Data Breach

Meta is informing about 1,500 people—mainly employers in the US, that their personal data was affected after hackers broke into some GitHub accounts of the company. The break-in was spotted a few weeks back. The tech company said that an outside group got into the data using an employee’s stolen …

Nearly 100,000 Bee Cheng Hiang customers had their email addresses leaked when an employee used an AI tool to generate code for a large marketing email. The event is said to be Singapore’s first data leak involving AI that was reported to the Personal Data Protection Commission (PDPC). The incident …

Japan’s Digital Agency found a data leak that may have exposed about 246,000 records with personal information of government workers. The agency explains that the attacker got in by taking advantage of a weak spot in a VPN device used by the Government Solution Service (GSS). An investigation began on …

Bimbo Bakeries USA has confirmed that hackers stole employee data by exploiting a zero-day vulnerability in Oracle’s E-Business Suite (EBS). In a letter dated August 31, 2026, and shared with the California Attorney General’s office on September 4, the bakery company explained that the issue started with a third-party vendor that …

The FBI’s New Orleans field office has opened an investigation into the suspected source of more than 153 million driver’s licenses belonging to people in the United States and Canada. The service first surfaced on the Russian cybercrime site Exploit on August 31. It offered access to identity documents of …

3 airports in the UK were affected by a “cyber security incident.” Hackers got into data belonging to nearly nine million people and asked for ransom. Manchester Airports Group (MAG), which operates Manchester, East Midlands, and London Stansted airports, reported that hackers stole customers’ contact information, vehicle registrations, and postcodes …

A group of hackers named “Madarax” claims they have stolen and are offering to sell the personal information of about six million job seekers in Bangladesh. They claim to have taken this data from Bdjobs, the top online job website in the country. The claim appeared on the dark web …

More than 9,300 AWS access keys that were made public from August 2022 to August 2026 are still active, says a recent report from Bleeping Computer. Truffle Security has watched this happen for four years. They found that 817 exposed keys were tied to companies, and 526 of those were AWS …

Cybersecurity Researcher Jeremiah Fowler uncovered and reported to Express VPN a publicly exposed database that was neither password-protected nor encrypted. The database contained 102,215 documents totaling approximately 79GB. Jeremiah Fowler said, I saw a lot of sensitive information. This includes personal information like names and CPF/CNPJ numbers, contact details, home …

A cyberattack on the U.K.’s Police National Legal Database (PNLD) has put the contact information of over 100,000 police officers and other justice workers at risk. The hack was detected on Sunday, July 26, and the ExfilSquad group calimed they took 135,000 contact records. PNLD is an online legal resource service …