data breach
8 articles with this tag
What Leaked Was Less the Images Than the Information About Them — What Gyazo Users Should Do Today
A vulnerability in Gyazo's image upload server was exploited, leaking about 23.62 million user records and metadata on about 490 million images, mostly uploaded before January 2019. This site's view: change your password and stop reusing it — that is the minimum. What is easy to miss is that the leak covers information about the images rather than the images themselves: text read from screenshots (OCR), photo location data and upload IP addresses. If a screenshot showed a secret, revoke that secret.
Different Doors, Same Ending — What Japan's Four Biggest 2026 Breaches (KDDI, Aflac, Digital Agency, Sakura) Have in Common
KDDI (ISP mail platform, about 12.23 million people), Aflac Japan (about 4.4 million), Japan's Digital Agency (about 246,000 records) and Sakura Internet (up to about 1.36 million accounts). The ways in had nothing in common, yet KDDI, Aflac and Sakura all listed stronger detection in their remediation plans, and the Digital Agency case was caught through an anomaly in volume. This site's view: stop assuming the entrance can be sealed, and invest in noticing the only signals left when an attack looks like legitimate use — volume and time.
In 2026 the Breaches Came Through Valid Credentials, Not Vulnerabilities — A Cross-Case Read
Classified by entry path, the major Japanese incidents disclosed in August 2026 skew toward credential-led intrusion rather than exploited vulnerabilities. The shared trait: the victim's own servers were untouched and the way in was a legitimate door somewhere outside them. This site's conclusion — flawless vulnerability management stops none of this, so the centre of gravity has to move toward credential lifetime and scope, and an inventory of the vendors and SaaS that can reach your data.
MOVEit mass breach (2023) — how a SQL injection zero-day reached 2,700+ orgs, and how to defend
The entry was a SQL injection zero-day (CVE-2023-34362) in the internet-facing MOVEit Transfer. A web shell (LEMURLOOT) was planted and data was bulk-stolen from the backing database, hitting 2,700+ orgs and ~93.3M people. Most victims were pulled in indirectly because a vendor used MOVEit. In your environment: KEV fast-patching, minimize exposure, web↔DB least privilege and segmentation, vendor inventory and data minimization.
Where is an organization's security minimum? Six priorities worked back from Japan's 2026 breaches
An organization's 'minimum' should be set by where real incidents broke through, not by a product list. Line up Japan's 2026 incidents and the entry points differ — a VPN appliance, third-party software, a query feature, undisclosed — yet the holes that widened the damage converge on six: (1) close internet-facing devices on a deadline, (2) narrow maintenance, contractor and leaver accounts, (3) watch volume and time, (4) keep logs long enough to look back, (5) don't keep data you no longer need, (6) re-prioritise by KEV. This site's view: the minimum is deciding who notices, on which number, and when.
Capital One breach (2019) — how SSRF leaked 100M+ records, and how to defend
A single SSRF reached the metadata endpoint → over-privileged IAM temporary credentials → bulk S3 copy, leaking ~106M records. Every hop could have stopped it. In your environment: IMDSv2, IAM least privilege, and an allowlist for outbound fetches.
Codecov breach (2021) — when a 'trusted tool' in CI was hijacked and secrets leaked
A trusted CI tool (the curl|bash Bash Uploader) was altered upstream. Because your own code was untouched, it went unnoticed for ~2 months while CI secrets leaked; a checksum check caught it. In your CI: verify fetched artifacts, least-privilege secrets, rotation, egress monitoring.
Equifax breach (2017) — how an unpatched Apache Struts flaw leaked 147M people
The cause was a known, already-patched CVE (CVSS 10.0) left unapplied on a public system. An expired monitoring certificate hid the exfiltration for 76 days. In your environment: asset inventory, a patch SLA, machine monitoring, and healthy detection.