Breach analysis, security insights, and practical tips to keep your data safe.
T-Mobile has suffered major breaches in 2018, 2019, 2020, 2021, 2022, and 2023. With hundreds of millions of records exposed, the pattern reveals systemic security challenges at one of America's largest carriers.
Read articleWhile massive database breaches dominated headlines a decade ago, today's threat landscape has fundamentally shifted. Stealer logs now account for 56% of all tracked breaches, creating a relentless stream of compromised credentials that threatens every online account you own.
Read moreA former AWS employee exploited a misconfigured web application firewall to steal the personal data of 106 million Capital One applicants and customers, including Social Security numbers and bank account numbers.
Read moreDespite decades of security warnings, 8,733 data breaches in our database still exposed passwords in plaintext—readable text that anyone can use immediately. This preventable vulnerability affects billions of accounts and reveals a shocking pattern of negligence.
Read moreAttackers spent four years inside the Starwood reservation system before Marriott discovered the breach. Passport numbers, credit cards, and travel histories of half a billion guests were exposed.
Read moreNearly 19 billion records sit in breach databases worldwide. The largest single incident—XSS.IS Combolist with 2.47 billion credentials—reveals how password reuse transforms individual hacks into catastrophic exposure chains that threaten everyone.
Read moreThe 2017 Equifax breach exposed Social Security numbers, birth dates, and addresses for nearly half the U.S. population. This breach changed the conversation about corporate responsibility for personal data.
Read moreWith 2.47 billion records, the XSS.IS Combolist remains the largest credential exposure in history. Leaked in February 2019, it contained usernames, email addresses, and plaintext passwords—a master key to digital identities worldwide.
Read moreIn the largest data breach ever recorded, Yahoo disclosed that all 3 billion of its user accounts were stolen. Here's what happened, why it matters, and what it teaches us about corporate cybersecurity.
Read moreStealer malware silently harvests saved passwords, session cookies, and autofill data from infected devices. Learn how info-stealers work, why they're more dangerous than traditional breaches, and how to protect yourself.
Read moreData breaches continue to grow in scale and sophistication. Here's what the current landscape looks like and how to protect yourself.
Read moreCredential stuffing attacks exploit password reuse across services. Learn why using the same password everywhere puts all your accounts at risk.
Read more