Have I Been Pwned

Carnival Corporation confirmed a data breach affecting nearly 6 million people, caused by a social engineering attack on a single user account. The breach exposed personal data including names, addresses, email addresses, phone numbers, dates of birth, and government-issued IDs. Leaked data also impacted Holland America's loyalty program, potentially affecting non-Carnival customers.

Atlas Menu, a Grand Theft Auto V and Counter-Strike 2 cheat service, experienced a data breach in May exposing 64,000 email addresses, usernames, IP addresses, passwords, and internal records. An attacker leaked the database on GitHub, claiming access to all Atlas systems, while users noted this breach contained more sensitive data than prior incidents.

ShinyHunters leaked 4.9 million Charter Communications customer records, including names, email addresses, phone numbers, and physical addresses, after the company allegedly refused their extortion demands. Charter confirmed an investigation but claimed no sensitive data was exfiltrated, while the breach is part of a broader pattern of ShinyHunters targeting organizations, including a recent Carnival Corporation data theft.

The ShinyHunters extortion gang stole personal information from 4.9 million accounts after hacking U.S. telecom company Charter Communications. The breach was reported by data breach notification service Have I Been Pwned.

7-Eleven experienced a data breach exposing 185,000 unique email addresses and personal information like names, dates of birth, and physical addresses. The breach, linked to a 2026 extortion campaign by ShinyHunters, involved unauthorized access to systems storing franchisee documents, not customer purchase data.

Carnival Corporation confirmed a data breach affecting nearly 6 million customers after a social engineering attack on April 14. Hacking group ShinyHunters claimed to have stolen terabytes of data, including personal information like names, addresses, and identification numbers. Carnival is offering free credit monitoring to affected individuals and has enhanced its security measures.

The ShinyHunters extortion gang hacked 7-Eleven's systems in April, stealing personal information of over 183,000 people, as reported by Have I Been Pwned.

Spanish fast-fashion retailer Zara experienced a data breach, exposing personal information of 197,000 customers. Hackers gained access to Zara's databases, stealing sensitive customer data. The breach was reported by data breach notification service Have I Been Pwned.

The ShinyHunters extortion gang hacked Vimeo, exposing personal information of 119,000 people. The breach occurred in April and was reported by Have I Been Pwned. Personal data was stolen from the online video platform.

A breach at a third-party analytics vendor has exposed the email addresses of over 119,000 Vimeo users. The breach is attributed to a vulnerability in the systems of Anodot, an analytics supplier. No login or payment card data was compromised.

A breach at Vimeo has exposed 119,000 email addresses due to a third-party analytics vendor, Anodot. The incident was claimed by ShinyHunters, who added Vimeo to its hit list and dumped the data after a deal was not struck. Vimeo confirmed the breach, stating that technical data, video titles, and metadata were stolen.

Amtrak's data breach exposed over 2.1 million customer records, including email addresses, names, and support interactions, with potential totals reaching 9.4 million. The dataset was linked to ShinyHunters, a group targeting cloud-based systems like Salesforce, and added to Have I Been Pwned on April 17, 2026.

Pitney Bowes, a logistics technology company, has allegedly suffered a data breach exposing 8.2 million email addresses, along with names, phone numbers, and physical addresses. The leak is attributed to Shiny Hunters, a group known for pay-or-leak ransomware attacks.

Home security company ADT experienced a data breach where the ShinyHunters extortion group stole personal information from 5.5 million individuals, as reported by data breach notification service Have I Been Pwned.

Carnival Corporation, the world's largest cruise company, is facing a data breach involving 7.5 million email addresses linked to one of its subsidiaries, as flagged by Have I Been Pwned. ShinyHunters, a breach-hunting group, claims responsibility for the leak.