Breach Intelligence

6,875

Total breached databases

In December 2022, Ban Leong Technologies allegedly suffered a ransomware attack attributed to the Mallox group, after which internal files were published online. Ban Leong Technologies is a Singapore-based distributor of IT accessories, audio-visual and data storage products. Reports suggest the leaked material is an internal file share of spreadsheets, accounting records and correspondence, exposing approximately 5,700 email addresses belonging to employees, dealers and vendors.
  • Date: Dec 2022
  • Domain: banleong.com
  • Threat Actor: Mallox
  • Country: Singapore
  • Category: Technology
  • Data: Email Addresses
  • Records: 5,734
  • Lines: 138,635,533
  • Size: 10.64 GB
  • Passwords: No
In December 2025, Chrysler (chrysler.com) allegedly suffered a data breach. Chrysler is an American automaker and a subsidiary of Stellantis. Reports suggest the Everest ransomware group exfiltrated more than 1 TB of internal data and released it in January 2026 after its ransom deadline passed. It has been reported that the published files expose records on approximately 2.5 million individuals, including current and former employees, fleet and business customers, dealers and parts-store customers. The compromised data reportedly includes names, email addresses, phone and fax numbers, physical addresses, internal usernames, job titles and employment status, company information, vehicle identification numbers and, for a small number of Brazilian accounts, government-issued tax IDs. No passwords were included.
  • Data: Email Addresses Names Phone Numbers Physical Locations Geographic Locations Usernames Government IDs Genders Site Activity Job Information Company Information Fax Numbers Vehicle Information
  • Records: 2,563,453
  • Lines: 2,707,835
  • Size: 642.72 MB
  • Passwords: No
In December 2021, FastFood.bg, a Bulgarian online food ordering and delivery platform working with restaurants in Varna, Sofia and other cities, allegedly suffered a data breach. Reports suggest that a full copy of the platform's database was obtained and later shared on hacking forums during 2022. The exposed data reportedly comprises approximately 445,000 customer order and account records, covering around 90,000 unique phone numbers and 14,700 email addresses, and includes names, delivery addresses, geographic coordinates, order information, usernames, social profile identifiers, restaurant company details and MD5 password hashes.
  • Date: Dec 9, 2021
  • Domain: fastfood.bg
  • Threat Actor: KYP Nothic
  • Country: Bulgaria
  • Category: Food
  • Data: Email Addresses Passwords Names Phone Numbers Physical Locations Geographic Locations Usernames Government IDs Site Activity Social Profiles Company Information
  • Records: 444,494
  • Lines: 4,399,317
  • Size: 3.01 GB
  • Passwords: MD5
  • Cracked: 0%
In March 2026, Traedex.com, a Brazilian cryptocurrency trading platform offering automated trading through broker (Vertex) integration, allegedly suffered a data breach. It has been reported that approximately 66,000 users had their information exposed. The compromised data allegedly included email addresses, names, phone numbers, Brazilian national ID numbers (CPF), IP addresses, and salted MD5 password hashes.
  • Date: Mar 4, 2026
  • Domain: traedex.com
  • Country: Brazil
  • Category: Cryptocurrency
  • Data: Email Addresses Passwords Names Phone Numbers Geographic Locations Government IDs IP Addresses Site Activity Device Information
  • Records: 85,515
  • Lines: 2,899,805
  • Size: 129.46 MB
  • Passwords: MD5 Salted
  • Cracked: 0%
In 2022, Gartel (gartel.es) allegedly suffered a data breach. Gartel is a telecommunications operator based in Rota, Cádiz (Spain) that provides broadband, fibre, mobile and TV services in the Rota, Chipiona and El Puerto de Santa María area. Reports suggest that a backup of the company's RADIUS subscriber-authentication database was exposed, affecting approximately 16,600 subscriber accounts. The compromised data reportedly includes subscriber names and usernames, plaintext passwords, national ID numbers (DNI/NIE), company names and tax IDs, service plans, IP addresses and router MAC addresses.
  • Date: 2022
  • Domain: gartel.es
  • Country: Spain
  • Category: Telecommunications
  • Data: Passwords Names Geographic Locations Usernames Government IDs IP Addresses Site Activity Company Information Device Identifiers Device Information
  • Records: 16,584
  • Lines: 55,360,209
  • Size: 8.74 GB
  • Passwords: Plaintext
In June 2026, Glendale Community College, a public community college in Glendale, California, allegedly suffered a data breach after being targeted in a ShinyHunters "pay or leak" extortion campaign. Reports suggest that data obtained from the college's PeopleSoft Campus Solutions systems was subsequently published online, exposing nearly 800,000 individuals, predominantly relating to student enrolments. It has been reported that the exposed records included email addresses, names, phone numbers, geographic addresses, usernames, Social Security numbers, birthdates, genders and ethnicities.
  • Data: Email Addresses Names Phone Numbers Physical Locations Geographic Locations Usernames Government IDs Social Security Numbers Genders Birthdates Ethnicities
  • Records: 52,870,668
  • Lines: 83,489,124
  • Size: 6.58 GB
  • Passwords: No
In June 2026, Houston City College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from the college was later published publicly and included 832k unique email addresses along with names, addresses, phone numbers, academic records, and other personal information relating to both current students and alumni.
  • Data: Email Addresses Names Geographic Locations
  • Records: 913,939
  • Lines: 196,111,927
  • Size: 19.88 GB
  • Passwords: No

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.