Category: Data Breaches
-
A Capcom data breach has exposed email addresses and account information belonging to more than 11.7 million CAPCOM ID accounts. The Japanese gaming company confirmed that attackers accessed its membership service and changed login passwords on 196 accounts. Most exposed records contained email addresses and account activity details. However, a small group also had personal…
-
The 302.ai data leak exposed 17.6 million files containing AI conversations, generated media and business documents. Researchers discovered 22.72TB of information in a publicly accessible Azure storage bucket belonging to the AI aggregation service. The company removed public access after researchers reported the exposure. However, the available findings do not establish how long the files…
-
The Onamae Desktop Cloud breach may affect up to 26,739 customer servers after attackers accessed the Japanese provider’s infrastructure. The company confirmed that an unauthorized third party installed malicious programs in some customer environments. In response, the provider began progressively shutting down customer servers at 4 a.m. Japan time on October 21. The interruption covers…
-
The latest Nikkei data breach exposed 1.83 million records after attackers used stolen credentials to access a development system. It marks the Japanese media group’s third cybersecurity disclosure in approximately a month. According to Nikkei, 150,000 records contained identifying information, while the remaining 1.68 million contained no identifiers. The company also said the incident did…
-
The OpenCode API breach has exposed stored credentials belonging to some users who connected external AI providers to its Console. Affected developers reported unauthorized usage charges, while others said Google suspended their cloud projects after detecting suspicious activity. According to OpenCode, the incident affected 1.4% of Console users. The project linked the breach to a…
-
The ConnectWise breach has compromised more than 300 organizations after attackers stole credentials for its Cloud Backup service. The incident exposed Microsoft 365 environments to unauthorized access, potentially putting emails, documents and directory information at risk. Huntress detected suspicious sign-in activity across nearly 1,000 Microsoft Entra customer accounts, including more than 300 successful intrusions. However,…
-
The California student data breach has exposed personal and educational information belonging to millions of current and former public school students. Attackers used a compromised login to access files held by Educational Testing Service (ETS), a contractor responsible for statewide assessments. California’s Department of Education (CDE) announced the incident on October 16. According to the…
-
The Burger King breach in Japan has exposed 11.18 million customer records after attackers accessed a system containing smartphone app membership data. The compromised information included personal details, contact information and order histories. Burger King Japan confirmed the leak following an investigation that concluded on October 13. According to the company, unauthorized access occurred between…
-
The Legal Aid Agency breach exposed records dating back to 1978, according to new findings from the UK government agency. Further analysis identified approximately 250,000 stolen records from before 2007, extending the known historical scope of the attack. Attackers breached the agency’s IT systems in April 2025. Investigators initially identified stolen applicant and recipient information…
-
H&M is investigating allegations that ShinyHunters accessed internal databases containing logistics, inventory and sales information. However, the H&M breach claims remain unverified, and the retailer says it has found no indication that attackers compromised its data environment. The fashion group acknowledged online allegations involving a potentially limited portion of its data. It is now assessing…