Wyndham Android app password exposed customer data in Salesforce
A researcher found the password in the app source, unlocking names, emails, member numbers, login tokens, and files.
Stories per day · 30 days
2 RSS
Relateddata-breach9chainalysis4agentic-ai3android3energy3engie3france3hardcoded-credentials3japan2phishing2salesforce2wyndham2ai-attack1ai-tool1applebees1artex-ai1blockchain1capcom1
25 stories, newest first · one card per story
Stories tagged #customer-data
Nitori says attacker may have stolen 37.62 million customer records
Access may date to mid-October; passwords and card data were not exposed, the retailer says.
DigiCert Confirms Data Breach Exposing Customer Identity Documents
DigiCert's internal system exposure exposed archived customer contact details and some identity documents; no impact on certificate services.
1
WorkOS data breach via ARTEX AI framework
Attacker used ARTEX AI to access business contacts and customer communications summaries.
Chainalysis discloses breach after AI-driven intrusion
Accessed data was limited to user IDs, names, emails, and role labels; the victim count is undisclosed.
1
Chainalysis cyberattack exposes customer names and emails
Chainalysis detects AI-driven attack exposing user IDs, names, and emails but not passwords or investigation data.
1
Chainalysis confirms intrusion exposed customer names and emails
An external actor reached internal tools and user IDs, names, emails and role labels; investigation data and credentials were not accessed.
2
Chainalysis confirms attack exposed customer names and emails
The company says user IDs, names, emails, and role labels were exposed, but not investigation content or authentication secrets.
2
Applebee’s Android app held a database password exposing customer data
Dine Brands says it found no unauthorized access, but would not say whether database logs exist.
1
ENGIE says partner sales tool exposed French customer contract data
Exposed records include names, phones, emails, customer IDs and energy supply identifiers; banking data was not included.
1
Engie notifies customers after partner marketing-tool data breach
Exposed fields may include names, contact details and French energy contract identifiers; Engie says banking data and its own IT were not involved.
ENGIE says attackers stole French customer data from partner tool
Stolen data includes names, contact details and contract identifiers; ENGIE says banking data and internal systems were not affected.
1
Genesys hack exposes customer data from internal systems
Names, phones, emails, and account details were likely taken from LMS and CRM systems; cloud platforms were not hit.
1
Capcom says unauthorized access exposed 11,774,247 customer records
Exposed CAPCOM ID data includes emails and login activity; attackers changed passwords on 196 accounts, which Capcom reset.
ASOS breach update: Hackers stole customer details and shopping searches
ASOS says attackers stole customer identities and shopping searches after tricking an employee for login credentials.
2
Asos confirms breach of customer data after hackers send rogue app notification
Asos confirmed hackers stole customer contact data from a Snowflake platform and sent a rogue app notification.
2
ASOS Confirms Data Breach Linked to Stolen Employee Credentials
ASOS confirmed attackers used stolen employee credentials to access customer account data via third-party platforms.
3
ASOS Hacked – App Users Receive Notifications Sent by Hackers
ASOS is investigating unauthorized customer app alerts after hackers claimed they compromised its Snowflake environment.
1
Russian pizza restaurant chain confirms cyberattack: Hackers claim 68 million users exposed
Dodo Pizza confirmed a cyberattack that may have exposed customer data, while hackers claim 68 million users.
2
Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims
Dodo Pizza confirmed hackers accessed some customers' personal data after DataSuckers claimed 68 million records.
1
Someone went shopping in ASUS's eShop – for customer data
Asus says an intruder accessed eShop customer contact details and order records; payment data was not involved.
CenterPoint Energy Data Breach – Hackers Stolen Customer’s Personal Data
CenterPoint Energy confirmed via SEC 8-K filing that an unauthorized third party stole customer personal data from an internet-facing system.
1
CenterPoint Energy confirms data breach following claims on hacking forum
CenterPoint Energy confirmed a breach after a hacker claimed stealing 7.49 million customer records via an unauthenticated API lacking WAF, rate limiting, and token checks.
1
Cyberattack on Manchester Airports Group exposes data of 8.7 million customers
Manchester Airports Group reported a cyberattack exposing booking data of about 8.7 million customers across three English airports.