C/CONATION SECURITY
EnglishCMS

UNIFIED INTELLIGENCE CORPUS

Одно событие. Все материалы.

Уязвимости, патчи, атаки, утечки, исследования и репринты — связанные в единое досье, без потери первоисточника.

30событий
Сбросить
leak_incident
GLOBALЗаявление1 документов

[medusalocker]

DSV provides logistics, transportation, and supply chain services, including sea, air, and road freight as well as warehousing and customs services.

Покрытие: 1global-ransomware-live
leak_incident
GLOBALЗаявление1 документов

[bravox]

Workforce Development, Vocational Training and Employment Solutions.

Покрытие: 1global-ransomware-live
leak_incident
GLOBALЗаявление1 документов

[Dark Project]

About MTM&O Gold Refinery DMCC MTM&O Gold Refinery DMCC is one of the largest refineries in the region and is a leader in terms of customer service, reliability, efficiency and quality. As a result of a hacker attack on one of the region’s largest gold refineries, documents were stolen. These included employee passports and other documents, as well as the company’s know-how and technologies, and confidential information totaling more than 43 GB.

Покрытие: 1global-ransomware-live
leak_incident
GLOBALЗаявление1 документов

[Dark Project]

About Bear Valley Community Hospital Bear Valley Community Healthcare District offers a wide range of emergency medical and healthcare services in Big Bear Valley, including urgent care, family health, and specialized medical treatments. Their services encompass various fields such as cardiology, behavioral health, rehabilitation, and dental care, catering to patients of all ages. The organization aims to provide high-quality healthcare regardless of insurance status, ensuring accessibility for the community. A Bear Valley Community Hospital suffered a cyberattack leading to the theft of over 400 GB of sensitive data. As a result of the data breach, employee data, the company’s confidential financial information, bank documents, patients’ personal documents, Social Security numbers, medica

Покрытие: 1global-ransomware-live
leak_incident
GLOBALЗаявление1 документов

[play]

United States

Покрытие: 1global-ransomware-live
leak_incident
GLOBALЗаявление1 документов

[play]

United States

Покрытие: 1global-ransomware-live
leak_incident
GLOBALЗаявление1 документов

[play]

United States

Покрытие: 1global-ransomware-live
leak_incident
GLOBALЗаявление1 документов

[SilentRansomGroup]

A&O Shearman is a global law firm formed in 2024 through the merger of Allen & Overy and Shearman & St…

Покрытие: 1global-ransomware-live
leak_incident
GLOBALЗаявление1 документов

[SilentRansomGroup]

Redacted entry - full company name pending disclosure (FULL DATA TIMER active).

Покрытие: 1global-ransomware-live
leak_incident
GLOBALЗаявление1 документов

[HYFLOCK]

https://www.tcadarwin.com.au is the official website of TCA Accountants & Bookkeepers, a firm based in Darwin, Northern Territory, Australia. The company is a reputable and innovative professional accounting, tax, and business growth advisory firm in the local area. The following is a detailed introduction to the company: Company Overview Year established: 2011. Founders: Co-founded and operated by George Giannikouris and Sarah Giannikouris. George has more than ten years of experience in the tax and accounting industry. Positioning: Committed to becoming the preferred financial and accounting services partner for local Northern Territory residents and small and medium-sized enterprises (SMEs), with the core message of “helping clients work smarter and free up more time to do what they lov

Покрытие: 1global-ransomware-live
leak_incident
GLOBALПодтверждено1 документов

AfD

In September 2026, the German political party Alternative für Deutschland (AfD) suffered a data breach which exposed 345k unique email addresses. The following month, hundreds of gigabytes of data containing hundreds of thousands of emails and attachments was published online, with searchable AI-generated summaries and downloadable original files. An analysis of the incident reported that the breach was detected as early as 9 September, with a subsequent intrusion occurring five days later. In its public statement, AfD attributed the breach to an attack on a hosting provider, identified in subsequent reporting as the party-owned Alternita Dienstleistungs GmbH.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Alcon

In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly sourced from Alcon containing 218k unique email addresses along with other largely corporate B2B contact fields, including name, phone number and physical address.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

7-Eleven

In April 2026, 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters, with the data later published that month. The incident exposed 185k unique email addresses, along with names, physical addresses, dates of birth and phone numbers. A small number of records also contained additional exposed data fields. The company later advised the breach was limited to "certain 7-Eleven systems used to store franchisee documents", a statement consistent with the exposed data.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Addi

In March 2026, the Colombian fintech company Addi identified unauthorised activity on its platform and advised customers that "it is possible that your personal information may have been compromised". The "pay or leak" extortion group ShinyHunters subsequently claimed responsibility and published a large trove of personal data allegedly obtained from Addi. The data included 34M unique email addresses from credit scoring requests, credit bureau records, customer identity records and email validation logs. It also contained government issued IDs (Cédula de Ciudadanía), estimated income, socioeconomic levels, purchases and other credit-related data points.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Abrigo

In April 2026, the fintech software company Abrigo was targeted in a "pay or leak" extortion attempt by the ShinyHunters group. Shortly after, data allegedly taken from the company's Salesforce instance was published publicly and contained over 700k unique email addresses belonging to both Abrigo staff and external contacts. Whilst separate from Abrigo's Salesforce compromise via the Drift application connector the previous year, the data fields described in that incident are consistent with the ShinyHunters data, namely that it was "business contact information" including "institution name, employee name, email addresses, and phone numbers".

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Aman

In April 2026, the ultra-luxury hotel brand Aman was named by ShinyHunters as the target of a "pay or leak" extortion campaign, with the data allegedly obtained from their Salesforce CRM. The data was subsequently leaked publicly and contained over 200k unique email addresses. Whilst not present on all records, the data also included genders, physical addresses, phone numbers, nationalities, dates of birth, spouse names and VIP status codes.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

ADT

In April 2026, home security firm ADT confirmed a data breach by ShinyHunters, which listed the company on its website as part of a "pay or leak" extortion attempt. The breach impacted 5.5M unique email addresses along with names, phone numbers and physical addresses. ADT also advised that "in a small percentage of cases, dates of birth and the last four digits of Social Security numbers or Tax IDs were included" and that it had contacted all affected people.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Добавить

В марте 2025 года данные, якобы взломанные от службы жилищных обществ ADDA, были размещены на публичном хакерском форуме. Данные содержали более 1,8 млн уникальных адресов электронной почты вместе с именами, номерами телефонов и хэшами паролей MD5.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Адвокат

В феврале 2025 года появились данные, полученные от предыдущего нарушения Adpost.В наборе данных содержалось 3,3 млн записей, включая адреса электронной почты, имена пользователей и имена дисплея.Adpost позже опубликовал уведомление о раскрытии информации и посоветовал, что они были вынуждены обновить учетную запись, среди других действий.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Allianz Life

In July 2025, Allianz Life was the victim of a cyber attack which resulted in millions of records later being leaked online. Allianz attributed the attack to "a social engineering technique" which targeted data on Salesforce and resulted in the exposure of 1.1M unique email addresses, names, genders, dates of birth, phone numbers and physical addresses.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

ALIEN TXTBASE Stealer Logs

In February 2025, 23 billion rows of stealer logs were obtained from a Telegram channel known as ALIEN TXTBASE. The data contained 284M unique email addresses alongside the websites they were entered into and the passwords used. This data is now searchable in HIBP by both email domain and the domain of the target website.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Adopt Me Trading Values

In July 2022, the Adopt Me Trading Values website for assessing the value of pet trades within the "Adopt Me!" Roblox game suffered a data breach that was later redistributed as part of a larger corpus of data. The breach exposed 86k unique email addresses along with usernames (and Roblox usernames), IP addresses and bcrypt password hashes.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

1win

In November 2024, the online betting platform 1win suffered a data breach that exposed 96M users. The exposed data included email and IP addresses, phone numbers, dates of birth, country and SHA-256 password hashes.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

9Lives

In October 2014, the (now defunct) Belgian gaming news forum 9Lives suffered a data breach that was later redistributed as part of a larger corpus of data. The breach exposed 109k unique email addresses along with usernames and salted MD5 password hashes.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Altenen

In June 2022, the malicious "carding" (referring to credit card fraud) website Altenen suffered a data breach that was later redistributed as part of a larger corpus of data. The data included 1.3M unique email addresses, usernames, bcrypt password hashes and cryptocurrency wallet addresses.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

AlpineReplay

In 2019, the snow sports tracking app AlpineReplay suffered a data breach that exposed 900k unique email addresses. Later rolled into the Trace service, the breach included names, usernames, genders, dates of birth, weights and passwords stored as either unsalted MD5 or bcrypt hashes.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Advance Auto Parts

In June 2024, Advance Auto Parts confirmed they had suffered a data breach which was posted for sale to a popular hacking forum. Linked to unauthorised access to Snowflake cloud services, the breach exposed a large number of records related to both customers and employees. In total, 79M unique email addresses were included in the breach, alongside names, phone numbers, addresses and further data attributes related to company employees.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Acuity

In mid-2020, a 437GB corpus of data attributed to an entity named "Acuity" was created and later extensively distributed. However, the source could not be confidently verified as any known companies named Acuity. The data totalled over 14M unique email addresses with each row containing extensive personal information across more than 400 columns of data including names, phone numbers, physical addresses, genders and dates of birth.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Activision

In December 2022, attackers socially engineered an Activision HR employee into disclosing information which led to the breach of almost 20k employee records. The data contained 16k unique email addresses along with names, phone numbers, job titles and the office location of the employee. Activision advised that no sensitive employee information was included in the breach.

Покрытие: 1global-hibp-breaches
leak_incident
GLOBALПодтверждено1 документов

Abandonia (2022)

In November 2022, the gaming website dedicated to classic DOS games Abandonia suffered a data breach resulting in the exposure of 920k unique user records. This breach was in addition to another one 7 years earlier in 2015. The data contained email and IP addresses, usernames and salted MD5 hashes of passwords.

Покрытие: 1global-hibp-breaches