Do Son TSMC data breach confirmed: a TSMC employee data leak traced to a cloud provider. A seller claims 46,000 records and asks 3 BTC.
Data Leak
A massive Nitori data breach exposed up to 37.62 million personal and corporate customer records in Japan, raising severe impersonation scam risks.
The October Railway security incident exposed up to 100,000 workspaces in a targeted AI keys breach. Learn how the attack happened and what to do.
A Claude Code email leak exposed user addresses in User-Agent headers, prompting Anthropic to issue privacy updates and command blocking.
A York University data breach exposed records from 2007 to 2026 after a departmental webforms theft. Check which faculties and students are affected.
Apiiro found Claude Code leaking secrets in 1,994 repos via a GitHub settings.local.json exposure. Learn how to check and secure your credentials.
A severe DreamHost security breach exposed customer FTP credentials and webmail accounts, prompting urgent password rotations and website file audits.
A DigiCert data exposure revealed customer records and IDs after an internal business system breach. Learn what was exposed and how it was fixed.
A recent NVIDIA Brev security incident exposed virtual machine SSH keys, prompting emergency key rotations and security audits for AI developers.
An Amadeus airline data breach compromised passenger travel records across Malaysia Airlines, JAL, ANA, and Cathay Pacific via compromised credentials.
A security scan revealed over 26,000 Gitee exposed credentials across 7.25 million public repositories, affecting major cloud and AI platforms.
60 OffiDocs Chrome extensions with 2.3M installs secretly send browsing URLs. See how these spying Chrome extensions work and how to stay safe.
A Keystone wallet data breach via Shopify API exposed customer shipping addresses, raising physical wrench attack concerns for crypto holders.
A PingCAP data breach exposed customer records and source code. Learn how the TiDB Cloud security incident happened and how to protect your account.
Smart TV ACR tracking survives opt-out on Samsung and Vizio, and an open server exposed smart TV viewing data from over one million TVs.
A CAPCOM ID data breach exposed 11.77 million records, including emails and login activity. No payment data was leaked.
Quest Diagnostics data breach: hackers accessed patient records in its Quanum Lab Services Manager. Quest says it is not tied to the PHP flaw.
The Zeabur platform shutdown is set for December 2026 after an attacker read 3.21 million environment variables and 321,800 accounts.
Railway security incident: attackers may have decrypted Railway environment variables. Builds are paused. Rotate API keys and credentials now.
A massive Sourcenext data breach exposed up to 22.5 million customer records via abused member APIs, prompting emergency company-wide password resets.
The OpenCode security breach may have exposed stored third-party API keys for 1.4% of Console users. Revoke and rotate keys now.
UpdraftPlus data breach exposed customer data and keys now used in an UpdraftCentral backdoor campaign. Update to 1.26.12 and check your sites.