Loading page…
Double Counter, a Discord server protection service, suffered a data breach in October 2026 affecting approximately 275,000 accounts, exposing email addresses, Discord usernames, and limited subscriber details.
Russian VPN service SplitVPN suffered a data breach in July 2026, exposing 865,336 unique email addresses along with IP addresses, location data, and partial payment card details.
Australian beauty retailer Oz Hair and Beauty had data on approximately 2 million customers exposed after an extortion attack by the group xpl0itrs in August 2026.
Manchester Airports Group disclosed a breach in August 2026 in which the FulcrumSec hacking group stole and published data on approximately 8.8 million customers of Manchester, Stansted, and East Midlands airports.
LimeLeads, a now-defunct B2B marketing leads service, exposed approximately 17.8 million unique email addresses and related corporate contact data in 2019 due to an unsecured Elasticsearch server.
Golf Canada had approximately 569,000 user records allegedly exposed in mid-2026, with the data later circulating on Telegram.
In August 2026, approximately 4.6 million unique Chess.com user records including names, usernames, email addresses, and geographic locations were posted online, with analysis suggesting the data was obtained through scraping.
Burger King Russia suffered a data breach in August 2024 affecting approximately 3.2 million customers, exposing personal details including names, email addresses, phone numbers, and dates of birth.
In April 2026, Zara was targeted by the ShinyHunters extortion group, exposing approximately 197,000 unique email addresses along with purchase and support ticket data linked to a compromise of the Anodot analytics platform.
Crunchyroll suffered a data breach in March 2026 affecting approximately 1.2 million email addresses, with additional personal information exposed from the company's Zendesk support system.
Carnival Corporation suffered a data breach affecting 7.5 million records from its Holland America loyalty program after ShinyHunters claimed to obtain and later published the data.
Turkish restaurant chain Baydöner suffered a data breach in March 2026 exposing over 1.2 million customer records including names, email addresses, phone numbers, and plaintext passwords.