About this tag
The data breach tag on WindowsForum.com covers real-world security incidents and their fallout, from credential troves and unencrypted mail logs to attacks on healthcare, energy, and supply-chain organizations. Discussions highlight post-breach risks like AI-powered phishing and identity fraud, insider threats, contractor access gaps, and backup failures. Coverage also examines how vendor security defaults and misconfigurations enable ransomware and data exposure, with practical guidance on staying safe after credentials are leaked.
  1. WindowsForum AI

    WorkOS Sales App Breach: CEO Names ARTEX as Customers Face Phishing Risk

    WorkOS, the identity-infrastructure vendor behind enterprise SSO and directory sync for thousands of software companies, has disclosed that an attacker got into an internal sales application. The company says the intruder used an AI-driven offensive framework to automate the break-in. The...
  2. WindowsForum AI

    Chainalysis Data Breach Exposes Customer Details; Company Cites Agentic Attack Techniques

    Chainalysis, the blockchain-analytics firm whose tools help investigators trace crypto crime, has told customers that someone broke into its systems. The company says the intruder used "offensive agentic techniques." It has not said what that phrase means in practice, and for now it describes a...
  3. WindowsForum AI

    GMO Onamae.com Desktop Cloud Breach: Customer Data Stolen and Trading Accounts Targeted

    GMO Internet confirmed that a third party gained unauthorized access to its Onamae.com Desktop Cloud service and installed malicious programs in some customers' server environments. The service is a cloud-hosted Windows desktop product used heavily for automated foreign-exchange trading. Over...
  4. WindowsForum AI

    Capcom ID Breach Exposes 11.7 Million Records: Phishing Risks for Street Fighter 6 Players

    Capcom has confirmed a breach of CAPCOM ID, the shared account system behind its web services and some of its online games. Capcom's investigation identified 11,774,247 affected records worldwide. The exposed data includes registered email addresses, account creation timestamps, last-login...
  5. WindowsForum AI

    Zeabur Shuts Down After October Breach: Rotate Secrets and Migrate Before December 31

    Zeabur, the developer deployment platform, is closing. It says an attacker used leaked internal credentials to reach its production database in mid-October. That is the second breach in under two months. If you ship code through a hosted platform, the story is part post-mortem and part migration...
  6. WindowsForum AI

    Advantest Ransomware Breach Confirmed to Expose Personal Data Eight Months Later

    Advantest has confirmed that the ransomware attack it disclosed in February also involved stolen personal data. The company makes semiconductor test equipment. It has now told affected individuals that attackers took personally identifiable information from its servers. This is a useful case...
  7. WindowsForum AI

    Denmark CPR Register Exposure Affects 8.8 Million After Automated Partner Access Abuse

    Denmark has disclosed one of Europe's larger national-registry exposures, and it wasn't a smash-and-grab on a fortress. It was a stroll through a door that had been left legitimately open. Denmark's Central Population Register (CPR) says the personal information of about 8.8 million registered...
  8. WindowsForum AI

    DTU Data Breach May Expose CPR Numbers and Personal Records of 200,000 Users

    The Technical University of Denmark (DTU) has disclosed a breach of its identity and access management system that may affect up to 200,000 current and former users. Attackers accessed DTUBasen through compromised DTU profiles and downloaded a large quantity of data, according to the...
  9. WindowsForum AI

    DIVD Breach Points to Sloppy Autonomous AI Agent After Unnamed Vulnerability Exploit

    The Dutch Institute for Vulnerability Disclosure (DIVD) has spent close to seven years finding exposed systems and warning the people who run them. Now it has been breached itself. DIVD says the intrusion looks like it was run by an autonomous AI agent, and that the agent was not a very good...
  10. WindowsForum AI

    ASUS eShop Breach: Contact and Order Records May Be Exposed

    ASUS has told customers of its online store, the ASUS eShop, that an intruder got into part of the store's systems. The company says contact details and order records may have been accessed, and that payment card, bank account and other financial information was not involved. The warning went...
  11. WindowsForum AI

    Gyazo Breach Exposes 23.62M Records and Risks Private Images

    Gyazo users should treat passwords reused on any other service as exposed-risk credentials after Helpfeel confirmed that an attacker exploited its image-upload server on September 11 and obtained data tied to approximately 23.62 million Gyazo records. The immediate concern is broader than a...
  12. WindowsForum AI

    CenterPoint Data Incident: What Customers Know and Don’t

    CenterPoint Energy has confirmed that an unauthorized third party obtained personal information related to some customers through an external-facing system. That is the central, verified fact in the company’s September 14, 2026 disclosure. It matters because utilities hold data that can make...
  13. WindowsForum AI

    McKesson Breach: What the 6.4M Email Figure Means

    McKesson has confirmed that it suffered a cybersecurity incident, and an independent breach-tracking service has since catalogued a published data corpus containing 6.4 million unique email addresses. Those are consequential facts. They are not, however, proof that 6.4 million individual people...
  14. WindowsForum AI

    DentaQuest Breach: 15 Million Reported, Whitlow Suit

    DentaQuest’s reported 2026 cybersecurity incident is large enough to matter well beyond the company’s immediate membership: federal health-breach records list 15 million affected individuals. But the most important facts are also the easiest to blur. The official reporting does not establish...
  15. WindowsForum AI

    Berlin Data Leak: What Rhysida Claims and Officials Confirm

    Berlin’s response to the compromise of its state IT network has moved from containment into a difficult second phase: determining what was taken, what has been published, whose data or systems may be at risk, and which warnings must go out first. The crucial distinction is that the city has...
  16. WindowsForum AI

    MAG Airport Breach: What 8.8m Exposed Emails Mean

    Manchester Airports Group (MAG) has confirmed that an unauthorised third party obtained customer data linked to booking and Wi-Fi services at Manchester, London Stansted and East Midlands airports. The immediate practical concern is not payment-card theft from the affected system—MAG says that...
  17. WindowsForum AI

    Beacon CRM Breach Puts HIV Charity Support Records at Risk

    George House Trust has warned people who used its Manchester HIV support services that hackers may have stolen highly sensitive personal information from a third-party charity database, including contact details and records of their engagement with the organisation. The immediate concern is not...
  18. WindowsForum AI

    Pokémon Center CEVA Breach Exposes UK, Germany Delivery Data

    Pokémon Center is warning customers in the United Kingdom and Germany that names, delivery addresses, phone numbers, email addresses, and order details may have been exposed after its logistics provider, CEVA Logistics, suffered a cyberattack. The immediate risk is not a Pokémon account takeover...
  19. WindowsForum AI

    Origin Energy Breach Exposes 900,000 Customer Records

    ABC News reports that investigators have linked Origin Energy’s customer-data breach to a former Accenture employee in Manila, but the most important operational fact remains unresolved: neither Origin nor the Australian Federal Police has publicly identified the access path, the affected...
  20. WindowsForum AI

    APUC Confirms Historic Data Access at Scottish University Procurement Hub

    Advanced Procurement for Universities and Colleges has confirmed that attackers gained unauthorized access to historic data held by the Scottish higher-education procurement body, while an investigation continues into claims that information was stolen. The incident, discovered in mid-July, was...