CenterPoint Energy Data Breach Exposes Millions of Customer Records
CenterPoint Energy confirms breach and alleged theft of 7.5 million customer records after dark web posting by attacker.
§Topic · Data Breaches
Data Breaches
Major data breaches, exposure incidents, credential leaks, and regulatory disclosures from the past week.
All dispatchesWednesday, September 16
Monday, September 14
Massive Phishing Campaign Targets Trezor Users After Brevo Security Breach
PremiumBrevo compromise led to phishing emails targeting 347,000 Trezor-related addresses; 2,500 users clicked malicious links.
Security Breach: Exploiting JFrog Artifactory Flaws for Admin Control
PremiumAttackers chained JFrog Artifactory flaws to gain admin control and plant backdoor malware on self-hosted servers.
Friday, September 11
Trezor Alerts Users to Phishing Risks After Email Provider Breach
PremiumTrezor warns that a third-party email provider breach enabled phishing targeting wallet users to steal credentials and funds.
Phishing Campaign Exploits Passkey Themes to Breach Microsoft 365 Accounts
PremiumAttackers use passkey-themed social engineering to hijack Microsoft 365 accounts, bypassing MFA and exfiltrating cloud data.
AI-Driven Cyber Attack Compromises Hundreds of PaperCut Instances
PremiumActor used hundreds of AI agents to craft exploits for PaperCut NG/MF flaws and breached over 440 vulnerable instances.
Massive Data Breach Exposes 153 Million Driver's Licenses
PremiumIDScan confirms breach linked to 153 million driver's license scans, raising large-scale identity and fraud risks.
Wednesday, September 9
Florida DMV Database Breach Exposes Sensitive Driver Records
ShinyHunters claims to have breached Florida's DAVID DMV database, stealing over 200,000 driver records for extortion.
Mathspace Data Breach Compromises Over One Million Individuals
Hackers stole student, teacher, staff and guardian records from Mathspace's self-hosted Metabase instance, exposing over 1 million people.
Monday, September 7
AI-Driven Attack Breaches Enterprise Network with Unprecedented Speed
PremiumHuman operator using frontier AI models breached an enterprise network and stole root credentials in under 10 hours.
Massive Breaches Expose Millions of Sensitive Records in North America
PremiumVulnerable U #184 covers massive driver's license breach, McKesson breach, TeamPCP OSINT findings and more.
JetBrains Urges Immediate Action After TeamCity Exploit Breach
PremiumUnpatched TeamCity led to a breach exposing AWS credentials; immediate secret rotation and patching urged.
Friday, September 4
Massive Data Breach Hits Manchester Airports Group, Exposing Millions
PremiumFulcrumSec published roughly 550GB of Manchester Airports Group data after MAG refused a ransom demand, exposing passenger records.
Massive Data Breach at Aesto Exposes Health Records of 9.5 Million Individuals
PremiumAesto data breach leaked sensitive health information of more than 9.5 million people, reported to regulators after discovery.
Massive Data Breach Exposes 153 Million Driver's Licenses
PremiumScans of 153 million US and Canadian driver's licenses are being sold on the dark web, risking large-scale identity fraud.
Thomson Reuters C-Track Breach Compromises Sensitive Court Records
PremiumThomson Reuters disclosed a C-Track breach exposing sealed court data and PII across US and Canadian jurisdictions.
Wednesday, September 2
Nutex Health Faces Data Breach by Notorious Ransomware Group
Ransomware group claims Nutex Health breach; SEC filing says patient, employee, provider, business, and financial information accessed.
PaperCut Vulnerabilities Exploited for Data Breaches Before Patches Released
PaperCut NG/MF zero-day vulnerabilities were exploited in-the-wild to steal data before emergency patches were released.
McKesson Faces Data Breach as ShinyHunters Claims Responsibility
McKesson investigates a data-theft extortion incident after ShinyHunters claimed to steal roughly 284 million records.
Get these articles delivered to your inbox.
Subscribe free