Home :: List of Web Hacking Incidents

List of Web Hacking Incidents: Leakage of Information

To further analyze the Web Hacking Incident Database, use the WHID query page

Attack Method Outcome
WHID 2009-43: Web Mail Company to Pay Prize After CEO Hacked Cross Site Scripting (XSS)
Leakage of Information
Monetary Loss
WHID 2009-4: Twitter Personal Info CSRF Cross Site Request Forgery (CSRF) Leakage of Information
WHID 2009-39: Uno is back: 245,000 records stolen from Orange France using SQL injection SQL Injection Leakage of Information
WHID 2009-36: Hackers steal Austalian and NZ Shell customer info (Updated) Unknown Leakage of Information
WHID 2009-35: Former US Senator Donors Information Leaks
Administration Error
Misconfiguration
 Leakage of Information
WHID 2009-34: Romanian Hacker Moves On To The Telegraph SQL Injection Leakage of Information
WHID 2009-29: FBI & Secret Service warn of a sophisticated HSM attack SQL Injection
Leakage of Information
Monetary Loss
WHID 2009-28: Serious Leakage on Mac clone Maker's site Misconfiguration Leakage of Information
WHID 2009-26: F-Secure Joins The Breached AV Vendors Club
Cross Site Scripting (XSS)
SQL Injection
 Leakage of Information
WHID 2009-23: Miley Cyrus Twitter Account Hit By Sex-Obsessed Hacker Unknown Leakage of Information
WHID 2009-21: This Time Uno is after the Herald Tribute SQL Injection Leakage of Information
WHID 2009-20: BitDefender joins Kasperski on the Breached side SQL Injection Leakage of Information
WHID 2009-18: phpBB web site hacked using LFI
Insufficient Encryption
Local File Inclusion (LFI)
 Leakage of Information
WHID 2009-17: Passwords are optional at SpeedDate Insufficient Authentication Leakage of Information
WHID 2008-60: Miley Cyrus Pictures Leaked Due to a Web Hack (Updated)
Insufficient Encryption
Other
 Leakage of Information
WHID 2008-53: "SQL by Design" leaks Thousands of SSNs at an Oklahoma Gov site SQL Injection Leakage of Information
WHID 2008-52: The Hannaford Breach Unknown
Leakage of Information
Loss of Sales
WHID 2008-42: Chinese hackers steal 9 million items of personal information from South Koreans SQL Injection
Leakage of Information
Monetary Loss
WHID 2008-36: RBS WorldPay Data Breach Hits 1.5 Million (Updated) Unknown
Leakage of Information
Monetary Loss
WHID 2008-30: Security breach hits DivShare, unauthorized access to its database Unknown Leakage of Information
WHID 2008-28: Confidential data on thousands of students exposed by test preparatory firm Misconfiguration Leakage of Information
WHID 2008-26: Palin's private e-mail hacked, posted to Net Unknown Leakage of Information
WHID 2008-21: Information about organ and tissue donors open to all Unknown Leakage of Information
WHID 2008-19: OSU breach raises fears of ID theft Unintentional Information Disclosure Leakage of Information
WHID 2009-19: Kaspersky site breached using SQL injection, sensitive data exposed (Updated) SQL Injection Leakage of Information