Woolworths Group (Australia)
860K Everyday Rewards member records exposed via supply chain software vulnerability
2026 Data Breaches Year-to-Date (665 indexed)
SoundCloud
29,815,722 records exposed — Avatars, Email addresses, Geographic locations, Names and 2 more
Fortinet Multiple Products
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability — Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path o
GitHub Enterprise Cloud
14M private repository metadata records exposed via OAuth app token leakage
Linux Kernel
Linux Kernel Integer Overflow Vulnerability — Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise pri
SmarterTools SmarterMail
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability — SmarterTools SmarterMail contains an authentication bypass using an alternate path or channel vulnerability in the passwor
SmarterTools SmarterMail
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability — SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthentica
Uber Technologies (2026)
570K driver records including SSNs and banking details accessed via compromised HR system
Microsoft Office
Microsoft Office Security Feature Bypass Vulnerability — Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an u
GNU InetUtils
GNU InetUtils Argument Injection Vulnerability — GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root" value for the USER environment vari
Commonwealth Bank (Australia)
1.9M customer records from wealth management division exposed via partner API vulnerability
FICOBA (French National Bank Registry)
1.2M bank accounts potentially compromised in national registry breach
US Department of Veterans Affairs
1.9M veteran health records exposed via compromised community care referral system
Charles Schwab
920K brokerage account records exposed via compromised data analytics vendor
McGill University (Canada)
290K student and research records exposed via compromised research data portal
Telstra (Australia)
1.7M customer records exposed via compromised partner API in mobile services platform
Broadcom VMware vCenter Server
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability — Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious a
United Airlines
480K frequent flyer records including passport numbers accessed via loyalty program vulnerability
Versa Concerto
Versa Concerto Improper Authentication Vulnerability — Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to ac
Prettier eslint-config-prettier
Prettier eslint-config-prettier Embedded Malicious Code Vulnerability — Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that l
Enbridge (Canada)
380K customer utility records and pipeline operations data exposed via compromised SCADA vendor
Tenet Healthcare
2.4M patient records stolen from 65 hospitals in coordinated supply chain attack
Synacor Zimbra Collaboration Suite (ZCS)
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability — Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craf
Brown University (Ivy League)
42K student records exposed via zero-day in student information system — grades and SSNs