> ## Content Index
> Fetch the complete content index at: https://www.privacyguides.org/llms.txt
> Use this file to discover other available public pages before exploring further.

# Data Breach Roundup (12/5/25–12/11/25)
- URL: https://www.privacyguides.org/news/2025/12/13/data-breach-roundup-12-5-25-12-11-25/
- Published: 2025-12-13T00:53:25.000Z
- Updated: 2025-12-13T00:53:25.000Z
- Description: Data breaches galore this week from Petco, AI startups, healthcare providers, and other organizations.
- Author: Nate Bartram
- Tags: News Briefs, Data Breaches

Welcome to Data Breach Roundups, our new weekly series where we highlight notable data breaches we encounter. They're more common than you might think! If you want this weekly digest delivered to your inbox in the future, edit your newsletter settings to subscribe to the new 'Data Breach Roundups' mailing list.

[Edit Newsletter Subscriptions ](#/portal/account/newsletters) 

### Huge Trove of Nude Images Leaked by AI Image Generator Startup’s Exposed Database

An AI Startup (seemingly called DreamX, although the article isn't completely clear) has left a database exposed containing over 1 million images and videos created using their image generation tools. These include so-called "nudify" images wherein AI can take completely benign, "safe-for-work" photos of real people and return images of what they might look like naked. Very little actionable information here as all the images were AI generated, not the training material.

[Huge Trove of Nude Images Leaked by AI Image Generator Startup’s Exposed DatabaseAn AI image generator startup’s database was left accessible to the open internet, revealing more than 1 million images and videos, including photos of real people who had been “nudified.”![](https://www.privacyguides.org/content/images/icon/favicon-14.ico)WIREDMatt Burgess![](https://www.privacyguides.org/content/images/thumbnail/sec-ai-nudes-1365721742.jpg)](https://www.wired.com/story/huge-trove-of-nude-images-leaked-by-ai-image-generator-startups-exposed-database/)

### Pharma firm Inotiv discloses data breach after ransomware attack

Inotiv is a US-based pharmaceutical research company. The company has not disclosed exactly what data was stolen, but the theft occurred on August 5-8, 2025 and impacted both current and former employees and their family members.

[Pharma firm Inotiv discloses data breach after ransomware attackAmerican pharmaceutical firm Inotiv is notifying thousands of people that their personal information was stolen in an August 2025 ransomware attack.![](https://www.privacyguides.org/content/images/icon/bleeping-2.ico)BleepingComputerSergiu Gatlan![](https://www.privacyguides.org/content/images/thumbnail/inotiv.jpg)](https://www.bleepingcomputer.com/news/security/pharma-firm-inotiv-discloses-data-breach-after-ransomware-attack/)

### Petco’s security lapse affected customers’ SSNs, driver’s licenses, and more 

Petco is a "pet products and services giant." Last week they confirmed that they suffered a data breach back in September. The initial confirmation was scant on details but we now know a little more. We know that impacted data included names, Social Security numbers, financial account numbers, credit/debit card numbers, and dates of birth. We also know that notices were filed in Texas, California, Massachusetts, and Montana. Exact numbers remain unknown, but California requires disclosure for breaches impacting 500 residents or more.

[Petco’s security lapse affected customers’ SSNs, driver’s licenses, and more | TechCrunchPetco said the exposure was due to an error in an application and that it is notifying victims whose data was affected.![](https://www.privacyguides.org/content/images/icon/cropped-cropped-favicon-gradient-10.png)TechCrunchLorenzo Franceschi-Bicchierai![](https://www.privacyguides.org/content/images/thumbnail/petco-logo-store.jpg)](https://techcrunch.com/2025/12/08/petcos-security-lapse-affected-customers-ssns-drivers-licenses-and-more/)

### Petco takes down Vetco website after exposing customers’ personal information

Earlier this week, TechCrunch discovered a vulnerability in Petco's website, allowing anyone to download customer data without any authentication required. This includes home address, email address, phone number, visit summaries, medical histories, records, forms, pretty much everything you can imagine.

[Exclusive: Petco takes down Vetco website after exposing customers’ personal informationTechCrunch found Petco’s veterinary clinics were spilling customers’ personal information and medical histories of their pets to the open web.![](https://www.privacyguides.org/content/images/icon/cropped-cropped-favicon-gradient-11.png)TechCrunchZack Whittaker![](https://www.privacyguides.org/content/images/thumbnail/petco-store-1228437454.jpg)](https://techcrunch.com/2025/12/10/petco-takes-down-vetco-website-after-exposing-customers-personal-information/)

### Barts Health NHS discloses data breach after Oracle zero-day hack

Barts Health NHS Trust is a major healthcare provider in England. After being attacked by the Clop ransomware gang via a widely-exploited Oracle E-business Suite zero day, the provider has announced that data was also stolen. It spans several years and impacts full names and addresses of patients.

[Barts Health NHS discloses data breach after Oracle zero-day hackBarts Health NHS Trust has announced that Clop ransomware actors have stolen files from a database by exploiting a vulnerability in its Oracle E-business Suite software.![](https://www.privacyguides.org/content/images/icon/bleeping-3.ico)BleepingComputerBill Toulas![](https://www.privacyguides.org/content/images/thumbnail/Hospital.jpg)](https://www.bleepingcomputer.com/news/security/barts-health-nhs-discloses-data-breach-after-oracle-zero-day-hack/)

### CEO of South Korean retail giant Coupang resigns after massive data breach

Coupang is "often compared to Amazon for its dominance in South Korean e-commerce and logistics." Last month they announced a data breach that impacted nearly 34 million people. This appears to be the latest in a number of security incidents. The breach has since been [linked](https://www.bleepingcomputer.com/news/security/coupang-data-breach-traced-to-ex-employee-who-retained-system-access/) back to a former employee's unrevoked system access, though it's unclear if that employee acted maliciously or some third party leveraged said access.

[CEO of South Korean retail giant Coupang resigns after massive data breach | TechCrunchThe massive data breach at the South Korean retail giant Coupang affects more than half of the country’s population.![](https://www.privacyguides.org/content/images/icon/cropped-cropped-favicon-gradient-12.png)TechCrunchZack Whittaker![](https://www.privacyguides.org/content/images/thumbnail/coupang-large-rainbow-2250196254.jpg)](https://techcrunch.com/2025/12/10/ceo-of-south-korean-retail-giant-coupang-resigns-after-massive-data-breach/)