Top Security Breaches 2026-09-08
Auto-generated 2026-09-08T09:00:37.290625+00:00 (UTC)
-
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers’ Data It Said Was Deleted
Source: The Hacker News | Published: 2026-09-05T14:17:02+00:00 | Score: 19.266
Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach at its shipping provider ShipMonk.
The exposed information includes customer names, email addresses, phone numbers, shipping addresses, and order numbers between November 2019 and August 2021. The breach does not affect the security of the company’s hardware wallets
-
Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
Source: The Hacker News | Published: 2026-09-03T14:39:05+00:00 | Score: 18.671
Thomson Reuters disclosed on Wednesday that an unauthorized party obtained files from C-Track, the court case management platform sold by its West Publishing Corporation unit, in March 2026, affecting courts in 11 U.S. states, the U.S. Virgin Islands, and Ontario, Canada.
West Publishing said it discovered the activity on June 30, 2026. A subset of court records could contain individuals’ names
-
220 million traveler records exposed in Vietnam-linked APIS leak
Source: BleepingComputer | Published: 2026-09-08T07:35:50+00:00 | Score: 16.284
Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing names, passport numbers, dates of birth, nationalities, and flight details spanning 2017 to 2026. Researchers accessed the Vietnam-linked system through a cloud-based path using default credentials. […]
-
Mathspace discloses data breach affecting over 1 million people
Source: BleepingComputer | Published: 2026-09-07T13:05:11+00:00 | Score: 14.479
Online maths learning platform Mathspace disclosed over the weekend that attackers stole data from more than 1 million students, staff, and parents after breaching its Metabase internal reporting system. […]
-
Trezor data breach impact now reaches 81,000 customers
Source: BleepingComputer | Published: 2026-09-07T12:16:32+00:00 | Score: 14.17
Cryptocurrency hardware wallet maker Trezor says an August data breach at its shipping and logistics provider, ShipMonk, affects an additional 67,000 U.S. customers. […]
-
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
Source: The Hacker News | Published: 2026-09-05T16:52:33+00:00 | Score: 13.898
JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment.
“Cadence users should immediately revoke or rotate all credentials and secrets that may have been used to run their Cadence executions,” JetBrains said.
-
IDScan sued over alleged data breach affecting 153 million drivers
Source: BleepingComputer | Published: 2026-09-04T16:56:45+00:00 | Score: 13.422
Multiple lawsuits have been filed against identity verification company IDScan after hackers allegedly breached the service and offered to sell more than 153 million driver’s licenses. […]
-
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
Source: The Hacker News | Published: 2026-09-07T18:12:09+00:00 | Score: 12.355
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser.
“Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, bypassing Web Store checks and user prompts by forging Chromium’s own Secure Preferences
End of report.
