Tag: data leak
38 articles
Fintech Firm Exposes Database Credentials in Shared Spreadsheet
A fintech firm's most sensitive secrets were left exposed in a shared spreadsheet, with a password that was embarrassingly simple - literally a combination of the company's name and the year. The shocking discovery was made by Stanislav Kazanov during a routine compliance audit, when he stumbled upon a widely accessible SharePoint folder containing a file ominously titled Prod_DB_Root_Creds_DO_NOT_SHARE.xlsx.
Checkmarx GitHub Data Leaked by LAPSUS$ Hackers
Checkmarx confirmed that hackers from the LAPSUS$ group breached its GitHub repository on March 23, 2026, and published stolen data on April 22, after a series of supply-chain and credential-theft events. The attackers used the access to publish malicious code to certain artifacts, compromising the integrity of Checkmarx's software development process.
Lovable Disputes Data Leak, Shifts Blame to HackerOne
Lovable, a coding platform, is facing scrutiny after a security researcher uncovered a major data leak, exposing users' sensitive information, including credentials, chat history, and source code, to anyone with a free account. The company's shifting explanations have only added fuel to the fire, sparking concerns about its data handling practices.
Vercel Discloses Credential Breach Tied to OAuth Mishandling
Vercel recently disclosed a credential breach affecting some customer credentials, which they attribute to an outside developer platform, Context.ai, citing an OAuth mishandling issue. The incident highlights the risks of complex authentication processes and the importance of secure credential management.
McGraw Hill Data Leak Exposes 13.5M Records After Salesforce Misconfiguration
McGraw Hill, a leading publisher of educational materials, recently suffered a significant data leak, exposing a staggering 13.5 million records due to a misconfigured Salesforce-hosted page. This alarming breach highlights the importance of robust data security measures, even for companies with a traditional focus like textbook publishing.
Ransomware Attacks Evolve to Exploit Stolen Data for Double Extortion
Ransomware attacks have taken a sinister turn, now using stolen data to blackmail victims into paying up - not just by encrypting their files, but by threatening to expose sensitive information to the world. This double extortion tactic adds a whole new level of pressure, forcing victims to weigh the cost of a data breach against the cost of a ransom.
FBI System Breach Exposes Sensitive Data
A major breach of an FBI system has sent shockwaves through the cybersecurity landscape, leaving organizations and individuals wondering if they're prepared for the worst. This alarming incident is just the latest in a string of high-profile hacks, including a data leak affecting 450,000 Lloyds records and a breach at the Dutch treasury.
Proton Mail Faces Alarming Data Leak to Authorities
Proton Mail, a popular encrypted email service, has faced a concerning data leak to authorities, raising questions about the balance between user privacy and cooperation with law enforcement. This recent revelation has sparked debate about the feasibility of upholding the fundamental human right to privacy in the digital age.
Critical ChatGPT Flaw Exposed Alarming Data Leak Vulnerability
A recent flaw in ChatGPT has exposed a startling vulnerability, allowing data to be secretly leaked through a clever technique - leaving users wondering if their conversations with AI are truly secure. This alarming discovery serves as a wake-up call for the industry, highlighting the urgent need for robust security measures in AI systems.
Legacy systems failing: Exclusive ministers vow no repeat
Ministers promise no repeat, but ageing, brittle IT and procurement shortcuts are slowing the fixes that would stop another life‑threatening leak — read on to see why promises need firm deadlines and measurable progress.
5M Records Exposed Exclusive: Severe Auto Insurance Leak
Heads up: an unsecured database exposed more than 5 million auto-insurance records—names, policy numbers, VINs and claims—available to anyone with a link. That makes drivers prime targets for phishing, fake claims and identity theft, and could spell major legal and reputational headaches for insurers.
5M Records Exposed: Exclusive Alarming Auto Insurance Leak
Over 5 million auto insurance records — including names, policy numbers, VINs and claims histories — were left publicly accessible by a simple cloud misconfiguration, turning routine paperwork into a roadmap for fraud. Find out how it happened and what you can do now to protect your privacy.
Trinity of Chaos ransomware: Stunning, Risky Data Leak
A fledgling ransomware group, Trinity of Chaos, has launched a TOR-only data leak site claiming files from 39 companies — a stark reminder that double-extortion attacks still threaten organizations of every size and can pull major vendors into the spotlight.
Saint Paul data Stunning Massive Leak Risky Fallout
Imagine the city you trust to protect your records suddenly airing them online — that’s what happened when the Interlock ransomware gang published an alleged 43GB cache from Saint Paul, triggering a state of emergency. Residents now deserve clear answers about what was exposed, how they’ll be protected, and what steps will stop this from happening again.