Category: Data Breaches


  • JAL Data Breach Exposes 92,000 Customers’ Travel Details

    The JAL data breach has exposed information belonging to approximately 92,000 customers following unauthorised access to Amadeus’s Passenger Service System. Japan Airlines said the incident involved reservation details, while a smaller group also had passport numbers and contact information exposed. JAL Group uses the system to manage reservations, ticketing and check-in for Japan Airlines and…

  • Polymarket Breach Halts Trading as $2.5M Is Traced

    The Polymarket breach temporarily interrupted trading on October 29 after attackers used a compromised third-party service to distribute cryptocurrency-draining JavaScript. Investigators traced approximately $2.5 million in assets through a suspected attacker wallet, although Polymarket has not confirmed its total losses. The incident affected the company’s international platform, Polymarket.com. Polymarket said it fixed the issue, contacted…

  • Sony ISP Breach Exposes 2.5 Million Customer Records

    The Sony ISP breach has exposed more than 2.5 million records containing personal information belonging to current and former customers in Japan. Sony Network Communications confirmed that an unauthorised party accessed its So-net member database on October 19. The company detected the intrusion on October 23, four days after the breach occurred. It then shut…

  • Warp Data Breach Exposes Agent Logs and Telemetry

    A Warp data breach has exposed AI agent logs and user telemetry following an attack on a third-party infrastructure vendor. Founder and CEO Zach Lloyd estimates that the incident may affect roughly 1% of users, although investigators continue to assess its scope. Warp initially launched as a modern terminal before expanding into an agentic development…

  • ENGIE Data Breach Exposes Customer and Contract Details

    French energy company ENGIE has confirmed that attackers stole customer information through a marketing platform used by its business partners. The ENGIE data breach affects customers in France and involves personal contact details alongside information about their energy contracts. The company said it blocked the attackers’ access after identifying unusual activity within the platform. According…

  • Frontline Data Breach Exposes Student and Staff Details

    The Frontline data breach has exposed sensitive student and employee information across multiple US school districts. In an October 26 notice, the education software provider confirmed that the August incident affected its Frontline Central and School Health Management platforms. Frontline supports more than 10,000 K-12 organisations and serves schools educating over 50 million students. However,…

  • Copenhagen Data Breach Exposes 525,000 People’s Details

    The University of Copenhagen has confirmed that hackers accessed a test environment containing personal information belonging to 525,000 people. The Copenhagen data breach also prompted campus access restrictions after the university identified exposure involving staff and student PIN codes. The university detected the intrusion on October 20 and publicly disclosed it on October 23. Subsequently,…

  • Navigate360 Data Breach Exposes 8.3 Million Tip Records

    The Navigate360 data breach has exposed approximately 8.3 million tip records from reporting systems that serve schools and public safety agencies. Some records contained sensitive student information, prompting criticism from Nevada officials over delayed disclosures. Navigate360 confirmed the incident on October 23. According to the company, an unauthorised party accessed its systems between November 21,…

  • Quest Diagnostics Breach Exposes Patient Records in Lab Management System

    A Quest Diagnostics breach has affected patient information held in the company’s Quanum Lab Services Manager system. The medical testing provider confirmed unauthorised access but has not established how many patients the incident involves. Quest detected the intrusion on October 21 and immediately suspended access to the affected platform. Its investigation involves both patient health…

  • Railway Potential Breach Prompts Urgent Warning to Rotate Secrets

    A Railway potential breach has prompted the cloud hosting provider to urge all users to rotate credentials stored on its platform. The warning follows suspicious activity involving systems that hold customer environment variables. Railway said an unauthorised third party may have accessed encrypted variables and obtained decrypted contents for some of them. However, investigators have…