CrowdStrike customer data exposed after CrowdStrike breach
Data Leak
Summary
Hide ▲
Show ▼
CrowdStrike confirmed that a suspicious insider externally shared screenshots from internal systems, exposing internal material to unnamed threat actors and triggering a law-enforcement referral. The company said its systems were not breached and customers' data was not compromised. The event matters because it was a confirmed internal data exposure rather than a speculative security concern.
Related Happenings
7-Eleven franchisee-docs and Salesforce data leak
Data Leak
First: 18.05.2026 14:25
Last: 18.05.2026 14:25
Sources 1
About this happening:
**7-Eleven** confirmed a **April 8, 2026** intrusion into systems used to store **franchisee documents**, and **ShinyHunters** later claimed the theft of **more than 600,000 Sales...
7-Eleven franchisee-docs and Salesforce data leak
Data LeakAbout this happening: **7-Eleven** confirmed a **April 8, 2026** intrusion into systems used to store **franchisee documents**, and **ShinyHunters** later claimed the theft of **more than 600,000 Sales...
Latest development: 26.05.2026 10:01
Have I Been Pwned analyzed the leaked 7-Eleven data and estimated that the breach exposed personal information for 185,300 people, including names, dates of birth, unique email addresses, phone numbers, and physical addresses. The exposed archive was tied to ShinyHunters' extortion campaign against 7-Eleven and followed the group's leak-site posting after ransom demands were not met.
Wynn Resorts hit by cyberattack
Incident
First: 24.02.2026 23:51
Last: 24.02.2026 23:51
Sources 1
About this happening:
**Wynn Resorts** confirmed an **employee data breach** after an unauthorized third party stole data from its systems, creating exposure risk for staff records. The company said it...
Wynn Resorts hit by cyberattack
IncidentAbout this happening: **Wynn Resorts** confirmed an **employee data breach** after an unauthorized third party stole data from its systems, creating exposure risk for staff records. The company said it...
Betterment customer data leak after January systems breach
Data Leak
First: 05.02.2026 13:16
Last: 05.02.2026 13:16
Sources 1
About this happening:
**Betterment** suffered a **systems breach in January** that exposed personal information from **about 1.4 million accounts**. The stolen dataset included **email addresses, names...
Betterment customer data leak after January systems breach
Data LeakAbout this happening: **Betterment** suffered a **systems breach in January** that exposed personal information from **about 1.4 million accounts**. The stolen dataset included **email addresses, names...
Grubhub Salesforce and Zendesk data extortion leak
Data Leak
First: 15.01.2026 23:38
Last: 15.01.2026 23:38
Sources 1
About this happening:
**Grubhub** is facing a **data leak extortion** attempt after stolen **Salesforce** and **Zendesk** data were tied to a **February 2025 breach** and a more recent compromise. The...
Grubhub Salesforce and Zendesk data extortion leak
Data LeakAbout this happening: **Grubhub** is facing a **data leak extortion** attempt after stolen **Salesforce** and **Zendesk** data were tied to a **February 2025 breach** and a more recent compromise. The...
Mixpanel hit by network compromise
Incident
First: 27.11.2025 13:27
Last: 27.11.2025 13:27
Sources 1
About this happening:
Mixpanel disclosed a smishing (SMS phishing) compromise that affected a limited number of customers and prompted containment steps. The attack was detected on November 8, 2025, an...
Mixpanel hit by network compromise
IncidentAbout this happening: Mixpanel disclosed a smishing (SMS phishing) compromise that affected a limited number of customers and prompted containment steps. The attack was detected on November 8, 2025, an...
Latest development: 15.12.2025 23:27
Mixpanel's systems were compromised on November 8, 2025 after an SMS phishing (smishing) attack, and the breach affected a limited number of customers.
Timeline
-
21.11.2025 18:48 2 articles · 6mo ago
CrowdStrike confirms insider shared internal screenshots externally
Initial DisclosureOn 2025-11-21, CrowdStrike confirmed that it identified and terminated a suspicious insider who shared pictures of his computer screen externally with unnamed threat actors. The company said its systems were never compromised, customers' data was not compromised, and the matter was turned over to relevant law enforcement agencies.
Show sources
- CrowdStrike catches insider feeding information to hackers — www.bleepingcomputer.com — 21.11.2025 18:48
- CrowdStrike catches insider feeding information to hackers — www.bleepingcomputer.com — 21.11.2025 18:48