Category: Data Breaches
-
CenterPoint Energy has confirmed that an attacker stole personal information belonging to some of its customers. The utility company launched an investigation after a threat actor claimed to possess 7.49 million customer records. However, CenterPoint has not confirmed how many people the breach affected or exactly what information the attacker accessed. Utility Confirms Theft of…
-
Japan’s Digital Agency says attackers may have exposed around 246,000 rows of personnel data after exploiting a vulnerability in a government VPN device. The affected information includes names, email addresses, telephone numbers and physical addresses. The agency has found no evidence that criminals misused the exposed data. However, it warned affected individuals about an increased…
-
Revolut has disclosed a data breach after sending sensitive customer information to an attacker impersonating a government agency. The exposed records include identity documents, facial verification images, account statements and complete transaction histories. The fintech company said the incident affected a very limited number of customers. However, it has not revealed the exact figure. Attacker…
-
Revolut disclosed sensitive customer information to scammers who impersonated a government agency, the financial technology company has confirmed. The attackers reportedly used an email address on a legitimate government domain to submit fraudulent data requests. The exposed information may include identity documents, verification selfies and complete transaction histories. However, Revolut said the incident affected only…
-
The Cl0p cybercrime gang claims it stole 270GB of internal data from Harley-Davidson during its latest extortion campaign. The group has published a torrent link for the files, although the motorcycle manufacturer has not confirmed a data breach. Initial findings suggest the alleged Harley-Davidson data breach may connect to Cl0p’s campaign against organisations using PTC…
-
Surfshark has disclosed a security incident involving an internal test server and a separate proxy system. According to the VPN provider, a configuration error left the testing environment accessible from the internet. An unauthorized party then entered the server and accessed internal information. The exposed material included service configurations, build-related credentials, parts of system binaries…
-
IDScan has confirmed that an unauthorized party accessed customer information held on its cloud platform. The disclosure follows reports linking the company to a database containing more than 153 million driver’s license scans. The identity verification provider discovered the incident around September 1, 2026. It then published a security notice on September 4. According to…
-
The ShinyHunters extortion gang claims it breached Florida’s Driver and Vehicle Information Database. The group says it stole more than 200,000 records containing sensitive information about drivers. The alleged Florida DMV breach has not yet received official confirmation. However, the attackers published a screenshot that appeared to show a record from the database as evidence.…
-
Online learning platform Mathspace has disclosed a major data breach affecting more than one million students, parents, guardians and staff members. Attackers stole the information after compromising the company’s internal reporting system. The incident affected 1,079,819 people in Australia and New Zealand. However, Mathspace said the attackers did not obtain passwords, authentication credentials or academic…
-
Cryptocurrency hardware wallet maker Trezor says a breach at shipping provider ShipMonk has exposed information belonging to 81,000 customers. The total increased after the company discovered that another 67,000 US customers were affected. Trezor initially reported the incident on August 13. At that point, the company believed attackers had accessed the personal information of almost…