JEDI-SEC | Security Research & Digital Defense

Category: Leaks & Breaches

  • Saudi intelligence officers

    An organizational chart and identity documents identifying hundreds of members of the General Intelligence Presidency (GIP), Saudi Arabia’s primary intelligence agency. The data was released by…

    Source: Distributed Denial of Secrets · 2026-10-14

  • NIUS

    The complete edit history of the extremist website NIUS.de, including unpublished articles and media attachments. NIUS is known for its far-right populist rhetoric, its agitprop reporting, and…

    Source: Distributed Denial of Secrets · 2026-10-14

  • Crunchbase data breach — 559,908 accounts

    Crunchbase data breach — 559,908 accounts

    In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters “pay or leak” extortion attempt. Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, largely belonging to leads and business contacts. Other data included names, physical addresses, phone numbers, job titles, employers and LinkedIn profiles. Crunchbase later confirmed that a threat actor had exfiltrated documents from its corporate network.

    • Breach date: 2026-01-22
    • Added to HIBP: 2026-10-14 06:01 UTC
    • Compromised accounts: 559,908
    • Compromised data: Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses, Social media profiles
    • Domain: crunchbase.com
    • Verified: Yes

    Source: Have I Been Pwned — Breaches · 2026-10-14

  • Weekly Update 525: AI Data Breach Hyperbole

    Weekly Update 525: AI Data Breach Hyperbole

    Weekly Update 525: AI Data Breach Hyperbole

    I remember the name of that AI doco now – The AI Doc: Or How I Became an Apocaloptimist. I was watching it on the long-haul flight home the other day, and what I found particularly engrossing was the polar-opposite opinions from a bunch of people: “it’s gonna kill us all” versus “it’s gonna make us all rich”, and so on. But to some extent, I can understand the gap between opinions when we’re all just speculating about the future. I have much less understanding for why people infatuate with hyping AI as a data breach monster when the evidence to date is quite the opposite. In fact, I’ve enjoyed sharing example after example of recent breaches perpetrated by kids with a telephone (vishing), while pointing out I haven’t seen a single one orchestrated by AI.

    Speaking of AI, a big thanks to this week’s sponsor who’s doing gtreat things in the agent observability space, Origin. The machines may not be dumping data that lands in HIBP (yet), but they do go off-script and Origin will help trace back precisely what happened when it all goes wrong.

    Weekly Update 525: AI Data Breach Hyperbole
    Weekly Update 525: AI Data Breach Hyperbole
    Weekly Update 525: AI Data Breach Hyperbole
    Weekly Update 525: AI Data Breach Hyperbole

    Source: Troy Hunt · 2026-10-13

  • Sharecare data breach — 318,185 accounts

    Sharecare data breach — 318,185 accounts

    In August 2026, the digital health company Sharecare was the target of a ShinyHunters “pay or leak” extortion campaign. The group subsequently published data it claimed was taken from Sharecare’s systems, containing 318k unique email addresses. Most of the data consisted of B2B sales and marketing records with names, physical addresses, phone numbers, job titles and employers. The data also included a small number of Brazilian health insurance plan members, including dates of birth, genders, marital statuses and CPF numbers (Brazilian taxpayer identification numbers).

    • Breach date: 2026-08-12
    • Added to HIBP: 2026-10-12 23:28 UTC
    • Compromised accounts: 318,185
    • Compromised data: Dates of birth, Email addresses, Employers, Genders, Government issued IDs, Job titles, Marital statuses, Names, Phone numbers, Physical addresses
    • Domain: sharecare.com
    • Verified: Yes

    Source: Have I Been Pwned — Breaches · 2026-10-12

  • Neogen data breach — 435,963 accounts

    Neogen data breach — 435,963 accounts

    In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters “pay or leak” extortion attempt. The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records and included 436k unique email addresses from mailing lists, employee records and other contacts.

    • Breach date: 2026-08-29
    • Added to HIBP: 2026-10-09 07:06 UTC
    • Compromised accounts: 435,963
    • Compromised data: Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses, Salutations
    • Domain: neogen.com
    • Verified: Yes

    Source: Have I Been Pwned — Breaches · 2026-10-09

  • CyrusOne data breach — 373,460 accounts

    CyrusOne data breach — 373,460 accounts

    In August 2026, data centre operator CyrusOne was the target of a ShinyHunters “pay or leak” extortion attempt. The group subsequently published data allegedly obtained from the company, which included 373k unique email addresses across records relating to users, sales leads and CyrusOne employees. The data largely consisted of corporate contact information, including names, physical addresses, phone numbers and job titles. It also included support tickets and other information related to the organisation’s operations.

    • Breach date: 2026-08-05
    • Added to HIBP: 2026-10-07 23:19 UTC
    • Compromised accounts: 373,460
    • Compromised data: Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses, Support tickets
    • Domain: cyrusone.com
    • Verified: Yes

    Source: Have I Been Pwned — Breaches · 2026-10-07

  • Double Counter data breach — 274,922 accounts

    Double Counter data breach — 274,922 accounts

    In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure notice, Double Counter advised that attackers gained access to a subset of its data. A corpus of data was subsequently published publicly and contained 275k unique email addresses and Discord usernames. A small number of records belonging to paying subscribers whose purchases were processed via Stripe were also present and included names, countries and postcodes.

    • Breach date: 2026-10-04
    • Added to HIBP: 2026-10-07 05:42 UTC
    • Compromised accounts: 274,922
    • Compromised data: Email addresses, Geographic locations, Names, Usernames
    • Domain: doublecounter.gg
    • Verified: Yes

    Source: Have I Been Pwned — Breaches · 2026-10-07

  • Trump Mobile

    A complete dump (3,615 users) of user information for Trump Mobile, an American mobile virtual network operator (MVNO) founded by by Donald Trump Jr. and Eric Trump. Research Trump Mobile’s latest…

    Source: Distributed Denial of Secrets · 2026-10-05