Ledger customers were caught up in a separate incident in early January 2026, when a misconfigured API key at e-commerce partner Global-e exposed customer names, addresses, and order details, though no payment data or wallet recovery phrases were affected. Crunchyroll (March 12–24, 2026) Malware on a Telus International (outsourcing partner, India) support agent’s device captured Okta SSO credentials, giving a hacker access to Crunchyroll’s Slack, Zendesk, and Google Workspace for ~24 hours. A Nightwing contractor’s public repo, “Private-CISA,” sat exposed for ~183 days, leaking 844 MB, including AWS GovCloud admin keys, plaintext credentials, and CI/CD secrets for CISA’s own DevSecOps environment. ASOS confirms data breach after hackers spam customers with “ASOS HACKED” push alerts
Modern organizations rely on dozens of outside vendors, payment processors, HR platforms, CRM tools, each holding a slice of customer or employee data. Most people whose SSN is exposed instead rely on credit monitoring, fraud alerts, and credit freezes to limit the damage. Not easily, the Social Security Administration only issues a new number in rare, severe cases, which is why SSN exposure carries more lasting risk than a leaked password. Financial data leaks tend to be more immediately actionable for criminals but also easier to contain, since banks can cancel and reissue a card number within days. U.S. organizations reported a record 3,332 data compromises in 2025, a 79% increase in just five years and the third consecutive year with more than 3,000 recorded incidents. A hacker exploited an exposed network gateway and ultimately stole data on roughly 47.8 million current, former, and prospective customers, including names, dates of birth, Social Security numbers, and driver’s license information.
EternalBlue’s aftermath is a reminder that not every “leak” exposes personal data directly, some expose the very tools that make every subsequent breach on this page possible, which is part of why the exploit is still detected in active attacks years after Microsoft patched the underlying vulnerability. In April 2017, a group calling itself the Shadow Brokers released a trove of classified NSA cyber tools, including the EternalBlue exploit, which within a month powered the global WannaCry ransomware attack that crippled hospitals, banks, and businesses across more than 150 countries. But the single most consequential event of this era wasn’t a corporate breach at all, it was a leak of government cyberweapons. Companies including Qantas, Vietnam Airlines, and Google were confirmed among those affected.
2022, Medicare, Shanghai Police Database, T-Mobile
Iranian hackers just used Stryker’s own security tools to delete itself The FBI says a contractor failed to install a security patch before ShinyHunters breached its recruitment infrastructure and stole sensitive… Kazu claims more than 1 million Clínica Vesalio records were exposed, adding another healthcare target to the group’s recent breach activity. The FBI says a contractor failed to install a security patch before ShinyHunters breached its recruitment infrastructure and stole sensitive personnel information. Federal prosecutors accuse MonsterCloud’s owner of secretly paying ransomware attackers for decryptors while charging victims more than $19 million https://wapreview.mobi/mica-motes-wireless-sensor-network for recovery services. A threat actor claims 3,615 Trump Mobile customer records were compromised through a Liberty Mobile employee, raising fresh questions about third-party security.
- Meanwhile, healthcare’s rapid AI adoption is outpacing security controls, adding new risks to already strained operations.
- Beyond passive monitoring, DeXpose’s breaches monitoring service tracks newly disclosed incidents as they’re confirmed, so individuals and organizations don’t have to manually check breach-notification sites or wait for a company’s own disclosure timeline.
- Roughly 280 records were exposed in the past seven days.
- A data leak occurs whenever sensitive information, passwords, financial details, medical records, or personal identifiers, becomes accessible to people who were never meant to see it, whether through a hack, a misconfigured database, or an insider error.
- Cyberattacks on healthcare organizations are growing more frequent, costly and disruptive to patient care, a new study by the Ponemon Institute and Proofpoint found.
This matters most for organizations, since a single compromised employee credential or leaked vendor database can expose an https://influencemarketingnews.com/privacy-laws-and-influencer-marketing/ entire company’s attack surface long before a formal breach notification ever gets filed. Rather than waiting for a company to publicly disclose a breach, which, as this page has shown, can happen weeks or months after the actual incident, DeXpose’s dark web monitoring scans dark web markets, malware logs, and leaked databases on an ongoing basis to flag exposure as it surfaces. Because so many people reuse passwords across services, a single leaked credential set can unlock accounts far beyond the site it was originally stolen from, a technique called credential stuffing that remains one of the most common ways leaked data turns into an actual account takeover. Not every major data leak happened in the last two years, some of the incidents that shaped how companies and governments handle personal data today go back nearly a decade.
Tools
Usernames, email addresses, and passwords are the most frequently leaked data type simply because they’re the most widely collected, nearly every online account requires them. Once numbers like these are circulating, they’re commonly bundled with names and addresses to enable synthetic identity fraud, fraudulent tax filings, and new-account fraud that can surface years after the https://www.montsec.info/the-best-advice-on-ive-found-8/ original leak. Notably, the number of individuals affected by data compromises in 2025 actually fell to its lowest annual total since 2014, even as the incident count hit an all-time high.
Data Leaks So Far
- Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers
- Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised.
- Rather than waiting for a company to publicly disclose a breach, which, as this page has shown, can happen weeks or months after the actual incident, DeXpose’s dark web monitoring scans dark web markets, malware logs, and leaked databases on an ongoing basis to flag exposure as it surfaces.
- A data breach involves an active, unauthorized intrusion, someone deliberately hacking in and stealing data.
- The group claims to have stolen internal data.
- Social Security numbers and other government-issued IDs sit at the top of the risk hierarchy because, unlike a password, they can’t simply be reset after a leak.
The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days This information is aggregated from public sources for awareness only and is not legal, security, or investment advice. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. 67 breaches surfaced in the last 24 hours, against a baseline of about 55.5/day. Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate.