Skip to content

Red Teaming

DraftKings Credential Stuffing Account Breach

Date of Incident: 2024-10-02 Overview: The DraftKings Credential Stuffing Account Breach, reported on October 7, 2025, involved attackers accessing customer accounts through credential stuffing techniques on October 2, 2024. This attack utilized automated login attempts with stolen credentials from other breaches, affecting personal details such as names, addresses, and transaction history. Although government IDs and… Read More »DraftKings Credential Stuffing Account Breach

Allianz Life July 2025 Data Breach

Date of Incident: July 16, 2025 Overview: In July 2025, Allianz Life experienced a data breach affecting nearly 1.5 million individuals, involving unauthorized access via a spear-phishing campaign that targeted employee credentials. The breach exposed sensitive data, including names, addresses, dates of birth, and social security numbers. Attackers used compromised credentials to escalate privileges and… Read More »Allianz Life July 2025 Data Breach

WestJet data breach

Date of Incident: June 13, 2025 Overview: The WestJet data breach, reported on October 1, 2025, occurred on June 13, 2025, affecting the transportation sector. Approximately 1.2 million customers’ personal information was compromised, including names, birthdates, addresses, travel documents, and loyalty program details, though no credit card or password data was breached. The cyberattack leveraged… Read More »WestJet data breach

Ransomware attack at Motility Software Solutions

Date of Incident: August 19, 2025 Overview: In a ransomware attack reported on October 1, 2025, Motility Software Solutions experienced a data breach on August 19, 2025, affecting 766,000 customers. Sensitive information, such as names, addresses, emails, phone numbers, dates of birth, Social Security numbers, and driver’s license numbers, was exposed. The attack involved privilege… Read More »Ransomware attack at Motility Software Solutions

ShinyHunters Salesforce Data Leak

Date of Incident: 2025-10-01 Overview: The ShinyHunters Salesforce Data Leak, reported on October 3, 2025, involves unauthorized access to Salesforce cloud instances due to exploited API vulnerabilities and possibly misconfigured permissions. Approximately 1 billion records from 39 companies were potentially impacted, with personal information stolen and samples leaked alongside ransom demands. The breach demonstrated automated… Read More »ShinyHunters Salesforce Data Leak