Latest Data Breach news

CERT-EU traced the European Commission's cloud breach to a poisoned Trivy build pushed by TeamPCP on March 19. AI startup Mercor confirmed a separate hit via LiteLLM. ShinyHunters and Lapsus$ are now publishing stolen data from both victims.

Roughly 100 GB of customer data reportedly stolen from Crunchyroll through a compromised Telus Digital employee in India. The breach traces through a three-link supply chain starting with the 2025 Salesloft Drift compromise. Crunchyroll has been silent for 11 days.

A back-button bypass in Companies House WebFiling exposed directors' home addresses and birth dates across five million UK businesses for five months. Unauthorized filings appeared possible. Broken access control ranks #1 on the OWASP Top 10.

Threat actor "korea" published OptimizerAI's full database: 118,000 user records linking Google and Discord profiles, plus 1.1 million AI-generated sound effects.

Identity theft kit for the price of a laptop. A dark web broker is selling full root access to a US tax service with 15 years of client history. The cost? Just $3,000. Why this low-cost entry point is a …