#утечка-данных
-
153 Million Driver's Licenses for Sale on the Dark Web
A database containing details on 153 million driver's licenses has been put up for sale on shadow marketplaces. The discovery is reported by Brian Krebs.
-
ShinyHunters claim breach of Florida's "DAVID" DMV database
The extortion group ShinyHunters claims to have stolen more than 200,000 driver records from Florida's Department of Motor Vehicles. As proof, they published Jeffrey Epstein's record.
-
A Hole in ChatGPT Let Attackers Quietly Siphon a Victim's Gmail Into Someone Else's Account
Check Point researchers showed how a single instruction planted in a conversation could make ChatGPT quietly work for an attacker, reading through email and chat history. The covert channel turned out to be an internal package-installation service.
-
APIS Leak: 220 Million Traveler Records Left Publicly Accessible
A pre-flight screening database linked to a Vietnamese organization was reachable through a chain of misconfigurations. It held passport details and flight information spanning nine years.
-
Mathspace Data Breach Affects Over a Million People
The educational platform Mathspace has reported a breach of its internal Metabase reporting system, in which attackers stole the data of more than a million students, parents and school staff.
-
JetBrains Breached Through Its Own Unpatched TeamCity: AWS Keys and Code Leaked
The company is urging users of its Cadence cloud service to immediately revoke and rotate all secrets: attackers penetrated its infrastructure through a TeamCity vulnerability that JetBrains had failed to patch on its own systems.
-
IDScan Hit With Lawsuits Over Breach of 153 Million Driver's Licenses
The identity-verification company is accused of compromising a database that hackers put up for sale on the dark web. The FBI is investigating.
-
€500,000 Fine: French Hospital Failed to Protect the Data of 727,000 People
The CNIL regulator has penalized a private hospital in Saint-Étienne over a breach that exposed information on half a million patients and the people they had designated as contacts.
-
Breach in Thomson Reuters Court Software: SSNs and Sealed Records at Risk
Thomson Reuters has reported that unknown parties gained access to files on its C-Track case management platform. Courts in 11 U.S. states, the Virgin Islands, and Ontario, Canada, were affected.
-
Dropbox Accounts Breached Through a Flaw in Lenovo's Email Verification
An attacker registered fake Lenovo IDs against other people's addresses and used them to log into Dropbox without a password. Around 5,000 accounts were affected.
-
FBI Probes Dark-Web Trade in Scans of 153 Million Driver's Licenses
A new service called Nexus is selling digital copies of more than 153 million driver's licenses belonging to U.S. and Canadian residents. The source appears to be a breach at a Louisiana-based identity-verification vendor.
-
Stolen METR Key Handed Attackers Nearly $600,000 in AI Resources
METR, a nonprofit that evaluates frontier AI models, has disclosed two incidents: attackers made off with an API key and burned through someone else's compute credits, and later methodically probed its infrastructure.
-
FulcrumSec claims theft of 86 GB of data from Manchester airports operator
The extortion group FulcrumSec has claimed responsibility for the breach of Manchester Airports Group, saying it stole around 86 GB of customer data. The samples point to a far more detailed leak than the company initially admitted.
-
Berlin Refuses to Pay Ransom for Stolen City Network Data
The government of the state of Berlin has confirmed it was blackmailed following an August breach of its administrative network and declared that it will not give in to the attackers' demands.
-
McKesson Confirms Breach: ShinyHunters Claims Theft of Patient Data
Pharmaceutical distributor McKesson has disclosed unauthorized access to third-party applications and the theft of data. The ShinyHunters group is claiming responsibility for the attack, saying it made off with roughly 284 million patient records.
-
Britain's Largest Airport Operator Reports Theft of Passenger Data
Manchester Airports Group has confirmed a breach of customer personal data at three of its airports. According to local media, as many as 8.9 million people may have been affected, though the company has not confirmed that figure.
-
The Carhartt Data Breach: 12.9 Million Accounts Compromised
The extortion group ShinyHunters has published the data of nearly 13 million customers and employees of the American clothing maker Carhartt after the company refused to pay a ransom.
-
ATF Confirms “Major Incident” Following Qilin Ransomware Claims
The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives has acknowledged a breach of one of its systems after the Qilin gang added the agency to its leak site.
-
LACMA Data Breach: Social Security Numbers and Medical Information at Risk
The Los Angeles County Museum of Art has disclosed that a 2025 breach of its networks gave attackers access to the personal data of visitors and staff — from passport numbers to medical diagnoses.
-
Hundreds of Leaked AWS Keys Grant Full Access to Corporate Accounts
Truffle Security has discovered that more than 9,300 AWS access keys exposed publicly over the past four years are still valid — and hundreds of them grant full control over companies' cloud accounts.
- More