Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot@infosec.exchange
Posts
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
SysAdmin Day gift from XposedOrNot: a breach-monitoring toolkit that is free and open source (MIT), end-to-end.
- check an address for breach exposure from a script, no API key
- RSS feed of newly indexed breaches
- verify your domain once, get alerts for every address on it
- Microsoft Sentinel connector if you live in a SIEM
Built by someone who did the job. Setup fits in a coffee break:
https://blog.xposedornot.com/free-breach-monitoring-toolkit-sysadmins
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Across the 770 breaches in the @XposedOrNot@infosec.exchange catalog, which industry shows up most often?
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Silent Ransom Group hacked Orrick (after its 2023 #databreach), stole sensitive data via phishing/social engineering, and leaked it after rejecting a $1M offer as too low.
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Hims & Hers confirms #databreach of third-party support system (Feb 4–7) via social engineering. Hackers stole customer tickets incl. names, emails + other personal data (medical records not affected).
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Drift Protocol hacked for ~$280M after attacker seized Security Council admin control via pre-signed txs + multisig manipulation (no smart contract flaw). DPRK-linked tactics suspected.
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Duc App (by Duales) exposed 360K+ sensitive files (passports, licenses, selfies, transactions) via a public, unencrypted Amazon storage bucket. #dataleak
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Mercor confirms #databreach tied to compromised LiteLLM supply chain attack (malicious PyPI versions live ~40 mins). TeamPCP linked to initial access; Lapsus$ claims 4TB stolen (PII, code, APIs).
https://hackread.com/ai-firm-mercor-breach-hackers-4tb-data/
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
ShinyHunters (UNC6040) issues “final warning” to Cisco ahead of Apr 3, 2026, threatening to leak 3M+ stolen Salesforce records + PII, AWS & internal data. Claims tied to vishing + cloud access. #databreach
https://hackread.com/shinyhunters-hackers-cisco-records-data-leak/
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
CareCloud disclosed a March 16 cyberattack that disrupted one EHR system for ~8 hours and exposed limited patient data. Systems are now restored, attackers removed, and an investigation is ongoing with external cybersecurity experts. #databreach
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Here’s your weekly #databreach news roundup:
Dutch National Police, European Commission, AFC Ajax, Crunchyroll, and Infinite Campus.
https://blog.xposedornot.com/weekly-databreaches-roundup-week-13-2026/
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Dutch National Police says a phishing attack briefly breached internal systems but was quickly contained.
Impact appears limited; no citizen or investigative data exposed. Probe and criminal investigation ongoing.
#databreach
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Threatactor ShinyHunters quits BreachForums post-FBI seizure, calling it “a waste of time,” and leaks updated data of 300K+ users. Warns all current forums are fake and threatens more massive data dumps. #databreach
https://hackread.com/shinyhunters-breachforums-leak-300000-user-database/
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
European Commission probes #databreach of an Amazon Web Services account after a hacker claimed to steal 350GB of data.
Attack was quickly contained; investigation ongoing.
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
AFC Ajax says a hacker exploited system flaws to access limited fan data and manipulate tickets & stadium bans. Issues were revealed by journalists tipped off by the hacker. #databreach
Sharing insights on data breach investigations, information security, & password best practices • @XposedOrNot
Crunchyroll is investigating claims that hackers stole data from about 6.8M users after compromising a support agent’s account via a third-party vendor. Exposed info mainly comes from support tickets, raising phishing risks. #databreach