| Website | https://XposedOrNot.com |
| Blog | https://blog.xposedornot.com/ |
| GitHub | https://github.com/DevaOnBreaches |
| Website | https://plus.xposedornot.com/ |
@XposedOrNot += KomikoAI Data Breach
The KomikoAI #databreach occurred in February 2026 when the AI-powered comic generation platform was compromised, exposing 1M unique email addresses along with associated user content.
Exposed data: Email addresses, Names, User posts, AI prompts
Potential risks: Phishing, Targeted scams, and privacy breaches
Basic-Fit, Europe’s largest gym chain, says hackers accessed data of ~1M members across multiple countries. Exposed info includes names, contact details, DOB, and bank data. #databreach
Booking.com confirms a #databreach: hackers may have accessed some users’ booking data (names, emails, phone numbers, etc.).
The company reset PINs and notified affected users via email.
Here’s your weekly #databreach news roundup:
Hungarian government, Orrick Herrington & Sutcliffe, Rockstar Games, LAPD, and Eurail
https://blog.xposedornot.com/weekly-databreaches-roundup-week-15-2026/
@XposedOrNot += Hallmark Data Breach
The Hallmark #databreach occurred in March 2026 and involved an alleged breach and extortion incident impacting data stored in Salesforce, with 1.8M unique email addresses later published along with associated customer information.
Exposed data: Email addresses, Names, Phone numbers, Physical addresses
Potential risks: Phishing, Identity theft, Targeted scams, Privacy breaches
Nearly 800 Hungarian government email accounts and passwords were exposed across 12 ministries, mostly due to weak passwords and poor digital hygiene, not to advanced hacks. Sensitive roles affected.
https://www.bellingcat.com/news/2026/04/09/the-hungarian-government-passwords-exposed-online/
Silent Ransom Group hacked Orrick (after its 2023 #databreach), stole sensitive data via phishing/social engineering, and leaked it after rejecting a $1M offer as too low.
Rockstar Games reportedly targeted by ShinyHunters, claiming access to its Snowflake data via Anodot breach. Attackers allegedly used stolen tokens (not direct exploits) to extract data and threaten leaks by April 14. #databreach
https://hackread.com/shinyhunters-rockstar-games-snowflake-breach-anodot/
Hackers linked to World Leaks allegedly leaked ~7.7TB of sensitive LAPD-related data (personnel, investigations, legal files) via a breached third-party system tied to the LA City Attorney’s Office.
https://techcrunch.com/2026/04/08/hackers-steal-and-leak-sensitive-lapd-police-documents/
Eurail suffered a Dec 2025 #databreach exposing data of ~309K people (incl. passport details); stolen data is now for sale online, with a hacker claiming 1.3TB taken, impacting customers and programs like DiscoverEU, prompting security warnings and password resets.
https://therecord.media/eurail-reports-data-breach-impacting-over-300000
XposedOrNot
