--- title: "#data-breach articles | Hashnode" description: "Explore 100 articles tagged #data-breach on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/data-breach" --- Tag # #data-breach 100 posts · 3 followers [Cyber Knight](https://hashnode.com/@cyberknight2479) · [17h ago](https://hashnode.com/posts/the-bank-watchdog-got-hacked-a-fake-regulator-account-breached-south-korea-s-financial-security-institute/6af413e4fa41b8227a3c7901) ### [The Bank Watchdog Got Hacked: A Fake Regulator Account Breached South Korea's Financial Security Institute](https://nulltrace.hashnode.dev/the-bank-watchdog-got-hacked-a-fake-regulator-account-breached-south-korea-s-financial-security-institute?utm_source=hashnode&utm_medium=feed) The institute that grades every bank's security lost more than 130 files to an account that shouldn't have existed. 4 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-bank-watchdog-got-hacked-a-fake-regulator-account-breached-south-korea-s-financial-security-institute?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [1d ago](https://hashnode.com/posts/the-password-was-inside-the-app-you-downloaded/6af2c28b123b432f99a5aa2d) ### [The Password Was Inside the App You Downloaded](https://nulltrace.hashnode.dev/the-password-was-inside-the-app-you-downloaded?utm_source=hashnode&utm_medium=feed) Wyndham's Android app carried the keys to its own customer database — and the company can't say whether anyone else used them first. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-password-was-inside-the-app-you-downloaded?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/the-password-was-inside-the-app-you-downloaded/6af2c28b123b432f99a5aa2d) [404 Founders](https://hashnode.com/@404-founders) · [2d ago](https://hashnode.com/posts/workos-breach-ai-pentest-agent-artex/6af1c205c0d5784cc275e451) ### [WorkOS Breach: An AI Pentest Agent, a Dev Credential and Five Quiet Days](https://404-founders.com/blog/workos-breach-ai-pentest-agent-artex?utm_source=hashnode&utm_medium=feed) A researcher's ARTEX agent left its lab, found an exposed API that accepted a dev credential and pulled customer records in bulk. 11 min read · [404-founders.com](https://404-founders.com/blog/workos-breach-ai-pentest-agent-artex?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [4d ago](https://hashnode.com/posts/your-crypto-was-safe-your-identity-wasn-t/6aeeccf4e849b3206c0babd8) ### [Your Crypto Was Safe. Your Identity Wasn't.](https://nulltrace.hashnode.dev/your-crypto-was-safe-your-identity-wasn-t?utm_source=hashnode&utm_medium=feed) Gnosis Pay lost no funds in its November breach — and that is exactly why the story matters. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/your-crypto-was-safe-your-identity-wasn-t?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/your-crypto-was-safe-your-identity-wasn-t/6aeeccf4e849b3206c0babd8) [Damiano Bianda](https://hashnode.com/@damianobianda) · [5d ago](https://hashnode.com/posts/the-chainalysis-breach-from-no-credentials-accessed-to-all-users-exposed-in-five-days/6aeda6270061c72bd77495a2) ### [The Chainalysis Breach: From "No Credentials Accessed" to "All Users Exposed" in Five Days](https://damianobianda.hashnode.dev/the-chainalysis-breach-from-no-credentials-accessed-to-all-users-exposed-in-five-days?utm_source=hashnode&utm_medium=feed) Chainalysis said no credentials were touched. Five days later: password hashes and live tokens for all users. The timeline and the lesson. 6 min read · [damianobianda.hashnode.dev](https://damianobianda.hashnode.dev/the-chainalysis-breach-from-no-credentials-accessed-to-all-users-exposed-in-five-days?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [5d ago](https://hashnode.com/posts/the-doors-are-open-the-books-can-t-leave/6aed7b84f38cd693f38cadd5) ### [The Doors Are Open. The Books Can't Leave.](https://nulltrace.hashnode.dev/the-doors-are-open-the-books-can-t-leave?utm_source=hashnode&utm_medium=feed) Ransomware hit New York's Queens Public Library this week — 66 branches open, every system dark. The ransom was never the point. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-doors-are-open-the-books-can-t-leave?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [6d ago](https://hashnode.com/posts/they-were-inside-dreamhost-since-august-the-passwords-were-the-least-of-it/6aec298683f0cfa4df0d2b9b) ### [They Were Inside DreamHost Since August. The Passwords Were the Least of It](https://nulltrace.hashnode.dev/they-were-inside-dreamhost-since-august-the-passwords-were-the-least-of-it?utm_source=hashnode&utm_medium=feed) A web host found an intruder in its file manager on October 23 — three months after the break-in began. What the attacker took wasn't just passwords. It was the sessions themselves. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/they-were-inside-dreamhost-since-august-the-passwords-were-the-least-of-it?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Nov 4](https://hashnode.com/posts/the-attacker-didn-t-break-into-production-it-walked-in-through-development/6aead83c3ed9f2c028e09a58) ### [The Attacker Didn't Break Into Production. It Walked In Through Development](https://nulltrace.hashnode.dev/the-attacker-didn-t-break-into-production-it-walked-in-through-development?utm_source=hashnode&utm_medium=feed) Chainstack's breach started in a dev environment, reached production five days later, and stayed quiet — until the company said the honest thing about its customers' keys. 4 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-attacker-didn-t-break-into-production-it-walked-in-through-development?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Nov 3](https://hashnode.com/posts/the-ai-agent-didn-t-break-the-product-it-walked-into-the-sales-tool/6ae986f0ba55e52190a388af) ### [The AI Agent Didn't Break the Product. It Walked Into the Sales Tool.](https://nulltrace.hashnode.dev/the-ai-agent-didn-t-break-the-product-it-walked-into-the-sales-tool?utm_source=hashnode&utm_medium=feed) WorkOS builds the login layer for thousands of companies. The breach it disclosed on 2 November didn't touch that product — it reached an internal sales app instead, and what that app held is exactly what makes the next phishing email believable. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-ai-agent-didn-t-break-the-product-it-walked-into-the-sales-tool?utm_source=hashnode&utm_medium=feed) [Kazem Mortazavi](https://hashnode.com/@kazem-mortazavi) · [Oct 29](https://hashnode.com/posts/dark-web-monitoring-finding-a-data-leak-before-the-extortion-email-does/6ae2c0d84e26468074c344b3) ### [Dark Web Monitoring: Finding a Data Leak Before the Extortion Email Does](https://securityland.hashnode.dev/dark-web-monitoring-finding-a-data-leak-before-the-extortion-email-does?utm_source=hashnode&utm_medium=feed) Most organizations reassure themselves with one sentence: "we have not been hacked." But that sentence only describes what happens inside the network. Dark web monitoring answers a different question: 3 min read · [securityland.hashnode.dev](https://securityland.hashnode.dev/dark-web-monitoring-finding-a-data-leak-before-the-extortion-email-does?utm_source=hashnode&utm_medium=feed)