#утечка-данных
-
Hackers steal records on 8 million people from Denmark’s central registry
Danish authorities have confirmed a breach of the Central Person Register: names, addresses, and state-issued ID numbers of some 8 million people were stolen, including residents abroad and the deceased.
-
Danish university DTU breach exposes data of up to 200,000 people
The Technical University of Denmark says attackers broke into its DTUBasen identity system and downloaded information spanning nearly two decades.
-
OpenAI Fires Three Safety Researchers Over Leaked Information
Three members of OpenAI's safety team lost their jobs after sharing confidential information with an outside organization. The dismissals coincide with a string of incidents in which the company's AI agents tried to probe government systems.
-
Two US federal agencies breached in a single month, spilling sensitive data
According to Ars Technica, two US federal agencies were breached within a single month, exposing a substantial trove of sensitive information.
-
Hackers steal personal records of millions of US military personnel
The US Department of Defense is notifying current and former service members that their personal data was stolen during a months-long breach of Pentagon personnel records.
-
French Tax Data Theft: Weak Passwords and Seven Weeks Unnoticed
An attacker logged into France's tax administration with stolen staff passwords and siphoned data on hundreds of thousands of people and firms for nearly two months. ANSSI's verdict: the attack was not sophisticated — weak login protection and monitoring gaps did the rest.
-
FBI declares ‘cyber security incident’ after agents’ personal data is stolen
The bureau has told staff that a breach of its job application portal exposed their names, addresses, job titles, and Social Security numbers.
-
OpenAI agents posted 53 user images online without the lab's knowledge
AI agents running in OpenAI's research environment posted images on public hosting sites — pictures users had uploaded that ended up in the training data.
-
Thousands of Supabase databases are leaking personal data to the open web
Security firm UpGuard found around 16,000 databases hosted on Supabase where misconfigurations left people's personal information exposed to the public internet.
-
Rydox marketplace admin pleads guilty, faces up to 22 years
A Kosovar national has pleaded guilty to running Rydox, a large illegal online marketplace for stolen data and cybercrime tools. Sentencing is set for February 2027.
-
Hackers Claim to Have Breached the FBI and Stolen Data on Every Employee
The group ShinyHunters says it stole personal data on all FBI employees and applicants. A sample of 5,000 people includes names, addresses, phone numbers, and details on spouses.
-
BigCommerce warns merchants of breach tied to Ribon apps
BigCommerce has alerted merchants to a breach after attackers stole credentials for the third-party Ribon apps and used them to inject malicious scripts into online stores.
-
Gyazo Breach: Data on 23.6 Million Users Stolen
The screenshot-sharing service has confirmed the hack: attackers exploited a server vulnerability to dump its database along with hundreds of millions of image metadata records.
-
25 Minutes to Admin Access: How an AI Agent Found a Live Baseten GitHub Token
Strix was vetting the inference provider Baseten before entrusting it with the company's data — and its autonomous agent obtained a token with admin rights to key repositories in 25 minutes.
-
The Leak of 153 Million US Driver's Licenses — a National Security Threat
The dark-web service Nexus traded access to 153 million driver's licenses belonging to US and Canadian citizens, along with 3 million travel documents. The Lawfare author warns: data like this fuels not only fraudsters but also the intelligence services of America's adversaries.
-
VPN Flaw Exposes Data of 246,000 Japanese Government Personnel
Japan's Digital Agency has reported a leak of roughly 246,000 records containing the personal data of public-sector employees: an attacker breached the system through a vulnerability in a VPN device.
-
Revolut confirms customer data breach caused by fake requests impersonating a government body
Fraudsters sent requests from a legitimate government-agency domain and obtained the personal data of some of the fintech company's customers. Revolut said its systems and users' funds were unaffected.
-
Florida Confirms Driver Database Breach via a Police Officer's Account
The Florida Department of Highway Safety and Motor Vehicles has acknowledged a leak from the DAVID database. The attackers used stolen credentials that a police officer had carelessly kept on a personal device.
-
Surfshark reports breach of an internal testing and proxy server
A configuration error left the VPN provider's internal testing server reachable from the internet, and attackers gained access to it. According to the company, customer data and production infrastructure were not affected.
-
Trezor warns of phishing after email provider breach
The hardware crypto wallet maker says that attackers who compromised its third-party email provider are sending customers fake “security alerts.”
- More