Full List

Search

Recent Breaches

• China Software Developer Network December 21, 2011 • [ data leak ] In 2011, the China Software Developer Network (CSDN) suffered a data breach that exposed over 6M user records. The data included email addresses alongside usernames and plain text passwords.
• CodeStepByStep November 15, 2025 • [ data leak ] In November 2025, the online coding practice tool CodeStepByStep suffered a data breach that exposed 17k records. The impacted data included names, usernames and email addresses.
• ADDA March 24, 2025 • [ data leak ] In March 2025, data allegedly breached from the ADDA housing societies service was posted to a public hacking forum. The data contained over 1.8M unique email addresses along with names, phone numbers and MD5 password hashes.
• International Kiteboarding Organization November 11, 2025 • [ data leak ] In November 2025, the International Kiteboarding Organization suffered a data breach that exposed 340k user records. The data was subsequently listed for sale on a hacking forum and included email addresses, names, usernames and in many cases, the user's city and country.
• Vultr July 8, 2022 • [ data leak, third-party ] In March 2023, the "AI-first global cloud platform" Vultr disclosed a security incident at a third-party vendor. Dating back to the previous year, the incident was attributed to the ActiveCampaign email marketing service provider and resulted in the exposure of 188k unique email addresses. A small number of records also included name, IP address and country of origin. No Vultr systems or additional customer data were impacted. Vultr subsequently self-submitted the impacted data to HIBP.
• Operation Endgame 3.0 November 13, 2025 • [ infostealer, remote access trojan, botnet ] Between 10 and 13 November 2025, the latest phase of Operation Endgame was coordinated from Europol's headquarters in The Hague. The actions targeted one of the biggest infostealer Rhadamanthys, the Remote Access Trojan VenomRAT, and the botnet Elysium, all of which played a key role in international cybercrime. Authorities took down these three large cybercrime enablers and provided 2 million impacted email addresses and 7.4 million passwords to HIBP.
• Eurofiber November 13, 2025 • [ data leak ] In November 2025, Eurofiber France disclosed a data breach of its ticket management platform. Data containing 10k unique email addresses and a smaller number of names and phone numbers was subsequently leaked. A threat actor claiming responsibility for the breach alleges to have additional, more sensitive data including screenshots, VPN configuration files, credentials, source code, certificates, archives, and SQL backup files.
• Beckett Collectibles November 9, 2025 • [ data leak ] In November 2025, Beckett Collectibles experienced a data breach accompanied by website content defacement. The stolen data was later advertised for sale on a prominent hacking forum, with portions subsequently released publicly. The publicly circulating data included more than 500k email addresses reportedly belonging to North American customers, along with a smaller subset containing names, usernames, phone numbers and physical addresses.
• Operation Endgame 3.0 November 14, 2025 • [ infostealer, remote access trojan, botnet ] Between 10 and 13 November 2025, the latest phase of Operation Endgame was coordinated from Europol's headquarters in The Hague. The actions targeted one of the biggest infostealer Rhadamanthys, the Remote Access Trojan VenomRAT, and the botnet Elysium, all of which played a key role in international cybercrime. Authorities took down these three large cybercrime enablers and provided 2 million impacted email addresses and 7.4 million passwords to HIBP.
• Sax LLP July 25, 2024 • [ data leak ] Sax LLP disclosed that threat actors gained unauthorized access to its systems in late July 2024 and accessed files containing sensitive personal information; suspicious activity was detected on August 7, 2024.
• Undisclosed Thailand government organization March 1, 2025 • [ malware ] Researchers identified the use of a signed kernel-mode driver to hide ToneShell malware activity on systems of a Thai government organization, allowing covert long-term access.
• Undisclosed Myanmar government organization March 1, 2025 • [ state-sponsored attack, malware, rootkit ] Chinese state-linked threat actors deployed a kernel-mode rootkit to conceal ToneShell malware on systems belonging to a Myanmar government organization, enabling stealthy persistent access.
• Undisclosed Apple-assembler in China December 1, 2025 • [ data leak ] Hackers breached an Apple assembler in China and accessed internal systems, with reporting indicating that production and manufacturing-related data was targeted during the intrusion.
• Ubisoft December 27, 2025 • [ data leak, service disruption ] Ubisoft suffered a breach in which attackers accessed internal systems controlling the Rainbow Six Siege economy and moderation tools. Game services were globally disrupted, requiring rollback and shutdown of servers for nearly two days.
• Arch Linux December 25, 2025 • [ DDoS, service disruption ] Arch Linuxs official website experienced a distributed denial-of-service attack that rendered the site inaccessible over IPv4 while remaining reachable via IPv6 as a mitigation measure.
• Greater St. Louis Oral & Maxillofacial Surgery PC December 4, 2025 • [ phishing, data leak ] Unauthorized access to a server-hosted employee email account resulted in exposure of patient personal and protected health information and use of the account to send phishing emails.
• Fyzical Acquisition Holdings LLC January 9, 2025 • [ unauthorized access, email compromise ] Unauthorized access to FYZICALs email environment was detected on December 9 2024 triggering an investigation that concluded in November 2025 Breach notifications were issued to affected individuals and state authorities in December 2025
• MetroWest Community Federal Credit Union September 3, 2025 • [ ransomware, data leak ] MetroWest Community Federal Credit Union disclosed that unauthorized access to its systems in early September 2025 resulted in the compromise of sensitive member information, with the incident attributed to the Akira cybercriminal group.
• Grenoble École de Management November 15, 2025 • [ data leak ] Threat actors claimed access to and sale of a large CRM dataset associated with the institution, which the school acknowledged and began investigating.
• University of Lille December 29, 2025 • [ data leak ] Unauthorized access to university systems resulted in the exfiltration of student personal data later advertised on an underground forum.