Data Breach Roundup (May 8 - 14, 2026)
Zara data breach exposed personal information of 197,000 people
Zara is a Spanish fast-fashion retailer that operates over 1,500 stores worldwide. The company has yet to confirm any major details, but says that names, phone numbers, addresses, credentials, and payment data are safe. Have I Been Pwned analyzed the data exposed so far and said it contains email addresses, geographic locations, purchases, and support tickets.
Sergiu Gatlan
NVIDIA confirms GeForce NOW data breach affecting Armenian users
GeForce NOW is a cloud gaming services, allowing users to run games on more powerful hardware in a data center rather than local computers. Exposed data includes full name (if using a Google account), email address, phone number (if registered through a mobile operator), date of birth, and username. Users registered after March 9 are not impacted.
Bill Toulas
US bank reports itself after slinging customer data at 'unauthorized AI app'
Community Bank - which serves Pennsylvania, Ohio, and West Virginia - filed a data breach notification with regulators, saying that sensitive data was accidentally leaked to an unauthorized AI. We know that names, dates of birth, and Social Security numbers were impacted but we don't know how many customers were affected, which AI was used, or even the exact details of the incident.
Connor Jones
Škoda warns of customer data breach after online shop hack
The Czech carmaker has reported a breach of their online store that allowed attackers to access data. Data includes names, addresses, contact information, phone numbers, order information, and login credentials (passwords were hashed). It does include financial information and the company has not disclosed how many were impacted.
Sergiu Gatlan
UK fines water supplier $1.3M for exposing data of 664k customers
This is an update to a story from 2022. South Staffordshire Water Plc was attacked by the Cl0p ransomware gang at the time and leaked customer data going back to 2020. The fine was for "significant failures in the company's approach to data security and left customers and employees vulnerable for nearly two years.”
Bill Toulas
Community Discussion