BreachCase
HomeSearchMy BreachcaseAbout
BreachCase

Breach data is aggregated from public sources and analyzed using AI. Information may not be fully accurate.

About

All Breaches

Active filters:Attack Vector: misconfiguration

Filters

21 results found

Company Stored All Employee Passwords in Single Excel File

unknown

An unnamed organization suffered a severe internal security lapse when it was discovered that every employee's password was stored in a single Excel f...

2026-06

UK School Network Breach via Exposed Admin Password in AD

education|United Kingdom

A UK school suffered a security incident after a student discovered that the school's network was left wide open due to a critical misconfiguration. T...

2026-06

City of York Council 2026 Email BCC Breach

government|United Kingdom

The United Kingdom City of York Council exposed the email addresses of hundreds of disabled residents who hold Blue Badges for accessible parking. The...

2026-06

Plymouth City Council 2026 Email Data Exposure

government|United Kingdom

Plymouth City Council, a local government authority in the United Kingdom, disclosed a data exposure incident in June 2026. The breach involved a mass...

2026-06

282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

technology

A study of 444 AI chatbot apps for iPhone revealed that 282 of them (nearly two-thirds) exposed paid AI access through their network traffic. The expo...

2026-06

India Reserve Bank .bank Domain Registry Leak 2026

finance|India

The Reserve Bank of India (RBI) mandated the use of .bank domains for financial institutions to enhance trust, but the registry operator's open API le...

2026-06

Jerry's Store 2026 Payment Card Data Leak

cybercrime

Jerry's Store, a card-checking service used by cybercriminals, exposed 345,000 stolen payment cards after leaving its server open, revealing sensitive...

2026-05345.0K records

Thomson Reuters 2026 SSN Exposure Lawsuit

technology|United States

Thomson Reuters, a multinational technology and information services company, is facing a class-action lawsuit filed on 2026-05-01 in the U.S. Distric...

2026-05

McGraw Hill 2026 Data Breach via Salesforce Misconfiguration

education|United States

In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt. The incident exposed over 100GB of data containin...

2026-0413.5M records

Finance Company 2026 Database Credential Exposure

finance

An unnamed finance company exposed database credentials by storing them in an Excel spreadsheet protected only with a weak password. The breach was di...

2026-04

Anthropic 2026 Claude Code Source Leak

technology|United States

Anthropic, a technology company specializing in AI development, experienced a source code exposure incident on March 31, 2026, when the Claude Code to...

2026-03

Lloyds 2026 App Glitch Data Exposure

finance|United Kingdom

Lloyds Banking Group, a major UK financial institution, experienced a data exposure incident affecting 447,936 customers. The breach occurred during a...

2026-04447.9K records
Page 1 of 2Next