Notion AI chat transcripts exposed in Fireworks AI breach
Fewer than 1% of Notion workspaces were affected; Notion says its own systems were not breached and notified customers on November 9.
1
Stories per day · 30 days
2 RSS
Relateddata-breach8ai-agents3fireworks-ai3notion3anthropic2arara2bug-bounty2chat-transcripts2crypto2data-exposure2email2pii2polymarket2sega2supply-chain2ai-vendor1amplitude1api-keys1
28 stories, newest first · one card per story
Stories tagged #third-party
SEGA says Arara breach exposed 2.19 million customer emails
Attackers took the addresses from newsletter platform Arara Message between October 28 and October 31; passwords and payment data were not included.
Who Gives A Crap says third-party breach exposed shopper contact data
Names, emails, phones, addresses and spend totals for UK, US and Australian customers were accessed; payments and passwords were not.
Polymarket halts international trading after third-party compromise
Trading on Polymarket.com resumed after nearly an hour; the US platform was not affected and the company promised reimbursement.
1
Polymarket halts trading after third-party compromise, pledges full reimbursement
Users report unauthorized withdrawals and zero balances; the provider, loss totals, and access path remain undisclosed.
1
AI agents accessed Anthropic systems via third-party software
Anthropic says sales, HR, and IT data were exposed, but Claude chats, source code, and weights were not.
1
Coinbase says Amplitude incident exposed some customer contact data
Coinbase says its systems and customer funds were not accessed and has not confirmed how many people were affected.
Warp discloses breach exposing AI agent logs and telemetry
Lloyd estimates roughly 1% of users were hit via an unnamed infrastructure vendor; CrowdStrike is investigating.
1
Suppliers holding UK police data repeatedly breached since 2021
The inspectorate withheld which suppliers and forces were hit and does not say whether those attacks stole data.
1
Cathedral AI agents reached Anthropic business systems in authorized test
Agents used unnamed third-party software to reach sales, HR, and IT data; prompts, source code, and model weights were not accessed.
Atlassian October bulletin covers 75 third-party product CVEs
Six unique flaws are rated critical, but Atlassian assesses non-critical customer risk and cites no exploitation.
2
OpenCode says breach hit 1.4% of Console users
The company ties the October 17 incident to a distillation attack on users with external providers, but has not confirmed stolen API keys.
2
Denmark Data Breach Involving 8.8 Million Records Linked to ‘123456’ Password
A weak password at Danish firm Pays ApS exposed about 8.8 million CPR records, including ID numbers and addresses.
1
Australian patient data compromised in Icon Cancer Centre hack
Icon Cancer Centre says a supplier-system breach exposed some Australian patient information.
1
Nippon Columbia Malware Infection May Have Exposed 8.7 Million Customer Records
Nippon Columbia says malware on a contractor PC may have exposed about 8.7 million Daiichi Kosho records.
3
ASOS Confirms Cyberattack, Data Breach
ASOS confirmed a third-party notification platform was hacked, potentially exposing customer names and contact details.
4
Denmark ’s Population Registry Breached, 8.8 Million Affected
Hackers stole names, addresses, and CPR numbers for 8.8 million people from Denmark's population registry via a third party.
4
Frontline Education Breach Impacts K-12 School District Staff
Frontline Education says a third-party software flaw exposed K-12 staff Social Security numbers and contact details.
3
Frontline Education breach exposes school district employee data
Frontline Education says attackers exploited third-party software and stole school employees' Social Security numbers.
2
A four-week plan to tackle vendor concentration risk
A Skycloak founder outlines a four-week plan to uncover hidden vendor concentration and single-provider outage risk.
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
Bitget says attackers exploited a zero-day in an unnamed third-party security product to steal $388 million from hot and warm wallets.
4
Wyoming courts investigate extent of personal data exposed in cybersecurity breach
Wyoming courts are investigating a third-party breach that may have exposed a decade of court data.
Hackers Abuse Stolen BigCommerce App Key to Steal Master of Malt Customer Data
Attackers used a stolen Ribon BigCommerce app key to access Master of Malt customer contact data.
1
ChatGPT Ad Tracking Cookie Follows Users Across Third-Party Advertiser Websites
OpenAI’s __obi cross-site cookie links ChatGPT account activity to third-party advertiser websites, collecting personal data including conversion events and device-linked identifiers.
1