@devaonbreaches.bsky.social
Divergent Information Security Protector | Sharing insights on data breaches, information security & best practices • Founder http://XposedOrNot.com
samsung data breach
XposedOrNot += Samsung Germany Data Breach
The Samsung Germany #databreach in March 2025 occurred via a compromise of their logistics provider, Spectos, reportedly caused by malware on an employee’s device exposing 218K unique email addresses, names, and physical addresses.
Shein data breach
XposedOrNot += SHEIN Data Breach
The SHEIN #databreach in 2018 exposed the personal information of approximately 28M customers of the global online fashion and beauty retailer. The compromised data included names, email addresses, phone numbers, and hashed passwords.
Twitter Data Breach
XposedOrNot += Twitter Data Breach
The Twitter API Vulnerability #databreach in 2021 exposed over 5.4M user records by exploiting a flaw that allowed attackers to input phone numbers and email addresses to retrieve associated Twitter IDs.
Boulanger data breach
XposedOrNot += Boulanger Data Breach
The Boulanger #databreach in September 2024 exposed over 27 million rows of data from the French electronics retailer. The breach included more than 2M unique email addresses, names, physical addresses, phone numbers, and geographic coordinates.
Qraved data breach
XposedOrNot += Qraved Data Breach
The Qraved #databreach in July 2021 impacted the Indonesian restaurant website and exposed nearly 1M unique email addresses. The compromised data included names, phone numbers, dates of birth, and passwords stored as MD5 hashes.
German Doner Kebab data breach
XposedOrNot += German Doner Kebab Data Breach
The German Doner Kebab #databreach in March 2025 exposed data published on a popular hacking forum, including 162K unique email addresses, names, phone numbers, and physical addresses.
Despite Oracle denying a breach, BleepingComputer verified stolen data tied to 6M users is legit. Oracle maintains no #databreach occurred.
www.bleepingcomputer.com/news/securit...
ColorDating Data Breach
XposedOrNot += Color Dating Data Breach
The Color Dating #databreach in September 2018 exposed 220K unique email addresses, along with names, profile photos, and bcrypt password hashes.
DragonNest Data Breach
XposedOrNot += DragonNest Data Breach
The DragonNest #databreach in August 2013 exposed over 500K unique email addresses along with usernames, IP addresses, and plain text passwords, highlighting significant vulnerabilities in the MMORPG's security.
US sperm donor giant California Cryobank is warning customers it suffered a #databreach that exposed customers' personal information.
www.bleepingcomputer.com/news/securit...
Here’s your weekly #databreach news roundup:
Angel One, DISA, Orange, and Hipshipper.
blog.xposedornot.com/weekly-datab...
Listed broking firm Angel One suffered a data leak, which it attributed to unauthorised access to its Amazon Web Services (AWS) resources.
inc42.com/buzz/angel-o...
Here’s your weekly #databreach news roundup:
HCRG, Genea, DM Clinical Research, and Finastra.
blog.xposedornot.com/weekly-datab...
orange data breach
XposedOrNot += Orange Data Breach
The Orange #databreach in February 2025 affected multiple global divisions, with a significant impact on Orange Romania. The incident exposed nearly 600K customer records, including email addresses, usernames, physical addresses, phone numbers, and names.
DISA Global Solutions, a U.S.-based provider of employee screening services, has said it suffered a #databreach that affects more than 3.3 million people.
techcrunch.com/2025/02/25/u...
A hacker claims to have stolen thousands of internal documents with user records and employee data after breaching the systems of Orange Group, a leading French telecommunications operator and digital service provider. #databreach
www.bleepingcomputer.com/news/securit...
A Dallas, Texas-based clinical research firm had its database exposed, containing sensitive personal healthcare records of over 1.6 million individuals – all without any security authentication.
hackread.com/clinical-res...
1win data breach
XposedOrNot += 1win Data Breach
The 1win #databreach exposed sensitive information of 96M users from the online betting platform. The compromised data included email and IP addresses, phone numbers, dates of birth, country details, and SHA-256 password hashes.
zacks-2024 data breach
XposedOrNot += Zacks Data Breach
The Zacks #databreach in June 2024 allegedly affected the investment research company, with data later published on a popular hacking forum. This incident exposed 12M unique email addresses along with IP and physical addresses, names, usernames, phone numbers.
doxbin-2025 data breach
XposedOrNot += Doxbin Data Breach
The Doxbin #databreach in February 2025 involved the compromise of the doxing website Doxbin by a group known as "TOoDA," which publicly dumped the data. The breach exposed 336K unique email addresses along with usernames.
Here’s your weekly #databreach news roundup:
PoinCampus, IMI, Casio UK, Grubhub, and Ya-moon.
blog.xposedornot.com/weekly-datab...
youth manual data breach
XposedOrNot += Youthmanual Data Breach
The Youthmanual #databreach in January 2019 exposed 1.1 million records from the Indonesian college and career platform, including 942K unique email addresses.
adopt me trading values breach
XposedOrNot += Adopt Me Trading Values Data Breach
The Adopt Me Trading Values #databreach in July 2022 affected the website used for assessing pet trade values in the "Adopt Me!" Roblox game. This incident exposed 86K unique email addresses, along with usernames, IP's, and bcrypt pwd hashes.
Hospital Sisters Health System notified over 882,000 patients that an August 2023 cyberattack led to a data breach that exposed their personal and health information. #databreach
www.bleepingcomputer.com/news/securit...
poincampus data breach
XposedOrNot += PoinCampus Data Breach
The PoinCampus #databreach in November 2024 affected the South Korean education platform, exposing 89K unique email addresses along with names and a limited number of phone numbers and dates of birth.
IMI becomes the latest British engineering firm to be hacked
British engineering company IMI has disclosed a cybersecurity incident just days after rival firm Smiths reported it was targeted by hackers. #databreach
techcrunch.com/2025/02/06/i...
Casio UK's e-shop at casio[.]co[.]uk was hacked to include malicious scripts that stole credit card and customer information between January 14 and 24, 2025. #databreach
www.bleepingcomputer.com/news/securit...
Here’s your weekly #databreach news roundup:
Welhof, HeatGames, Community Health Center (CHC), ENGlobal, and PowerSchool.
blog.xposedornot.com/weekly-datab...
Popular food delivery company Grubhub announced it suffered a security breach involving a “third-party actor,” which gave “unauthorized access to certain user contact information. #databreach
bgr.com/tech/grubhub...
Heatgames data breach
XposedOrNot += HeatGames Data Breach
The HeatGames #databreach in June 2021 resulted in the exposure of almost 650K unique email addresses along with IP addresses, geographical locations, and passwords stored as salted MD5 hashes.
