> ## Content Index
> Fetch the complete content index at: https://www.privacyguides.org/llms.txt
> Use this file to discover other available public pages before exploring further.

# Data Breach Roundup (Oct 30 - Nov 5, 2026)
- URL: https://www.privacyguides.org/news/2026/11/06/data-breach-roundup-oct-30-nov-5-2026/
- Published: 2026-11-06T17:00:16.000Z
- Updated: 2026-11-06T17:00:16.000Z
- Description: This week's breaches include Applebee's, Chainalysis, Harvard, and more.
- Author: Nate Bartram
- Tags: News Briefs, Data Breaches

## Applebee’s exposed customers’ personal data after leaving database password in app

Applebee’s has fixed a security flaw that allowed anyone to access the personal information of its registered customers, after a researcher found a password for an internal database inside Applebee’s mobile app. The exposed database contained customer names, email addresses (including whether or not the customer verified their email), dates of birth, phone numbers, and ZIP codes. The data also included veteran status, the number of times customers had logged in, when their accounts were created, and the IP addresses of their most recent log-ins, which can be used to reveal the person’s approximate location. 

[Applebee’s exposed customers’ personal data after leaving database password in app | TechCrunchEXCLUSIVE: A security researcher discovered the hardcoded credential in Applebee’s app, allowing unrestricted access to customers’ personal data.![](https://www.privacyguides.org/content/images/icon/cropped-cropped-favicon-gradient-e4662ebf-9cd6-4043-902a-92e1ed019a46.png)TechCrunchZack Whittaker![](https://www.privacyguides.org/content/images/thumbnail/applebees-501705240-86ae7c57-d385-4f20-95f3-47059c6617bf.jpg)](https://techcrunch.com/2026/10/30/applebees-exposed-customers-personal-data-after-leaving-database-password-in-app/)

## Chainalysis discloses data breach from "offensive agentic techniques"

Chainalysis provides blockchain analytics tools used by law enforcement, government agencies, cryptocurrency exchanges, and financial institutions to trace cryptocurrency transactions and investigate crimes such as fraud, ransomware, and money laundering. The accessed data includes user IDs, full names, email addresses, and organizational role labels for users provisioned on the platform. Chainalysis is still determining which records were accessed for each organization and will provide a detailed breakdown once that analysis is complete.

[Chainalysis discloses data breach from “offensive agentic techniques”Blockchain analytics firm Chainalysis disclosed a data breach after attackers used “offensive agentic techniques” to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles.![](https://www.privacyguides.org/content/images/icon/bleeping-430e2912-d24c-4540-b093-02d77d4880ca.ico)BleepingComputerAx Sharma![](https://www.privacyguides.org/content/images/thumbnail/Blockchain-2-ed0e9529-6801-4de0-90c0-e69ffabba15e.jpg)](https://www.bleepingcomputer.com/news/security/chainalysis-discloses-data-breach-from-offensive-agentic-techniques/)

## Harvard University data breach exposed info of 851,000 accounts

This breach took place in November 2025, and the data was leaked in February 2026\. It's just now being added to Have I Been Pwned. The data includes personal information of students, alumni, donors, staff, and faculty members, including email addresses, telephone numbers, home and business addresses, event attendance records, donation details, and "biographical information pertaining to University fundraising and alumni engagement activities."

[Harvard University data breach exposed info of 851,000 accountsHackers who breached Harvard University’s Alumni Affairs and Development systems in November 2025 stole data linked to more than 850,000 unique email addresses, according to breach notification service Have I Been Pwned.![](https://www.privacyguides.org/content/images/icon/bleeping-2386af3c-9f08-4a31-bc2a-8b6176835f2c.ico)BleepingComputerSergiu Gatlan![](https://www.privacyguides.org/content/images/thumbnail/Harvard-University-3a1a81d9-11f3-464f-bcee-6cdd773ce151.jpg)](https://www.bleepingcomputer.com/news/security/harvard-university-data-breach-exposed-info-of-851-000-accounts/)

## WorkOS says attacker used ARTEX AI to breach internal sales app

WorkOS is a developer infrastructure company that provides APIs, SDKs, and tools for integrating services such as enterprise authentication, single sign-on (SSO), user management, and identity management into applications. Data accessed by the attacker includes business contact details (names, email addresses, job titles, and company affiliations from the CRM systems); customer account histories (product usage and connection or directory health); customer communications (summaries and excerpts from sales calls, support discussions, and customer Slack conversations); and business account and relationship information (account histories, information about sales and customer relationship). The article did not specify the scale of the breach.

[WorkOS says attacker used ARTEX AI to breach internal sales appDeveloper platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications.![](https://www.privacyguides.org/content/images/icon/bleeping-551252e8-306d-4adf-9d09-3587f3b5fa43.ico)BleepingComputerBill Toulas![](https://www.privacyguides.org/content/images/thumbnail/workos-292df9a7-6a2f-4df7-9a9c-1c4a31a9b010.jpg)](https://www.bleepingcomputer.com/news/security/workos-says-attacker-used-artex-ai-to-breach-internal-sales-app/)

## DigiCert data breach exposes customer information, identity documents

The certificate authority says the breach affected a small portion of its archived customer data, including names, business email addresses, phone numbers, and business addresses. For some people, the exposed records also contained personal identification documents, such as driver's licenses, passports, and utility bills. The article did not specify how many people were impacted.

[DigiCert data breach exposes customer information, identity documentsDigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents.![](https://www.privacyguides.org/content/images/icon/bleeping-00ee7039-dc8d-4509-b94b-3c6e44144767.ico)BleepingComputerLawrence Abrams![](https://www.privacyguides.org/content/images/thumbnail/digicert-header-bd3cc7f9-d28a-47c5-8e9f-c5f0c272a018.jpg)](https://www.bleepingcomputer.com/news/security/digicert-data-breach-exposes-customer-information-identity-documents/)