Helping individuals & organizations detect breached credentials before attackers use them for account takeover & ransomware. | Founder https://xitter.cf/t.co/ZRkBIIQDDB
Check your data breaches 👉
Joined July 2017
- Tweets5K
- Following6.8K
- Followers10K
- Likes562
Pinned Tweet
Today I launched My Dashboard for XposedOrNot. A simpler way to track your digital exposure and stay ahead of new breaches.
Feedback is always welcome. 👇
blog.xposedornot.com/introdu…
ALT My Dashboard
Quest Diagnostics confirms a cyberattack on its Quanum lab testing platform that exposed sensitive patient records and personal health information. #DataBreach
techcrunch.com/2026/10/23/la…
Crime Stoppers suffered a massive #databreach exposing over 1.5 million Canadian crime tips spanning 25 years. More than 850K records contained information, including names, addresses, phone numbers, and emails, putting tipster safety at risk.
cbc.ca/news/investigates/can…
Capcom confirms a cyberattack on its CAPCOM ID service, exposing 11.7 million+ customer email addresses, IP addresses, and login data. Hackers also changed passwords for 196 accounts. Passwords for other users and payment details remain safe. #databreach
bleepingcomputer.com/news/se…
DevaOnBreaches retweeted
@XposedOrNot += Gîtes de France Data Breach
The Gîtes de France #databreach occurred in May 2026 when several departmental branches of the French holiday rental network were compromised. The incident exposed 118K unique email addresses and associated customer and booking information.
ALT Gites De France data breach
DevaOnBreaches retweeted
@XposedOrNot += Assurance Retraite Data Breach
The Assurance Retraite #databreach occurred in September 2024 when France's national pension fund was compromised through a third-party partner. The incident affected approximately 370K beneficiaries, exposing 70K unique email addresses and associated personal and financial information.
ALT Assurance Retraite data breach
Educational Testing Service (ETS) suffered a #databreach exposing the personal information of millions of California public school students. Hackers used compromised credentials to steal names, birth dates, addresses, and more.
malwarebytes.com/blog/data-b…
FirstVDS, a Russian hosting provider, suffered a #databreach after hackers exploited a VMmanager 6 vulnerability, stealing customer passwords, cloud credentials, crypto wallets and sensitive files.
therecord.media/russia-cyber…
Anne Arundel County, Maryland, confirms hackers stole files in an August cyberattack. The Rhysida ransomware gang claims to have stolen 2.6 TB of data and demands a $2M ransom. #databreach
therecord.media/anne-arundel…
UK’s Legal Aid Agency (LAA) confirms hackers stole sensitive records dating back to 1978. The #databreach exposed personal, financial, criminal history and legal aid provider data, with ~250,000 records predating 2007.
bleepingcomputer.com/news/se…
Burger King Japan has confirmed a #databreach affecting 11.18 million app members. Stolen data includes names, phone numbers, emails, birth dates, and other personal details. No credit card leaks have been reported.
hackread.com/burger-king-jap…
DevaOnBreaches retweeted
@XposedOrNot += SuperVPN, GeckoVPN, and FlashVPN Data Breach
The SuperVPN, GeckoVPN, and FlashVPN #databreach occurred in February 2021 when the three free VPN services were reportedly compromised. The incident exposed over 20M records containing email addresses, login activity, and device information.
ALT SuperVPN & GeckoVPN data breach
Japan’s karaoke giant Daiichi Kosho disclosed a potential data exposure affecting 8.7M+ customer and employee records after malware infected contractor Nippon Columbia’s system.
Exposed data includes names, DOBs, emails, and phone numbers.
bleepingcomputer.com/news/se…
DevaOnBreaches retweeted
@XposedOrNot += Double Counter Data Breach
The Double Counter #databreach occurred in October 2026 when the Discord server protection service was compromised through a vulnerability in the Metabase analytics tool. The incident exposed 294K unique email addresses and associated Discord usernames.
ALT Double counter data breach
Medical device maker iRhythm disclosed a cyberattack that exposed the personal and medical-related information of at least 368K people.
Stolen data includes patient details, insurance numbers and device serial numbers. #databreach
therecord.media/irhythm-data…
Denmark’s Central Population Register has suffered a major #databreach, exposing names, addresses and CPR numbers of 8.8 million people, about 80% of its records.
helpnetsecurity.com/2026/10/…
DevaOnBreaches retweeted
@XposedOrNot += Angel One Data Breach
The Angel One #databreach occurred in April 2023 when the Indian stock brokerage firm was compromised. Data later leaked online exposed 7.9M user records, including 6.8M unique email addresses and associated personal and financial information.
ALT Angel one data breach
Double Counter, a Discord security bot used by 600K+ communities, suffered a multi-stage breach. Attackers exposed up to ~1M emails, Discord IDs/usernames, IP/coarse location data and some payment details, and used a stolen bot token to post phishing links in ~50 servers. #databreach
gameloop.gg/articles/discord…
Nikkei says attackers breached two employee email accounts in recent months. One exposed personal data of 1,646 employees and business partners; another was used to send 9,000 phishing emails to staff and interviewees.
bleepingcomputer.com/news/se…
Oracle Health suffered a cyberattack that exposed personal data of nearly 20 million people, including Social Security numbers, addresses and medical information. #databreach
cnet.com/tech/services-and-s…
ASOS is investigating “unauthorised activity” after hackers used its app to send an “ASOS HACKED” notification to customers. The company says some basic personal data may have been accessed, while experts call the incident a brazen extortion attempt.
bbc.com/news/articles/cj62yl…
