AT&T (Call Records)
109M customer call and text records stolen from Snowflake cloud environment
Latest Disclosures
Rite Aid
2.2M customer records including purchase history and ID data stolen in ransomware attack
Squarespace DNS
Mass domain hijacking via OAuth registration flaw
AT&T (Snowflake)
110M call and text metadata records stolen from Snowflake environment
Disney (Slack Breach)
1.1TB of internal data stolen via compromised Slack workspace — NullBulge group
National Security Agency (NSA)
NSA employee data exposed via AT&T telecom breach — metadata and communication records
Snowflake Customer Campaign (AT&T)
110M AT&T call and text metadata records — phone numbers, duration, cell tower locations
mSpy (2024)
2,394,179 records exposed — Email addresses, IP addresses, Names, Photos
Ulta Beauty
770K customer records exposed via credential stuffing on loyalty program — Ultamate Rewards
The Heritage Foundation
72,004 records exposed — Email addresses, IP addresses, Names, Passwords and 1 more
Astellas Pharma (Japan)
340K clinical trial records exposed
PLDT Inc (Philippines)
890K subscriber records exposed
BAE Systems (UK)
780K defense contractor records exposed in supply chain attack
Itau Unibanco (Brazil)
1.5M customer records compromised in vendor breach
KT Corporation (Korea Telecom)
1.1M subscriber records exposed
Rakuten Group (Japan)
4.3M e-commerce user records exposed via API misconfiguration on marketplace platform
Neiman Marcus
31,152,842 records exposed — Dates of birth, Email addresses, IP addresses, Names and 4 more
University of Florida
86K student records and research grant data exposed via compromised department servers
State of Nevada DMV
1.1M driver license records exposed via vendor compromise — photos and biometric data
TD Bank (US)
62K customer records exposed
Husky Owners
16,502 records exposed — Dates of birth, Email addresses, Time zones, Usernames
FNTECH
10,386 records exposed — Email addresses, IP addresses, Names
Weil Gotshal & Manges LLP
420K bankruptcy case records exposed — creditor claims and restructuring plans compromised
RockYou2024
10 billion unique passwords compiled from decades of breaches — posted on dark web