資料外洩觀測站
在暗網搜尋敏感資料外洩事件
五分之四的小型企業最近都曾遭遇資料外洩。 而單一事件就可能讓一家小型公司損失超過 100 萬美元。 那麼，為何我們沒有聽到更多關於資料外洩的新聞？
Proton 不會等待資料外洩事件被回報。 反之，我們會直接進入暗網，即時捕獲並共享外洩資訊 — 並協助小型企業自我保護。
Qantas Airways
What happened?
Australia's national airline Qantas Airways Ltd. was targeted by a group of hackers named Scattered Lapsus$ Hunters which launched a ransomware attack(新視窗). The company did not pay the ransom, leading to more than 11 million customer records being leaked on the dark web. Sensitive data including customer names, addresses, and email addresses were exposed, but no financial records appeared. Qantas announced that it has strengthened its security measures following the data breach.
Allianz Life
What happened?
In July 2025, hackers targeted the world's largest insurance company and Europe's largest financial services company Allianz(新視窗) and subsequently stole the personal information of 1 million Allianz customers and employees. Subsequently, information including names, dates of birth, physical addresses, phone numbers, email addresses, and Social Security numbers appeared in a data breach. The breach affected North American customers and employees, and Allianz disclosed the data breach in a legal filing in the US state of Maine.
Tracelo
What happened?
In September 2024, the data of more than 1.4 million customers(新視窗) of the mobile geolocation tracking service Tracelo was leaked on the dark web. A hacker known as Satanic leaked customer names, addresses, phone numbers, email addresses, and passwords following an attack on Tracelo, posting them on the cybercrime forum BreachForums. Tracelo does not appear to have addressed the breach.
INTERSPORT France
What happened?
In France, more than 100,000 customers of sporting goods retailer INTERSPORT(新視窗) had their personal data leaked on BreachForums. Data including names, addresses, phone numbers, and email addresses appeared online in June 2025. INTERSPORT advised that it was addressing the breach, but did not disclose whether it had notified French authorities of the breach.
Free
What happened?
France's second largest ISP and telephone provider Free(新視窗) confirmed in October 2024 that it had been targeted by a data breach. In May 2025, customer data appeared on the dark web: names, dates of birth, phone numbers, email addresses, and IBANs were all leaked. In total, more than 19.5 million records appeared online. The National Commission for Information Technology and Freedoms launched a sanctions procedure against Free in March 2025.
Orange Romania
What happened?
In February 2025, a hacker going by the name Rey obtained more than 3.4 million records from telecoms provider Orange's Romanian branch(新視窗). Data including customer names, dates of birth, addresses, phone numbers, email addresses, usernames, and ID numbers appeared on the dark web following a ransomware attack which Orange declined to pay. Orange is monitoring the attack along with The Romanian National Cybersecurity Directorate (DNSC).
Zacks Investment Research
What happened?
Chicago-based investment research company Zacks Investment Research(新視窗) was breached by hackers in June 2024. In February 2025, customer data including names, addresses, phone numbers, email addresses, usernames, and passwords appeared for sale online. The company has not yet addressed this breach, having now been affected by multiple data breaches in recent years.
SkilloVilla
What happened?
In July 2025, hackers targeted the world's largest insurance company and Europe's largest financial services company Allianz(新視窗) and subsequently stole the personal information of 1 million Allianz customers and employees. Subsequently, information including names, dates of birth, physical addresses, phone numbers, email addresses, and Social Security numbers appeared in a data breach. The breach affected North American customers and employees, and Allianz disclosed the data breach in a legal filing in the US state of Maine.
amai
What happened?
More than 10 million records stolen from Singapore-based eCommerce platform Amai appeared on the dark web in January 2025. Names, addresses, phone numbers, email addresses, and passwords were stolen from the company's customer database. It does not appear that Amai has acknowledged a data breach as of October 2025.
PhoneMondo
What happened?
In January 2025, more than 10.5 million records stolen from German telecommunications platform PhoneMondo appeared on the dark web. Sensitive data includes names, dates of birth, addresses, phone numbers, email addresses, usernames, passwords, and IBANs. As of October 2025, it doesn't appear that PhoneMondo has acknowledged the breach.
關於資料外洩觀測站
- 什麼是資料外洩觀測站？
- 哪些資料會外洩？
- 為什麼要回報資料外洩新聞？
- 你們的資訊從何而來？
- 揭露近期的資料外洩事件不會損害到企業嗎？