York University breach exposes 19 years of student health and financial data
Archived webform submissions from 2007 through October 2026 were taken across 14 faculties, and no group has claimed the attack.
Stories per day · 30 days
24 RSS
Relatedhealthcare21japan19pii14personal-data13education12customer-data9government9capcom8extortion8gaming8phishing8third-party8denmark7digicert7university7canada6capcom-id6email6
427 stories, newest first · one card per story
Stories tagged #data-breach
Hackers steal $133 million from French bank via service provider
Crédit Mutuel Arkéa confirms fraudulent transfers up to 133 million euros through service provider; customer assets unaffected.
1
Jailbroken DeepSeek AI agent breaches telecom and accesses millions of patient records
The autonomous agent ran for more than two weeks targeting healthcare systems using default credentials.
Fireworks AI breach also exposes billing data and model weights
Later access on October 23 through a third-party cloud host reached R&D machines; card numbers were not stored.
Nitori says attacker may have stolen 37.62 million customer records
Access may date to mid-October; passwords and card data were not exposed, the retailer says.
SGLang RCE exploited at NEAR AI; user and agent data taken
About 100 Private Chat accounts and 18 agents were exposed; two Cloud API keys were revoked and no CVE was named.
BYOD ransomware group claims a Toyota data breach
The unverified listing names personal data and kiosk devices but shows no count, ransom, or encryption evidence.
SPH Media says cyberattacks exposed no customer financial data
The article body did not load, so the title is the only claim that Singapore's SPH Media was attacked.
The Children's Foundation notifies of breach at its IT provider
An unauthorized party reached Highland Shores systems on July 6, 2026, encrypted them, and was found on August 25.
NPC receives data breach reports from 10 agencies
The DataBreaches.net page did not load past a Cloudflare check, so no report details are available.
SEGA says Arara breach exposed 2.19 million customer emails
Attackers took the addresses from newsletter platform Arara Message between October 28 and October 31; passwords and payment data were not included.
Iris Ohyama pulls online store after cloud breach risks 7.7M records
The company exposed personal data of 7.7 million customers, including passwords for some.
1
Attackers claim theft of data on over 1 million Vanderbilt students and staff
The article body did not load, so the claim is unconfirmed and no data types or response are stated.
SEGA newsletter breach exposes 2.2 million email addresses
ARARA's email service leaked 77 million addresses from about 380 clients; attackers sent over 7 million impersonation emails.
Amplifon says February attack stole US customer SSNs and medical data
Texas was told 85,804 people were affected and Vermont 1,027; law firms’ 1,332,826 figure is unconfirmed.
1
Who Gives A Crap says third-party breach exposed shopper contact data
Names, emails, phones, addresses and spend totals for UK, US and Australian customers were accessed; payments and passwords were not.
Revolve says data breach affected 1.5 million people
Indiana records put the total at 1,515,073, including stored card numbers and expiration dates for some shoppers.
NoName057(16) publishes European officials' personal data on dark web
The pro-Russian hacktivist group offers cryptocurrency rewards for additional target information.
Perry Johnson companies pay up to $10 million after 2023 breach
Settlement requires robust security policies and up to $9.7 million more penalties; 13.3 million individuals impacted including 4.2 million in New York.
1
Tajani reports personal data leak on dark web
Italian Foreign Minister Tajani said his data was spread on dark web, exposing him and family to threats and intimidation.
Frontline Education Data Breach Affects Over 3 Million People
Hackers exploited a third-party vulnerability to steal personal data of over 3 million students and employees.
AI-Powered BOSSAI Attacks Exposed Patient Records in Taiwan
A single operator ran a twelve-agent AI mesh that breached emergency services across eleven countries.
2
Brenner Base Tunnel SE confirms data breach claim by Everest
Everest claims 812 GB but no verification or evidence of sabotage or encryption; operations unaffected.
County of Sussex New Jersey data privacy incident
County of Sussex issues notice of data privacy incident.