State Bank of India KYC Data Breach — October 2026
375,000 customer KYC records claimed stolen by threat actor Siriusim; SBI has not confirmed breach.
Blog
Technical writeups, breach analyses, and security insights from the BreachHistory team.
CenterPoint Energy Customer Data Breach — October 2026
1+ million Texas customer records exposed; names, SSN, and driver's license stolen in utility breach.
ConnectWise Cloud Backup Supply-Chain Attack — October 2026
Compromised API credential exposed 173+ Microsoft 365 tenants; attackers accessed emails, files, and credentials.
ETS California K-12 Schools Breach — October 2026
7 million California student records exposed via compromised SFTP credential; four months of unauthorized access.
Georgia Power Customer Portal Breach — October 2026
Georgia Power, Alabama Power, and Mississippi Power exposed 400,000 customer records via compromised online portal.
Pattison Food Group More Rewards Breach — October 2026
More Rewards loyalty program breach exposes customer contact data for millions of Canadian cardholders.
Ledger Compromise: 335 Devices, Hardware Supply-Chain Attack, $86–102M Stolen
Ledger Flex devices modified with embedded malicious microcontrollers and cellular chips during supply chain; seed phrases exfiltrated; $86–102M in cryptocurrency drained on-chain.
OpenCode Breach: Console Users' AI Provider Keys Exposed
OpenCode disclosed a Console breach Oct 17, 2026 tied to a legacy system it was decommissioning, exposing linked OpenAI, Anthropic, and (reportedly) Google API keys for about 1.4% of Console users.
Yegaram Savings Bank: ~50K Customer Records Leaked
Yegaram Savings Bank confirmed ~50,024 customer records leaked after a Sep 30 server intrusion; FSS on-site Oct 13 after RRNs and accounts surfaced.
Korea Banks: ARTEX AI Tool in ~68K Customer Leaks
Korean banks confirmed a late-Sep 2026 leak wave touching ~68k people; probes cite ARTEX AI pentest tooling used by humans—not rogue AI—via partner systems.