Latest News: Data Breaches

In a recent and startling development, loanDepot, a leading US lender, has confirmed that it fell victim to a ransomware attack, leading to substantial data encryption and operational disruptions. This disclosure comes amidst a growing series of cyberattacks targeting the financial sectors. On

Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to vpnMentor about a non-password protected database that contained an estimated 4 million records, which included sensitive school safety records and PII of students, parents, and school staff. The non-password protected

The MyEstatePoint Property Search app (developed by NJ Technologies) has exposed the sensitive information of nearly half a million users. The popular Android real estate app left user data, including names, passwords, email addresses, and phone numbers, unprotected on a public-facing MongoDB

HealthEC LLC, a leading provider of population health management services, has announced a substantial data breach. The incident, which occurred between July 14 and July 23, 2023, exposed the personal and medical information of an estimated 4.5 million individuals. Further deepening the impact, the

LoanCare, a significant player in the mortgage servicing sector, has announced that the personal information of 1,316,938 borrowers has been compromised. This breach stems from a cyberattack on its parent company, Fidelity National Financial, Inc. (FNF), a leading title insurance provider in the

Mint Mobile, a mobile virtual network operator owned by actor Ryan Reynolds and due to be bought by T-Mobile for $1.3 billion, has reported a significant data breach. The breach occurred in March 2023 and puts customers at risk of SIM swap attacks. Known for offering prepaid mobile phone

Comcast, the parent company of Xfinity, has confirmed a massive data breach impacting nearly 36 million customers following the exploitation of a critical vulnerability in Citrix software. The vulnerability, termed "CitrixBleed" and identified as CVE-2023-4966, was first announced by Citrix on

MongoDB, the US-based company behind the popular open-source NoSQL database management system, has reported a cyberattack that has exposed customer account metadata and contact information. The breach was detected on December 13, 2023, prompting MongoDB to initiate an immediate investigation into

Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to vpnMentor about a non-password protected database that held 1.5 billion records containing real estate ownership data of millions of people, including celebrities, politicians, and even my own personal information. The database

Norton Healthcare, a Kentucky-based nonprofit healthcare system, confirmed a ransomware attack in May compromised the personal data of approximately 2.5 million patients and employees. The attack, which was first detected on May 9, allowed hackers to access certain network storage devices between