attackers gained unauthorized access to an acquired legacy system and extracted internal data. The WhiteArmor ransomware group subsequently issued a $5 million extortion demand.

Breaches & attacks · Real loss · since 29 May 2013

The Russian-language hacking forum YouHack suffered a data breach exposing over seven million accounts containing email addresses, usernames, IP addresses, and password hashes. The compromised data was later redistributed as part of a larger data corpus.

Breaches & attacks · Real loss · since Oct 2026 (approx.)

Customer AI provider keys stored on Railway were stolen during an October breach and exploited to rack up $740,000 in unauthorized usage charges. Railway has committed to covering these costs if providers decline to issue refunds.

Do:Rotate any API keys that were stored on the affected platform.

Breaches & attacks · Real loss · since 9 Mar 2023

An online data leak from Russian loyalty program СберСпасибо compromised millions of user accounts containing email addresses, phone numbers, and hashed bank card details. The exposed records date back to a 2023 security incident.

Breaches & attacks · Real loss · since 10 Nov 2026

Japanese furniture retailer Nitori disclosed that attackers compromised a network system and potentially accessed tens of millions of customer records. The intrusion highlights a severe data security incident affecting a large consumer base.

Breaches & attacks · Real loss · since 9 Nov 2026

York University suffered a cyber incident resulting in the theft of personal information submitted via online forms dating back to 2007. The institution announced the breach to notify affected individuals.

Breaches & attacks · Real loss · since Sep 2026 (approx.)

Online retailer Revolve reported to regulators that a September cyberattack impacted over 1.5 million people. The disclosure confirms the scale of the personal data breach.

Breaches & attacks · Real loss · since 9 Nov 2026

Amplifon Americas reported a major data breach that compromised the personal, health, and insurance records of 1.3 million people. Attackers breached internal systems and exfiltrated sensitive information including Social Security numbers.

Breaches & attacks · Real loss · since 2 Nov 2026

An attacker utilizing BOSSAI AI agents stole emergency dispatch records covering seven Taipei districts and discovered an exposed fire department platform leaking patient data. Researchers confirmed the incident involving unauthorized data access across multiple municipal systems.

Do:Secure exposed fire department platforms and review access control lists for dispatch systems.

Breaches & attacks · Real loss · since 8 Nov 2026 · updated 9 Nov 2026

Japanese manufacturer Iris Ohyama suffered a cloud service intrusion exposing personal information for about 7.7 million customers. The company disclosed the incident after discovering unauthorized access to its shopping platform infrastructure.

Breaches & attacks · Real loss · since 5 Nov 2026

The Brazilian Credit Guarantor Fund (FGC) suffered a data breach resulting in the exposure of personal identifiable information and payout data. The incident impacts customers and highlights security gaps at the institution.

Breaches & attacks · Real loss · since 5 Nov 2026 · updated 6 Nov 2026

DigiCert disclosed a data breach resulting from a server migration error that exposed an internal business system to the internet. Unauthorized individuals gained access to customer information and identity verification documents.

Do:Review communications from DigiCert if you are an affected customer and monitor for identity theft.

Breaches & attacks · Exploited · since 5 Nov 2026

Norway’s development aid agency Norad disclosed that the names and email addresses of 20,614 users of its Grants Portal were accessed by attackers. The breach likely resulted from a cyberattack on the portal.

Do:Investigate the breach, notify affected users and reset credentials

Breaches & attacks · Real loss · since 4 Nov 2026

DreamHost issued a warning after attackers gained unauthorized access to its File Manager platform for two months. The breach exposed customer FTP and SFTP usernames and passwords.

Do:Reset FTP and SFTP passwords and review webmail access logs.

Breaches & attacks · Real loss · since 4 Nov 2026

mSeven Software urged mSecure customers to reset master passwords, 2FA, and passkeys following a cyberattack. The incident resulted in the exposure of an encrypted customer database.

Do:Change master passwords, reset two-factor authentication, and remove passkeys as advised.

Breaches & attacks · Real loss · since 3 Nov 2026

The Department of Justice warned that an ongoing FBI data breach has likely compromised the personal information of Justice Department employees. Authorities are continuing to evaluate the scope and impact of the intrusion.

Breaches & attacks · Real loss · since 3 Nov 2026 · updated 9 Nov 2026

Hackers exploited a third-party software flaw to steal personal information from school district staff and students. The incident resulted in a confirmed data breach affecting more than 1.3 million individuals.

Breaches & attacks · Exploited · since 3 Nov 2026 · updated 9 Nov 2026

Developer platform WorkOS experienced a data breach after an attacker leveraged ARTEX AI to access internal sales applications. The intrusion exposed business contact records and summaries of customer communications.

Breaches & attacks · Real loss · since 18 Nov 2025

Harvard University suffered a data breach in November 2025 linked to a ShinyHunters extortion attempt, exposing over 850,000 unique records. The leaked information included personal profile details, contact information, and donor records.

Breaches & attacks · Real loss · since 2 Nov 2026

Threat actors gained unauthorized access to Revolve's online shopping platform and stole personal and payment card data belonging to customers. The incident has impacted at least 180,000 individuals.

Breaches & attacks · Real loss · since 31 Oct 2026 · updated 6 Nov 2026

Blockchain analysis firm Chainalysis suffered a security incident where an external actor accessed non-sensitive customer data using agentic techniques. The company stated that investigation content, authentication credentials, and session tokens remained secure.

Do:Reset all user credentials, revoke active session tokens, and rotate API keys.

Breaches & attacks · Real loss · since 19 Oct 2026 · updated 2 Nov 2026

The Florida Department of Education reported a data breach impacting the student financial aid platform. The incident compromised Social Security numbers belonging to nearly 4.9 million individuals.

Do:Monitor personal credit reports and watch for identity theft communications.

Breaches & attacks · Real loss · since 30 Oct 2026

Breaches & attacks · Real loss · since 30 Oct 2026

Breaches & attacks · Real loss · since 29 Oct 2026

Breaches & attacks · Real loss · since 29 Oct 2026

Breaches & attacks · Exploited · since 28 Oct 2026 · updated 29 Oct 2026

Breaches & attacks · Exploited · since 28 Oct 2026 · updated 29 Oct 2026

Breaches & attacks · Real loss · since Oct 2026 (approx.) · updated 29 Oct 2026

Breaches & attacks · Real loss · since 27 Oct 2026

Breaches & attacks · Real loss · since 27 Oct 2026

Breaches & attacks · Real loss · since 9 Sep 2026 · updated 28 Oct 2026

Breaches & attacks · Real loss · since 26 Oct 2026 · updated 27 Oct 2026

Breaches & attacks · Exploited · since 26 Oct 2026

Breaches & attacks · Real loss · since 16 May 2026

Breaches & attacks · Real loss · since 22 Jan 2026

Breaches & attacks · Real loss · since 12 Aug 2026

Breaches & attacks · Real loss · since 29 Aug 2026

Breaches & attacks · Real loss · since 1 Apr 2023

Breaches & attacks · Real loss · since 5 Aug 2026

Breaches & attacks · Real loss · since 4 Oct 2026

Breaches & attacks · Real loss · since 7 Sep 2026

Breaches & attacks · Exploited · since 14 Sep 2026

Breaches & attacks · Real loss · since 11 Jul 2024