LimeLeads
January 14, 2020
•[ leak, misconfiguration, technology ]
49 million user records extracted from a misconfigured Elasticsearch database by US data broker LimeLeads are put up for sale online.
Aurora Water
December 31, 2019
•[ leak, misconfiguration, government ]
Aurora Water announces yet another data breach involving the Click2Gov payment system. Payments between Aug. 30 and Oct. 14 were impacted.
Alomere Health
January 3, 2020
•[ leak, healthcare ]
The personal and medical information of 49,351 patients is exposed following a security incident involving two employees' email accounts.
Poloniex
December 30, 2019
•[ finance, leak ]
The Poloniex Exchange forces a password reset after someone leaked a list of email addresses and passwords on Twitter.
WebSAMS
December 6, 2019
•[ hack, leak, education ]
Hackers break into WebSAMS (web-based school administrative and management system), a government system used by most of Hong Kong's schools, as a consequence eight schools are breached, with three of them reporting data leaks.
Mixcloud
November 29, 2019
•[ leak, technology ]
A data breach at Mixcloud, a U.K.-based audio streaming platform, leaves more than 20 million user accounts exposed after the data is put on sale on the dark web.
Iran
December 10, 2019
•[ leak, government ]
The private details of 15 million debit cards in Iran are published on Telegram. Cyber security experts suspect it was the work of intelligence agencies from the U.S. or Israel.
Unknown Organization
November 11, 2019
•[ leak, technology ]
ZoneAlarm suffers a data breach that exposes the data of the discussion forum users (forum.zonealarm.com). Around 4,500 users are affected.
Twitter account of Arron Banks, the founder of the pro-Brexit campaign Leave.EU
November 19, 2019
•[ hack, leak, government ]
The Twitter account of Arron Banks, the founder of the pro-Brexit campaign Leave.EU, is hacked. The attackers leak thousands of his private messages.
Select Health Network
November 13, 2019
•[ leak, phishing, healthcare ]
Select Health Network reveals compromise of employee email accounts that may impact an unspecified number of patients.
Chilean Carabineros
October 22, 2019
•[ hack, leak, government ]
The Chilean Carabineros are hacked and the attackers leak 10,000 sensitive files.
NordVPN
October 20, 2019
•[ leak, misconfiguration, technology ]
NordVPN is compromised as the'private keys for their web site certificate'are publicly leaked on the Internet The company confirms the breach was discovered on March 2018.
VikingVPN
October 20, 2019
•[ leak, misconfiguration, technology ]
OpenVPN keys and configuration files from VikingVPN are also leaked online.
Vedantu
November 1, 2019
•[ leak, education ]
The Indian interactive online tutoring platform Vedantu suffered a data breach which exposed the personal data of 687k users.
Bed Bath & Beyond
October 29, 2019
•[ leak, retail ]
Bed Bath & Beyond discloses that an unauthorized party obtained login information for some of its customers (1% of customer base).
BriansClub
October 15, 2019
•[ hack, leak, finance ]
"BriansClub" one of the largest underground stores for buying stolen credit card data, is itself hacked. The data stolen from BriansClub encompasses more than 26 million credit and debit card records.
Boston University
October 10, 2019
•[ leak, education ]
Over 1,000 Boston University students are forced to change their account passwords after the servers are flooded with spam emails from student accounts. The spam is believed to be a result of a 2018 breach of the educational site Chegg.
Beeline
October 7, 2019
•[ leak, technology ]
The data of 8.7 million customers from Russian internet service provider Beeline is being sold and shared online. The breach occurred in 2017.
Italian Democratic Party
October 6, 2019
•[ hack, leak, government ]
Anonymous Italia hacks 8 websites of the Italian Democratic Party (PD) and leaks 220 databases containing personal data in clear text.
XKCD Forums
September 1, 2019
•[ leak ]
The forums of the XKCD webcomic are currently offline after being impacted by a data breach which exposed the information of 561,991 users on July 1.
