Yazoul Security - Data Breach Reports

RingCentral: 1,596,490 accounts exposed

Yazoul Security (contact@yazoul.net) — Thu, 13 Aug 2026 00:00:00 GMT

RingCentral - HIGH severity

Accounts Exposed: 1,596,490

In July 2026, the cloud-based business communications platform RingCentral was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they claimed was obtained from the platform, which included 1.6M unique email addresses along with names, physical addr...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Alcon: 218,395 accounts exposed

Yazoul Security (contact@yazoul.net) — Sun, 09 Aug 2026 00:00:00 GMT

Alcon - HIGH severity

Accounts Exposed: 218,395

In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly sourced from Alcon containing 218k unique email addresses along with other largely corporate B2B contact fields, including name, phone number and ...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Brinks Home: 732,162 accounts exposed

Yazoul Security (contact@yazoul.net) — Sat, 08 Aug 2026 00:00:00 GMT

Brinks Home - CRITICAL severity

Accounts Exposed: 732,162

In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, customers and Brinks staff such as name, ...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Credit Cards

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Exact Sciences: 10,869,543 accounts exposed

Yazoul Security (contact@yazoul.net) — Fri, 07 Aug 2026 00:00:00 GMT

Exact Sciences - CRITICAL severity

Accounts Exposed: 10,869,543

In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign . The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10.9M unique email add...

Compromised Data: Email Addresses, Names, Phone Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Inter-Con Security: 276,114 accounts exposed

Yazoul Security (contact@yazoul.net) — Wed, 05 Aug 2026 00:00:00 GMT

Inter-Con Security - HIGH severity

Accounts Exposed: 276,114

In June 2026, Inter-Con Security was targeted in a ShinyHunters “pay or leak” extortion campaign . The group subsequently published data it alleged was taken from the company, including 276k unique email addresses along with names, physical addresses, job titles and phone numbers. The data encompass...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Job Titles

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

SplitVPN: 865,336 accounts exposed

Yazoul Security (contact@yazoul.net) — Sat, 01 Aug 2026 00:00:00 GMT

SplitVPN - HIGH severity

Accounts Exposed: 865,336

In July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach . The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card data (first 6 and las...

Compromised Data: Email Addresses, Ip Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Houston City College: 831,642 accounts exposed

Yazoul Security (contact@yazoul.net) — Tue, 28 Jul 2026 00:00:00 GMT

Houston City College - HIGH severity

Accounts Exposed: 831,642

In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from the college was later published publicly and included 832k unique email addresses along with names, addresses, phone numbers, academic records, and other personal infor...

Compromised Data: Email Addresses, Names, Phone Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Suno: 55,282,226 accounts exposed

Yazoul Security (contact@yazoul.net) — Mon, 20 Jul 2026 00:00:00 GMT

Suno - CRITICAL severity

Accounts Exposed: 55,282,226

In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year . The data contained over 55M unique email addresses. Phone numbers were also present where they had been used as the sign-up method. Although representing a small portion of th...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Credit Cards

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Paidwork: 23,272,765 accounts exposed

Yazoul Security (contact@yazoul.net) — Sun, 19 Jul 2026 00:00:00 GMT

Paidwork - CRITICAL severity

Accounts Exposed: 23,272,765

In March 2026, hackers claimed they had obtained data from the gig economy platform Paidwork which they then listed for sale . Almost 11GB of data allegedly obtained from the platform was subsequently posted publicly in July and contained over 23M unique email addresses. The breach also included a b...

Compromised Data: Email Addresses, Passwords

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Fluke: 821,100 accounts exposed

Yazoul Security (contact@yazoul.net) — Wed, 15 Jul 2026 00:00:00 GMT

Fluke - HIGH severity

Accounts Exposed: 821,100

In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published more than 100GB of data allegedly taken from the company. The corpus contained largely corporate contact information, including ove...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Goose Creek: 6,574,121 accounts exposed

Yazoul Security (contact@yazoul.net) — Wed, 15 Jul 2026 00:00:00 GMT

Goose Creek - HIGH severity

Accounts Exposed: 6,574,121

In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers , claiming the company had a security vulnerability and suffered a data breach. The data was subsequently sent to Have I Been Pwned and contained 6.6M unique email...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Glendale Community College: 793,925 accounts exposed

Yazoul Security (contact@yazoul.net) — Sat, 11 Jul 2026 00:00:00 GMT

Glendale Community College - CRITICAL severity

Accounts Exposed: 793,925

In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from Glendale was later published online and included almost 800k unique email addresses along with various other data fields, including names, addresses, phone number...

Compromised Data: Email Addresses, Names, Phone Numbers, Social Security Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Moody Bible Institute: 2,303,416 accounts exposed

Yazoul Security (contact@yazoul.net) — Fri, 03 Jul 2026 00:00:00 GMT

Moody Bible Institute - HIGH severity

Accounts Exposed: 2,303,416

In June 2026, Moody Bible Institute was targeted by a ShinyHunters "pay or leak" extortion campaign . Over 2.3M unique email addresses and other personal data were later published publicly, including names, physical addresses, phone numbers, dates of birth and other information relating to donors, s...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Dates Of Birth

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Sysco: 2,691,852 accounts exposed

Yazoul Security (contact@yazoul.net) — Sun, 28 Jun 2026 00:00:00 GMT

Sysco - HIGH severity

Accounts Exposed: 2,691,852

In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign . Data was subsequently published containing 2.7M unique email addresses belonging to staff and customers. The data also contained largely corporate contact information including names, ...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Job Titles

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

American Tower: 216,601 accounts exposed

Yazoul Security (contact@yazoul.net) — Fri, 26 Jun 2026 00:00:00 GMT

American Tower - HIGH severity

Accounts Exposed: 216,601

In June 2026, telecommunications tower infrastructure company American Tower was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly taken from the company containing more than 200k unique email addresses belonging to employees, contractors...

Compromised Data: Email Addresses, Names, Phone Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Madison Square Garden Sports: 9,796,738 accounts exposed

Yazoul Security (contact@yazoul.net) — Wed, 24 Jun 2026 00:00:00 GMT

Madison Square Garden Sports - HIGH severity

Accounts Exposed: 9,796,738

In June 2026, the sports and entertainment company Madison Square Garden Sports was the target of a ShinyHunters "pay or leak" extortion campaign . The group later published the alleged data, which included almost 10M unique email addresses spanning staff and customers, along with extensive personal...

Compromised Data: Email Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

JCPenney: 368,418 accounts exposed

Yazoul Security (contact@yazoul.net) — Sat, 20 Jun 2026 00:00:00 GMT

JCPenney - CRITICAL severity

Accounts Exposed: 368,418

In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from JCPenney through the exploitation of a critical zero-day vulnerability in Oracle PeopleSoft was later published publicly. The exposed records indicate...

Compromised Data: Email Addresses, Names, Phone Numbers, Dates Of Birth, Social Security Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

CFGI: 248,235 accounts exposed

Yazoul Security (contact@yazoul.net) — Thu, 18 Jun 2026 00:00:00 GMT

CFGI - HIGH severity

Accounts Exposed: 248,235

In March 2026, the financial consulting and advisory firm CFGI was the target of a ShinyHunters "pay-or-leak" extortion campaign . The group subsequently publicised data allegedly obtained from CFGI comprising corporate contact information, including 243k unique email addresses, names, phone numbers...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Operation Endgame 4.0: 153,527 accounts exposed

Yazoul Security (contact@yazoul.net) — Thu, 18 Jun 2026 00:00:00 GMT

Operation Endgame 4.0 - CRITICAL severity

Accounts Exposed: 153,527

On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation , a prolific malware distribution network used to compromise systems and facilitate further cybercrime. Coordinated by international law enforcement agencies with support from Europol and Eurojust, the o...

Compromised Data: Email Addresses, Passwords

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Ralph Lauren: 139,903 accounts exposed

Yazoul Security (contact@yazoul.net) — Thu, 18 Jun 2026 00:00:00 GMT

Ralph Lauren - HIGH severity

Accounts Exposed: 139,903

In June 2026, fashion retailer Ralph Lauren was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published hundreds of gigabytes of data they claimed was obtained from the organisation's Salesforce instance, including 140k unique email addresses along with names, ...

Compromised Data: Email Addresses, Names, Phone Numbers, Genders

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Berkadia: 305,216 accounts exposed

Yazoul Security (contact@yazoul.net) — Mon, 15 Jun 2026 00:00:00 GMT

Berkadia - HIGH severity

Accounts Exposed: 305,216

In March 2026, the commercial real estate finance company Berkadia was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they alleged was taken from Berkadia's Salesforce instance, including over 300k unique email addresses as well as names, physic...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Infinite Campus: 137,123 accounts exposed

Yazoul Security (contact@yazoul.net) — Mon, 15 Jun 2026 00:00:00 GMT

Infinite Campus - HIGH severity

Accounts Exposed: 137,123

In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they alleged was taken from Infinite Campus, containing 137k unique email addresses along with names, phone numbers, physical addresse...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

June 2026 Stealer Logs: 56,278,397 accounts exposed

Yazoul Security (contact@yazoul.net) — Mon, 15 Jun 2026 00:00:00 GMT

June 2026 Stealer Logs - CRITICAL severity

Accounts Exposed: 56,278,397

In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across hundreds of millions of stealer log records. The data also contained 124M unique passwords, which have been added to Pwned Passwords and are now searc...

Compromised Data: Email Addresses, Passwords

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

University of Nottingham: 454,635 accounts exposed

Yazoul Security (contact@yazoul.net) — Wed, 10 Jun 2026 00:00:00 GMT

University of Nottingham - HIGH severity

Accounts Exposed: 454,635

In June 2026, the University of Nottingham was the target of a cyber attack , later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with extensive personal information including nam...

Compromised Data: Email Addresses, Names, Phone Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Baker Distributing: 102,935 accounts exposed

Yazoul Security (contact@yazoul.net) — Sun, 07 Jun 2026 00:00:00 GMT

Baker Distributing - HIGH severity

Accounts Exposed: 102,935

In May 2026, the HVAC/R wholesale distributor Baker Distributing Company was added to the ShinyHunters data extortion group's "pay or leak" site . In early June, the group publicly published data they claimed had been obtained from Baker's SharePoint and Salesforce infrastructure including 103k uniq...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

BCD Travel: 396,313 accounts exposed

Yazoul Security (contact@yazoul.net) — Fri, 05 Jun 2026 00:00:00 GMT

BCD Travel - HIGH severity

Accounts Exposed: 396,313

In May 2026, the corporate travel management company BCD Travel was claimed as a victim of the ShinyHunters "pay or leak" extortion campaign . Data allegedly obtained from BCD was subsequently published publicly in early June and contained 396k unique email addresses. Other exposed data included nam...

Compromised Data: Email Addresses, Names, Phone Numbers, Employers, Job Titles

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

DentaQuest: 2,553,599 accounts exposed

Yazoul Security (contact@yazoul.net) — Wed, 03 Jun 2026 00:00:00 GMT

DentaQuest - HIGH severity

Accounts Exposed: 2,553,599

In May 2026, the dental benefits administrator DentaQuest was the target of a ShinyHunters "pay or leak" extortion campaign that resulted in the group publicly publishing hundreds of gigabytes of data allegedly obtained from the company. The data included 2.6M unique email addresses along with names...

Compromised Data: Email Addresses, Names, Phone Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Edmunds: 177,860 accounts exposed

Yazoul Security (contact@yazoul.net) — Mon, 01 Jun 2026 00:00:00 GMT

Edmunds - CRITICAL severity

Accounts Exposed: 177,860

In January 2026, the automotive research and car-shopping platform Edmunds was listed by the ShinyHunters hacking group as having been breached . Data purportedly obtained in the incident was later published publicly and included 178k unique email addresses, usernames, passwords, IP addresses, phone...

Compromised Data: Email Addresses, Passwords, Usernames, Names, Phone Numbers, Ip Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Atlas Menu: 63,926 accounts exposed

Yazoul Security (contact@yazoul.net) — Sat, 30 May 2026 00:00:00 GMT

Atlas Menu - CRITICAL severity

Accounts Exposed: 63,926

In May 2026, the GTA V and CS2 cheat service Atlas Menu suffered a data breach. An attacker claimed to have gained access to all Atlas systems and published the service's database to a public GitHub repository. The incident exposed 64k unique email addresses along with usernames, IP addresses, suppo...

Compromised Data: Email Addresses, Passwords, Usernames, Names, Ip Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Charter: 4,851,517 accounts exposed

Yazoul Security (contact@yazoul.net) — Thu, 28 May 2026 00:00:00 GMT

Charter - HIGH severity

Accounts Exposed: 4,851,517

In May 2026, the telecommunications company Charter Communications (the parent company behind the consumer broadband and cable brand Spectrum) was named by the ShinyHunters group in a "pay or leak" extortion campaign . The group later published the data, which exposed 4.9M unique email addresses alo...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Job Titles

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Kemper: 269,299 accounts exposed

Yazoul Security (contact@yazoul.net) — Thu, 28 May 2026 00:00:00 GMT

Kemper - HIGH severity

Accounts Exposed: 269,299

In April 2026, the American insurance holding company Kemper Corporation was named by the ShinyHunters ransomware group in a "pay or leak" extortion campaign . The attackers allegedly accessed Kemper's Salesforce environment via social engineering as part of a broader campaign targeting hundreds of ...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Mytheresa: 84,108 accounts exposed

Yazoul Security (contact@yazoul.net) — Wed, 27 May 2026 00:00:00 GMT

Mytheresa - CRITICAL severity

Accounts Exposed: 84,108

In April 2026, the luxury fashion e-commerce platform Mytheresa was listed as a victim of the ShinyHunters "pay or leak" extortion group . After the ransom deadline passed, the group publicly released the data which contained 84k unique email addresses. The exposed data also included names, phone nu...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Credit Cards

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Ameriprise: 502,597 accounts exposed

Yazoul Security (contact@yazoul.net) — Tue, 26 May 2026 00:00:00 GMT

Ameriprise - HIGH severity

Accounts Exposed: 502,597

In March 2026, the financial services firm Ameriprise Financial was named by the ShinyHunters group in a "pay or leak" extortion campaign . The group claimed possession of more than 200GB of compressed data exfiltrated from Ameriprise's Salesforce environment and internal SharePoint infrastructure, ...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Employers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

7-Eleven: 185,256 accounts exposed

Yazoul Security (contact@yazoul.net) — Sun, 24 May 2026 00:00:00 GMT

7-Eleven - HIGH severity

Accounts Exposed: 185,256

In April 2026, 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters , with the data later published that month. The incident exposed 185k unique email addresses, along with names, physical addresses, dates of birth and phone numbers. A small number of records also contained ...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Dates Of Birth

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Dragonica Lunaris: 126,293 accounts exposed

Yazoul Security (contact@yazoul.net) — Thu, 21 May 2026 00:00:00 GMT

Dragonica Lunaris - CRITICAL severity

Accounts Exposed: 126,293

In December 2025, the European Dragonica private server Dragonica Lunaris suffered a data breach. The incident exposed 126k email addresses, usernames, dates of birth and bcrypt password hashes. The service operator confirmed the breach and advised it has since been fixed.

Compromised Data: Email Addresses, Passwords, Usernames, Names, Dates Of Birth

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Windows93 / Myspace93: 46,105 accounts exposed

Yazoul Security (contact@yazoul.net) — Thu, 21 May 2026 00:00:00 GMT

Windows93 / Myspace93 - CRITICAL severity

Accounts Exposed: 46,105

In January 2021, the parody site Windows93 suffered a data breach of the Myspace93 sub-site after a beta application was exploited to download server files. The compromised data was later leaked in June and included 46k Myspace93 accounts containing email and IP addresses, usernames and passwords st...

Compromised Data: Passwords, Usernames, Names, Ip Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

CTT: 468,124 accounts exposed

Yazoul Security (contact@yazoul.net) — Tue, 19 May 2026 00:00:00 GMT

CTT - HIGH severity

Accounts Exposed: 468,124

In April 2026, data allegedly obtained from CTT, Portugal's national postal service, was posted to a public hacking forum . The data included 468k unique email addresses along with names, phone numbers and parcel tracking numbers which can be used to retrieve the tracking history of the parcel.

Compromised Data: Email Addresses, Names, Phone Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Addi: 34,532,941 accounts exposed

Yazoul Security (contact@yazoul.net) — Mon, 18 May 2026 00:00:00 GMT

Addi - CRITICAL severity

Accounts Exposed: 34,532,941

In March 2026, the Colombian fintech company Addi identified unauthorised activity on its platform and advised customers that "it is possible that your personal information may have been compromised". The "pay or leak" extortion group ShinyHunters subsequently claimed responsibility and published a ...

Compromised Data: Email Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Abrigo: 711,099 accounts exposed

Yazoul Security (contact@yazoul.net) — Thu, 14 May 2026 00:00:00 GMT

Abrigo - HIGH severity

Accounts Exposed: 711,099

In April 2026, the fintech software company Abrigo was targeted in a "pay or leak" extortion attempt by the ShinyHunters group . Shortly after, data allegedly taken from the company's Salesforce instance was published publicly and contained over 700k unique email addresses belonging to both Abrigo s...

Compromised Data: Email Addresses, Names, Phone Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Canada Life: 237,810 accounts exposed

Yazoul Security (contact@yazoul.net) — Wed, 13 May 2026 00:00:00 GMT

Canada Life - HIGH severity

Accounts Exposed: 237,810

In April 2026, Canada Life was the victim of a "pay or leak" extortion campaign by the ShinyHunters group . The group subsequently published the data which contained over 200k unique email addresses along with names, phone numbers, physical addresses and, in some cases, customer support tickets. In ...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Cushman & Wakefield: 310,431 accounts exposed

Yazoul Security (contact@yazoul.net) — Tue, 12 May 2026 00:00:00 GMT

Cushman & Wakefield - HIGH severity

Accounts Exposed: 310,431

In May 2026, the real estate services firm Cushman & Wakefield was the target of a "pay or leak" extortion campaign by the ShinyHunters group . Following the threat, the group publicly published data they alleged had been obtained from the firm, consisting mostly of C&W email addresses along with te...

Compromised Data: Email Addresses, Names, Phone Numbers, Job Titles

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Zara: 197,376 accounts exposed

Yazoul Security (contact@yazoul.net) — Fri, 08 May 2026 00:00:00 GMT

Zara - CRITICAL severity

Accounts Exposed: 197,376

In April 2026, the fashion brand Zara was among a number of organisations targeted by the ShinyHunters extortion group as part of their "pay or leak" campaign. The group claimed the breach was related to a compromise of the Anodot analytics platform and subsequently published a terabyte of data alle...

Compromised Data: Email Addresses, Passwords, Payment Info

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Woflow: 447,593 accounts exposed

Yazoul Security (contact@yazoul.net) — Thu, 07 May 2026 00:00:00 GMT

Woflow - HIGH severity

Accounts Exposed: 447,593

In March 2026, the AI-driven merchant data platform Woflow was named as a victim by the ShinyHunters data extortion group . The group subsequently published tens of thousands of files allegedly obtained from the company, comprising more than 2TB of data. The trove included hundreds of thousands of e...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

LegionProxy: 10,144 accounts exposed

Yazoul Security (contact@yazoul.net) — Wed, 06 May 2026 00:00:00 GMT

LegionProxy - CRITICAL severity

Accounts Exposed: 10,144

In April 2026, the commercial residential and ISP proxy network LegionProxy suffered a data breach . The incident exposed 10k email addresses, bcrypt password hashes, names and purchases.

Compromised Data: Email Addresses, Passwords, Names

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Vimeo: 119,167 accounts exposed

Yazoul Security (contact@yazoul.net) — Tue, 05 May 2026 00:00:00 GMT

Vimeo - MEDIUM severity

Accounts Exposed: 119,167

In April 2026, the ShinyHunters extortion group listed Vimeo on their extortion portal as part of their "pay or leak" campaign . They subsequently published hundreds of gigabytes of data, predominantly consisting of video titles, technical data and metadata. The data also included 119k unique email ...

Compromised Data: Email Addresses, Names

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Reborn Gaming: 126 accounts exposed

Yazoul Security (contact@yazoul.net) — Mon, 04 May 2026 00:00:00 GMT

Reborn Gaming - HIGH severity

Accounts Exposed: 126

In April 2026, the gaming community Reborn Gaming suffered a data breach due to a vulnerability in cPanel and WebHost Manager (WHM) . The breach exposed 126 unique email addresses along with IP addresses and Steam IDs. Reborn Gaming self-submitted the data to Have I Been Pwned.

Compromised Data: Email Addresses, Ip Addresses

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Marcus & Millichap: 1,837,078 accounts exposed

Yazoul Security (contact@yazoul.net) — Sun, 03 May 2026 00:00:00 GMT

Marcus & Millichap - HIGH severity

Accounts Exposed: 1,837,078

In April 2026, the commercial real estate brokerage firm Marcus & Millichap was named as one of multiple alleged victims of the ShinyHunters hacking and extortion group . Data alleged to have been obtained from the company was subsequently released publicly and included 1.8M unique email addresses, ...

Compromised Data: Email Addresses, Names, Phone Numbers, Employers, Job Titles

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

ZenBusiness: 5,118,184 accounts exposed

Yazoul Security (contact@yazoul.net) — Sat, 02 May 2026 00:00:00 GMT

ZenBusiness - HIGH severity

Accounts Exposed: 5,118,184

In March 2026, the hacker and extortion group "ShinyHunters" claimed to have obtained a substantial corpus of data from ZenBusiness , a business formation and compliance platform. The group claimed the data had been exfiltrated from platforms including Snowflake, Mixpanel and Salesforce, and threate...

Compromised Data: Email Addresses, Names, Phone Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

Aman: 215,563 accounts exposed

Yazoul Security (contact@yazoul.net) — Fri, 01 May 2026 00:00:00 GMT

Aman - HIGH severity

Accounts Exposed: 215,563

In April 2026, the ultra-luxury hotel brand Aman was named by ShinyHunters as the target of a "pay or leak" extortion campaign , with the data allegedly obtained from their Salesforce CRM. The data was subsequently leaked publicly and contained over 200k unique email addresses. Whilst not present on...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Dates Of Birth, Genders

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.

ADT: 5,488,888 accounts exposed

Yazoul Security (contact@yazoul.net) — Mon, 27 Apr 2026 00:00:00 GMT

ADT - CRITICAL severity

Accounts Exposed: 5,488,888

In April 2026, home security firm ADT confirmed a data breach by ShinyHunters , which listed the company on its website as part of a "pay or leak" extortion attempt. The breach impacted 5.5M unique email addresses along with names, phone numbers and physical addresses. ADT also advised that "in a sm...

Compromised Data: Email Addresses, Names, Phone Numbers, Physical Addresses, Dates Of Birth, Social Security Numbers

Read the full breach report on Yazoul Security

This report is published by Yazoul Security - Your trusted source for data breach intelligence.

Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.