Resources [Blog](/blog)[Events](/events)[Breaches](/breaches)[Resources](/resources)[News](/news) # Data Breaches Resources to help you keep up to date with industry insights, best practices and more. [](/breaches/cyber-risks-of-the-2026-world-cup) ## [Own Goal: Inside the Cyber Risks of the 2026 World Cup](/breaches/cyber-risks-of-the-2026-world-cup) Free World Cup streams and black-market betting sites are leaking fan data. UpGuard research reveals the hidden cyber risks of the 2026 tournament. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) June 30, 2026 [](/breaches/following-orders-a-day-in-the-life-of-an-iranian-telegram-bot-farm) #### [Following Orders: A Day in the Life of an Iranian Telegram Bot Farm](/breaches/following-orders-a-day-in-the-life-of-an-iranian-telegram-bot-farm) Inside 24 hours of an Iranian Telegram bot farm: how a misconfigured server exposed the operation selling fake followers to financial scammers. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) July 30, 2026 [](/breaches/open-house-how-an-unauthenticated-mcp-server-exposed-indias-largest-real-estate-platform) #### [Open House: How an Unauthenticated MCP Server Exposed India's Largest Real Estate Platform](/breaches/open-house-how-an-unauthenticated-mcp-server-exposed-indias-largest-real-estate-platform) An exposed DBHub instance leaked millions of records from India's largest real estate platform—the biggest MCP server breach to date. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) July 13, 2026 [](/breaches/adult-supervision-how-onlyfans-takedowns-quietly-police-compromised-domains) #### [Adult Supervision: How OnlyFans Takedowns Quietly Police Compromised Domains](/breaches/adult-supervision-how-onlyfans-takedowns-quietly-police-compromised-domains) Adult-content creators filing DMCA takedowns are inadvertently exposing thousands of compromised .gov and .edu sites used for parasite SEO scams. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) July 8, 2026 [](/breaches/cyber-risks-of-the-2026-world-cup) #### [Own Goal: Inside the Cyber Risks of the 2026 World Cup](/breaches/cyber-risks-of-the-2026-world-cup) Free World Cup streams and black-market betting sites are leaking fan data. UpGuard research reveals the hidden cyber risks of the 2026 tournament. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) June 30, 2026 [](/breaches/breaking-containment-how-a-corrections-vendor-exposed-inmate-communications) #### [Breaking Confinement: How a Corrections Vendor Exposed Inmate Communications](/breaches/breaking-containment-how-a-corrections-vendor-exposed-inmate-communications) An exposed Azure storage bucket contained millions of documents sent through a jail messaging app, including driver's licenses used for identity verification. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) May 28, 2026 [](/breaches/shared-context-how-an-mcp-server-exposed-a-private-equity-firm) #### [Shared Context: How an MCP Server Exposed a Private Equity Firm](/breaches/shared-context-how-an-mcp-server-exposed-a-private-equity-firm) A misconfigured MCP server provided complete access to a private equity firm's data lake, illustrating the unique risks of AI adoption for specialized knowledge workers. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) May 18, 2026 [](/breaches/read-receipts-how-mail-server-logs-exposed-confidential-communications) #### [Read Receipts: How Mail Server Logs Put Corporate Clients at Risk](/breaches/read-receipts-how-mail-server-logs-exposed-confidential-communications) A publicly accessible server with email logs reveals how much information such infrastructure holds–including evidence of attackers looking for it. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) April 21, 2026 [](/breaches/shared-enemy-inside-a-chinese-dark-web-monitoring-database) #### [Shared Enemy: Inside a Chinese Dark Web Monitoring Database](/breaches/shared-enemy-inside-a-chinese-dark-web-monitoring-database) An exposed database of dark web threat intel reveals how China responds to the common threat of the cyber-criminal underground. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) April 1, 2026 [](/breaches/social-insecurity-billions-of-social-security-number-and-passwords) #### [Social Insecurity: Billions of Social Security Number and Passwords](/breaches/social-insecurity-billions-of-social-security-number-and-passwords) UpGuard research found a trove of sensitive information in an exposed Elastic database. Getting to the bottom of what it meant led us down an interesting path. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) February 18, 2026 [](/breaches/streamlit-the-tip-of-the-shadow-ai-iceberg) #### [Streamlit: The Tip of The Shadow AI Iceberg](/breaches/streamlit-the-tip-of-the-shadow-ai-iceberg) Tens of thousands of AI-enabled web applications using the Streamlit framework are publicly available, exposing PII and other confidential data. [](/team/greg-pollock) [Greg Pollock](/team/greg-pollock) December 9, 2025 [](/breaches/india-bank-transfers-data-leak) #### [Unclaimed Property: How an Unknown Entity Exposed Indian Banking Information](/breaches/india-bank-transfers-data-leak) UpGuard discovered a rapidly growing data leak of bank accounts in India– and no one to take responsibility for it. [](/team/upguard) [UpGuard Team](/team/upguard) September 25, 2025 [](/breaches/identifying-companies-affected-by-the-shai-hulud-npm-supply-chain-attack) #### [Identifying Companies Affected by the Shai-Hulud NPM Supply Chain Attack](/breaches/identifying-companies-affected-by-the-shai-hulud-npm-supply-chain-attack) Using Github event archives, UpGuard Research identifies companies with indicators of compromise of the Shai-Hulud attacks, even after the repos have been deleted. [](/team/upguard) [UpGuard Team](/team/upguard) September 17, 2025 1 / 6 [Next](?d1a9e707_page=2) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score) Experience superior visibility and a simpler approach to cyber risk management [Get a demo](/contact-sales) [Free trial](/demo)