The official website of the President of the Islamic Republic of Iran (president.ir)
January 2, 2016
•[ website takedown, cyberattack, hacktivism ]
Hackers from Turk Hack Team take down several Iranian government websites including Ministry of Information, Ministry of Foreign Affairs, Ministry of Energy and the official website of the President of the Islamic Republic of Iran (president.ir).
Fashion to Figure (http://www.fashiontofigure.com)
November 15, 2015
•[ malware, data breach, server compromise ]
Fashion to Figure notifies customers of a breach involving malware inserted on their web host's server
Fidelity Group (http://www.fidelitygroup.com/)
September 22, 2015
•[ hacking, extortion, data leak ]
A group of hackers that calls itself "Hack for Trump" claims to have hacked the website of Fidelity Group and threaten it would make the stolen data public unless Fidelity pays $30,000.
my.barackobama.com
July 11, 2015
•[ website defacement, hacktivism ]
A Yemeni hacker going with the handle of Lov3rDns defaces the official social network domain of U.S president Barack Obama, used during his election campaign (my.barackobama.com).
Pizza Hut Israel (contact.pizzahut.co.il)
July 7, 2015
•[ website defacement, hacking ]
A group of Bangladeshi hackers going with the handle of DangerPro defaces the contact us page of the official website of Pizza Hut Israel (contact.pizzahut.co.il).
thesnappening.org
October 15, 2014
•[ data leak, hacking, defacement ]
thesnappening.org, the hosting site for the pictures leaked from Snapchat after The Snappening affair, is hacked by Team Danny, and the details of his founder Mudit Grover, are posted on the hacked page.
TheNaturalOnline.com
August 14, 2014
•[ data breach, credit card theft, PII leak ]
TheNaturalOnline.com is compromised by an unknown attacker, who gains access to names, addresses, email addresses, phone numbers, passwords, credit and debit cards, expiration dates and CVV codes.
antiwar.com
May 14, 2014
•[ hacking, cyber attack, fundraising drive ]
antiwar.com, a website known for its non-interventionism and war opposing views is hacked just a few hours after launching its fundraising drive.
Meteo France (meteofrance.com)
May 23, 2016
•[ website defacement, hacking ]
A hacker who goes by the nickname of Amar^SHG (formerly Kuroi'SH) defaces France's most visited weather portal, M t o France.
Well.ca
February 18, 2014
•[ data breach, credit card information, customer data ]
Well.ca, a Canadian online retailer for health and beauty products, declares to have suffered a data breach, compromising the credit card information of a few thousand of its customers.
Provecho
January 30, 2026
•[ data leak, email addresses, usernames ]
In early 2026, data purportedly sourced from the recipe and meal planning service Provecho was alleged to have been obtained in a breach. The exposed data included 713k unique email address along with username and the creator account holders followed. Provecho has been notified and is aware of the claims surrounding the incident.
Quitbro
February 17, 2026
•[ data breach, data leak, PII ]
In February 2026, the porn addiction app Quitbro allegedly suffered a data breach that exposed 23k unique email addresses. The data also included users years of birth, responses to questions within the app and their last recorded relapse time. The apps maker, Plantake, did not respond to multiple attempts to contact them about the incident.
Odido
February 12, 2026
•[ data breach, extortion, PII ]
In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Shortly after, a total of 6M unique email addresses were published across four separate data releases over consecutive days. The exposed data includes names, physical addresses, phone numbers, bank account numbers, dates of birth, customer service notes and passport, drivers licence and European national ID numbers. Odido has published a disclosure notice including an FAQ to support affected customers.
Muah.AI
September 17, 2024
•[ data breach, PII leak, AI prompts ]
In September 2024, the "AI girlfriend" website Muah.AI suffered a data breach. The breach exposed 1.9M email addresses alongside prompts to generate AI-based images. Many of the prompts were highly sexual in nature, with many also describing child exploitation scenarios.
Lovora
February 25, 2026
•[ data breach, personal information, email addresses ]
In February 2026, the couples and relationship app Lovora allegedly suffered a data breach that exposed 496k unique email addresses. The data also included users display names and profile photos, along with other personal information collected through use of the app. The apps maker, Plantake, did not respond to multiple attempts to contact them about the incident.
KomikoAI
February 25, 2026
•[ data breach, PII, AI prompts ]
In February, the AI-powered comic generation platform KomikoAI suffered a data breach. The incident exposed 1M unique email addresses along with names, user posts and the AI prompts used to generate content. The exposed data enables the mapping of individual AI prompts to specific email addresses.
Odido
February 12, 2026
•[ data breach, extortion, data leak ]
In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Shortly after, 1M records containing 317k unique email addresses were published, followed by further releases exposing an additional 371k and then 833k unique email addresses, with the latter also including passport, drivers licence and European national ID numbers. The exposed data includes names, physical addresses, phone numbers, bank account numbers and customer service notes. Odido has published a disclosure notice advising that impacted data may also include dates of birth and government-issued identity document numbers.
Odido
February 12, 2026
•[ data breach, extortion, data leak ]
In February 2026, the Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Following the incident, 1M records containing 317k unique email addresses was published publicly, with a threat by the attackers to continue leaking more data in the following days. The data also included names, physical addresses, phone numbers, bank account numbers and notes about customers left by service operators. Odido has published a disclosure notice detailing the extent of the incident, providing an FAQ and advising the incident also impacted dates of birth, passport and drivers licence numbers.
Canadian Tire
October 2, 2025
•[ data breach, retail, PII ]
In October 2025, retailer Canadian Tire was the victim of a data breach that exposed almost 42M records. The data contained 38M unique email addresses along with names, phone numbers and physical addresses. Passwords were stored as PBKDF2 hashes and for a subset of records, dates of birth and partial credit card data were also included (card type, expiry and masked card number). In its disclosure notice, Canadian Tire advised that the incident did not impact bank account information or loyalty program data.
