In 2019, the now-defunct B2B marketing leads database service LimeLeads suffered a data breach due to an exposed, unsecured Elasticsearch server. The…
Category: Have I Been Pwned latest breaches
Burger King Russia – 3,155,792 breached accounts
In October 2024, news of a data breach exposing Burger King Russia customers broke following an August attack on the Mindbox marketing automation…
Chess.com (2026) – 4,653,212 breached accounts
In August 2026, millions of records allegedly sourced from Chess.com were posted online . The data contained 7.3M rows with 4.6M unique email addresses,…
McKesson – 6,404,340 breached accounts
In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters “pay or leak” extortion campaign . The group subsequently…
McKesson – 6,404,340 breached accounts
In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters “pay or leak” extortion campaign . The group subsequently…
Questel – 1,226,209 breached accounts
In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters “pay or leak” extortion campaign .…
Manchester Airports Group – 8,849,657 breached accounts
In August 2026, Manchester Airports Group (MAG) disclosed a data breach impacting their services . The incident was later claimed by the FulcrumSec…
Manchester Airports Group – 8,728,451 breached accounts
In August 2026, Manchester Airports Group (MAG) disclosed a data breach impacting their services . The incident was later claimed by the FulcrumSec…
Questel – 1,226,209 breached accounts
In August 2026, the French intellectual property software and services company Questel was the target of a ShinyHunters “pay or leak” extortion campaign .…
Carhartt – 12,933,413 breached accounts
In August 2026, clothing retailer Carhartt was the target of a ShinyHunters “pay or leak” extortion campaign . The group subsequently published data…
NIUS – 6,090 breached accounts
In July 2025, the German news service NIUS suffered a data breach which was subsequently leaked publicly . The data included 6k unique email addresses…
Golf Canada – 568,972 breached accounts
In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email…
Oz Hair and Beauty – 1,988,331 breached accounts
In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack . The group subsequently published data…
Fanlore – 144,520 breached accounts
In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates . The breach resulted in…
Fanlore – 144,520 breached accounts
In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates . The breach resulted in…
Oz Hair and Beauty – 1,988,331 breached accounts
In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack . The group subsequently published data…
RingCentral – 1,596,490 breached accounts
In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters “pay or leak” extortion campaign . The group…
Alcon – 218,395 breached accounts
In August 2026, the Alcon eye care company was named in a ShinyHunters “pay or leak” extortion campaign . The group subsequently published data allegedly…
Brinks Home – 732,162 breached accounts
In July 2026, Brinks Home was targeted in a ShinyHunters “pay or leak” extortion campaign . The group subsequently published data they alleged was taken…
Exact Sciences – 10,869,543 breached accounts
In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters “pay or leak” extortion campaign . The group claimed to…