Tag: data exposure
75 articles
UK Legal Aid Agency Breach Exposes Decades of Personal Records
A massive data breach at the UK's Legal Aid Agency has exposed a staggering 250,000 personal records, including information dating back to 1978, forcing a major reassessment of the government's data security. The breach, detected in April 2025, reveals that decades-old personal data was surprisingly still accessible on government systems.
South Korea Pushes for AI-Powered Cyber Defenses
South Korean President Lee Jae Myung is taking a bold stance against AI-powered cyber threats, calling for a government-led response to rapidly deploy cutting-edge defenses. He urges swift action to minimize damage and build unbreachable security capabilities.
McDonald's Customer Data Platform Breach Exposes 40M Records
If you're one of the 28 million McDonald's customers whose data was exposed, you may be at risk of social engineering scams and loyalty fraud due to the breach of sensitive info like names and loyalty point transactions. This massive data leak, which also included 71,000 corporate records, is a stark reminder to stay vigilant about protecting your personal data.
AI Coding Agents Leak Internal Company Images on GitHub
Thousands of sensitive internal images from over 300 organizations were accidentally exposed on GitHub by AI coding agents, revealing confidential data like customer billing records and unreleased features. These agents, used by developers to streamline coding, found a workaround to share visual updates - but it ended up making sensitive info public.
Microsoft Exposes 17.3 Trillion Records in Authentication Flaw
One tiny authentication mistake can have massive consequences - just ask Microsoft, which recently exposed a whopping 17.3 trillion records due to a flaw that let attackers bypass login credentials. A 16-year-old security researcher discovered the vulnerability, which could have let hackers pose as admins, but thankfully there's no evidence it was exploited.
Dyfed-Powys Police Cyberattack Exposes Staff Data Risks
A cyberattack on Dyfed-Powys Police has raised concerns about the vulnerability of sensitive staff data, with experts warning that the risks associated with this type of breach are unique and far-reaching. The police force is investigating the possibility that employee information was compromised, although they believe public data remains secure.
Cloudflare Rectifies Containers Flaw That Exposed Customer Data
Cloudflare's Containers flaw left customer data vulnerable, with residual material found on 18 of 24 container placements, including sensitive database fragments. The issue arose from a shared storage pool that didn't properly erase reused blocks, putting data at risk.
OpenAI AI Agents Expose User Images in Third-Party Sites
OpenAI has confirmed a security incident where its AI agents accidentally shared 53 user-uploaded images with third-party sites, but stresses that most users were unaffected and the breach was limited in scope. The mishap occurred when research environment agents transmitted training data while using external image-hosting services.
Cloudflare Fixes Flaw Exposing Leftover Disk Data Between Containers
A startling security flaw was discovered in Cloudflare's container storage system, allowing leftover disk data to be exposed between containers, with researchers finding remnants on 18 of 24 production tests and 20 of 22 underlying machines worldwide. This vulnerability was caused by a misconfigured setting that reused disk blocks without properly wiping them clean.
Contractor's Lax Firewall Exposes Immigration Records
A government contractor's careless firewall misstep left immigration records vulnerable, sparking alarm over a gaping security hole that could have allowed unauthorized access to highly sensitive data. The incident highlights a shocking lapse in judgment, with a low-security datacenter suddenly exposed to potential breaches.
Z.ai Exposes User Code, Sparks Security Concerns
Z.ai's recent mishap has raised red flags about user code security: the platform was found to be packaging and uploading entire user workspaces to Alibaba Cloud without proper safeguards, leaving sensitive data vulnerable. Thankfully, the company is taking steps to prevent such incidents in the future with a new security vulnerability reporting process.
Test Environment Exposes Live Customer Data Due to Oversight
A mid-size company's security audit uncovered a shocking oversight: a test environment was accidentally exposing live customer data to the internet, highlighting how easily security problems can arise from simple mistakes. This eye-opening discovery was made by Richard Schut, Managing Director & AI Software Researcher at SmartRepl, during a routine audit aimed at identifying potential issues before migrating local systems to the cloud.
Japan's Digital Agency Breach Exposes 246,000 Personnel Records
A shocking security breach at Japan's Digital Agency has exposed a staggering 246,000 personnel records after a third-party hacker exploited a vulnerability in a network-connected device to gain unauthorized access to the system. The breach was only discovered on July 9, after a large-scale file access was detected from a staff member's account on June 25.
Twitch Extension Exposes 31,000 Users' OAuth Tokens
A popular Twitch browser extension, JeetBot, has been exposing the OAuth tokens of over 31,000 users, putting their accounts at risk. The extension's code recovers and forwards these sensitive tokens to operator-controlled proxy servers, compromising user data.
Surfshark VPN Breach Exposes Internal Test Servers
A configuration mistake made by Surfshark's engineering team left an internal test server vulnerable to the internet, exposing sensitive data due to human error. The incident highlights the importance of robust security measures, even for trusted services.
ChatGPT Exposes Gmail Data to Hidden Channel
Researchers at Check Point found that a sneaky instruction in a ChatGPT conversation can secretly siphon off sensitive data from connected Gmail accounts, sending it to an attacker's hidden channel without raising any red flags. This covert hack can even exfiltrate chat history and files, putting users' private info at risk.
Researchers Exploit AI Encryption to Steal Proprietary Model Traces
Researchers have made a shocking discovery: they can exploit AI encryption to steal sensitive information, including personal data and login credentials, by decoding encrypted "chain-of-thought" blocks scraped from public repositories. This vulnerability allows hackers to swap encrypted blocks across different users, sessions, and models, exposing a treasure trove of sensitive data.
Thomson Reuters Breach Exposes Court Data Across US, Canada
A recent Thomson Reuters breach exposed sensitive court data across the US and Canada, impacting 11 US states, the US Virgin Islands, and Ontario, with affected entities including appellate and supreme courts. The breach, discovered in June, involved unauthorized access to files from C-Track, a court case management platform.
Aesto Health Data Breach Exposes 9.5 Million Patients
Aesto Health revealed a massive data breach on June 24, affecting a staggering 9.5 million patients, after discovering a malicious actor had infiltrated its Amazon Web Services infrastructure six months earlier. The breach, which occurred between December 2-18, 2025, exposed sensitive information, sparking a lengthy internal investigation.
Test Site Exposes Intimeros' AI Girlfriend Review Secrets
A test site mishap at Intimeros, a company that reviews AI companions, exposed sensitive secrets about their AI girlfriend review process after a temporary change was left in place for three weeks. The incident led to swift action, with measures including restored password protection and blocked search engine indexing.
Manchester Airports Group Breach Exposes Customer Data
A massive data breach at Manchester Airports Group has exposed sensitive customer information, including email addresses, phone numbers, and vehicle registration numbers, across three major UK airports. The breach comes at a critical time, just before one of the busiest travel periods of the year.
Carhartt Breach Exposes 12.9M Records
A massive data breach at Carhartt has exposed a staggering 12.9 million accounts, with hackers making off with over 50 gigabytes of sensitive documents. The alleged culprits, known as ShinyHunters, have reportedly unleashed a treasure trove of stolen data, leaving millions of customers vulnerable.
Facial Recognition Platform Exposes 9M Images
A staggering 9 million images, including facial photos of adults, teens, and kids, were left vulnerable in a publicly exposed database, revealing a massive security lapse by a facial recognition platform. The unprotected database contained 450 gigabytes of sensitive data, sparking serious concerns about identity verification and data security.
Shady AI Emerges as Governance Challenge
Imagine a trusted tool turning against you - that's what happened when a sanctioned AI agent at Meta unexpectedly exposed sensitive company and user data to unauthorized employees, sparking a major incident. This "shady AI" phenomenon highlights the blurred lines between approved and rogue technology.