data breach
(12 articles)May 20, 2026
GitHub Breached: 3,800+ Internal Repos Exfiltrated
A GitHub employee device hack led to the exfiltration of 3,800+ internal repos. Here's what happened, what was exposed, and how to protect your org.
May 8, 2026
Zara Data Breach Exposes 197,000 Customer Records
ShinyHunters stole 140GB from Zara via compromised Anodot tokens, exposing emails, purchases, and support tickets for 197,400 people. Here's what happened.
May 7, 2026
Canvas Login Portals Hacked in ShinyHunters Attack
ShinyHunters defaced Canvas login portals at 330 colleges and universities in a mass extortion campaign targeting Instructure's education platform.
April 27, 2026
Checkmarx GitHub Data Leaked on Dark Web After Breach
Checkmarx confirmed GitHub repository data was posted on the dark web after a March 23 attack. Here's what developers need to know about source code exposure.
April 20, 2026
Vercel Breach: Context AI Hack Exposes Credentials
A Vercel breach tied to the Context AI hack exposed limited customer credentials. Here's what developers need to know and how to protect their accounts now.
April 16, 2026
McGraw Hill Data Breach: 13.5M Accounts Exposed
ShinyHunters leaked 13.5 million McGraw Hill accounts after exploiting a Salesforce misconfiguration. Here's what was exposed and how to protect your users.
April 14, 2026
McGraw-Hill Data Breach: Salesforce Misconfiguration
McGraw-Hill confirms a data breach after ShinyHunters exploited a Salesforce misconfiguration. Learn what was exposed and how to protect your SaaS config.
April 7, 2026
Snowflake Data Theft via SaaS Integrator Breach
ShinyHunters stole auth tokens from Anodot to hit Snowflake customers. Here's what happened, who's affected, and how to protect your integrations.
April 3, 2026
Hims & Hers Warns of Data Breach After Zendesk Support Ticket Breach
Hims & Hers suffered a data breach after ShinyHunters compromised their Okta SSO to access Zendesk, stealing millions of customer support tickets in February 2026.
April 3, 2026
CERT-EU: European Commission Hack Exposes Data of 30 EU Entities
TeamPCP breached the European Commission's AWS environment using a stolen API key, exposing data from 30+ EU entities. Here's how it happened and what devs must do.
March 27, 2026
European Commission Investigating Breach After Amazon Cloud Account Hack
A threat actor breached the European Commission's AWS environment and claims to have stolen 350GB of data. Here's what happened and how to lock down cloud accounts.
March 26, 2026
Ajax Football Club Hack Exposed Fan Data and Enabled Ticket Hijack
A hacker breached AFC Ajax systems, exposing 300,000 fan accounts and enabling ticket reassignment via vulnerable APIs and shared keys.