COMELEC (comelec.gov.ph)
March 27, 2016
•[ data breach, voter records, personal information exposure ]
The database of the Philippine Commission on Elections (COMELEC) is breached and the personal information of 55 million voters potentially exposed in two consecutive attacks. The second attack was carried out by LulzSec Pilipinas
visit-jy.com
March 18, 2016
•[ hacktivism, data leak, protest ]
Hacktivists from KarmaSec hack the server of Japan's Yamaguchi Prefecture Tourism Promotion Division (visit-jy.com) and leak a trove of data protesting in animal cruelty in the country.
incipio.com
February 25, 2016
•[ malware, compromised orders, data breach ]
Incipio, LLC notifies an unspecified number of customers that malware compromised orders placed online.
The official website of the President of the Islamic Republic of Iran (president.ir)
January 2, 2016
•[ website takedown, cyberattack, hacktivism ]
Hackers from Turk Hack Team take down several Iranian government websites including Ministry of Information, Ministry of Foreign Affairs, Ministry of Energy and the official website of the President of the Islamic Republic of Iran (president.ir).
Fashion to Figure (http://www.fashiontofigure.com)
November 15, 2015
•[ malware, data breach, server compromise ]
Fashion to Figure notifies customers of a breach involving malware inserted on their web host's server
Fidelity Group (http://www.fidelitygroup.com/)
September 22, 2015
•[ hacking, extortion, data leak ]
A group of hackers that calls itself "Hack for Trump" claims to have hacked the website of Fidelity Group and threaten it would make the stolen data public unless Fidelity pays $30,000.
my.barackobama.com
July 11, 2015
•[ website defacement, hacktivism ]
A Yemeni hacker going with the handle of Lov3rDns defaces the official social network domain of U.S president Barack Obama, used during his election campaign (my.barackobama.com).
Pizza Hut Israel (contact.pizzahut.co.il)
July 7, 2015
•[ website defacement, hacking ]
A group of Bangladeshi hackers going with the handle of DangerPro defaces the contact us page of the official website of Pizza Hut Israel (contact.pizzahut.co.il).
thesnappening.org
October 15, 2014
•[ data leak, hacking, defacement ]
thesnappening.org, the hosting site for the pictures leaked from Snapchat after The Snappening affair, is hacked by Team Danny, and the details of his founder Mudit Grover, are posted on the hacked page.
TheNaturalOnline.com
August 14, 2014
•[ data breach, credit card theft, PII leak ]
TheNaturalOnline.com is compromised by an unknown attacker, who gains access to names, addresses, email addresses, phone numbers, passwords, credit and debit cards, expiration dates and CVV codes.
antiwar.com
May 14, 2014
•[ hacking, cyber attack, fundraising drive ]
antiwar.com, a website known for its non-interventionism and war opposing views is hacked just a few hours after launching its fundraising drive.
Meteo France (meteofrance.com)
May 23, 2016
•[ website defacement, hacking ]
A hacker who goes by the nickname of Amar^SHG (formerly Kuroi'SH) defaces France's most visited weather portal, M t o France.
Well.ca
February 18, 2014
•[ data breach, credit card information, customer data ]
Well.ca, a Canadian online retailer for health and beauty products, declares to have suffered a data breach, compromising the credit card information of a few thousand of its customers.
Provecho
January 30, 2026
•[ data leak, email addresses, usernames ]
In early 2026, data purportedly sourced from the recipe and meal planning service Provecho was alleged to have been obtained in a breach. The exposed data included 713k unique email address along with username and the creator account holders followed. Provecho has been notified and is aware of the claims surrounding the incident.
Quitbro
February 17, 2026
•[ data breach, data leak, PII ]
In February 2026, the porn addiction app Quitbro allegedly suffered a data breach that exposed 23k unique email addresses. The data also included users years of birth, responses to questions within the app and their last recorded relapse time. The apps maker, Plantake, did not respond to multiple attempts to contact them about the incident.
Odido
February 12, 2026
•[ data breach, extortion, PII ]
In February 2026, Dutch telco Odido was the victim of a data breach and subsequent extortion attempt. Shortly after, a total of 6M unique email addresses were published across four separate data releases over consecutive days. The exposed data includes names, physical addresses, phone numbers, bank account numbers, dates of birth, customer service notes and passport, drivers licence and European national ID numbers. Odido has published a disclosure notice including an FAQ to support affected customers.
Muah.AI
September 17, 2024
•[ data breach, PII leak, AI prompts ]
In September 2024, the "AI girlfriend" website Muah.AI suffered a data breach. The breach exposed 1.9M email addresses alongside prompts to generate AI-based images. Many of the prompts were highly sexual in nature, with many also describing child exploitation scenarios.
Lovora
February 25, 2026
•[ data breach, personal information, email addresses ]
In February 2026, the couples and relationship app Lovora allegedly suffered a data breach that exposed 496k unique email addresses. The data also included users display names and profile photos, along with other personal information collected through use of the app. The apps maker, Plantake, did not respond to multiple attempts to contact them about the incident.
