web app exploit Attacks & Data Breaches

445 data breaches have involved web app exploit as the primary attack method or incident type. Web application exploits target vulnerabilities in websites, APIs, and web applications. Common attack vectors include SQL injection, cross-site scripting (XSS), authentication bypasses, and API abuse.

Impact: Successful exploitation can lead to data theft, account takeover, defacement, and lateral movement into backend systems.

Prevention: Secure development practices, web application firewalls (WAF), regular penetration testing, and vulnerability scanning protect web applications.

Understanding how web app exploit attacks occur helps security teams prioritize defenses and incident response capabilities. Compare with other attack types like Ransomware, Phishing, or Supply Chain attacks. View the latest breaches across all incident types.

Classification: Incidents are categorized by the primary attack vector or root cause identified in breach disclosures and security research.
445
web app exploit Incidents
Date Company Type Industry Country Severity Source
Feb 4, 2026 PSNI web app exploit - - 5/10 View
Feb 3, 2026 SolarWinds (Web Help Desk) web app exploit Technology - 5/10 View
Jan 31, 2026 Strauss web app exploit Financial Services - 6/10 View
Jan 29, 2026 Ivanti (Endpoint Manager Mobile (EPMM)) web app exploit Technology - 5/10 View
Jan 26, 2026 SmarterTools (SmarterMail) web app exploit Technology - 5/10 View
Jan 23, 2026 AT&T web app exploit - - 9/10 View
Jan 23, 2026 Mendocino Community Health Clinic web app exploit Healthcare - 5/10 View
Jan 23, 2026 Minnesota Health Program Faces web app exploit - - 5/10 View
Jan 23, 2026 Montana BCBS Claims Insurance Commission... web app exploit Healthcare - 5/10 View
Jan 23, 2026 Broadcom (VMware vCenter Server) web app exploit Technology - 5/10 View
Jan 23, 2026 Manage My Health web app exploit - - 5/10 View
Jan 22, 2026 Europe’s GDPR web app exploit - - 5/10 View
Jan 21, 2026 Cisco (Unified Communications Manager) web app exploit Technology - 5/10 View
Jan 21, 2026 Cloudflare web app exploit - - 5/10 View
Jan 21, 2026 Hong Kong web app exploit - - 5/10 View
Jan 21, 2026 CalPrivacy web app exploit - - 5/10 View
Jan 20, 2026 SK Telecom files lawsuit to revoke recor... web app exploit - - 5/10 View
Jan 20, 2026 UK: Secret web app exploit - - 5/10 View
Jan 18, 2026 Kaiser web app exploit Financial Services - 6/10 View
Jan 16, 2026 Jordanian Man Admits Selling Unauthorize... web app exploit - - 5/10 View
Jan 15, 2026 Website web app exploit - - 5/10 View
Jan 13, 2026 NY: Southold Laserfiche web app exploit - - 5/10 View
Jan 13, 2026 BreachForums web app exploit - - 5/10 View
Jan 12, 2026 FTC web app exploit - - 5/10 View
Jan 7, 2026 Ledger web app exploit - International/Global 6/10 View
Jan 7, 2026 Hewlett Packard Enterprise (HPE) (OneVie... web app exploit Technology - 5/10 View
Jan 4, 2026 Coupang User Dip After web app exploit - - 5/10 View
Dec 27, 2025 OrthopedicsNY web app exploit - - 6/10 View
Dec 27, 2025 Sax LLP web app exploit - - 5/10 View
Dec 27, 2025 Update on AFLAC web app exploit - - 5/10 View
Dec 24, 2025 Nova web app exploit - - 5/10 View
Dec 24, 2025 Pharmaceutics International web app exploit - International/Global 5/10 View
Dec 23, 2025 Breach at University of Phoenix web app exploit Education - 7/10 View
Dec 23, 2025 Ochsner web app exploit Healthcare - 5/10 View
Dec 21, 2025 Settlement web app exploit Financial Services - 6/10 View
Dec 21, 2025 Infosys web app exploit Financial Services - 6/10 View
Dec 21, 2025 Claim Up web app exploit Healthcare - 5/10 View
Dec 15, 2025 South Korean Ecommerce Giant Coupang web app exploit - South Korea 8/10 View
Dec 7, 2025 Coupang Reissues web app exploit - - 8/10 View
Dec 2, 2025 Coupang Faces Major web app exploit - South Korea 8/10 View
Dec 2, 2025 FTC web app exploit Education - 5/10 View
Dec 2, 2025 Devereux Advanced Behavioral Health web app exploit - - 5/10 View
Dec 2, 2025 File web app exploit - - 5/10 View
Nov 30, 2025 Coupang web app exploit - South Korea 8/10 View
Nov 28, 2025 OpenPLC (ScadaBR) web app exploit Technology - 5/10 View
Nov 27, 2025 California web app exploit Government - 5/10 View
Nov 24, 2025 Civil web app exploit - United Kingdom 5/10 View
Nov 22, 2025 Liberty Resources web app exploit - - 5/10 View
Nov 19, 2025 Interactive web app exploit Healthcare - 5/10 View
Nov 17, 2025 Unmasked web app exploit Government United Kingdom 5/10 View
Nov 14, 2025 Doctor web app exploit - - 7/10 View
Nov 14, 2025 Therapy Services Inc. web app exploit Healthcare - 5/10 View
Nov 14, 2025 DoorDash Hit by Yet Another web app exploit - - 5/10 View
Nov 13, 2025 Conduent web app exploit Financial Services - 9/10 View
Nov 13, 2025 First Circuit Allows Higher-Ed Student web app exploit Education - 5/10 View
Nov 13, 2025 GlobalLogic web app exploit Technology - 5/10 View
Nov 13, 2025 Louvre web app exploit - - 5/10 View
Nov 10, 2025 Manassas web app exploit - - 5/10 View
Nov 9, 2025 Police web app exploit - - 5/10 View
Nov 6, 2025 Zilvia.net web app exploit - - 7/10 View
Nov 4, 2025 CWP (Control Web Panel) web app exploit Technology - 5/10 View
Oct 31, 2025 Revealed web app exploit - United Kingdom 5/10 View
Oct 30, 2025 XWiki (Platform) web app exploit Technology - 5/10 View
Oct 30, 2025 WordPress web app exploit - - 5/10 View
Oct 24, 2025 Microsoft (Windows) web app exploit Technology - 5/10 View
Oct 24, 2025 Adobe (Commerce and Magento) web app exploit Technology - 5/10 View
Oct 22, 2025 Motex (LANSCOPE Endpoint Manager) web app exploit Technology - 5/10 View
Oct 18, 2025 Telegram web app exploit - - 5/10 View
Oct 18, 2025 Salesforce web app exploit Technology - 5/10 View
Oct 15, 2025 Canadian Tire web app exploit Financial Services Canada 6/10 View
Oct 14, 2025 SKYSEA (Client View) web app exploit Technology - 5/10 View
Oct 13, 2025 Qantas Shares Dip After web app exploit Financial Services - 8/10 View
Oct 7, 2025 Synacor (Zimbra Collaboration Suite (ZCS... web app exploit Technology - 5/10 View
Oct 6, 2025 Microsoft (Internet Explorer) web app exploit Technology - 5/10 View
Oct 4, 2025 Discord Customer Service web app exploit Financial Services - 6/10 View
Oct 4, 2025 Cencora web app exploit Financial Services - 6/10 View
Oct 4, 2025 WestJet web app exploit - - 5/10 View
Oct 4, 2025 Motility Software Solutions web app exploit Technology - 5/10 View
Oct 3, 2025 United web app exploit Healthcare United States 5/10 View
Oct 2, 2025 Jenkins web app exploit Technology - 5/10 View
Sep 29, 2025 Cisco (IOS and IOS XE) web app exploit Technology - 5/10 View
Sep 28, 2025 ForcedLeak web app exploit - - 5/10 View
Sep 26, 2025 FinWise Bank web app exploit Financial Services - 6/10 View
Sep 26, 2025 Stellantis web app exploit - - 5/10 View
Sep 25, 2025 Cisco (Secure Firewall Adaptive Security... web app exploit Technology - 5/10 View
Sep 20, 2025 Southwest Flight web app exploit - International/Global 5/10 View
Sep 19, 2025 ShinyHunters web app exploit - - 9/10 View
Sep 16, 2025 Octapharma web app exploit Financial Services - 6/10 View
Sep 16, 2025 FBI web app exploit Healthcare - 5/10 View
Sep 11, 2025 Dassault Systèmes (DELMIA Apriso) web app exploit Technology - 5/10 View
Sep 10, 2025 Pierce County Library web app exploit - - 5/10 View
Sep 6, 2025 SINs web app exploit Financial Services - 6/10 View
Sep 6, 2025 House web app exploit - - 5/10 View
Sep 6, 2025 Kerrville web app exploit Healthcare - 5/10 View
Sep 4, 2025 Ohio Medical Alliance web app exploit Healthcare - 5/10 View
Sep 4, 2025 Sitecore (Multiple Products) web app exploit Technology - 5/10 View
Sep 4, 2025 Carter Credit Union web app exploit Financial Services - 5/10 View
Sep 4, 2025 Scotch web app exploit Healthcare - 5/10 View
Sep 3, 2025 Stolen OAuth Tokens web app exploit Technology - 5/10 View
Sep 1, 2025 Southern web app exploit - - 5/10 View
Aug 29, 2025 Sangoma (FreePBX) web app exploit Technology - 5/10 View
Aug 28, 2025 Nevada web app exploit Government - 5/10 View
Aug 26, 2025 Farmers web app exploit Financial Services - 7/10 View
Aug 26, 2025 Citrix (NetScaler) web app exploit Technology - 5/10 View
Aug 25, 2025 NDPC web app exploit - - 5/10 View
Aug 22, 2025 Radiology web app exploit - - 7/10 View
Aug 22, 2025 Orange Belgium Mega-Breach web app exploit - - 5/10 View
Aug 22, 2025 Panera web app exploit - - 5/10 View
Aug 20, 2025 Canadian web app exploit Financial Services Canada 6/10 View
Aug 20, 2025 Openforce web app exploit - - 5/10 View
Aug 17, 2025 Researcher web app exploit - - 5/10 View
Aug 16, 2025 Lexington-Richland web app exploit Education - 5/10 View
Aug 16, 2025 Montana Clinic web app exploit Healthcare - 5/10 View
Aug 12, 2025 Microsoft (Internet Explorer) web app exploit Technology - 5/10 View
Aug 12, 2025 Google-Salesforce web app exploit Technology - 5/10 View
Aug 12, 2025 Microsoft (Office) web app exploit Technology - 5/10 View
Aug 11, 2025 BreachForums (2025) web app exploit - - 7/10 View
Aug 7, 2025 FBI web app exploit Government - 5/10 View
Aug 3, 2025 Pwn2Own web app exploit - - 5/10 View
Jul 28, 2025 Cisco (Identity Services Engine) web app exploit Technology - 5/10 View
Jul 18, 2025 Fortinet (FortiWeb) web app exploit Technology - 5/10 View
Jul 18, 2025 Leak web app exploit - United Kingdom 5/10 View
Jul 16, 2025 Afghans Secretly Resettled web app exploit Government United Kingdom 5/10 View
Jul 16, 2025 Minister web app exploit Government United Kingdom 5/10 View
Jul 15, 2025 Episource Notifies Millions of Health web app exploit Healthcare - 5/10 View
Jul 15, 2025 Dordt University web app exploit Education - 5/10 View
Jul 15, 2025 Avantic Medical Lab web app exploit Healthcare - 5/10 View
Jul 15, 2025 Covenant Health Patient web app exploit Healthcare - 5/10 View
Jul 15, 2025 Louis Vuitton Customer web app exploit - - 5/10 View
Jul 13, 2025 Over 600 Laravel Apps web app exploit - - 5/10 View
Jun 29, 2025 Two web app exploit Financial Services United States 8/10 View
Jun 29, 2025 Owner web app exploit Financial Services - 6/10 View
Jun 29, 2025 Can Get Up To web app exploit Technology - 5/10 View
Jun 28, 2025 Ontario Health atHome web app exploit - - 6/10 View
Jun 28, 2025 Ahold Delhaize USA Services web app exploit - United States 5/10 View
Jun 28, 2025 EmCentrix web app exploit - - 5/10 View
Jun 28, 2025 PowerSchool web app exploit Financial Services - 5/10 View
Jun 27, 2025 Levi web app exploit Healthcare - 5/10 View
Jun 22, 2025 Lake Barkley State Resort Park Addresses web app exploit Financial Services - 6/10 View
Jun 22, 2025 Prominent web app exploit - - 5/10 View
Jun 20, 2025 Vietnam Airlines web app exploit - - 7/10 View
Jun 20, 2025 Major US Healthcare Data Provider Hit by web app exploit Healthcare - 7/10 View
Jun 17, 2025 Episource LLC web app exploit - - 5/10 View
Jun 14, 2025 Ocuco and Episource Health web app exploit Technology - 5/10 View
Jun 13, 2025 LexisNexis Admits to web app exploit - - 5/10 View
Jun 13, 2025 OpenAI web app exploit - - 5/10 View
Jun 10, 2025 SentinelOne web app exploit Government International/Global 5/10 View
Jun 10, 2025 Mastery web app exploit Healthcare - 5/10 View
Jun 10, 2025 Wazuh (Wazuh Server) web app exploit Technology - 5/10 View
Jun 9, 2025 Catwatchful web app exploit - - 6/10 View
Jun 9, 2025 Roundcube (Webmail) web app exploit Technology - 5/10 View
Jun 2, 2025 ConnectWise (ScreenConnect) web app exploit Technology - 5/10 View
May 24, 2025 FTC web app exploit Government - 5/10 View
May 19, 2025 MDaemon (Email Server) web app exploit Technology - 5/10 View
May 19, 2025 Ivanti (Endpoint Manager Mobile (EPMM)) web app exploit Technology - 5/10 View
May 19, 2025 Synacor (Zimbra Collaboration Suite (ZCS... web app exploit Technology - 5/10 View
May 13, 2025 VeriSource Services web app exploit - - 7/10 View
May 11, 2025 Kelly Benefits web app exploit - United States 5/10 View
May 5, 2025 HR Firm Suffers One of the Worst web app exploit - - 7/10 View
May 1, 2025 Apache (HTTP Server) web app exploit Technology - 5/10 View
Apr 28, 2025 Broadcom (Brocade Fabric OS) web app exploit Technology - 5/10 View
Apr 11, 2025 Synthient Credential Stuffing Threat Dat... web app exploit - - 10/10 View
Apr 11, 2025 Synthient Stealer Log Threat Data web app exploit - - 10/10 View
Apr 8, 2025 Gladinet (CentreStack) web app exploit Technology - 5/10 View
Mar 27, 2025 German Doner Kebab web app exploit - - 6/10 View
Mar 23, 2025 Indiana web app exploit - - 5/10 View
Mar 22, 2025 Root Insurance web app exploit Financial Services - 5/10 View
Mar 22, 2025 UAT-5918 Targets Taiwan web app exploit - - 5/10 View
Mar 19, 2025 Edimax (IC-7100 IP Camera) web app exploit Technology - 5/10 View
Mar 7, 2025 Behavioral Health Resources web app exploit Healthcare - 5/10 View
Mar 4, 2025 Indians web app exploit - India 5/10 View
Mar 4, 2025 Linux (Kernel) web app exploit Technology - 5/10 View
Mar 3, 2025 Progress (WhatsUp Gold) web app exploit Technology - 5/10 View
Feb 28, 2025 GHOSTR web app exploit - - 5/10 View
Feb 25, 2025 Synacor (Zimbra Collaboration Suite (ZCS... web app exploit Technology - 5/10 View
Feb 23, 2025 Apple web app exploit - United Kingdom 5/10 View
Feb 20, 2025 Craft CMS web app exploit Technology - 5/10 View
Feb 14, 2025 Adpost web app exploit - - 7/10 View
Feb 14, 2025 St. Andrew's Resources web app exploit - - 5/10 View
Feb 12, 2025 Mercer University web app exploit Education - 5/10 View
Feb 7, 2025 Trimble (Cityworks) web app exploit Technology - 5/10 View
Feb 6, 2025 Sophos (CyberoamOS) web app exploit Technology - 5/10 View
Feb 6, 2025 Microsoft (Office Outlook) web app exploit Technology - 5/10 View
Feb 6, 2025 Sophos (XG Firewall) web app exploit Technology - 5/10 View
Feb 4, 2025 Apache (OFBiz) web app exploit Technology - 5/10 View
Feb 4, 2025 Microsoft (.NET Framework) web app exploit Technology - 5/10 View
Jan 23, 2025 JQuery web app exploit Technology - 5/10 View
Jan 21, 2025 HPE Potential web app exploit - - 5/10 View
Jan 20, 2025 HPE web app exploit - - 5/10 View
Jan 15, 2025 Michigan web app exploit Government - 7/10 View
Jan 7, 2025 South Portland Schools Tackle web app exploit Education - 5/10 View
Dec 31, 2024 Kerala Police web app exploit - - 5/10 View
Dec 23, 2024 Acclaim Systems (USAHERDS) web app exploit Technology - 5/10 View
Dec 3, 2024 Experian Global web app exploit - International/Global 5/10 View
Nov 24, 2024 Thala web app exploit - - 5/10 View
Nov 21, 2024 Apple (Multiple Products) web app exploit Technology - 5/10 View
Nov 21, 2024 Mercer University Settles Lawsuit Over web app exploit Education - 5/10 View
Nov 18, 2024 Mercer University web app exploit Education - 5/10 View
Nov 14, 2024 Palo Alto Networks (Expedition) web app exploit Technology - 5/10 View
Nov 12, 2024 Cisco (Adaptive Security Appliance (ASA)... web app exploit Technology - 5/10 View
Showing 200 of 445 breaches. This view is limited for performance. Full dataset available with API access.

Unlock Full Breach Intelligence

Get complete access to our breach database with advanced search, API integration, threat actor attribution, and real-time monitoring for your security operations.

Full historical archive API access Real-time alerts Threat actor data Export to CSV/JSON

Contact access@breachsignal.com for enterprise pricing.