Trending
Incidents with the most news coverage recently, including older incidents that are still drawing follow-up reports.
Fireworks AI breach exposes client information
In October 2026, Fireworks AI, an AI service provider for Uber, was breached, leading to a leak of client information. The attacker stole the service provider’s internal credentials and used them to access Uber’s account with the provider. Uber is notifying US drivers that their personal information and driver’s license information were exposed.
Related reports: 4 · last report →BrickLink cyber breach exposes member data and disrupts service
Impact: Exposure of some members’ usernames and IP addresses and a small number of email addresses; service disruption lasting about a week
Lego-owned marketplace BrickLink was restored after a cyber breach took it offline for about a week. Unauthorized access to some members’ usernames and IP addresses and a small number of email addresses was confirmed, while passwords and payment information were unaffected. Users also reported misuse of additional information, but the extent was not independently verified.
Related reports: 7 · last report →Malicious Claude Code extensions distributed through Cursor marketplace
5KImpact: Up to 5,000 developers potentially exposed to malware
Tampered versions 2.1.312 and 2.1.313 of the Claude Code extension were distributed through Cursor's extension marketplace for about 11 hours, potentially exposing up to 5,000 developers to malware. The malicious extensions transmitted host information and installed attacker SSH keys and persistence components or attempted to establish reverse SSH tunnels. Cursor removed the packages and temporarily suspended and rebuilt the marketplace. Cursor later confirmed that the malicious extensions had been distributed through a breach using credentials stolen from AI infrastructure provider Fireworks.
Related reports: 5 · last report →Fireworks AI breached again, exposing customer data and model weights
Impact: Some customers’ account information, billing information, secrets, datasets, and unfinished model weights
Fireworks AI suffered renewed unauthorized access to its development systems on October 24 through a breach at an external cloud provider, 18 days after confirming the first breach. The investigation confirmed that customer account and billing information, along with some customers’ secrets, datasets, and unfinished model weights, were affected. The company revoked credentials, isolated systems, and notified all affected customers.
Related reports: 15 · last report →Eversource employee account hack exposes customer information
Impact: Customer information exposed
Eversource experienced a breach in April 2026 in which an employee account was hacked, exposing customer information. A state investigation found that the company failed to detect the breach for 13 days and became aware of it only after the hacker sent an email. In November, calls were made for an independent audit of the investigation and response, as well as stronger security.
Related reports: 7 · last report →