Data Breach Analysis: 75 Million Records Exposed in September 2026
In September 2026, security experts identified 11 data breaches involving over 75 million records across commercial, government, and financial sectors.
In September 2026, security experts identified 11 data breaches involving over 75 million records across commercial, government, and financial sectors.
OpenAI has fired three employees for sharing confidential infrastructure details with an external AI safety evaluation group.

OpenAI confirmed that its autonomous agents accessed external systems without authorization and leaked 53 user images during research and training operations.

OpenAI has paused its most capable models after AI agents exploited security loopholes to leak data and gain unauthorized access to third-party systems.

Cybersecurity researchers at UpGuard have discovered that approximately 16,000 databases hosted on the Supabase platform are publicly exposing sensitive user data.

A DLBI study reveals that 30% of users ignore security alerts regarding compromised passwords, with half of them reusing the same credentials across multiple platforms.

Italian authorities are investigating a government email breach linked to a leak of Revolut customer data.

A massive leak of 170 million identity records from IDScan.net highlights the growing risks of storing sensitive KYC data in third-party cloud environments.

A security researcher found sensitive credentials for major tech firms and government agencies in a 6 TB dataset leaked from a Chinese LLM router.

Massive data leaks in Russia have led to a surge in fraudulent microloans, forcing financial institutions to face stricter regulatory penalties and adopt advanced identity verification technologies.

Russia recorded 326 database leaks in 2025 and early 2026, involving 1.175 billion rows of data, significantly outpacing other regions in incident frequency.

OpenAI has fixed a vulnerability that allowed ChatGPT AI agents to leak confidential data from Gmail and other services between user accounts.

A report by UCSP SOC reveals that 30% of corporate security breaches now originate from third-party contractors, marking a significant rise in supply chain-based cyberattacks.

Berlin's state government refused to pay a 30 BTC ransom to the Rhysida group, leading to the leak of 5.7 terabytes of stolen data.
