Official Breach Notices
Not the claims of gangs: data breaches disclosed by organisations, regulators and verified records.
Operation Endgame
In May 2024, a coalition of international law enforcement agencies took down a series of botnets in a campaign they coined "Operation Endgame" . Data seized in the operation included impacted email addresses and passwords which were provided to HIBP to help victims learn of their exposure.
BRANDYWINE REALTY TRUST
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
pcTattletale
In May 2024, the spyware service pcTattletale suffered a data breach that defaced the website and posted tens of gigabytes of data to the homepage , allegedly due to pcTattletale not responding to a previous security vulnerability report. The breach exposed data including membership records, infected PC names, captured messages and extensive logs of IP addresses and device information.
Dota2
In July 2016, the Dota2 official developers forum suffered a data breach that exposed almost 2 million users . The hack of the vBulletin forum led to the disclosure of email and IP addresses, usernames and passwords stored as salted MD5 hashes.
The Post Millennial
In May 2024, the conservative news website The Post Millennial suffered a data breach . The breach resulted in the defacement of the website and links posted to 3 different corpuses of data including hundreds of writers and editors (IP, physical address and email exposed), tens of thousands of subscribers to the site (name, email, username, phone and plain text password exposed), and tens of millions of email addresses from thousands of mailing lists alleged to have been used by The Post Millennial (this has not been independently verified). The mailing lists appear to be sourced from various campaigns not necessarily run by The Post Millennial and contain a variety of different personal attributes including name, phone and physical address (depending on the campaign). The data was subsequently posted to a popular hacking forum and extensively torrented.
KEY TRONIC CORP
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
Tappware
In April 2024, a substantial volume of data was taken from the Bangladeshi IT services provider Tappware and published to a popular hacking forum . Comprising of 95k unique email addresses, the data also included extensive labour information on local citizens including names, physical addresses, job titles, dates of birth, genders and scans of government issued national identity (NID) cards.
BRANDYWINE REALTY TRUST
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
DROPBOX, INC.
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
MovieBoxPro
In April 2024, over 6M records from the streaming service MovieBoxPro were scraped from a vulnerable API. Of questionable legality, the service provided no contact information to disclose the incident , although reportedly the vulnerability was rectified after being mass enumerated.
Piping Rock
In April 2024, 2.1M email addresses from the online health products store Piping Rock were publicly posted to a popular hacking forum . The data also included names, phone numbers and physical addresses. The account posting the data had previously posted multiple other data breaches which all appear to have been obtained from the Shopify service used by the respective websites.
UNITEDHEALTH GROUP INC
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
T2
In April 2024, 95k records from the T2 tea store were posted to a popular hacking forum . Data included email and physical addresses, names, phone numbers, dates of birth, purchases and passwords stored as scrypt hashes.
Le Slip Français
In April 2024, the French underwear maker Le Slip Français suffered a data breach . The breach included 1.5M email addresses, physical addresses, names and phone numbers.
Frontier Communications Parent, Inc.
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
Giant Tiger
In March 2024, Canadian discount store Giant Tiger suffered a data breach that exposed 2.8M customer records . Attributed to a vendor of the retailer, the breach included physical and email addresses, names and phone numbers.
ORASURE TECHNOLOGIES INC
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
Salvadoran Citizens
In April 2024, nearly 6 million records of Salvadoran citizens were published to a popular hacking forum . The data included names, dates of birth, phone numbers, physical addresses and nearly 1M unique email addresses. Further, over 5M corresponding profile photos were also included in the breach.
Kaspersky Club
In March 2024, the independent fan forum Kaspersky Club suffered a data breach . The incident exposed 56k unique email addresses alongside usernames, IP addresses and passwords stored as either MD5 or bcrypt hashes.
boAt
In March 2024, the Indian audio and wearables brand boAt suffered a data breach that exposed 7.5M customer records . The data included physical and email address, names and phone numbers, all of which were subsequently published to a popular clear web hacking forum.
1.186 notices · page 23 / 60
Follow breach notices through the API
With a free API key you can take the same data into your dashboard, your scripts or your own application.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/breaches?source=kvkk"