Latest News: Data Breaches

Over 70 million records associated with AT&T customers have been leaked on the popular hacking forum, Breached. The data, purportedly stolen in 2021 by the notorious hacking group ShinyHunters, includes sensitive personal information such as names, phone numbers, physical addresses, email

A significant security flaw in the Irish Health Service Executive's (HSE) COVID-19 vaccination portal, which exposed the vaccination records of approximately a million people, has been disclosed after a two-year delay. The vulnerability, discovered by security researcher Aaron Costello in December

Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to vpnMentor about a non-password protected database that contained over 2.3 million documents belonging to Kids Empire, an US operator of recreational centers. The publicly exposed database contained 2,363,222 documents in .PDF

Fidelity Investments Life Insurance Company (FILI) has announced a significant data breach affecting approximately 28,000 customers, following a cyberattack on third-party service provider Infosys McCamish Systems (IMS). The breach, which occurred between October 29 and November 2, 2023, involved

American Express (Amex) has notified its customers of a data breach that affected a third-party merchant processor, leading to the exposure of sensitive credit card information. The breach was first reported on March 4, with American Express taking quick action to inform impacted cardholders and

Cencora, a pharmaceutical giant formerly known as AmerisourceBergen, has confirmed that it experienced a significant cyberattack earlier this month. According to Cencora’s SEC filing, the attack was discovered on February 21, 2024 and involved the exfiltration of data from its IT systems, which may

Southern Water, a leading utility firm in the UK, has disclosed that the personal data of nearly half a million customers may have been compromised. The breach is one of the largest affecting the water industry in recent times and has raised serious concerns over its digital security. The

Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to vpnMentor about a non-password protected database that contained more than 200,000 records, which included sensitive files containing PII of students and parents. The non-password protected cloud storage database contained a

In a significant breach of privacy, TheTruthSpy, a surveillance application, has been hacked, compromising the data of over 50,000 Android devices across the globe. This incident marks the fourth time the application has fallen victim to hackers due to the same unfixed security flaw. According

Over 33 million individuals in France — nearly half the country’s population — have had their personal data exposed. This breach targeted Viamedis and Almerys, two prominent service providers in the French healthcare and insurance sectors. The French data protection authority, the National