Burger King Japan App Breach Exposes 11.18 Million Member Records
Burger King Japan says an intruder accessed the system behind its official app, exposing roughly 11.18 million member records. Payment card data was not held in the affected...
How a ‘123456’ Password Exposed Nearly 9 Million Danes’ National ID Records
A trusted Danish IT vendor reportedly protected administrator access to the national CPR population register with the password "123456," letting an attacker harvest records tied to roughly 8.8...
Weak Admin Password Tied to Exposure of 8.8 Million Danish Identity Records
A breach involving authorized access to Denmark’s CPR register reportedly exposed records linked to about 8.8 million identification numbers. Reporting connects the incident to weak credentials at IT...
AT&T’s $177 Million Settlement Resolves Claims From Two Massive Data Breaches
A federal judge has approved AT&T’s $177 million settlement covering two 2024 breaches that exposed personal information and communications metadata. The agreement closes the litigation without an admission...
South Korean Church Breaches Expose More Than One Million Congregant Records
Attackers penetrated two major South Korean churches through a web shell, leaked credentials and broken authorization controls, exposing records tied to more than one million congregants. The intrusions...
Breach at Discord Bot Provider Double Counter Exposes Data on Millions of Users
An intrusion into Double Counter, a third-party company behind a popular Discord moderation bot, let an attacker pull tens of millions of user records and briefly hijack the...
EY Tax Platform Breach Exposes Data Tied to Goldman Sachs and Man Group Clients
A breach of an EY tax-support platform exposed personal and financial data connected to clients of Goldman Sachs and Man Group. The incident highlights how sensitive documents in...
ASOS Investigates Breach After Hackers Hijack App Notifications to Issue Public Ransom Threat
Online fashion retailer ASOS is investigating an incident after attackers abused a third-party customer communication platform to push a fake "ASOS HACKED" push notification claiming access to its...