Full List

Search

Recent Breaches

• BlankMediaGames (BMG) January 2, 2019 BlankMediaGames (BMG) admits that a hacker has stolen the personal details of 7.6 million users of browser-based game the "Town of Salem".
• China Railway January 2, 2019 • [ leak, misconfiguration ] Data thieves steal the personal information of nearly 5 million people from an unconfirmed number of Chinese online ticket reservation platforms, according to Beijing police, who arrested a suspect in the case.
• Victorian government January 1, 2019 • [ leak, phishing, government ] The work details of 30,000 Victorian public servants have been stolen in a data breach, after part of the Victorian Government directory was downloaded by an unknown party after an employee's email account is compromised.
• Residential Mortgage Services, Inc. January 1, 2019 • [ social, phishing, finance ] This cyber breach allegedly arose when a RMS employee clicked on a hyperlink in a phishing email that falsely appeared to originate from a RMS business partner. The RMS employee provided her email credentials to the malicious website opened by the hyperlink.
• Volodymyr Zelenskiy website January 1, 2019 • [ hack, government ] Hackers launch an attack on the website of showman Volodymyr Zelenskiy following the announcement of his candidacy for president on New Year's Eve.
• Armor Games January 1, 2019 • [ hack, technology ] In January 2019, the game portal website Armor Games suffered a data breach. A total of 10.6 million email addresses were impacted by the breach which also exposed usernames, IP addresses, birthdays of administrator accounts and passwords stored as salted SHA-1 hashes. The data was provided to HIBP by a source who requested it be attributed to "JimScott.Sec@protonmail.com".
• Royal Enfield January 1, 2019 • [ leak, misconfiguration, automotive ] In January 2020, motorcycle maker Royal Enfield left a database publicly exposed that resulted in the inadvertent publication of over 400k customers. The impacted data included email and physical addresses, names, motorcycle information, social media profiles, passwords, and other personal information. The data was provided to HIBP by a source who requested it be attributed to "white_peacock@riseup.net".
• Australian National University January 1, 2019 • [ hack, education ] hacked
• Bulgarian National Revenue Agency January 1, 2019 • [ hack, government ] hacked
• ? January 1, 2019 • [ leak, misconfiguration, government ] poor security / misconfigured server
• Health Sciences Authority January 1, 2019 • [ leak, misconfiguration, healthcare ] poor security
• Servicio Electoral de Chile (Servel) January 1, 2019 • [ leak, misconfiguration, government ] misconfigured server
• Ministry of Health January 1, 2019 • [ insider, misconfiguration, healthcare ] poor security/inside job
• ? January 1, 2019 • [ hack ] hacked
• Universiti Teknologi MARA January 1, 2019 • [ hack, education ] hacked
• Adobe Inc. January 1, 2019 • [ hack, misconfiguration, technology ] poor security
• Airtel January 1, 2019 • [ leak, misconfiguration, technology ] poor security
• Amazon Japan G.K. January 1, 2019 • [ leak, misconfiguration, retail ] accidentally published
• Canva January 1, 2019 • [ hack, technology ] hacked
• Capital One January 1, 2019 • [ leak, misconfiguration, financial ] unsecured S3 bucket