CISA (Ivanti breach)
US Cybersecurity agency itself breached via Ivanti VPN zero-days
Technology & Software Data Breaches (1150 indexed)
Oura Ring
230K user health tracker records exposed
VARTA
Battery manufacturer production shut down by cyberattack
Telkom South Africa
Data breach exposed internal employee and customer data
U-Haul
67K customer records exposed in reservation system breach
NTT Communications (Japan)
18K corporate customer records accessed via unauthorized entry to internal order management system
Spoutible
207,114 records exposed — Email addresses, Genders, IP addresses, Names and 3 more
AnyDesk
Production systems compromised, all certificates revoked
Tata Technologies (India)
Employee and client project data stolen in Hunters International ransomware attack
MyPertamina
5,970,416 records exposed — Dates of birth, Email addresses, Genders, Names and 3 more
MOAB (Mother of All Breaches)
26 billion records from LinkedIn, Twitter, Dropbox, and other platforms
Trello
15,111,945 records exposed — Email addresses, Names, Usernames
Subway
LockBit ransomware stole financial data from sandwich chain
Tietoevry (Finland/Sweden)
Akira ransomware disrupted Tietoevry cloud hosting — Swedish universities and firms hit
HPE / Hewlett Packard Enterprise
Russian Midnight Blizzard accessed email and SharePoint
Microsoft (Midnight Blizzard)
Russian SVR hackers accessed senior executive email accounts for months via legacy OAuth app
Schneider Electric (France)
Cactus ransomware stole 1.5TB — sustainability business division impacted
Comcast / Xfinity (2024)
36M customer records from Citrix Bleed breach notifications
Naz.API
70,840,771 records exposed — Email addresses, Passwords
View incident → Indexed 2 years, 3 months ago
Naz.API Compilation
26B records compiled from credential-stuffing logs and stealer malware — largest compilation ever
Trello (2024)
15.1M user records scraped via public API endpoint
Trello (Atlassian)
15M user records scraped via exposed API endpoint
Discord (Third-Party Leak)
600M user messages and metadata scraped and posted to dark web marketplace
Atlassian (Confluence breach)
3.2M workspace records exposed via CVE exploitation