Data Breach Roundup (Oct 30 - Nov 5, 2026)
Applebee’s exposed customers’ personal data after leaving database password in app
Applebee’s has fixed a security flaw that allowed anyone to access the personal information of its registered customers, after a researcher found a password for an internal database inside Applebee’s mobile app. The exposed database contained customer names, email addresses (including whether or not the customer verified their email), dates of birth, phone numbers, and ZIP codes. The data also included veteran status, the number of times customers had logged in, when their accounts were created, and the IP addresses of their most recent log-ins, which can be used to reveal the person’s approximate location.
Zack Whittaker
Chainalysis discloses data breach from "offensive agentic techniques"
Chainalysis provides blockchain analytics tools used by law enforcement, government agencies, cryptocurrency exchanges, and financial institutions to trace cryptocurrency transactions and investigate crimes such as fraud, ransomware, and money laundering. The accessed data includes user IDs, full names, email addresses, and organizational role labels for users provisioned on the platform. Chainalysis is still determining which records were accessed for each organization and will provide a detailed breakdown once that analysis is complete.
Ax Sharma
Harvard University data breach exposed info of 851,000 accounts
This breach took place in November 2025, and the data was leaked in February 2026. It's just now being added to Have I Been Pwned. The data includes personal information of students, alumni, donors, staff, and faculty members, including email addresses, telephone numbers, home and business addresses, event attendance records, donation details, and "biographical information pertaining to University fundraising and alumni engagement activities."
Sergiu Gatlan
WorkOS says attacker used ARTEX AI to breach internal sales app
WorkOS is a developer infrastructure company that provides APIs, SDKs, and tools for integrating services such as enterprise authentication, single sign-on (SSO), user management, and identity management into applications. Data accessed by the attacker includes business contact details (names, email addresses, job titles, and company affiliations from the CRM systems); customer account histories (product usage and connection or directory health); customer communications (summaries and excerpts from sales calls, support discussions, and customer Slack conversations); and business account and relationship information (account histories, information about sales and customer relationship). The article did not specify the scale of the breach.
Bill Toulas
DigiCert data breach exposes customer information, identity documents
The certificate authority says the breach affected a small portion of its archived customer data, including names, business email addresses, phone numbers, and business addresses. For some people, the exposed records also contained personal identification documents, such as driver's licenses, passports, and utility bills. The article did not specify how many people were impacted.
Lawrence Abrams
Community Discussion