Data Breach
Ongoing coverage on Data Breach.
Latest coverage
Morning Safety Dance
The article discusses how prompt injection exploits design flaws in enterprise AI, targeting agents, RAG pipelines, and model routers. It also briefly mentions a data breach affecting up to 14.2 million email logins at six companies.
Saturday Safety Dance
Hackers claim to have leaked data stolen from Madison Square Garden. The extent and nature of the leaked information are not yet fully detailed.
Evening Safety Dance
A significant password-stealing attack has compromised approximately 75,000 Fortinet firewalls. The incident highlights a major cybersecurity vulnerability affecting a large number of devices.
Ransomware group wants $2 million from Nintendo for Tinypulse hack, Nintendo says its aware
A ransomware group is demanding $2 million from Nintendo after allegedly compromising HR data through a hack of the TinyPulse platform. Nintendo of America has acknowledged awareness of an issue involving TinyPulse but stated that no personal customer or financial information was affected.
Evening Safety Dance
Nintendo has stated that the stolen employee data by a hacker group is limited and outdated, despite a $2 million ransom demand. The company is investigating the extent of the breach.
Nintendo issues statement about recent data breach
Nintendo has confirmed a data breach impacting internal employee survey data from a third-party service, TinyPulse. The company stated that no personal customer or financial data was accessed, and Nintendo's own systems remain secure. The compromised information is limited to a small subset of employees' data from several years ago.
Hacker Group Claims To Have Stolen Nintendo Data, Posts $2 Million Ransom
A hacking group named ShadowByt3$ claims to have stolen 859MB of Nintendo employee data, including personal and financial information, and is demanding a $2 million ransom. The group alleges the data was accessed through a third-party HR program used by Nintendo. The company has not yet commented on the unverified breach.
Hacker Group Steals Nintendo Employee Data, Posts $2 Million Ransom
A hacking group named ShadowByt3$ claims to have stolen 859MB of Nintendo employee data, including personal information and financial statements, via the third-party HR service TinyPulse. The group is demanding a $2 million ransom. Nintendo of America confirmed a limited breach of internal survey data from several years ago, stating that no customer or financial data was compromised and that they are working with the service provider to address the issue.
Rumor: Nintendo hit with data breach, hacker steals 859MB of data via TINYpulse
A hacker claims to have stolen 859MB of data from TINYpulse systems, potentially affecting Nintendo employees. The stolen data reportedly includes employee names, emails, surveys, analytics reports, and financial documents like bank statements and W-9 forms. This alleged breach follows previous security incidents involving Nintendo and Game Freak.
Hacker claims to have stolen Nintendo HR data from TINYpulse systems
A hacker claims to have stolen approximately 859MB of Nintendo Human Resources data from the TINYpulse system. The stolen data reportedly includes employee names, email addresses, surveys, analytics reports, bank statement PDFs, W-9 forms, and workplace feedback.
Anemoi Leak Caused by VisualArts Server Breach
VisualArts announced a data breach of its cloud storage, which led to the leak of the visual novel Anemoi and potentially thousands of personal data entries. The company discovered the leak on April 19, 2026, after unauthorized access to its cloud storage via an intracompany portal. VisualArts has temporarily taken down its VA Store website and reported the incident to the Japanese government.
A Leak Just Forced Atlus To Acknowledge The Next Persona Game
Following a leak of in-development footage, Atlus and P-Studio confirmed a network intrusion where confidential information, including early development footage for the next Persona title, was stolen. The companies stated that development will continue as planned and they do not anticipate long-term effects on ongoing projects.
Dashlane says hackers stole password vaults via a 'brute force attack'
Dashlane reported that hackers successfully breached approximately 20 password vaults using a brute force attack. The company is investigating the incident and working to secure affected accounts.
Popular GTA Online cheat provider hacked, leaving 64,000 mod menu users with their personal data shared online
A popular Grand Theft Auto Online mod menu service, Atlas, has reportedly suffered a data breach, exposing the personal information of nearly 64,000 users, including email addresses, usernames, and IP addresses. The breach occurred last month, and while Atlas advertises strong security, there has been no official statement on their website regarding the incident. Rockstar Games and Take-Two Interactive have a history of cracking down on GTA Online modding services.
California sues 23andMe over 2023 data breach that affected 7 million users
California Attorney General Rob Bonta has filed a lawsuit against 23andMe following a 2023 data breach that compromised the personal information of 7 million users. The compromised data was subsequently found for sale on the dark web.
Trump Mobile has exposed customers' personal data, including home addresses and phone numbers
Trump Mobile has confirmed a data leak that exposed customers' personal information, including home addresses and phone numbers. The breach was discovered after individuals found their data publicly accessible.
Devs, be careful what you plug in: GitHub security breach was apparently facilitated by a 'poisoned Visual Studio…
GitHub has reported a cyberattack resulting in unauthorized access to its internal repositories. While customer information does not appear to be compromised, the platform confirmed that the attacker's claims of exfiltrating approximately 3,800 repositories are consistent with their investigation. Hacker group TeamPCP has claimed responsibility, but stated their motivation is not extortion, and they are seeking buyers for the data or will leak it for free.
Discord just got the privacy feature it probably should have had for years, introducing end-to-end encryption for very…
Discord has implemented end-to-end encryption for all voice and video calls, a feature it had been experimenting with since 2023. The company developed its own open-source encryption protocol called DAVE, which was rolled out across desktop, mobile, browser, and console platforms by March 2026. This move enhances user privacy following past concerns about data breaches and proposed age verification measures.
Teaching software company strikes a deal with hackers to get customer data back, defying FBI guidance
Education technology company Instructure has reached an agreement with the hacker group ShinyHunters, who exfiltrated hundreds of gigabytes of data from its Canvas learning management system. The stolen data, potentially exposing the names, email addresses, and private messages of about 280 million users, has reportedly been returned and confirmed as destroyed. This action defies FBI guidance that advises against paying ransoms to cybercriminals.
Morning Safety Dance
The company Canvas reported that data stolen in a hack affecting thousands of schools has been returned. Separately, Google discovered the first AI-developed zero-day exploit that bypasses two-factor authentication, utilizing self-morphing malware and Gemini technology.