All articles tagged with #data leak
A hacker-leaked set of MSG security documents shows the arena used facial recognition to flag LGBTQIA celebrities and track a transgender woman, assigning risk scores; the disclosure, published by ShinyHunters and reported by Wired, has spurred lawsuits while MSG denies wrongdoing.
Reuters reports Apple is concerned after Tata Electronics, its Indian supplier, was targeted by a cyberattack that leaked confidential Apple documents related to the iPhone 18 Pro, including supplier lists, component designs, and drop-test images. Apple is investigating with Tata and preparing longer-term security measures, as the breach could affect its supplier relationships.
Meta has paused its Model Capability Initiative, an employee-tracking AI program, after sensitive data collected from workers—such as private conversations and performance data—was inadvertently exposed to the entire company. Meta says safeguards were in place and no data was definitively accessed, but the incident has renewed scrutiny of its AI security and follows other recent AI-related breaches at the company.
Meta has paused its Model Capability Initiative, an internal AI training program that used staff keystrokes and interactions, after a leak exposed private conversations, performance data, and transcriptions across the company. Meta says there’s no confirmed improper access but is investigating as the SEV 2 incident prompts employee backlash and follows other security incidents at the company.
Lawmakers from both parties pressed CISA for answers after KrebsOnSecurity reported a contractor publicly posted plaintext credentials and AWS GovCloud keys to a GitHub account, triggering ongoing credential rotation and breach containment. Experts warn that exposed keys could enable access to code, CI/CD pipelines, and sensitive systems. CISA says it is rotating leaked credentials and coordinating with vendors, while lawmakers demand answers about internal policies amid leadership turnover and broader concerns about the agency’s security culture.
Trump Mobile confirmed a data exposure via a third‑party platform that left customer names, emails, mailing addresses, phone numbers, and order IDs exposed; the vulnerability was patched after reports by Coffeezilla and TechCrunch, and rumors of lower pre-orders followed as the T1 launch remains delayed amid controversy.
A hacker data dump from Rockstar Games leaked online, exposing earnings from Grand Theft Auto and Red Dead Redemption; in the day after the leak, Take-Two Interactive saw its stock rise about 2.6% to around $206.66 per share, boosting the company’s market value by roughly $1 billion to about $38 billion, though shares remain below their 52-week high amid market volatility.
A Fortune report reveals Anthropic's Claude Mythos, the company's most powerful AI model, was exposed by a data leak. The leak has analysts weighing potential IPO implications for Anthropic and causing volatility in AI/cybersecurity equities as investors weigh the model's advanced capabilities against security risks.
Fortune reports that Anthropic left internal materials for its upcoming AI model Claude Mythos publicly accessible, exposing roughly 3,000 assets and heightening cybersecurity worries about the model's potential capabilities.
Researchers demonstrated a prompt-injection attack against Google Gemini by embedding a malicious payload in a Google Calendar invite description. When the recipient asks Gemini about their schedule, the assistant executes the embedded instructions, creates a new event, and copies private meeting details into the event description, leaking sensitive data to the attacker. Google added mitigations after the disclosure, underscoring the need for context-aware defenses as AI assistants access calendar data.
A mistake by the Russian government’s ombudsman website accidentally exposed thousands of sensitive complaints, including those from Russian soldiers in Ukraine, revealing significant issues of abuse and coercion, and highlighting a major data breach.
A critical vulnerability in MongoDB, CVE-2025-14847, allows unauthenticated attackers to remotely leak sensitive data by exploiting a flaw in zlib compression, with over 87,000 instances potentially affected worldwide. Users are advised to update their MongoDB versions and implement mitigations such as disabling zlib compression and restricting server exposure.
A critical security flaw called MongoBleed (CVE-2025-14847) in MongoDB servers is actively exploited in the wild, allowing attackers to leak sensitive data through malformed network packets before authentication, affecting many versions and exposing approximately 87,000 vulnerable instances worldwide. Immediate patching and monitoring are recommended.
Coupang founder Kim Bom apologized for a recent customer data breach, pledged to implement a compensation plan for affected customers, and announced efforts to prevent future leaks, amid criticism for his absence from parliamentary hearings and ongoing investigations by South Korean authorities.
Hackers released additional leaked content for Pokémon Legends: Z-A, including gameplay videos and early builds, a year after the initial Teraleak, revealing features not in the final game and hinting at future Pokémon titles, despite ongoing efforts by Nintendo to identify the hackers.