Topic: customer data theft
-
Chick-fil-A Data Breach Hits Over 13,000 Customers
A credential stuffing attack between June 17-19 compromised 13,322 Chick-fil-A One loyalty accounts, exposing personal data including names, emails, and partial payment card details. Chick-fil-A responded by logging out affected accounts, removing stored payment methods, restoring balances, and a...
Read More » -
Upbound hack leads to $13M in fraudulent Acima leases
Upbound Group disclosed a cybersecurity breach that led to $13 million in fraudulent leases through its Acima brand, with threat actors using stolen non-sensitive customer data to create fake lease-to-own agreements and defaulting on payments. The company responded by implementing enhanced authen...
Read More » -
Aflac data breach exposed after subsidiary cyberattack
Aflac confirmed a data breach affecting 4.38 million customers in Japan, exposing personal details and bank account information after a cyberattack on its subsidiary's systems between June 15-25, 2026. The breach is confined to Aflac Japan's operations, with no impact on U.S. systems; the company...
Read More » -
LastPass says hackers stole customer support data in Klue breach
LastPass notified users that their personal details and support records were compromised in a security breach at third-party vendor Klue, not within LastPass's own network. Stolen data includes customer names, phone numbers, email addresses, physical addresses, and support case records, though pa...
Read More » -
Carnival Cruise data breach hits nearly 6 million people
Carnival Corporation confirmed a data breach affecting nearly 6 million individuals, first claimed by the ShinyHunters extortion gang in April 2026, which exposed names, addresses, and some passport numbers but no financial data. The breach originated from a phishing attack targeting employee ema...
Read More » -
Škoda warns customers of data breach after online shop hack
Škoda Auto suffered a data breach on its online shop platform, resulting in the theft of customer names, addresses, and contact details. The company has secured the compromised system and is working with cybersecurity experts and law enforcement, but confirmed that financial data like payment car...
Read More » -
Foxconn Ransomware Attack Underscores Ongoing Security Risks
The ransomware group Nitrogen claims to have stolen 8 TB of sensitive data, including schematics from major clients like Apple and Dell, from Foxconn, which confirmed a cyberattack affecting its North American factories. Foxconn is a prime target due to its role as a global manufacturer holding i...
Read More » -
Vercel Hack Exposes Customer Data
Hackers breached cloud platform Vercel by exploiting an employee's compromised Google account, which was linked to a third-party app from Context AI, leading to the theft of unencrypted customer credentials. The incident, claimed by a threat actor online but denied by the ShinyHunters group, expo...
Read More » -
UK Slaps LastPass With Fine for 2022 Data Breach Affecting Millions
The UK's Information Commissioner's Office fined LastPass £1.2 million for failing to protect the personal data of up to 1.6 million users during a 2022 breach, where encrypted password vaults were stolen. The breach occurred in stages, starting with a compromised employee laptop and escalating w...
Read More » -
Nation-State Hackers Breach F5, Endangering Thousands of Customers
A nation-state hacking group infiltrated F5's networks, compromising thousands of organizations, including US government agencies and Fortune 500 companies, posing a severe global cybersecurity threat. The attackers maintained undetected access for years, enabling them to steal BIG-IP source code...
Read More » -
Major Cybersecurity Firms Impacted by Salesloft Data Breach
A data breach at Salesloft impacted over 700 organizations, including major cybersecurity firms, by compromising OAuth tokens to access Salesforce databases and Google Workspace accounts. Attackers, identified as UNC6395, targeted AWS access keys, passwords, and Snowflake tokens, posing risks for...
Read More » -
Louis Vuitton confirms global cyberattack caused regional data breaches
Louis Vuitton confirmed a global cyberattack likely by ShinyHunters, affecting customers in South Korea, Turkey, the UK, Italy, and Sweden, with personal data stolen but no payment details compromised. The company acted swiftly to contain the breach, collaborating with regulators and cybersecurit...
Read More »