Leaks, data breaches, and ransom notes: The worst hacks of 2026 so far
TechCrunch's 2026 roundup covers SSA data exposure, Iranian water-utility attacks, Klue breach hitting ~200 firms, and Meta AI chatbot account hijacks.
TechCrunch's mid-year roundup highlights a whistleblower claim that DOGE uploaded a live Social Security database copy to an unsecured third-party server, which House Democrats called potentially the largest US breach in history. CISA reported Iranian hackers targeted over 100 US water providers over the summer, while Russian-linked attacks hit Polish, Swedish, and Norwegian energy and water infrastructure. Market research firm Klue was breached via a stale 2022 pilot credential, exposing cloud keys of ~200 customers including Jamf, HackerOne, and LastPass to extortion gang Icarus. Separately, tens of thousands of Instagram accounts were hijacked by abusing Meta's AI chatbot to trigger password resets to attacker-controlled emails.
- Whistleblower claims DOGE copied live SSA database to unsecured server; called largest US breach
- CISA: Iranian hackers targeted over 100 US water providers this summer
- Klue breach via stale 2022 pilot credential exposed ~200 customers' cloud keys; Icarus extortion
- Tens of thousands of Instagram accounts hijacked via Meta AI chatbot password reset abuse
- ATT&CK
- T1078 Valid Accounts
From the original article
10 min read at techcrunch.com
From the massive DOGE data breach and the compromise of critical infrastructure to the hack of federal surveillance systems, here are the most damaging security incidents and data breaches of 2026 so far.
By Zack Whittaker · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.