Data Leak

WK Kellogg Co., the prominent North American cereal manufacturer, has confirmed a significant data breach affecting its servers hosted by Cleo, a third-party vendor providing secure file transfer services.  The breach occurred on December 7, 2024, but was only discovered...

Multiple major Australian superannuation funds have fallen victim to a sophisticated cyberattack that has compromised thousands of member accounts and resulted in confirmed financial losses.  Cybersecurity experts have identified the attack as a coordinated OAuth token manipulation campaign coupled with...

Oracle Corporation has confirmed a data breach involving its older Gen 1 servers, marking the second cybersecurity incident disclosed by the company in recent weeks. The breach, initially reported by a threat actor on Breachforums on March 20, 2025,...

A massive data leak, potentially the largest social media breach ever, reportedly exposes 400GB of data from roughly 2.87 billion Twitter (X) user accounts. The breach was first reported on March 28, 2025, by a user known as "ThinkingOne" on...

A significant data breach has hit Samsung Germany as threat actor "GHNA" has released 270,000 customer support tickets for free on hacking forums.  The breach, which occurred in March 2025, exposes extensive personal and transactional data from Samsung's German operations...

Check Point Software Technologies has confirmed a data breach following claims by threat actor CoreInjection on March 30th, 2025, but insists the incident is an "old, known and very pinpointed event" from December 2024 that had already been addressed.  The...

In a significant cybersecurity incident, approximately 9,000 sensitive court documents have been illegally downloaded from the NSW Online Registry Website (ORW), which authorities are calling a "major data breach."  The attack has triggered an immediate investigation by the NSW Police...

Baidu, China's leading search engine giant, has firmly denied allegations of an internal data breach after a controversial incident involving a senior executive's teenage daughter.  The company got involved in a data security incident, which prompted significant concerns about personal...

A threat actor named "rose87168" claimed to have stolen six million records from Oracle Cloud servers. The stolen data reportedly includes Java Key Store (JKS) files, encrypted Single Sign-On (SSO) passwords, hashed Lightweight Directory Access Protocol (LDAP) passwords, key files,...

Indian technology giant Infosys Limited has agreed to pay $17.5 million to settle six class action lawsuits from a significant data breach at its U.S. subsidiary, Infosys McCamish Systems LLC (McCamish).  The settlement, announced on March 14, 2025, resolves allegations...