Surfshark VPN Breach Hit Test Servers, Not User Data
One server set up the wrong way gave an outsider a view into Surfshark's engineering systems. The breach at Surfshark VPN hit internal build files and a proxy machine. It never reached the live servers that carry user traffic, and customer accounts, browsing records, and encryption keys all sat well outside the affected system. Surfshark posted its own incident report
Vietnam APIS Data Leak Exposes 220 Million Traveler Records
Every international flight starts with a quiet data transfer. Airlines collect your passport number, date of birth and seat number. Then they send it all to border officials before you board. Passengers never see that handoff and cannot opt out. Researchers have now found one of those systems sitting wide open. The Vietnam APIS data leak placed more than 220
Carhartt Data Breach Exposes 12.9 Million Accounts
Millions of people who once ordered a jacket or a pair of work pants now have a security problem on their hands. The Carhartt data breach has pushed personal details from more than 12.9 million customer accounts onto a dark web leak site, and the exposed records go well beyond email addresses. Names, phone numbers, and home addresses sit in
Trezor Data Breach Exposes Nearly 14,000 Crypto Customers
Crypto owners buy hardware wallets so their private keys never touch the internet. That logic still holds. Yet the Trezor data breach exposed personal details for nearly 14,000 customers. Attackers never came close to the devices themselves. Instead, they walked in through a shipping company. The hardware wallet maker confirmed the incident on August 13, 2026, after its logistics partner
Pokémon Center Data Breach Hits UK and German Shoppers
Pokémon fans in the United Kingdom and Germany opened their inboxes this week to unwelcome news. The Pokémon Center data breach exposed personal details belonging to customers who ordered merchandise from the official online store. Attackers never touched Pokémon Center's own systems, though. They broke into CEVA Logistics, the shipping partner that handles deliveries for the site across both countries.
Polish Energy Plant Breach: Hackers Pivoted via Private APN
Investigators in Poland have now detailed a second victim from the destructive attacks that struck the country's energy sector in December 2025. The newly disclosed Polish energy plant breach hit a small combined heat-and-power facility that supplies warmth to roughly 50,000 residents. Attackers shut down its steam turbine and its process-water treatment system. Staff restored operations quickly, so people in
Meta AI Model Breach: Test Sandbox Leak Hit a Real Firm
Artificial intelligence labs keep sending their models against fake targets in controlled security tests. Occasionally the target turns out to be real. Meta has now confirmed that one of its AI models breached an outside organization during a cybersecurity evaluation, after the test environment failed to keep the system sealed off from the open internet. Reports point to Muse Spark
Amgen Data Breach Hits Cloud Systems, Exposes Patient Info
Amgen has confirmed that intruders stole patient health information and proprietary corporate data from cloud systems that outside vendors run on its behalf. The company spotted the unauthorized activity in July 2026 and disclosed it in a securities filing. So far, the Amgen data breach has no named culprit, no victim count, and no public explanation of how the attackers
Ernst & Young Data Breach Exposes Client Tax Documents
Ernst & Young, one of the world's largest professional services firms, is notifying clients about a data breach tied to a compromised support ticket system. The incident exposed documents containing sensitive tax information, and it adds EY to a growing list of major firms hit through vendor platforms rather than their own core networks. EY employs 406,000 people across more
KDDI Data Breach Exposes Email Data of 12 Million People
A single vulnerability in shared email infrastructure has triggered one of Japan's largest data breaches in recent memory. KDDI, the country's second-largest mobile carrier, confirmed that a security incident tied to its email platform has exposed personal information belonging to more than 12 million people. The KDDI data breach also touches customers of five smaller internet service providers that rely
