Patriot Mobile
May 21, 2024
•[ leak, technology ]
U.S. cell carrier Patriot Mobile experiences a data breach that included subscribers personal information, including full names, email addresses, home ZIP codes and account PINs.
Forth
May 21, 2024
•[ leak, finance ]
Debt relief solutions provider Forth (Set Forth) notifies 1.5 million individuals that their personal information was compromised in a May 2024 data breach.
Ticketmaster
May 20, 2024
•[ leak, misconfiguration, technology ]
Live Nation confirms that Ticketmaster suffered a data breach after its data was stolen from a third-party cloud database provider, which is believed to be Snowflake. The data of 560 million users is potentially affected.
Cooler Master
May 18, 2024
•[ leak, manufacturing ]
Computer hardware manufacturer Cooler Master suffers a data breach after a threat actor breached the company's website and claimed to steal the Fanzone member information of 500,000 customers.
Banco Santander
May 14, 2024
•[ leak, misconfiguration, finance ]
Banco Santander announces it suffered a data breach impacting customers after an unauthorized actor accessed a database hosted by one of its third-party service providers. ShinyHunters claims Santander breach, selling data for 30M customers
City of St. Helena
May 13, 2024
•[ leak, government ]
The city of St. Helena notifies 975 people that a May data breach exposed their personal information.
Landmark Admin
May 13, 2024
•[ leak, hack, government ]
Insurance administrative services company Landmark Admin warns that a data breach impacted over 800,000 people from a May cyberattack.
ConnectOnCall (a subsidiary of Phreesia)
May 12, 2024
•[ leak, healthcare ]
Healthcare software as a service (SaaS) company Phreesia notifies over 910,000 people that their personal and health data was exposed in a May breach of its subsidiary ConnectOnCall, acquired in October 2023.
Sumo
May 11, 2024
•[ leak ]
Sumo said that the following customer information was compromised by the breach: names, addresses, dates of birth, phone numbers, credit scores, as well as either passport, Medicare, or drivers licence details.
DocGo
May 7, 2024
•[ leak, healthcare ]
Mobile medical care firm DocGo confirms it suffered a cyberattack after threat actors breached its systems and stole patient health data.
Iberdrola
May 7, 2024
•[ leak, energy ]
Spanish multinational electrical utility Iberdrola says a cyber incident to a supplier in the beginning of May resulted in a data breach involving 850,000 Spanish customers.
Human Events
May 2, 2024
•[ hack, leak ]
The conservative news website Human Events is also hacked and replaced with a page leaking private information.
Firstmac Limited
May 1, 2024
•[ leak, finance ]
Firstmac Limited warns customers that it suffered a data breach a day after the new Embargo cyber-extortion group leaked over 500GB of data allegedly stolen from the firm.
City of Helsinki
April 30, 2024
•[ leak, education ]
The City of Helsinki discloses it is investigating a data breach in its education division, which it discovered in late April 2024, impacting tens of thousands of students, guardians, and personnel.
Sport 2000
April 18, 2024
•[ leak, retail ]
In April 2024, the French sporting equipment manufacturer Sport 2000 announced it had suffered a data breach. The data was subsequently put up for sale on a popular hacking forum and included 4.4M rows with 3.2M unique email addresses alongside names, physical addresses, phone numbers, dates of birth and purchases made by store name. The data was provided to HIBP by a source who requested it be attributed to "oathnet.ru".
Argentina's driver licenses
April 16, 2024
•[ hack, leak, government ]
A threat actor allegedly hacks a database holding 5.7M Argentinas drivers licenses, requesting a payment of $3,000 USD for whoever wishes to purchase the images of Argentine licenses.
Albatross
April 15, 2024
•[ hack, leak, manufacturing ]
Ukrainian hackers from Cyber Resistance claim to have breached the Russian drone developer Albatross, leaking 100 gigabytes of data, including internal documentation, technical data and drawings of various types of unmanned aerial vehicles.
MovieBoxPro
April 15, 2024
•[ leak, misconfiguration, technology ]
In April 2024, over 6M records from the streaming service MovieBoxPro were scraped from a vulnerable API. Of questionable legality, the service provided no contact information to disclose the incident, although reportedly the vulnerability was rectified after being mass enumerated.
Le Slip Français
April 13, 2024
•[ leak, retail ]
In April 2024, the French underwear maker Le Slip Franais suffered a data breach. The breach included 1.5M email addresses, physical addresses, names and phone numbers.
Form I-9 Compliance
April 12, 2024
•[ leak ]
Employee eligibility verification solutions provider Form I-9 Compliance suffers a data breach and its impact is far bigger than initially believed, reaching 190,000 people.
