Data Breaches
Nikkei Dev System Credential Leak Exposes 1.8M Records, 150K With PII, No Cards Compromised
Japanese media group Nikkei says hackers used stolen logins to access a development system, exposing personal data for over 1.8 million people.
Data Breaches coverage from DataSafe Radar holds 20 articles, 14 of them reference guides. The newest was published on October 20, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include Have I Been Pwned and NIST Cybersecurity Framework.
Japanese media group Nikkei says hackers used stolen logins to access a development system, exposing personal data for over 1.8 million people.
An online group claims to have published thousands of banking documents, but the bank has not confirmed if the files are genuine or how they were obtained.
An outsider accessed the membership system of the Japanese fast-food chain, leaking names, emails and phone numbers without compromising payment details.
A misconfigured database belonging to Vibetech exposed millions of records containing sensitive data from previous security incidents involving major organizations.
Personal records including Social Security numbers were compromised in a data theft affecting more than one million residents of Texas.
A massive collection of internal production files, storyboards, and character rigs is circulating online, raising concerns about studio data security.
Database activity monitoring reveals hidden data theft that network tools miss, but it cannot stop attacks that happen before queries reach the server.
Most credential leaks stem from predictable configuration errors and human habits that attackers automate to bypass basic security controls.
Encryption in transit protects data from network eavesdropping but fails to stop attackers who compromise the endpoints where data is created or consumed.
ISO 27701 adds privacy controls to ISO 27001 security, but the real complexity lies in managing the gap between generic security and specific data subject rights.
Encryption transforms readable data into unreadable code, ensuring that stolen files or intercepted network traffic remain useless to attackers without the specific decryption key.
Combo lists combine usernames and passwords from different sources, allowing attackers to bypass security that relies on unique credentials for every service.
Dark web monitoring scans hidden networks for leaked credentials, revealing that compromised data often circulates long before an organization detects the intrusion through traditional logs.
Exposed API keys grant immediate system access without passwords, making them faster to exploit than stolen login credentials and harder to detect until damage occurs.
Most credential dumps contain passwords that users have reused across multiple unrelated services, turning a single leak into a systemic identity crisis.
Breach notification laws require companies to disclose how data was lost, not just that it was lost, giving you specific clues about your personal risk level.
Most data leaks occur after someone leaves because access rights linger on dormant accounts that attackers find easy to exploit.
Offboarding fails because identity systems update at different speeds, leaving a window where former staff still hold valid access keys.
Email encryption protects data in transit but fails to stop attackers who already have access to your inbox or your device.
File integrity monitoring reveals hidden configuration drift and unauthorized code changes that traditional antivirus software consistently misses.