Trezor Phishing Campaign Abused Trusted Email Infrastructure After Brevo Breach
Trezor phishing emails sent via breached Brevo targeted 347K users with fake STM32 flaw to steal wallet seeds. Learn how SAML failure enabled attack.
Data Breaches
More news
Page 4 / 8 · 64 articles
Revolut Released Customer KYC Records After Fake Government Request Passed Email Checks
Revolut disclosed customer KYC records after a fake government request passed email checks, exposing passports, selfies and transaction histories.
Florida DMV Breach Traced to Police Credentials Stored on a Personal Device
Florida DMV breach used stolen Plant City police credentials from a personal device. ShinyHunters claimed access; scope of exposed driver data unknown.
Exposed APIS Database Reveals 220 Million Passenger and Crew Travel Records
Exposed APIS database leaked 220M passenger and crew records with passport details, flight itineraries and travel history spanning 2017-2026.
Alleged Condé Nast Database With 32.8 Million User Records Offered for $15,000
Alleged Condé Nast database with 32.8M user records listed for $15,000, exposing emails, names and addresses from Vogue, WIRED and more.
U.S. and U.K. join investigations into Southeast Asian online scam centers
U.S. and U.K. signed an MOU to run parallel probes into Southeast Asian scam centers behind billion-dollar investment and romance fraud.
Nexus: 153 Million Driver’s Licenses on the Dark Web, Raising Suspicions of a Near–Real-Time Scanning Pipeline
Nexus sells 153M driver's licenses with IR/UV scans appearing hours after scanning, suggesting a live theft pipeline. FBI investigates IDScan.net link.
Aesto Health Data Breach Exposes Health and Personal Information of More Than 9.5 Million People
Aesto Health disclosed an AWS data breach exposing sensitive health, financial and personal data of 9.5M people between Dec 2-18, 2025, reported to HHS.
Manchester Airports Group Breach: 86 GB Claimed, API Credentials Exposed in Client-Side JavaScript
86GB of customer data stolen from Manchester Airports Group via API credentials exposed in client-side JavaScript. A detailed look at the breach and its risks.