Full List

Search

Recent Breaches

• Earth 2 October 16, 2024 In October 2024, 421k unique email addresses from the virtual earth game Earth 2 were derived from embedded Gravatar images. Appearing alongside player usernames, the root cause was related to how Gravatar presents links to avatars as MD5 hashes within consuming services, a feature Earth 2 advised has now been disabled on their platform. This incident did not expose any further personal information, passwords or financial data.
• Central Kentucky Radiology October 16, 2024 • [ data leak, healthcare, PII ] Unauthorized actor accessed CKRs network Oct 1618 2024 and copied files; ~167k people impacted; notifications issued mid-June 2025; data stolen from Lexington-based servers; no encryption or operational shutdown confirmed.
• Goglia Nutrition LLC d/b/a FuturHealth, Inc. October 16, 2024 • [ data leak ] Goglia Nutrition LLC, doing business as FuturHealth Inc., reported a long-running data security incident involving its data hosting environment for the G-Plans personalized nutrition platform. Investigations found that an Undetermined attacker acquired subscriber data on or before October 16, 2024, but FuturHealth did not complete its internal review and begin notifying customers until October 2025. The compromised information consists mainly of subscriber names and health or lifestyle information submitted through G-Plans, while Social Security numbers, driver licenses and financial account details were not involved. FuturHealth has implemented additional security measures and is sending breach notification letters and offering guidance to affected customers.
• Volkswagen Group October 15, 2024 • [ ransomware, malware, manufacturing ] The Volkswagen Group issues a statement after the 8Base ransomware group claims to have stolen valuable information from the carmakers systems.
• AnnieMac Home Mortgage October 15, 2024 • [ leak, finance ] New Jersey-based mortgage loan provider AnnieMac Home Mortgage (American Neighborhood Mortgage Acceptance Company) informs over 171,000 individuals of a recent data breach.
• Japan's ruling Liberal Democratic Party (LDP) October 15, 2024 • [ hack, ddos, government ] Japan's ruling Liberal Democratic Party (LDP) reports that a cyberattack temporarily disrupted its website, coinciding with the start of the countrys general election campaign.
• Finsure October 15, 2024 • [ leak, misconfiguration, finance ] In October 2024, almost 300k unique email addresses from Australian mortgage broking group Finsure were obtained from the ActivePipe real estate marketing platform. The impacted data also included names, phone numbers and physical addresses. The incident did not directly affect any of Finsure's systems or expose any passwords or financial data.
• Flat Earth Sun, Moon and Zodiac App October 15, 2024 • [ leak, misconfiguration, technology ] In October 2024, the flat earth sun, moon and zodiac app created by Flat Earth Dave was found to be leaking extensive personal information of its users. The data included 33k unique email addresses along with usernames, latitudes and longitudes (their position on the globe) and passwords stored in plain text. A small number of profiles also contained names, dates of birth and genders.
• The Good Life Medical Staff LLC October 15, 2024 • [ phishing, data leak ] Healthcare staffing firm reported email account compromise exposing sensitive information
• Hillcrest Convalescent Center October 15, 2024 • [ email compromise, data leak ] Hillcrest reported email account breach affecting over one hundred thousand individuals.
• Cisco October 14, 2024 Cisco confirms to be investigating recent claims that it suffered a breach after a threat actor began selling allegedly stolen data on a hacking forum. Few days later the company confirms the breach and takes offline the DevHub portal.
• Central Tickets October 14, 2024 • [ leak ] Central Tickets confirms a data breach occurred in July 2024.
• Novaya Gazeta Europe October 14, 2024 • [ hack, ddos, technology ] The Russian independent media outlet Novaya Gazeta Europe is targeted by several large-scale distributed denial-of-service (DDoS) attacks, temporarily knocking its website offline.
• Japanese logistics and shipbuilding firms, and other government and political organizations October 14, 2024 Researchers at Netscout reveal that the same groups launched distributed denial-of-service (DDoS) attacks at Japanese logistics and shipbuilding firms as well as government and political organizations
• The Club Penguin Experience October 14, 2024 • [ leak, technology ] In October 2024, The Club Penguin Experience (TCPE) suffered a data breach. The incident exposed over 6k subscribers' email addresses alongside usernames, age groups, passwords stored as bcrypt hashes and in some cases, plain text password hints. TCPE sent prompt disclosure notices to impacted customers following the breach.
• Rivers Casino Philadelphia October 14, 2024 • [ ransomware, malware, retail ] Rivers Casino Philadelphia disclosed that between Oct 1422, 2024, an unauthorized actor accessed and exfiltrated patron data, including names, SSNs, bank account details, and drivers license numbers. Notifications were issued Dec 30, 2024, with public filings Feb 16, 2025. The ransomware group Cicada3301 claimed responsibility, stating it stole 2.56 TB of data. Rivers Casino offered identity protection services to affected patrons.
• Game Freak October 12, 2024 • [ leak, technology ] Japanese video game developer Game Freak confirms it suffered a cyberattack in August after source code and game designs for unpublished games were leaked online.
• Government sites and nuclear facilities in Iran October 12, 2024 • [ hack, ddos, government ] Government sites and nuclear facilities in Iran are hit by disruptive cyberattacks.
• America First Policy Institute October 11, 2024 America First Policy Institute, a conservative think tank, is targeted with a cyber attack.
• North Caucasus Federal University October 11, 2024 • [ hack, espionage, education ] Ukraines military intelligence announced that they hacked the systems of North Caucasus Federal University, the Russian university that trains drone operators, digital communication specialists, engineers, and physicists for its army.