====== Data Breaches during the Covid-19 Pandemic ======

==== 2020 ====

[[:Clearview AI]] Early 2020 / Late 2019 [[https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement|BuzzFeed Exclusvie]]

[[:SolarWinds]] Early 2020 https://www.techtarget.com/whatis/feature/SolarWinds-hack-explained-Everything-you-need-to-know

Zoosk January 2020 [[https://haveibeenpwned.com/PwnedWebsites#Zoosk2020]]

AWS Database of shopping data such as Amazon,eBay, Shopify & Stripe Feb 2020 https://nakedsecurity.sophos.com/2020/03/12/data-of-millions-of-ebay-and-amazon-shoppers-exposed/

Whisper Mar 2020 [[https://www.washingtonpost.com/technology/2020/03/10/secret-sharing-app-whisper-left-users-locations-fetishes-exposed-web/|Secret-sharing app Whisper left users’ locations, fetishes exposed on the Web]]


[[:Ledger]] June 2020 [[https://haveibeenpwned.com/PwnedWebsites#Ledger]]

Utah Gun Exchange July 2020 [[https://haveibeenpwned.com/PwnedWebsites#UtahGunExchange]]


Gravatar Oct 2020 [[https://haveibeenpwned.com/PwnedWebsites#Gravatar]]

Thingiverse Oct 2020 [[https://haveibeenpwned.com/PwnedWebsites#Thingiverse]]

[[:University of California]] Dec 2020 [[https://haveibeenpwned.com/PwnedWebsites#UC]]

Capital Economics Dec 2020 https://haveibeenpwned.com/PwnedWebsites#CapialEconomics

==== 2021 ====

Guns.com Jan 2021 [[https://haveibeenpwned.com/PwnedWebsites#GunsDotCom]]

Neopets January 2021 [[https://www.theguardian.com/technology/2022/jul/22/neopets-security-breach-users-data-reportedly-stolen|Neopets security breach: users’ data reportedly stolen]]

Android VPN Services February 2021 [[https://cybernews.com/security/one-of-the-biggest-android-vpns-hacked-data-of-21-million-users/|One of the biggest Android VPNs hacked? Data of 21 million users from 3 Android VPNs put for sale]]


[[:Parler]] Jan 2021 [[https://www.wired.com/story/parler-hack-data-public-posts-images-video/|An Absurdly Basic Bug Let Anyone Grab All of Parler's Data]]

[[:Gab]] Feb 2021 [[https://www.theguardian.com/world/2021/mar/11/gab-hack-neo-nazis-qanon-conspiracy-theories|Gab: hack gives unprecedented look into platform used by far right]]

[[:Premier Diagnostics]] Covid Testing Company March 2021 https://cisomag.eccouncil.org/premier-diagnostics-data-exposed/

Microsoft Exchange Mar 2021 [[https://www.nbcnews.com/tech/security/u-s-issues-warning-after-microsoft-says-china-hacked-its-n1259522|U.S. issues warning after Microsoft says China hacked its mail server program]]

Liker Mar 2021 https://haveibeenpwned.com/PwnedWebsites#Liker

[[:Meta]] (Facebook) August 2021 [[https://www.theverge.com/2022/11/28/23481786/meta-fine-facebook-data-leak-ireland-dpc-gdpr|Meta fined $276 million over Facebook data leak involving more than 533 million users]]

Guntrader July 2021 https://haveibeenpwned.com/PwnedWebsites#Guntrader

PeopleGIS July 2021 https://firewalltimes.com/amazon-web-services-data-breach-timeline/

AT&T August 2021 [[https://haveibeenpwned.com/PwnedWebsites#AllegedATT]]

T-Mobile Aug 2021 https://www.theverge.com/2021/8/18/22630446/t-mobile-47-million-data-breach-ssn-pin-pii

[[:Epik]] Sept 2021 [[https://haveibeenpwned.com/PwnedWebsites#Epik]]

[[:america_s_frontline_doctors|America's Frontline Doctors]] September 2021 [[https://theintercept.com/2021/09/28/covid-telehealth-hydroxychloroquine-ivermectin-hacked/|Network of Right-Wing Health Care Providers Is Making Millions Off Hydroxychloroquine and Ivermectin, Hacked Data Reveals ]]

Republican Party of Texas Sept 2021 https://haveibeenpwned.com/PwnedWebsites#RepublicanPartyOfTexas

Robinhood Nov 2021 https://haveibeenpwned.com/PwnedWebsites#Robinhood

BTC-Alpa Nov 2021 https://haveibeenpwned.com/PwnedWebsites#BTCAlpha

Zap-Hostine Nov 2021 https://haveibeenpwned.com/PwnedWebsites#ZAPHosting

Ontario Vaccine Data Nov 2021 [[https://www.thestar.com/news/gta/information-of-360-000-people-affected-in-ontario-covid-19-vaccine-data-breach/article_e6707fb5-eecb-54a5-9dbc-92a2607787ec.html]]

==== 2022 ====
[[:Twitter]] January 2022 https://haveibeenpwned.com/PwnedWebsites#Twitter

Crypto.com Jan 2022 https://www.vice.com/en/article/g5qj9j/cryptocom-says-incident-was-actually-dollar30-million-hack

[[:Toronto Health Network]] Feb 2022 [[https://www.cbc.ca/news/canada/toronto/scarborough-health-network-data-breach-1.6465355|Data breach at Toronto health network possibly exposed patient information, OHIP numbers]]

[[:GiveSendGo]] Feb 2022 during the [[:Freedom Convoy 2022]]

[[:Microsoft]] March 2022 [[https://firewalltimes.com/microsoft-data-breach-timeline/|Timeline]]

[[:Okta]] March 2022 [[https://www.cnn.com/2022/03/23/tech/okta-breach-acknowledgment/index.html]]

Cash App April 2022 https://techcrunch.com/2022/04/05/block-cash-app-data-breach/

Twilio June & August 2022 [[https://techcrunch.com/2022/10/28/twilio-june-data-breach/|Twilio hack investigation reveals second breach, as the number of affected customers rises]]

MemeChat June 2022 https://haveibeenpwned.com/PwnedWebsites#MemeChat

Samsung July 2022 [[https://www.cshub.com/attacks/news/samsung-warns-us-customers-of-data-breach|Samsung warns US customers of data breach]]

[[:Unjected]] July 2022 https://archive.is/uZrJC

Brand New Tube August 2022 https://haveibeenpwned.com/PwnedWebsites#BrandNewTube

DoorDash August 2022 https://haveibeenpwned.com/PwnedWebsites#DoorDash


[[:Uber]] September 2022 [[https://www.bu.edu/articles/2022/what-you-need-to-know-about-uber-data-breach/|Uber Users: What You Need to Know about Last Month’s Data Breach]]

Sequoia September 2022 [[https://www.wired.com/story/sequoia-hr-data-breach/|Popular HR and Payroll Company Sequoia Discloses a Data Breach]]

[[:KiwiFarms]] September 2022 [[https://arstechnica.com/information-technology/2022/09/kiwi-farms-has-been-breached-assume-passwords-and-emails-have-been-leaked/]]

Plex August 2022 [[https://www.spiceworks.com/it-security/data-security/news/plex-data-breach/Streaming Platform Plex Hit By Data Breach]]

LastPass August 2022 [[https://www.wired.com/story/lastpass-breach-vaults-password-managers/|https://www.wired.com/story/lastpass-breach-vaults-password-managers/]]

Medibank December 2022 [[https://www.theguardian.com/australia-news/2022/dec/01/medibank-hackers-announce-case-closed-and-dump-huge-data-file-on-dark-web|Medibank hackers announce ‘case closed’ and dump huge data file on dark web]]

[[:Gemini]] Dec 2022 https://haveibeenpwned.com/PwnedWebsites#Gemini

GunAuction.com December 2022 https://haveibeenpwned.com/PwnedWebsites#GunAuction

===== More information ===== 

   * https://haveibeenpwned.com/
   * https://ddosecrets.com/
   * https://en.wikipedia.org/wiki/List_of_data_breaches
   * https://firewalltimes.com/category/breaches/
   * https://www.wired.com/story/worst-hacks-breaches-2022/
   * https://www.visualcapitalist.com/cp/visualizing-the-50-biggest-data-breaches-from-2004-2021/
   * https://www.securitymagazine.com/articles/98716-the-top-10-data-breaches-of-2022