Data Breach Observatory
Het dark web doorzoeken op lekken van gevoelige gegevens
Vier op de vijf kleine bedrijven zijn onlangs het slachtoffer geworden van een datalek. En een enkel incident kan een klein bedrijf meer dan $ 1 miljoen kosten. Waarom horen we dan niet meer nieuws over datalekken?
Proton wacht niet tot schendingen worden gemeld. In plaats daarvan gaan we rechtstreeks naar het dark web, leggen we lekken in realtime vast en delen we ze — en helpen we kleine bedrijven om zichzelf te beschermen.
Qantas Airways
What happened?
Australia's national airline Qantas Airways Ltd. was targeted by a group of hackers named Scattered Lapsus$ Hunters which launched a ransomware attack(nieuw venster). The company did not pay the ransom, leading to more than 11 million customer records being leaked on the dark web. Sensitive data including customer names, addresses, and email addresses were exposed, but no financial records appeared. Qantas announced that it has strengthened its security measures following the data breach.
Allianz Life
What happened?
In July 2025, hackers targeted the world's largest insurance company and Europe's largest financial services company Allianz(nieuw venster) and subsequently stole the personal information of 1 million Allianz customers and employees. Subsequently, information including names, dates of birth, physical addresses, phone numbers, email addresses, and Social Security numbers appeared in a data breach. The breach affected North American customers and employees, and Allianz disclosed the data breach in a legal filing in the US state of Maine.
Tracelo
What happened?
In September 2024, the data of more than 1.4 million customers(nieuw venster) of the mobile geolocation tracking service Tracelo was leaked on the dark web. A hacker known as Satanic leaked customer names, addresses, phone numbers, email addresses, and passwords following an attack on Tracelo, posting them on the cybercrime forum BreachForums. Tracelo does not appear to have addressed the breach.
INTERSPORT France
What happened?
In France, more than 100,000 customers of sporting goods retailer INTERSPORT(nieuw venster) had their personal data leaked on BreachForums. Data including names, addresses, phone numbers, and email addresses appeared online in June 2025. INTERSPORT advised that it was addressing the breach, but did not disclose whether it had notified French authorities of the breach.
Free
What happened?
France's second largest ISP and telephone provider Free(nieuw venster) confirmed in October 2024 that it had been targeted by a data breach. In May 2025, customer data appeared on the dark web: names, dates of birth, phone numbers, email addresses, and IBANs were all leaked. In total, more than 19.5 million records appeared online. The National Commission for Information Technology and Freedoms launched a sanctions procedure against Free in March 2025.
Orange Romania
What happened?
In February 2025, a hacker going by the name Rey obtained more than 3.4 million records from telecoms provider Orange's Romanian branch(nieuw venster). Data including customer names, dates of birth, addresses, phone numbers, email addresses, usernames, and ID numbers appeared on the dark web following a ransomware attack which Orange declined to pay. Orange is monitoring the attack along with The Romanian National Cybersecurity Directorate (DNSC).
Zacks Investment Research
What happened?
Chicago-based investment research company Zacks Investment Research(nieuw venster) was breached by hackers in June 2024. In February 2025, customer data including names, addresses, phone numbers, email addresses, usernames, and passwords appeared for sale online. The company has not yet addressed this breach, having now been affected by multiple data breaches in recent years.
SkilloVilla
What happened?
In July 2025, hackers targeted the world's largest insurance company and Europe's largest financial services company Allianz(nieuw venster) and subsequently stole the personal information of 1 million Allianz customers and employees. Subsequently, information including names, dates of birth, physical addresses, phone numbers, email addresses, and Social Security numbers appeared in a data breach. The breach affected North American customers and employees, and Allianz disclosed the data breach in a legal filing in the US state of Maine.
amai
What happened?
More than 10 million records stolen from Singapore-based eCommerce platform Amai appeared on the dark web in January 2025. Names, addresses, phone numbers, email addresses, and passwords were stolen from the company's customer database. It does not appear that Amai has acknowledged a data breach as of October 2025.
PhoneMondo
What happened?
In January 2025, more than 10.5 million records stolen from German telecommunications platform PhoneMondo appeared on the dark web. Sensitive data includes names, dates of birth, addresses, phone numbers, email addresses, usernames, passwords, and IBANs. As of October 2025, it doesn't appear that PhoneMondo has acknowledged the breach.
Zorg dat uw bedrijf niet op deze lijst komt te staan
Uw wachtwoorden en multifactorauthenticatie zijn uw eerste verdedigingslinie tegen hackers. Ontdek hoe duizenden leiders van kleine bedrijven wachtwoordbeheer stroomlijnen en hun gegevens beschermen.
Over het Data Breach Observatory
- Wat is het Data Breach Observatory
- Welke gegevens worden gelekt?
- Waarom nieuws over datalekken melden?
- Waar haalt u uw informatie vandaan?
- Schaadt het openbaar maken van recente datalekken de bedrijven niet?