Project
Have I Been Pwned is a free online service that lets people check whether their email addresses or data appear in known data breaches.
Nimoca Co. says an intruder took email addresses, card numbers and birth dates for 521 users of its online card-history service. The breach came to light when a rider phoned the call center about an email he did not recognise.
Reality
ShinyHunters claims 623GB from a July social-engineering campaign and leaked part of it. Have I Been Pwned confirmed 1.6 million account records. Both the vendor and the crew can be telling the truth.
Perspective Coverage
3 publishersReality
The systems that sold parking bays, lounge passes and Wi-Fi logins were never in the same control scope as anything that moves aircraft, and they held phone numbers, plates and postcodes for 8.7 million people.
Perspective Coverage
6 publishersReality
Have I Been Pwned traced the 50GB archive to Carhartt's Databricks analytics platform. The exposed fields are emails, names, phone numbers and addresses, which makes this a targeting corpus rather than a credential-stuffing list.
Reality
ShinyHunters says it voice-phished a RingCentral employee. The vendor sells business telephony, and its core platform never broke. The control that failed was a person.
Reality