
York University breach exposed personal data from forms dating to 2007
Forms on 14 sites held emails, government IDs, health and financial data; the number of people affected is unknown.
26 stories, newest first · one card per story

Forms on 14 sites held emails, government IDs, health and financial data; the number of people affected is unknown.
The membership platform may have exposed home addresses, passwords and bank account numbers, and more club reports are expected.
No evidence of disclosure or misuse; investigation ongoing with ANPD notified.
About 2,000 of those customers also lost passport, frequent-flyer, email and phone data; flights and cards were unaffected.
Attackers made about 11 million requests and extracted data linked to roughly 750,000 identification numbers.
Hackers reached a test environment, and a later update said PIN codes of another 20,000 staff and students were exposed.

A test-environment intrusion exposed national ID numbers, phones and emails, plus ID-card PINs for about 20,000 people.

Investigators link AI-assisted intrusions at 60 victims and extortion demands totaling 360 million won.

Hackers reached a test environment holding names, CPR numbers, phones and emails, plus PIN codes for 20,000 more people.

Exposed data is mostly emails and login metadata; 196 accounts had passwords changed, and card data was not taken.
Instructing the agent not to state or presuppose attributes cut leakage near the no-memory level while keeping most quality gains.
Moscow police detained suspected DataSuckers hackers over the Dodo Pizza breach affecting hundreds of millions of orders.

The UK Legal Aid Agency says its 2025 breach exposed records dating to 1978, including about 250,000 older files.
UK officials say Legal Aid Agency hackers stole about 250,000 records, some dating to 1978, plus probation data.

UK Legal Aid Agency says April 2025 hackers stole records dating to 1978, including about 250,000 pre-2007 files.

Attackers used the password 123456 to query Denmark’s CPR register, exposing records on about 8.8 million people.

Hackers stole names, addresses, and national ID numbers of about 8.8 million people from Denmark's Central Person Register.

BYOD claims it leaked 3,615 Trump Mobile customer records with contact and order details.

Hackers stole personal records on about 8 million people from Denmark's Central Person Register.
Denmark's CPR register says attackers abused a company's access and copied data on about 8.8 million people.

Times Car confirms hackers stole personal data of 6.6 million current and former members, including driver's license images; credit card data was unaffected.
404 Media found the massive FBI personnel data breach includes members of the bureau's secretive hacking unit, exposing identities, addresses, and family details.
Unknown attacker accessed LMU Munich enrollment system, potentially retrieving bank details, health insurance numbers, and financial aid data.
Natural Resources Wales inadvertently exposed diversity data of about 2,000 current and former staff via a 2021 Freedom of Information spreadsheet published online.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views