Obserwatorium naruszeń danych
Przeszukiwanie dark webu w poszukiwaniu wycieków danych wrażliwych
Cztery na pięć małych firm doświadczyło w ostatnim czasie naruszenia danych. Pojedynczy incydent może kosztować małą firmę ponad 1 milion dolarów. Dlaczego więc nie słyszymy więcej wiadomości o naruszeniach danych?
Proton nie czeka na zgłoszenia naruszeń. Zamiast tego przechodzimy bezpośrednio do dark webu, przechwytując i udostępniając wycieki w czasie rzeczywistym — i pomagając małym firmom się chronić.
Qantas Airways
What happened?
Australia's national airline Qantas Airways Ltd. was targeted by a group of hackers named Scattered Lapsus$ Hunters which launched a ransomware attack(nowe okno). The company did not pay the ransom, leading to more than 11 million customer records being leaked on the dark web. Sensitive data including customer names, addresses, and email addresses were exposed, but no financial records appeared. Qantas announced that it has strengthened its security measures following the data breach.
Allianz Life
What happened?
In July 2025, hackers targeted the world's largest insurance company and Europe's largest financial services company Allianz(nowe okno) and subsequently stole the personal information of 1 million Allianz customers and employees. Subsequently, information including names, dates of birth, physical addresses, phone numbers, email addresses, and Social Security numbers appeared in a data breach. The breach affected North American customers and employees, and Allianz disclosed the data breach in a legal filing in the US state of Maine.
Tracelo
What happened?
In September 2024, the data of more than 1.4 million customers(nowe okno) of the mobile geolocation tracking service Tracelo was leaked on the dark web. A hacker known as Satanic leaked customer names, addresses, phone numbers, email addresses, and passwords following an attack on Tracelo, posting them on the cybercrime forum BreachForums. Tracelo does not appear to have addressed the breach.
INTERSPORT France
What happened?
In France, more than 100,000 customers of sporting goods retailer INTERSPORT(nowe okno) had their personal data leaked on BreachForums. Data including names, addresses, phone numbers, and email addresses appeared online in June 2025. INTERSPORT advised that it was addressing the breach, but did not disclose whether it had notified French authorities of the breach.
Free
What happened?
France's second largest ISP and telephone provider Free(nowe okno) confirmed in October 2024 that it had been targeted by a data breach. In May 2025, customer data appeared on the dark web: names, dates of birth, phone numbers, email addresses, and IBANs were all leaked. In total, more than 19.5 million records appeared online. The National Commission for Information Technology and Freedoms launched a sanctions procedure against Free in March 2025.
Orange Romania
What happened?
In February 2025, a hacker going by the name Rey obtained more than 3.4 million records from telecoms provider Orange's Romanian branch(nowe okno). Data including customer names, dates of birth, addresses, phone numbers, email addresses, usernames, and ID numbers appeared on the dark web following a ransomware attack which Orange declined to pay. Orange is monitoring the attack along with The Romanian National Cybersecurity Directorate (DNSC).
Zacks Investment Research
What happened?
Chicago-based investment research company Zacks Investment Research(nowe okno) was breached by hackers in June 2024. In February 2025, customer data including names, addresses, phone numbers, email addresses, usernames, and passwords appeared for sale online. The company has not yet addressed this breach, having now been affected by multiple data breaches in recent years.
SkilloVilla
What happened?
In July 2025, hackers targeted the world's largest insurance company and Europe's largest financial services company Allianz(nowe okno) and subsequently stole the personal information of 1 million Allianz customers and employees. Subsequently, information including names, dates of birth, physical addresses, phone numbers, email addresses, and Social Security numbers appeared in a data breach. The breach affected North American customers and employees, and Allianz disclosed the data breach in a legal filing in the US state of Maine.
amai
What happened?
More than 10 million records stolen from Singapore-based eCommerce platform Amai appeared on the dark web in January 2025. Names, addresses, phone numbers, email addresses, and passwords were stolen from the company's customer database. It does not appear that Amai has acknowledged a data breach as of October 2025.
PhoneMondo
What happened?
In January 2025, more than 10.5 million records stolen from German telecommunications platform PhoneMondo appeared on the dark web. Sensitive data includes names, dates of birth, addresses, phone numbers, email addresses, usernames, passwords, and IBANs. As of October 2025, it doesn't appear that PhoneMondo has acknowledged the breach.
Spraw, by Twoja firma nie znalazła się na tej liście
Hasła i uwierzytelnianie wieloskładnikowe to Twoja pierwsza linia obrony przed hakerami. Dowiedz się, jak tysiące liderów małych firm usprawniają zarządzanie hasłami i chronią swoje dane.
O Obserwatorium naruszeń danych
- Czym jest Obserwatorium naruszeń danych?
- Jakie dane wyciekają?
- Dlaczego warto informować o naruszeniach danych?
- Skąd czerpiecie informacje?
- Czy ujawnianie ostatnich naruszeń danych nie szkodzi firmom?