Case Studies
Data leaks caused by employees, partners and misconfiguration across many industries, with the lessons learned.
Tesla: two former employees took data on more than 75,000 staff outside the company
Tesla said two former employees took internal data and passed it to a newspaper — personal information of 75,735 current and former workers was affected.
Read article →
Yakima hospital: 23 security staff viewed the medical records of 419 patients for non-work reasons
Employees granted valid accounts can still view data unrelated to their work — Yakima Valley Memorial hospital (USA) was fined USD 240,000.
Read article →
Pentagon document leak: a young IT airman posted classified documents on Discord
A young IT support airman of the US National Guard shared hundreds of classified military documents in an online chat group and was sentenced to 15 years in prison.
Read article →
TSMC: 2 nm process trade secrets allegedly taken out through personnel
Taiwanese prosecutors indicted three people, including a former TSMC employee who moved to Tokyo Electron Taiwan, on charges of taking trade secrets related to the 2 nm process.
Read article →
Target: a heating and cooling contractor's login credentials opened the way to the exposure of 40 million payment cards
Attackers broke into retail chain Target's systems using credentials stolen from a vendor — a classic lesson in third-party risk.
Read article →
Morgan Stanley: decommissioned devices containing customer data sold on again online
A mover with no data-destruction experience was assigned to decommission thousands of hard drives and servers — the SEC fined Morgan Stanley Smith Barney USD 35 million.
Read article →
Samsung and the source code uploaded to ChatGPT
Samsung engineers put internal source code into ChatGPT to find bugs — and the company had to ban generative AI tools on all company devices and internal networks.
Read article →
Microsoft AI Research exposed 38 TB of data because of one misconfigured share link
While sharing an open-source AI training dataset, the research team inadvertently opened the entire storage account — including computer backups, passwords and tens of thousands of internal messages.
Read article →
McDonald's recruiting chatbot: the password "123456" opened the records of tens of millions of applicants
McHire, the recruiting platform that uses Paradox.ai's Olivia chatbot, had a test account using a default password — plus an API flaw that allowed access to other candidates' records.
Read article →