SCAM5 min read
Your Fake Toll Fine Text Came From a Factory: 1 Billion Scams Just Got Shut Down
2026-10-16T08:02:48.445001+00:00READ →
// all articles
HackDecoded Blog
Breach autopsies, threat breakdowns, and privacy guides — plain English, no jargon.
SCAM4 min read
The Ransomware Recovery Firm You Trusted Was Secretly Paying the Hackers
A Florida firm promised to rescue businesses from ransomware without paying hackers and charged $19M for it. Prosecutors say it secretly paid the hackers all along.
2026-10-15T08:03:31.02718+00:00READ →
BREACH5 min read
Hackers Stole Teacher Social Security Numbers From the HR System Used by 80,000 Schools
The HR platform used by 80,000+ US schools disclosed a breach exposing teachers' Social Security numbers, home addresses, and emails — discovered in August, revealed in October.
2026-10-14T08:02:35.617345+00:00READ →
BREACH5 min read
20 Million Patient Records Stolen: Your SSN and Medical History May Be Exposed
A hacker breached Oracle Health servers at 80 US hospitals, exposing nearly 20 million people's Social Security numbers, diagnoses, and full medical histories.
2026-10-13T08:02:43.863826+00:00READ →
BREACH5 min read
28 Million Discord Accounts Had Their IP Addresses and Locations Leaked in a Bot Breach
Double Counter, a popular Discord anti-spam bot, was hacked through a forgotten server, exposing IP addresses, city-level locations, and emails for 28 million accounts.
2026-10-11T08:02:42.068919+00:00READ →
VULNERABILITY4 min read
Your GitHub Repo Got a Fake Security Audit That Stole Your API Keys
A campaign called GhostAction planted a fake 'security audit' workflow in thousands of GitHub repos, silently draining API keys, cloud credentials, and AI secrets.
2026-10-10T08:02:38.289869+00:00READ →
BREACH5 min read
Your Power Company Was Hacked: 400,000 Georgia and Alabama Utility Accounts Exposed
Hackers broke into Southern Company's online portal and walked off with names, addresses, and partial SSNs for 400,000 electric customers.
2026-10-09T08:01:37.709067+00:00READ →
BREACH5 min read
Hackers Hijacked the ASOS App on Your Phone to Send You a Threat
Millions of ASOS shoppers got a chilling push alert straight from the app — sent not by ASOS, but by hackers who seized its notification system.
2026-10-08T08:02:31.162885+00:00READ →
SCAM5 min read
Your 2FA Cannot Stop These Fake AI Ad Tools From Stealing Your Ad Account
Scammers cloned ChatGPT, Claude, and Gemini ad tools to steal your credentials and intercept your 2FA code live — draining real ad budgets.
2026-10-07T08:03:06.532086+00:00READ →
BREACH5 min read
Hackers Stole 8.8 Million Unchangeable Government ID Numbers From Denmark's National Registry
Attackers used a trusted company's login to quietly search Denmark's Central Person Register for weeks, stealing names, addresses, and permanent ID numbers for 8.8 million people.
2026-10-06T08:02:15.381404+00:00READ →
BREACH5 min read
Hackers Stole 6.6 Million Driver's License Photos From a Car-Sharing App
Hackers spent a month inside Times Car's systems before anyone noticed, stealing driver's license photos, home addresses, and account data for 6.6 million users.
2026-10-05T08:02:22.285107+00:00READ →
SCAM5 min read
850 Fake ChatGPT Ads on Google Were Installing Malware on Your Windows PC
Hackers bought Google ads for 'ChatGPT,' then hid a malware trap inside the real chatgpt.com. Click the ad, follow the prompt, and they owned your computer.
2026-10-04T08:03:06.320739+00:00READ →
AI THREATS5 min read
16,000 Apps Built With AI Left Your Personal Data Wide Open
Researchers found 16,326 databases fully open on the internet, many built by AI coding tools that skipped the one security step that keeps strangers out.
2026-10-03T08:02:08.655401+00:00READ →
BREACH5 min read
Hackers Stole 5,000 FBI Agents' Home Addresses and SSNs From a Job Website
ShinyHunters broke into the FBI's own job portal and walked off with home addresses, Social Security numbers, and spouses' details for thousands of agents.
2026-10-01T08:01:58.500764+00:00READ →
BREACH5 min read
3 Million Military Records Leaked for 9 Months: Was Your SSN in the Pentagon Breach?
A Pentagon database quietly exposed unencrypted Social Security numbers for nearly 3 million military-connected people for 9 months. Notification letters only just went out.
2026-09-30T08:02:24.553807+00:00READ →
BREACH5 min read
Hackers Breached 4 FBI Systems and Stole Agents' Psychiatric Records and Undercover Assignments
ShinyHunters hacked 4 FBI systems via a flaw in Oracle HR software, stealing agents' psychiatric records, medical files, and identities of undercover operatives.
2026-09-29T08:02:41.73015+00:00READ →
AI THREATS4 min read
Your Credit Card Was Worth Just $25 to the AI Bot That Stole It
AI bots hit 100 online stores in 5 days and walked off with 600,000 credit card numbers — for a total attacker cost of $8,000.
2026-09-27T08:05:42.058708+00:00READ →
BREACH5 min read
Hackers Stole $352 Million From Crypto Exchange Bitget and North Korea Is the Top Suspect
On Sept 24, hackers drained $351.6M from Bitget's hot wallets in hours. Withdrawals were frozen and North Korean hackers are the prime suspect.
2026-09-26T08:05:01.746437+00:00READ →
BREACH5 min read
Your Shipping Address Was Fair Game: A Hacked BigCommerce App Exposed Shopper Data
If you shopped at a BigCommerce-powered store between Sept 13–17, your name, email, phone, and address may have been silently stolen through a hacked third-party app.
2026-09-25T08:03:03.939209+00:00READ →
VULNERABILITY5 min read
One Hacked Email Tool Weaponized 100,000 Websites Against Their Own Visitors
Hackers hijacked Brevo, a popular email platform, and for 5 hours every visitor to 100,000+ business websites was shown a fake security prompt built to install malware.
2026-09-24T08:03:29.185581+00:00READ →
BREACH5 min read
Your Private Gyazo Screenshots Are Exposed: Hackers Hit 23 Million Accounts
Hackers exploited a server bug to steal 23 million Gyazo accounts and metadata for 490 million images, including private ones you thought only you could see.
2026-09-23T08:03:09.432977+00:00READ →
BREACH5 min read
220 Million Travel Records Exposed: Your Passport May Be in This Leak
A database of 220 million airline passenger records sat exposed online for months, leaking passport numbers and flight details for anyone who flew through Vietnam since 2017.
2026-09-22T08:05:04.491883+00:00READ →
VULNERABILITY5 min read
Your Google Pixel Can Be Silently Hacked From a Nearby Network: Here Is the Fix
A flaw in Google Pixel's cellular modem was actively exploited before a patch existed — and attackers needed zero clicks from you to break in.
2026-09-21T08:02:30.975064+00:00READ →
SCAM5 min read
119,000 Fake Online Stores Are Stealing Card Numbers Right Now
A network of 119,000 copycat websites is cloning real brand stores to steal your payment card number and bank confirmation code at checkout.
2026-09-20T08:02:10.880332+00:00READ →
SCAM5 min read
Your Crypto Scammer Had a $24 Billion Marketplace. The US Just Shut It Down.
US authorities shut down Xinbi Guarantee, a Telegram-based criminal bazaar with $24 billion in sales that supplied deepfakes, stolen data, and custom scam scripts to fraud rings worldwide.
2026-09-19T08:03:18.856428+00:00READ →
SCAM5 min read
A Fake IT Call Is All Hackers Need to Break Into Your Microsoft 365 Account
Attackers phone your team, claim to be IT support, and trick you into handing over access — no password cracking required, just one convincing call.
2026-09-18T08:02:33.702668+00:00READ →
BREACH4 min read
7 Million CenterPoint Energy Customers Just Had Their Driver's License Numbers Stolen
A hacker exploited an unprotected API to steal records on 7 million utility customers, including driver's license numbers and partial Social Security numbers.
2026-09-17T08:02:29.620355+00:00READ →
BREACH5 min read
Hackers Stole 4.1 Million People's Health Records by Tricking One Outside Contractor
AdaptHealth, which ships home medical equipment to millions of Americans, confirmed attackers stole health insurance and clinical records on 4.1 million patients via a compromised contractor account.
2026-09-16T08:02:49.820328+00:00READ →
BREACH5 min read
Revolut Handed Scammers Your Passport Without Being Hacked At All
A criminal posed as a government agency and tricked Revolut into handing over passports, bank records, and Bitcoin history for nearly 700 customers.
2026-09-15T08:02:10.610738+00:00READ →
BREACH5 min read
Your Kid's Math App Exposed 1 Million Families to Hackers
Over a million families signed their kids up for online maths help — and hackers got their names and emails anyway, hidden inside a reporting tool no parent ever knew existed.
2026-09-12T08:02:19.272437+00:00READ →
SCAM5 min read
A 10-Year Scam Operation Has Been Poisoning Your Bing Search Results
Researchers exposed a decade-old scam ring from India that hijacked Bing search results to route users to fake tech support calls and malware downloads.
2026-09-11T08:03:58.162642+00:00READ →
VULNERABILITY5 min read
160,000 Online Stores Were Hacked This Week, Even the Fully Patched Ones
A zero-day rated a perfect 10.0 severity let hackers secretly take over online stores, including ones with every security update applied. A patch is now out.
2026-09-10T08:03:09.425434+00:00READ →
BREACH4 min read
Hackers Broke Into Florida's Law Enforcement Driver Database and Stole 200,000 Records
ShinyHunters exploited a password-reset flaw to steal 200K Florida driver records — SSNs, photos, addresses — and set a Sept. 11 deadline to publish them.
2026-09-09T08:03:39.642323+00:00READ →
BREACH5 min read
153 Million Driver's Licenses Are Being Sold on the Dark Web Right Now
153 million driver's license scans showed up for sale on the dark web. If you've ever rented a car, visited a FedEx store, or stepped into a dispensary, yours could be in the pile.
2026-09-08T08:03:13.929805+00:00READ →
BREACH5 min read
Hasbro Kept Quiet for 5 Months While Hackers Had Workers' SSNs and Bank Info
Hasbro's March cyberattack exposed employees' SSNs, bank accounts, and card numbers — and the company waited five months before telling them.
2026-09-05T08:04:13.891376+00:00READ →
AI THREATS5 min read
Your Claude Account Can Be Hijacked Without Your Password: What to Do Now
Infostealer malware is stealing Claude session cookies and draining AI subscriptions without touching your password or 2FA code.
2026-09-04T08:09:34.243356+00:00READ →
BREACH5 min read
Your Hospital Records Could Go Public: Ransomware Gang Hit 27 US Facilities
The Gentlemen ransomware group stole patient files and financial data from Nutex Health's 27 US micro-hospitals and is threatening to publish everything.
2026-09-03T08:04:32.922878+00:00READ →
BREACH5 min read
Your Doctor Used This Company to Store Your Records. Hackers Took 9.5 Million of Them.
A healthcare data company you've never heard of stored your medical records — and hackers quietly stole 9.5 million of them last December.
2026-09-02T08:09:38.315513+00:00READ →
BREACH4 min read
284 Million Health Records Stolen From the Company Behind Your Pharmacy
Hackers claim to have stolen 284 million patient records from McKesson, a healthcare giant most people have never heard of but whose systems touch almost every American prescription.
2026-09-01T08:05:11.870373+00:00READ →
SCAM4 min read
After Thieves Steal Your iPhone, a Fake AI Calls You to Grab the Passcode Too
A platform called AnonyMousKIT sends AI voice agents posing as Apple Support to call theft victims and trick them into surrendering their passcode.
2026-08-31T08:03:40.583519+00:00READ →
BREACH5 min read
Carhartt Said No to a $3.3M Ransom. Now 12.9 Million Shoppers' Data Is Online
ShinyHunters hackers leaked names, emails, and home addresses of 12.9M Carhartt customers after the brand refused to pay a $3.3M ransom. Here's what to do.
2026-08-30T08:03:15.707324+00:00READ →
BREACH4 min read
The Company That Keeps Your Heart Beating Was Just Hacked
A cyberattack knocked out Boston Scientific's global systems on August 25, halting pacemaker and cardiac device shipments to hospitals worldwide.
2026-08-29T08:03:28.737523+00:00READ →
BREACH5 min read
Free Airport WiFi Put 8.7 Million Travelers at Risk After Hackers Stole Their Personal Data
Signing up for free WiFi at Manchester, Stansted, or East Midlands airports? Hackers may now have your phone number, email, and home postcode.
2026-08-28T08:03:07.836776+00:00READ →
BREACH5 min read
If You Bought a SafePal Crypto Wallet, Hackers Now Know Where You Live
A flaw in SafePal's order system exposed 39,798 buyers' names, home addresses, and phone numbers — exactly what criminals need to rob crypto holders in person.
2026-08-27T08:02:34.414958+00:00READ →
BREACH5 min read
Your SSN Was Inside a $1 Trillion Firm. Hackers Got It With a Phone Call.
Apollo Global Management — a $1 trillion Wall Street giant — exposed Social Security numbers and home addresses after hackers tricked employees over the phone.
2026-08-26T08:02:31.822854+00:00READ →
BREACH5 min read
3.7 Million Patients Had Their SSNs and Medical Records Stolen from a Health Software Company
Your doctor may use CareCloud software. 3.7 million patients just learned hackers stole their SSNs, medical records, and bank details from it back in March.
2026-08-25T08:02:13.996325+00:00READ →
BREACH4 min read
Hackers Tricked 1 Employee by Phone and Exposed 1.6 Million People's Contact Details
ShinyHunters called one RingCentral employee, talked their way in, and dumped 1.6 million users' names, addresses, and phone numbers online.
2026-08-23T08:03:00.087105+00:00READ →
VULNERABILITY5 min read
Fake Job Offer PDFs Are Installing a Windows Rootkit That Disables Your Security Software
North Korean hackers sent fake job offer PDFs to plant a hidden Windows rootkit — it ran undetected for 5 weeks by disabling the security tools meant to catch it.
2026-08-22T08:03:32.561652+00:00READ →
SCAM5 min read
Fake Oprah Is Selling Weight Loss Pills in Your Facebook Feed and the Hidden Bill Is $150 a Month
AI deepfakes of Oprah and real doctors are running on Facebook and TikTok selling a supplement called LipoMax, with hidden monthly charges up to $150.
2026-08-20T08:03:51.488944+00:00READ →
BREACH5 min read
Hackers Got Your Home Address by Breaching the Shipping Company Behind Steam and ING
A hack at shipping giant CEVA Logistics exposed names, home addresses, and order details for customers of Steam, ING Bank, and major retailers across Europe.
2026-08-19T08:17:25.120489+00:00READ →
AI THREATS5 min read
Scammers Used a Deepfake of Australia's PM to Steal $7.4 Million — And Your Social Feed Is the Delivery Mechanism
AI audio grafted onto real PM footage fooled investors out of $7.4M AUD. Regulators call it 'an emergency in the making' — and the technique defeats standard detection advice.
2026-08-19T08:02:12.881924+00:00READ →
BREACH5 min read
France's Tax Authority Hacked: 678,000 Taxpayers' Financial Data Stolen
A hacker stole income and property records from France's tax authority using one stolen password — exposing 678,000 people's financial lives.
2026-08-18T08:01:58.565359+00:00READ →
BREACH5 min read
Healthcare Billing Giant Hacked: 3.8 Million Patients' SSNs and Medical Records Exposed
A billing software vendor you've never heard of just exposed your SSN, diagnoses, and scanned ID — 3.8 million patients are at risk.
2026-08-17T21:44:41.427215+00:00READ →
SCAM6 min read
AI Deepfakes Are Impersonating OnlyFans Creators to Steal From Fans
Scammers are using AI deepfakes of real creators on TikTok to lure fans into Snapchat DMs — then stealing their money via Cash App.
2026-08-17T08:02:27.28185+00:00READ →
BREACH5 min read
Framework Laptop Breach: Hackers Stole Customer Data Through a Vendor's Zero-Day
Framework, the maker of repairable laptops, told every customer their name, email, phone, and address were stolen after hackers exploited a zero-day in a data-analytics vendor it uses.
2026-08-16T08:02:50.763827+00:00READ →
BREACH5 min read
Trezor Customer Data Exposed After Shipping Partner Breach — Here's What to Watch For
A breach at Trezor's shipping provider exposed the names, addresses, and contact details of nearly 14,000 hardware wallet customers, opening the door to targeted phishing.
2026-08-15T16:50:11.156698+00:00READ →
SCAM5 min read
Back-to-School Scams 2026: Fake FAFSA and Scholarship Texts Are Draining Parents' Bank Accounts
As tuition deadlines hit, scammers are blasting fake FAFSA and scholarship texts that steal bank logins in seconds — here's how families can spot them.
2026-08-15T16:29:53.884062+00:00READ →
BREACH5 min read
Hackers Breached the Swiss Government's SharePoint Servers — Here's What Happened
Attackers exploited two Microsoft SharePoint flaws to steal login credentials for roughly 200 Swiss federal accounts. No confirmed data leak — but the technique used to keep access even after patching is the real lesson.
2026-08-15T12:50:57.155051+00:00READ →
SCAM6 min read
Grandparent Scams Go Digital: Protecting Elderly Family from AI Voice Cloning
Cybercriminals are now using AI to clone voices, making 'grandparent scams' terrifyingly convincing. Learn how to spot and protect your elderly loved ones from these heartbreaking digital attacks.
2026-06-20T08:00:33.875337+00:00READ →
PRIVACY6 min read
Reclaim Your Privacy: A Step-by-Step Guide to Deleting Yourself From Data Brokers
Tired of your personal info being sold? Learn how to scrub your data from hidden brokers and reclaim your digital privacy for good.
2026-06-19T08:00:35.726019+00:00READ →
BREACH6 min read
What To Do Immediately After a Data Breach (2026 Guide)
Got a breach notification email? The first 48 hours matter most — and almost everything that protects you is free. Here's exactly what to do, in order.
2026-06-18T09:00:00+00:00READ →
BREACH4 min read
Iran-linked Hackers Breach California Water Utility, Exposing 2 Million Customers
An Iran-linked group breached Cal Water, potentially exposing your billing details and personal information to two million customers.
2026-06-17T08:02:44.141562+00:00READ →
SCAM5 min read
FBI & Google Dismantle AI-Powered Phishing-as-a-Service Scam
An AI-powered phishing network that stole millions of credit cards and billions of dollars has been taken down, but the threat of AI scams remains.
2026-06-16T08:13:25.763772+00:00READ →
SCAM4 min read
New Barcode Scam Targets Utility Customers, Stealing Thousands
PG&E customers have lost over $211,000 this year to a barcode scam that tricks you into paying fraudsters at a local store.
2026-06-15T22:59:18.268256+00:00READ →
VULNERABILITY4 min read
Google Patches Actively Exploited Android Zero-Day Vulnerability
A critical Android flaw is being actively exploited right now. If your phone runs Android 14, 15, or 16, you need to update today.
2026-06-09T22:29:42.568754+00:00READ →
SCAM5 min read
You Switched to Signal for Privacy. Russian Hackers Are Now Using Signal to Spy on You.
Russian intelligence-linked hackers found a way to silently tap your Signal messages without breaking encryption — by getting you to approve their device. Here's exactly how it works and how to check if it already happened.
2026-06-06T14:00:46.169125+00:00READ →
BREACH5 min read
Hackers Stole 1.8 Million People's Fingerprints From a Hospital. You Can't Change Your Fingerprints.
NYC Health + Hospitals confirmed hackers accessed the biometric data, medical records, SSNs, and bank details of 1.8 million patients. Unlike a password, your fingerprints are permanent.
2026-06-06T14:00:46.16698+00:00READ →
VULNERABILITY5 min read
Opening One Email in Microsoft Exchange Can Hand Hackers Your Entire Account — And There's Still No Fix
A zero-day in Microsoft Exchange's webmail interface is being actively exploited with no permanent patch. Opening a malicious email in your browser is enough. CISA ordered federal agencies to patch by May 29.
2026-06-06T14:00:46.165347+00:00READ →
PRIVACY5 min read
Your Smart TV Is Watching You Watch It — Here's How to Stop It
Smart TVs use Automatic Content Recognition (ACR) to screenshot everything you watch and sell it to advertisers. Here's exactly how to turn it off on every major TV brand.
2026-06-06T14:00:46.068988+00:00READ →
PRIVACY5 min read
The FTC Just Banned a Company for Selling Your Location to Anyone Who'd Pay
Data broker Kochava tracked hundreds of millions of phones and sold their location history — including visits to abortion clinics, domestic violence shelters, and churches. The FTC just permanently banned them. Here's what it means for you.
2026-06-06T14:00:45.967548+00:00READ →
SCAM4 min read
Sheriff Warns: Scammers Are Faking Law Enforcement to Steal Your SSN
Fraudulent callers are impersonating law enforcement and claiming your Social Security number was found on the dark web.
2026-06-06T14:00:45.870611+00:00READ →
BREACH6 min read
How the Canvas LMS Breach Exposed 275 Million Students
ShinyHunters breached Canvas LMS in May 2026, stealing data on 275 million students and educators. Here's exactly what was taken and what to do right now.
2026-06-06T14:00:45.865396+00:00READ →
AI THREATS6 min read
1 in 4 Americans Got a Fake Call Using Their Family's Cloned Voice
Scammers are cloning voices from 3 seconds of TikTok audio. One in four Americans already received a deepfake call — and 77% of those who engage lose money.
2026-06-06T14:00:45.772214+00:00READ →
SCAM4 min read
AI Scammers Steal Your Data with Fake ChatGPT 'Help' Guides
Fake AI support guides are tricking users into pasting terminal commands that steal passwords, cookies, and crypto wallets.
2026-06-06T14:00:45.670551+00:00READ →