GhostAction Strikes Again: 1,900 GitHub Accounts Breached in New Attack Wave
PremiumGhostAction campaign compromised ~1,900 GitHub accounts and attempted to extract secrets from thousands of repositories' CI.
§Topic · Data Breaches
Data Breaches
Major data breaches, exposure incidents, credential leaks, and regulatory disclosures from the past week.
All dispatchesToday
Burger King Japan Data Breach Impacts Millions of App Users
PremiumBurger King Japan breach exposed roughly 11.18 million app member records after unauthorized access to membership systems.
Data Breach at CenterPoint Energy Exposes Over 1 Million Texans' Personal Information
PremiumCenterPoint Energy breach exposed names, addresses, SSNs and driver license numbers of roughly one million Texas residents.
Historic Data Breach Hits UK Legal Aid Agency
PremiumLegal Aid Agency breach exposed records dating back to 1978, expanding scope to hundreds of thousands of historic records.
Wednesday, October 14
Monday, October 12
FBI Breach Exposes Security Patch Oversight
PremiumA third-party vendor failure to apply a security patch exposed sensitive FBI personnel information, prompting contractor removal.
Massive Data Breach at Nippon Columbia Compromises Millions of Records
PremiumMalware at contractor Nippon Columbia exposed 8.7 million customer and employee records, including personal data of karaoke fans.
GhostAction Attack Breaches Hundreds of GitHub Repositories to Steal Sensitive Data
PremiumGhostAction campaign used hijacked maintainer accounts to plant malicious workflows in 346 GitHub repos to steal CI/CD secrets.
AI Tools Exploited in Cyberattacks on South Korean Banks
PremiumAttacker used ARTEX AI and Claude agents to orchestrate attacks against South Korean banks, amplifying automation risk in breaches.
FBI Arrests Another ShinyHunters Member Amid Data Breach Probe
PremiumFBI announces another arrest tied to ShinyHunters breach that exposed FBI personnel data and job applicants' information.
AT&T Settles for $177 Million After Data Breaches Expose Millions
PremiumAT&T agreed to pay $177 million to settle lawsuits over two 2024 customer data breaches exposing personal details and call records.
Friday, October 9
ASOS Data Breach: Social Engineering and Credential Theft Uncovered
PremiumASOS links customer data exposure to social engineering that led to stolen employee credentials and unauthorized notifications to customers.
Cyber Attackers Breach ccTLDs to Forge Google Domain Certificates
PremiumAttackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates for several Google domains, enabling impersonation.
Oracle Health Data Breach Exposes Nearly 20 Million Records
PremiumOracle Health breach tally grows to nearly 20 million patient records, widening regulatory and remediation scope.
Wednesday, October 7
ATB Grocery Chain Faces Cyberattack as Hackers Threaten Data Exposure
Ukraine's ATB grocery chain confirms cyberattack with attackers threatening data leaks and extortion demands.
Critical Vulnerabilities in WordPress Plugins Lead to Security Breaches
Stored XSS in Ninja Forms and WPC Product Bundles exploited to install backdoors and create rogue WordPress admin accounts.
Frontline Education Data Breach Exposes Sensitive Information of K-12 Staff
Frontline Education breach exposed K-12 staff employee data from school district software provider.
AI Agents Suspected in Major South Korean Bank Hacks
South Korea believes AI-assisted tools were used in breaches exposing data for at least seven banks and 68,000 people.
Nikkei Employee Emails Compromised in Security Breach
Nikkei reports attackers breached employee Microsoft and Google accounts, using one to send thousands of phishing emails.
FBI Severs Ties with Contractor After Data Breach Reveals Security Lapse
FBI removed an Accenture contractor after a missed patch contributed to a ShinyHunters breach exposing bureau employee data.
Get these articles delivered to your inbox.
Subscribe free