Topic
data-breach
9 stories
NEAR AI breach: SGLang flaw let attacker read user account details and live requests
NEAR AI says an attacker used a remote code execution flaw in the open-source SGLang inference engine to pull account details for about 100 users and access 18 legacy agents before access was contained.
Gnosis Pay Says Hackers Took Customer Data From the Card System It Was Already Shutting Down
Gnosis Pay says attackers accessed customer data on the legacy system behind its own-branded cards on Nov. 3, but has not disclosed how many users or what information was exposed.
Chainalysis says an AI-assisted hacker accessed customer names and emails
Chainalysis disclosed that an AI-assisted hacker breached its systems this month and accessed non-sensitive customer data — names, emails, user IDs and role labels — while the firm separately tracks the roughly $6.3 billion Binance theft.
Revolut says attacker used a real government email domain to pry customer KYC and Bitcoin transaction data loose
Revolut says an attacker used a legitimate government agency email domain to submit fraudulent data requests, exposing affected customers' KYC documents and full transaction histories, including Bitcoin activity.
Trezor's ShipMonk breach balloons: 67,000 more customers exposed, records that should have been deleted
Trezor now says roughly 67,000 more U.S. customers had personal data exposed in a breach at its former shipping partner ShipMonk, far more than the ~14,000 it disclosed in August.
Israeli broker Bits of Gold says vendor breach exposed data on 200,000 customers
Bits of Gold says a hacker reached a third-party analytics vendor and took names, national ID numbers and bank details for roughly 200,000 customers — about 80% of its user base — with no funds or keys touched.
SafePal says 39,798 customers' names and addresses were exposed by an order-tracking flaw
Hardware wallet maker SafePal says an authorization flaw in an order-tracking plug-in exposed names, addresses and contact details for 39,798 customers who ordered between March 2025 and April 2026.
Trezor customer data exposed through a shipping partner, Decrypt reports — scope still undisclosed
Decrypt reported on August 13 that Trezor customer data was exposed via a third-party shipping provider, with the partner's identity, the affected record count and the data fields all still undisclosed.
Trezor customer addresses exposed in breach at shipping contractor ShipMonk
Trezor says a breach at logistics contractor ShipMonk exposed names and contact details of roughly 13,700 customers, including home addresses and phone numbers for 11,742 of them.