# cve.now: breaches

Breaches and ransomware attacks, newest first, each with its status, what was taken and every claim quoted from its source. Each line links the breach's Markdown page.

- [SZB-f701b8b81b](https://cve.now/SZB-f701b8b81b.md): Wyndham exposes customer data through hardcoded credential in customer app (Breach · Confirmed · Wyndham · customer app · Taken: Names, Email addresses · 2026-11-09)
- [SZB-e0d31900bd](https://cve.now/SZB-e0d31900bd.md): Wiz says attacker breached multiple Qubole customers' AWS accounts (Breach · Reported, not confirmed · Qubole · AWS IAM · Taken: Tokens and keys · 2026-11-09)
- [SZB-97dd5a7209](https://cve.now/SZB-97dd5a7209.md): Revolve says September cyberattack affected more than 1.5 million people (Breach · Confirmed · Revolve · 2026-11-09)
- [SZB-ee55e3721d](https://cve.now/SZB-ee55e3721d.md): SEGA discloses breach at newsletter provider ARARA exposing 2.2 million emails (Breach · Confirmed · SEGA · Arara Message · Taken: Email addresses · 2026-11-09)
- [SZB-9c13012bda](https://cve.now/SZB-9c13012bda.md): Amplifon Americas reports data breach affecting 1.3 million people (Breach · Confirmed · Amplifon Hearing Health Care · Taken: Names, Government IDs, Dates of birth +2 more · 2026-11-08)
- [SZB-f3cdbd0ed8](https://cve.now/SZB-f3cdbd0ed8.md): Iris Ohyama says data of about 7.7 million people may have been exposed (Breach · Confirmed · Iris Ohyama · Iris Plaza · Taken: Names, Home addresses, Phone numbers +3 more · 2026-11-08)
- [SZB-db26c70b7f](https://cve.now/SZB-db26c70b7f.md): Researchers find hundreds of public Artex AI pentest tool instances exposed online (Breach · Reported, not confirmed · Artex · 2026-11-07)
- [SZB-fe91205ead](https://cve.now/SZB-fe91205ead.md): Phishing campaign reportedly steals Microsoft and Google account credentials (Breach · Reported, not confirmed · Microsoft · SharePoint · 2026-11-05)
- [SZB-97fd8de188](https://cve.now/SZB-97fd8de188.md): QiAnXin XLab reports Linux backdoor hidden in Control Web Panel web server (Breach · Reported, not confirmed · Control Web Panel (CWP) · 2026-11-05)
- [SZB-58fbd93471](https://cve.now/SZB-58fbd93471.md): DigiCert warns of breach exposing customer data and identity documents (Breach · Confirmed · DigiCert · Taken: Names, Email addresses, Phone numbers +1 more · 2026-11-05)
- [SZB-238e596fa7](https://cve.now/SZB-238e596fa7.md): mSeven Software warns mSecure users after cyberattack reportedly exposed customer database (Breach · Confirmed · mSeven · mSecure · 2026-11-03)
- [SZB-6f72a161a5](https://cve.now/SZB-6f72a161a5.md): Xsolis reports phishing-linked breach affecting nine health systems (Breach · Confirmed · Xsolis · 2026-11-03)
- [SZB-49acf98068](https://cve.now/SZB-49acf98068.md): Chainstack reports unauthorized access to parts of its infrastructure (Breach · Confirmed · Chainstack · Taken: Names, Email addresses, Password hashes · 2026-11-03)
- [SZB-cd29ee2e79](https://cve.now/SZB-cd29ee2e79.md): DreamHost says hackers accessed its systems and customer session data for three months (Breach · Confirmed · DreamHost · File Manager · Taken: Tokens and keys, Email addresses · 2026-11-03)
- [SZB-f01d9b6350](https://cve.now/SZB-f01d9b6350.md): Frontline Education data breach reportedly affects over 1.3 million people (Breach · Confirmed · Frontline Education · Taken: SSNs, Government IDs, Health records · 2026-11-03)
- [SZB-b191afc8db](https://cve.now/SZB-b191afc8db.md): WorkOS says attacker accessed contact records and customer communication summaries (Breach · Confirmed · WorkOS · internal sales app · Taken: Email addresses, Names · 2026-11-02)
- [SZB-1b4b266e63](https://cve.now/SZB-1b4b266e63.md): Suntory Holdings says unauthorized access to external cloud service exposed data of about 100,000 people (Breach · Confirmed · Suntory Holdings Ltd. · Taken: Names, Email addresses, Phone numbers · 2026-11-02)
- [SZB-3a668ff545](https://cve.now/SZB-3a668ff545.md): DebugBear says DNS records were hijacked via its domain registrar (Breach · Reported, not confirmed · DebugBear · 2026-11-02)
- [SZB-c7aa11a23f](https://cve.now/SZB-c7aa11a23f.md): BTCPay Server maintainer warns of hot wallet thefts on outdated instances (Breach · Confirmed · BTCPay Server · 2026-11-02)
- [SZB-b401b3c6fd](https://cve.now/SZB-b401b3c6fd.md): Synology NAS users reportedly targeted again by C3RB3R ransomware (Ransomware · Reported, not confirmed · Synology · NAS devices · 2026-10-31)
- [SZB-a4df36c045](https://cve.now/SZB-a4df36c045.md): Northflank warns breach led to unauthorized use of customers' AI API keys (Breach · Reported, not confirmed · Northflank cloud hosting platform · Taken: Tokens and keys · 2026-10-31)
- [SZB-7d756337c8](https://cve.now/SZB-7d756337c8.md): Chainalysis confirms intrusion exposing non-sensitive customer data (Breach · Confirmed · Chainalysis · KYT · Taken: Names, Email addresses, Password hashes +2 more · 2026-10-31)
- [SZB-fd5da6a441](https://cve.now/SZB-fd5da6a441.md): Researcher reports Applebee's app exposed customer data via hardcoded database password (Breach · Reported, not confirmed · Applebee's mobile app · Taken: Names, Email addresses, Dates of birth +1 more · 2026-10-30)
- [SZB-06d1f3082a](https://cve.now/SZB-06d1f3082a.md): Resolve says hackers stole customer payment card data (Breach · Confirmed · Resolve · online shopping platform · Taken: Names, Payment cards, Home addresses · 2026-10-30)
- [SZB-8c692d7c3c](https://cve.now/SZB-8c692d7c3c.md): Binance reports breach; North Korea blamed for reported $6.3B theft (Breach · Confirmed · Binance · hot wallets · Taken: Tokens and keys · 2026-10-29)
- [SZB-2884815801](https://cve.now/SZB-2884815801.md): Japan Airlines says Amadeus passenger system breach exposed about 92,000 customers (Breach · Confirmed · Amadeus · Passenger Service System · Taken: Names, Bookings and travel details, Email addresses +2 more · 2026-10-29)
- [SZB-d172816815](https://cve.now/SZB-d172816815.md): Polymarket suspends trading after reported third-party compromise, per BleepingComputer (Breach · Confirmed · Polymarket prediction market platform · 2026-10-29)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/breaches
Site guide for agents: https://cve.now/llms.txt
