Resmî İhlal Bildirimleri
Çetelerin iddiaları değil; kurumların, düzenleyicilerin ve doğrulanmış kayıtların açıkladığı veri ihlalleri.
Sport 2000
In April 2024, the French sporting equipment manufacturer Sport 2000 announced it had suffered a data breach . The data was subsequently put up for sale on a popular hacking forum and included 4.4M rows with 3.2M unique email addresses alongside names, physical addresses, phone numbers, dates of birth and purchases made by store name.
Traderie
In September 2022, the in-game trading marketplace Traderie suffered a data breach that exposed almost 400k records (this preceded a subsequent breach the following year). The incident exposed email and IP addresses, usernames and links to social media profiles.
Tracki
In August 2024, a slew of security vulnerabilities were identified with a conglomerate of online services which included the GPS tracking service Tracki . Multiple vulnerabilities exposed the personal records of 372k users of the service including names and email addresses.
Explore Talent (August 2024)
In August 2024, a slew of security vulnerabilities were identified with a conglomerate of online services which included the talent network Explore Talent . A vulnerable API exposed the personal records of 11.4M users of the service of which 8.9M unique email addresses were provided to HIBP. This incident is separate to the Explore Talent breach which occurred in 2022 and was loaded into HIBP in July 2024.
Chris Leong
In August 2024, the website of Master Chris Leong "a leading Tit Tar practitioner in Malaysia" suffered a data breach . The incident exposed 27k unique email addresses along with names, physical addresses, dates of birth, genders, nationalities and in many cases, links to Facebook profiles. The company did not respond when contacted about the breach.
LDLC
In March 2024, French retailer LDLC disclosed a data breach that impacted customers of their physical stores . The data was previously listed for sale on a popular hacking forum and contained 1.26M unique email addresses along with names, phone numbers and physical addresses.
Shadow
In September 2023, the cloud gaming provider Shadow suffered a data breach that exposed over half a million customer records . The data included email and physical addresses, names and dates of birth.
Not SOCRadar
In August 2024, over 332M rows of email addresses were posted to a popular hacking forum. The post alleged the addresses were scraped from cybersecurity firm SOCRadar, however an investigation on their behalf concluded that "the actor merely utilised functionalities inherent in the platform's standard offerings, designed to gather information from publicly available sources" . There is no suggestion the incident compromised SOCRadar's security or posed any risk to their customers. In total, the data set contained 282M unique addresses of valid email address format.
BASSETT FURNITURE INDUSTRIES INC
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
KEY TRONIC CORP
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
Shoe Zone
In June 2024, the UK footwear chain Shoe Zone disclosed a data breach that was subsequently posted for sale on a popular hacking forum . The data included over 100k orders containing names, addresses, partial credit card numbers (card type and last 4 digits), and 46k unique email addresses.
SONIC AUTOMOTIVE INC
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
LuLu
In July 2024, the Emirati-based LuLu retail store suffered a data breach . The impacted data included 190k email addresses and associated phone numbers which were subsequently shared on a popular hacking forum. The following month, the threat of leaking the full database was carried out and a backup from October 2022 with a further 2.6M unique email addresses appeared. This data also included names, physical addresses, orders and PBKDF2 password hashes.
Multiplayer.it
In April 2024, over half a million records taken from the Italian gaming website Multiplayer.it were posted to a popular hacking forum . The impacted data included email addresses, usernames and salted MD5 password hashes. Multiplayer.it subsequently confirmed the breach dated back 6 years to September 2018 and was merely re-posted in 2024.
Stealer Logs Posted to Telegram
In July 2024, info stealer logs with 26M unique email addresses were collated from malicious Telegram channels . The data contained 22GB of logs consisting of email addresses, passwords and the websites they were used on, all obtained by malware running on infected machines.
META MATERIALS INC.
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
AnimeLeague
In July 2024, AnimeLeague disclosed a data breach of their services . The data was posted for sale on a popular hacking forum and included 2 databases covering both event registration records and a dump of the phpBB bulletin board. The impacted data included passwords in various hashed formats including SHA-1, salted md5 and bcrypt, as well as usernames, private messages, dates of birth, purchases and 192k unique email addresses.
Cencora, Inc.
Material cybersecurity incident disclosed to the U.S. Securities and Exchange Commission under Form 8-K Item 1.05.
Ubook
In July 2024, 700k unique email addresses from the audiobook platform Ubook were posted to a popular hacking forum . Allegedly scraped from the service, the data appears to be sourced from the Ubook Exchange (UBX) and also includes names, genders, dates of birth and links to profile photos.
Spytech
In July 2024, spyware maker Spytech suffered a data breach that exposed data collected as recently as the previous month . Designed to "invisibly record everything users do", the breach exposed information related to both purchasers and targets of the product. Target data collection (and subsequent exposure) included the infected computer name, browsing history, applications used, usernames of authenticated users, keywords being monitored, file operations (creation and deletion), computer usage times and email addresses, often captured within the spyware's logs. The data also included the names, purchases and md5 password hashes of purchasers.
1.184 bildirim · sayfa 21 / 60
İhlal bildirimlerini API ile izleyin
Ücretsiz API anahtarıyla aynı veriyi panonuza, betiklerinize veya kendi uygulamanıza alabilirsiniz.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/breaches?source=kvkk"