LEAKPhoto: The National Archives (UK) / Wikimedia Commons (CC BY 3.0)Data Leaks_
Exposed chat logs, training data and API keys
LEAKEMAILArara email service breach exposed more than 1 million Osaka addresses
The City of Osaka said a data breach involving a third-party technology provider exposed more than 1 million email addresses tied to its online administrative services platform.
LEAKDATAMaersk data extraction from acquired legacy system under investigation
Maersk disclosed unauthorized access and data extraction from a local legacy system on Nov 11, with claims about data taken still unverified.
LEAKAISECClaude Code command saved credentials to public Git repos, report says
A Claude Code command saved credentials and sensitive files to public Git repositories, Dark Reading reported. Glow Labs disclosed related research on Oct 16.
LEAKAIUSERailway attack exposed customer variables and enabled unauthorized AI usage
Railway said an October attack exposed variables in at most 1.85% of workspaces. Railway estimated unauthorized AI usage from stolen keys at about $740,000. It published its incident report Nov 10.
LEAKAISECFireworks disclosed customer data access after October incidents
The Record reported that hackers gained access to internal Fireworks data, billing information, invoices, payment history, datasets and other AI-related data. Fireworks said a limited number of customer accounts were affected. Fireworks published its report Oct 10, 2026.
LEAKDATAIris Plaza data exposure could affect 7.7 million people
Iris Ohyama disclosed possible exposure of Iris Plaza personal information affecting about 7.7 million people, BleepingComputer reported. The company published its report on Nov 5, 2026.
LEAKWEB3AUTHKeplr wallets hit by Web3Auth flaw as funds moved to recovery wallets
Keplr alerted users on Nov 7 after detecting unauthorized transactions on accounts created with Google or Apple, Cointribune reported.
LEAKDATAFlorida Department of Education reports access to financial aid site
Florida Department of Education said unauthorized access to its financial aid website may have affected approximately 4.9 million people. Staff discovered the incident on Oct 19.
LEAKBANKCrédit Mutuel Arkéa says supplier compromise enabled account transfers
Crédit Mutuel Arkéa said attackers used its account for transfers after compromising a supplier. ZachXBT estimated losses above $133 million.
LEAKATTACKRosstat confirms cyberattack claimed by Cyber Partisans and Silent Crow
Rosstat said it found no evidence that protected information was leaked or its databases compromised.
LEAKCRYPTOBinance wallets lost $6.36 billion as funds were frozen
An attacker moved about $6.36 billion from Binance wallets across ten blockchains, while platforms froze about $2.67 billion in stablecoins.
LEAKBREACHGMO Internet Group reward program follows Onamae.com Desktop Cloud breach
GMO Internet Group opened a reward program offering up to $1 million after attackers breached its Onamae.com Desktop Cloud service, The Hacker News reported.
LEAKBREACHETS breach exposed California student information over months
The Record reported that exposed records included student names, birth dates, addresses, schools, districts and grade levels.
LEAKKEYSOpenCode Console breach could expose provider keys
An intruder reached a legacy OpenCode system and may have exposed provider keys saved in Console. OpenCode said the affected group was 1.4% of Console users.
LEAKDATALegal Aid Agency confirms 250,000 pre-2007 records exfiltrated
The Legal Aid Agency confirmed that about 250,000 pre-2007 records and probation data were exfiltrated in the Apr 23, 2025 cyberattack. The update was published Oct 14, 2026.
LEAKDATADodo Pizza attack leads to detention of three suspected DataSuckers
Three suspected DataSuckers members were detained after a cyberattack on Dodo Pizza exposed customer information, The Record reported.
LEAKDATAiRhythm cyberattack breached data of at least 360,000 people
iRhythm said the data of at least 360,000 people was breached in a June cyberattack, and that the incident occurred on June 8 and involved unauthorized access to third-party systems.
LEAKRANSOMMonsterCloud owner charged over alleged secret ransomware payments
The Justice Department said MonsterCloud owner Zohar Pinhasi was arraigned on wire fraud charges over alleged false claims that he could decrypt ransomware without paying cybercriminals.
LEAKATBATB confirms cyberattack after DataSuckers extortion demand
ATB confirmed on Oct 5 that it was hit by a cyberattack after DataSuckers demanded $400,000 and threatened to publish customer data, The Record said.
LEAKPHIClover Health and AngMar report breaches affecting 250,000 people
Clover Health Investments and AngMar Management Services reported separate healthcare breaches affecting more than 250,000 people, SecurityWeek reported.
LEAKAISECOpenAI says it parted ways with three people over sensitive-information policies
OpenAI said it parted ways with three individuals for violating its policies on accessing and handling sensitive company information.