web app exploit Attacks & Data Breaches
445 data breaches have involved web app exploit as the primary attack method or incident type. Web application exploits target vulnerabilities in websites, APIs, and web applications. Common attack vectors include SQL injection, cross-site scripting (XSS), authentication bypasses, and API abuse.
Impact: Successful exploitation can lead to data theft, account takeover, defacement, and lateral movement into backend systems.
Prevention: Secure development practices, web application firewalls (WAF), regular penetration testing, and vulnerability scanning protect web applications.
Understanding how web app exploit attacks occur helps security teams prioritize defenses and incident response capabilities. Compare with other attack types like Ransomware, Phishing, or Supply Chain attacks. View the latest breaches across all incident types.
| Date | Company | Type | Industry | Country | Severity | Source |
|---|---|---|---|---|---|---|
| Feb 4, 2026 | PSNI | web app exploit | - | - | 5/10 | View |
| Feb 3, 2026 | SolarWinds (Web Help Desk) | web app exploit | Technology | - | 5/10 | View |
| Jan 31, 2026 | Strauss | web app exploit | Financial Services | - | 6/10 | View |
| Jan 29, 2026 | Ivanti (Endpoint Manager Mobile (EPMM)) | web app exploit | Technology | - | 5/10 | View |
| Jan 26, 2026 | SmarterTools (SmarterMail) | web app exploit | Technology | - | 5/10 | View |
| Jan 23, 2026 | AT&T | web app exploit | - | - | 9/10 | View |
| Jan 23, 2026 | Mendocino Community Health Clinic | web app exploit | Healthcare | - | 5/10 | View |
| Jan 23, 2026 | Minnesota Health Program Faces | web app exploit | - | - | 5/10 | View |
| Jan 23, 2026 | Montana BCBS Claims Insurance Commission... | web app exploit | Healthcare | - | 5/10 | View |
| Jan 23, 2026 | Broadcom (VMware vCenter Server) | web app exploit | Technology | - | 5/10 | View |
| Jan 23, 2026 | Manage My Health | web app exploit | - | - | 5/10 | View |
| Jan 22, 2026 | Europe’s GDPR | web app exploit | - | - | 5/10 | View |
| Jan 21, 2026 | Cisco (Unified Communications Manager) | web app exploit | Technology | - | 5/10 | View |
| Jan 21, 2026 | Cloudflare | web app exploit | - | - | 5/10 | View |
| Jan 21, 2026 | Hong Kong | web app exploit | - | - | 5/10 | View |
| Jan 21, 2026 | CalPrivacy | web app exploit | - | - | 5/10 | View |
| Jan 20, 2026 | SK Telecom files lawsuit to revoke recor... | web app exploit | - | - | 5/10 | View |
| Jan 20, 2026 | UK: Secret | web app exploit | - | - | 5/10 | View |
| Jan 18, 2026 | Kaiser | web app exploit | Financial Services | - | 6/10 | View |
| Jan 16, 2026 | Jordanian Man Admits Selling Unauthorize... | web app exploit | - | - | 5/10 | View |
| Jan 15, 2026 | Website | web app exploit | - | - | 5/10 | View |
| Jan 13, 2026 | NY: Southold Laserfiche | web app exploit | - | - | 5/10 | View |
| Jan 13, 2026 | BreachForums | web app exploit | - | - | 5/10 | View |
| Jan 12, 2026 | FTC | web app exploit | - | - | 5/10 | View |
| Jan 7, 2026 | Ledger | web app exploit | - | International/Global | 6/10 | View |
| Jan 7, 2026 | Hewlett Packard Enterprise (HPE) (OneVie... | web app exploit | Technology | - | 5/10 | View |
| Jan 4, 2026 | Coupang User Dip After | web app exploit | - | - | 5/10 | View |
| Dec 27, 2025 | OrthopedicsNY | web app exploit | - | - | 6/10 | View |
| Dec 27, 2025 | Sax LLP | web app exploit | - | - | 5/10 | View |
| Dec 27, 2025 | Update on AFLAC | web app exploit | - | - | 5/10 | View |
| Dec 24, 2025 | Nova | web app exploit | - | - | 5/10 | View |
| Dec 24, 2025 | Pharmaceutics International | web app exploit | - | International/Global | 5/10 | View |
| Dec 23, 2025 | Breach at University of Phoenix | web app exploit | Education | - | 7/10 | View |
| Dec 23, 2025 | Ochsner | web app exploit | Healthcare | - | 5/10 | View |
| Dec 21, 2025 | Settlement | web app exploit | Financial Services | - | 6/10 | View |
| Dec 21, 2025 | Infosys | web app exploit | Financial Services | - | 6/10 | View |
| Dec 21, 2025 | Claim Up | web app exploit | Healthcare | - | 5/10 | View |
| Dec 15, 2025 | South Korean Ecommerce Giant Coupang | web app exploit | - | South Korea | 8/10 | View |
| Dec 7, 2025 | Coupang Reissues | web app exploit | - | - | 8/10 | View |
| Dec 2, 2025 | Coupang Faces Major | web app exploit | - | South Korea | 8/10 | View |
| Dec 2, 2025 | FTC | web app exploit | Education | - | 5/10 | View |
| Dec 2, 2025 | Devereux Advanced Behavioral Health | web app exploit | - | - | 5/10 | View |
| Dec 2, 2025 | File | web app exploit | - | - | 5/10 | View |
| Nov 30, 2025 | Coupang | web app exploit | - | South Korea | 8/10 | View |
| Nov 28, 2025 | OpenPLC (ScadaBR) | web app exploit | Technology | - | 5/10 | View |
| Nov 27, 2025 | California | web app exploit | Government | - | 5/10 | View |
| Nov 24, 2025 | Civil | web app exploit | - | United Kingdom | 5/10 | View |
| Nov 22, 2025 | Liberty Resources | web app exploit | - | - | 5/10 | View |
| Nov 19, 2025 | Interactive | web app exploit | Healthcare | - | 5/10 | View |
| Nov 17, 2025 | Unmasked | web app exploit | Government | United Kingdom | 5/10 | View |
| Nov 14, 2025 | Doctor | web app exploit | - | - | 7/10 | View |
| Nov 14, 2025 | Therapy Services Inc. | web app exploit | Healthcare | - | 5/10 | View |
| Nov 14, 2025 | DoorDash Hit by Yet Another | web app exploit | - | - | 5/10 | View |
| Nov 13, 2025 | Conduent | web app exploit | Financial Services | - | 9/10 | View |
| Nov 13, 2025 | First Circuit Allows Higher-Ed Student | web app exploit | Education | - | 5/10 | View |
| Nov 13, 2025 | GlobalLogic | web app exploit | Technology | - | 5/10 | View |
| Nov 13, 2025 | Louvre | web app exploit | - | - | 5/10 | View |
| Nov 10, 2025 | Manassas | web app exploit | - | - | 5/10 | View |
| Nov 9, 2025 | Police | web app exploit | - | - | 5/10 | View |
| Nov 6, 2025 | Zilvia.net | web app exploit | - | - | 7/10 | View |
| Nov 4, 2025 | CWP (Control Web Panel) | web app exploit | Technology | - | 5/10 | View |
| Oct 31, 2025 | Revealed | web app exploit | - | United Kingdom | 5/10 | View |
| Oct 30, 2025 | XWiki (Platform) | web app exploit | Technology | - | 5/10 | View |
| Oct 30, 2025 | WordPress | web app exploit | - | - | 5/10 | View |
| Oct 24, 2025 | Microsoft (Windows) | web app exploit | Technology | - | 5/10 | View |
| Oct 24, 2025 | Adobe (Commerce and Magento) | web app exploit | Technology | - | 5/10 | View |
| Oct 22, 2025 | Motex (LANSCOPE Endpoint Manager) | web app exploit | Technology | - | 5/10 | View |
| Oct 18, 2025 | Telegram | web app exploit | - | - | 5/10 | View |
| Oct 18, 2025 | Salesforce | web app exploit | Technology | - | 5/10 | View |
| Oct 15, 2025 | Canadian Tire | web app exploit | Financial Services | Canada | 6/10 | View |
| Oct 14, 2025 | SKYSEA (Client View) | web app exploit | Technology | - | 5/10 | View |
| Oct 13, 2025 | Qantas Shares Dip After | web app exploit | Financial Services | - | 8/10 | View |
| Oct 7, 2025 | Synacor (Zimbra Collaboration Suite (ZCS... | web app exploit | Technology | - | 5/10 | View |
| Oct 6, 2025 | Microsoft (Internet Explorer) | web app exploit | Technology | - | 5/10 | View |
| Oct 4, 2025 | Discord Customer Service | web app exploit | Financial Services | - | 6/10 | View |
| Oct 4, 2025 | Cencora | web app exploit | Financial Services | - | 6/10 | View |
| Oct 4, 2025 | WestJet | web app exploit | - | - | 5/10 | View |
| Oct 4, 2025 | Motility Software Solutions | web app exploit | Technology | - | 5/10 | View |
| Oct 3, 2025 | United | web app exploit | Healthcare | United States | 5/10 | View |
| Oct 2, 2025 | Jenkins | web app exploit | Technology | - | 5/10 | View |
| Sep 29, 2025 | Cisco (IOS and IOS XE) | web app exploit | Technology | - | 5/10 | View |
| Sep 28, 2025 | ForcedLeak | web app exploit | - | - | 5/10 | View |
| Sep 26, 2025 | FinWise Bank | web app exploit | Financial Services | - | 6/10 | View |
| Sep 26, 2025 | Stellantis | web app exploit | - | - | 5/10 | View |
| Sep 25, 2025 | Cisco (Secure Firewall Adaptive Security... | web app exploit | Technology | - | 5/10 | View |
| Sep 20, 2025 | Southwest Flight | web app exploit | - | International/Global | 5/10 | View |
| Sep 19, 2025 | ShinyHunters | web app exploit | - | - | 9/10 | View |
| Sep 16, 2025 | Octapharma | web app exploit | Financial Services | - | 6/10 | View |
| Sep 16, 2025 | FBI | web app exploit | Healthcare | - | 5/10 | View |
| Sep 11, 2025 | Dassault Systèmes (DELMIA Apriso) | web app exploit | Technology | - | 5/10 | View |
| Sep 10, 2025 | Pierce County Library | web app exploit | - | - | 5/10 | View |
| Sep 6, 2025 | SINs | web app exploit | Financial Services | - | 6/10 | View |
| Sep 6, 2025 | House | web app exploit | - | - | 5/10 | View |
| Sep 6, 2025 | Kerrville | web app exploit | Healthcare | - | 5/10 | View |
| Sep 4, 2025 | Ohio Medical Alliance | web app exploit | Healthcare | - | 5/10 | View |
| Sep 4, 2025 | Sitecore (Multiple Products) | web app exploit | Technology | - | 5/10 | View |
| Sep 4, 2025 | Carter Credit Union | web app exploit | Financial Services | - | 5/10 | View |
| Sep 4, 2025 | Scotch | web app exploit | Healthcare | - | 5/10 | View |
| Sep 3, 2025 | Stolen OAuth Tokens | web app exploit | Technology | - | 5/10 | View |
| Sep 1, 2025 | Southern | web app exploit | - | - | 5/10 | View |
| Aug 29, 2025 | Sangoma (FreePBX) | web app exploit | Technology | - | 5/10 | View |
| Aug 28, 2025 | Nevada | web app exploit | Government | - | 5/10 | View |
| Aug 26, 2025 | Farmers | web app exploit | Financial Services | - | 7/10 | View |
| Aug 26, 2025 | Citrix (NetScaler) | web app exploit | Technology | - | 5/10 | View |
| Aug 25, 2025 | NDPC | web app exploit | - | - | 5/10 | View |
| Aug 22, 2025 | Radiology | web app exploit | - | - | 7/10 | View |
| Aug 22, 2025 | Orange Belgium Mega-Breach | web app exploit | - | - | 5/10 | View |
| Aug 22, 2025 | Panera | web app exploit | - | - | 5/10 | View |
| Aug 20, 2025 | Canadian | web app exploit | Financial Services | Canada | 6/10 | View |
| Aug 20, 2025 | Openforce | web app exploit | - | - | 5/10 | View |
| Aug 17, 2025 | Researcher | web app exploit | - | - | 5/10 | View |
| Aug 16, 2025 | Lexington-Richland | web app exploit | Education | - | 5/10 | View |
| Aug 16, 2025 | Montana Clinic | web app exploit | Healthcare | - | 5/10 | View |
| Aug 12, 2025 | Microsoft (Internet Explorer) | web app exploit | Technology | - | 5/10 | View |
| Aug 12, 2025 | Google-Salesforce | web app exploit | Technology | - | 5/10 | View |
| Aug 12, 2025 | Microsoft (Office) | web app exploit | Technology | - | 5/10 | View |
| Aug 11, 2025 | BreachForums (2025) | web app exploit | - | - | 7/10 | View |
| Aug 7, 2025 | FBI | web app exploit | Government | - | 5/10 | View |
| Aug 3, 2025 | Pwn2Own | web app exploit | - | - | 5/10 | View |
| Jul 28, 2025 | Cisco (Identity Services Engine) | web app exploit | Technology | - | 5/10 | View |
| Jul 18, 2025 | Fortinet (FortiWeb) | web app exploit | Technology | - | 5/10 | View |
| Jul 18, 2025 | Leak | web app exploit | - | United Kingdom | 5/10 | View |
| Jul 16, 2025 | Afghans Secretly Resettled | web app exploit | Government | United Kingdom | 5/10 | View |
| Jul 16, 2025 | Minister | web app exploit | Government | United Kingdom | 5/10 | View |
| Jul 15, 2025 | Episource Notifies Millions of Health | web app exploit | Healthcare | - | 5/10 | View |
| Jul 15, 2025 | Dordt University | web app exploit | Education | - | 5/10 | View |
| Jul 15, 2025 | Avantic Medical Lab | web app exploit | Healthcare | - | 5/10 | View |
| Jul 15, 2025 | Covenant Health Patient | web app exploit | Healthcare | - | 5/10 | View |
| Jul 15, 2025 | Louis Vuitton Customer | web app exploit | - | - | 5/10 | View |
| Jul 13, 2025 | Over 600 Laravel Apps | web app exploit | - | - | 5/10 | View |
| Jun 29, 2025 | Two | web app exploit | Financial Services | United States | 8/10 | View |
| Jun 29, 2025 | Owner | web app exploit | Financial Services | - | 6/10 | View |
| Jun 29, 2025 | Can Get Up To | web app exploit | Technology | - | 5/10 | View |
| Jun 28, 2025 | Ontario Health atHome | web app exploit | - | - | 6/10 | View |
| Jun 28, 2025 | Ahold Delhaize USA Services | web app exploit | - | United States | 5/10 | View |
| Jun 28, 2025 | EmCentrix | web app exploit | - | - | 5/10 | View |
| Jun 28, 2025 | PowerSchool | web app exploit | Financial Services | - | 5/10 | View |
| Jun 27, 2025 | Levi | web app exploit | Healthcare | - | 5/10 | View |
| Jun 22, 2025 | Lake Barkley State Resort Park Addresses | web app exploit | Financial Services | - | 6/10 | View |
| Jun 22, 2025 | Prominent | web app exploit | - | - | 5/10 | View |
| Jun 20, 2025 | Vietnam Airlines | web app exploit | - | - | 7/10 | View |
| Jun 20, 2025 | Major US Healthcare Data Provider Hit by | web app exploit | Healthcare | - | 7/10 | View |
| Jun 17, 2025 | Episource LLC | web app exploit | - | - | 5/10 | View |
| Jun 14, 2025 | Ocuco and Episource Health | web app exploit | Technology | - | 5/10 | View |
| Jun 13, 2025 | LexisNexis Admits to | web app exploit | - | - | 5/10 | View |
| Jun 13, 2025 | OpenAI | web app exploit | - | - | 5/10 | View |
| Jun 10, 2025 | SentinelOne | web app exploit | Government | International/Global | 5/10 | View |
| Jun 10, 2025 | Mastery | web app exploit | Healthcare | - | 5/10 | View |
| Jun 10, 2025 | Wazuh (Wazuh Server) | web app exploit | Technology | - | 5/10 | View |
| Jun 9, 2025 | Catwatchful | web app exploit | - | - | 6/10 | View |
| Jun 9, 2025 | Roundcube (Webmail) | web app exploit | Technology | - | 5/10 | View |
| Jun 2, 2025 | ConnectWise (ScreenConnect) | web app exploit | Technology | - | 5/10 | View |
| May 24, 2025 | FTC | web app exploit | Government | - | 5/10 | View |
| May 19, 2025 | MDaemon (Email Server) | web app exploit | Technology | - | 5/10 | View |
| May 19, 2025 | Ivanti (Endpoint Manager Mobile (EPMM)) | web app exploit | Technology | - | 5/10 | View |
| May 19, 2025 | Synacor (Zimbra Collaboration Suite (ZCS... | web app exploit | Technology | - | 5/10 | View |
| May 13, 2025 | VeriSource Services | web app exploit | - | - | 7/10 | View |
| May 11, 2025 | Kelly Benefits | web app exploit | - | United States | 5/10 | View |
| May 5, 2025 | HR Firm Suffers One of the Worst | web app exploit | - | - | 7/10 | View |
| May 1, 2025 | Apache (HTTP Server) | web app exploit | Technology | - | 5/10 | View |
| Apr 28, 2025 | Broadcom (Brocade Fabric OS) | web app exploit | Technology | - | 5/10 | View |
| Apr 11, 2025 | Synthient Credential Stuffing Threat Dat... | web app exploit | - | - | 10/10 | View |
| Apr 11, 2025 | Synthient Stealer Log Threat Data | web app exploit | - | - | 10/10 | View |
| Apr 8, 2025 | Gladinet (CentreStack) | web app exploit | Technology | - | 5/10 | View |
| Mar 27, 2025 | German Doner Kebab | web app exploit | - | - | 6/10 | View |
| Mar 23, 2025 | Indiana | web app exploit | - | - | 5/10 | View |
| Mar 22, 2025 | Root Insurance | web app exploit | Financial Services | - | 5/10 | View |
| Mar 22, 2025 | UAT-5918 Targets Taiwan | web app exploit | - | - | 5/10 | View |
| Mar 19, 2025 | Edimax (IC-7100 IP Camera) | web app exploit | Technology | - | 5/10 | View |
| Mar 7, 2025 | Behavioral Health Resources | web app exploit | Healthcare | - | 5/10 | View |
| Mar 4, 2025 | Indians | web app exploit | - | India | 5/10 | View |
| Mar 4, 2025 | Linux (Kernel) | web app exploit | Technology | - | 5/10 | View |
| Mar 3, 2025 | Progress (WhatsUp Gold) | web app exploit | Technology | - | 5/10 | View |
| Feb 28, 2025 | GHOSTR | web app exploit | - | - | 5/10 | View |
| Feb 25, 2025 | Synacor (Zimbra Collaboration Suite (ZCS... | web app exploit | Technology | - | 5/10 | View |
| Feb 23, 2025 | Apple | web app exploit | - | United Kingdom | 5/10 | View |
| Feb 20, 2025 | Craft CMS | web app exploit | Technology | - | 5/10 | View |
| Feb 14, 2025 | Adpost | web app exploit | - | - | 7/10 | View |
| Feb 14, 2025 | St. Andrew's Resources | web app exploit | - | - | 5/10 | View |
| Feb 12, 2025 | Mercer University | web app exploit | Education | - | 5/10 | View |
| Feb 7, 2025 | Trimble (Cityworks) | web app exploit | Technology | - | 5/10 | View |
| Feb 6, 2025 | Sophos (CyberoamOS) | web app exploit | Technology | - | 5/10 | View |
| Feb 6, 2025 | Microsoft (Office Outlook) | web app exploit | Technology | - | 5/10 | View |
| Feb 6, 2025 | Sophos (XG Firewall) | web app exploit | Technology | - | 5/10 | View |
| Feb 4, 2025 | Apache (OFBiz) | web app exploit | Technology | - | 5/10 | View |
| Feb 4, 2025 | Microsoft (.NET Framework) | web app exploit | Technology | - | 5/10 | View |
| Jan 23, 2025 | JQuery | web app exploit | Technology | - | 5/10 | View |
| Jan 21, 2025 | HPE Potential | web app exploit | - | - | 5/10 | View |
| Jan 20, 2025 | HPE | web app exploit | - | - | 5/10 | View |
| Jan 15, 2025 | Michigan | web app exploit | Government | - | 7/10 | View |
| Jan 7, 2025 | South Portland Schools Tackle | web app exploit | Education | - | 5/10 | View |
| Dec 31, 2024 | Kerala Police | web app exploit | - | - | 5/10 | View |
| Dec 23, 2024 | Acclaim Systems (USAHERDS) | web app exploit | Technology | - | 5/10 | View |
| Dec 3, 2024 | Experian Global | web app exploit | - | International/Global | 5/10 | View |
| Nov 24, 2024 | Thala | web app exploit | - | - | 5/10 | View |
| Nov 21, 2024 | Apple (Multiple Products) | web app exploit | Technology | - | 5/10 | View |
| Nov 21, 2024 | Mercer University Settles Lawsuit Over | web app exploit | Education | - | 5/10 | View |
| Nov 18, 2024 | Mercer University | web app exploit | Education | - | 5/10 | View |
| Nov 14, 2024 | Palo Alto Networks (Expedition) | web app exploit | Technology | - | 5/10 | View |
| Nov 12, 2024 | Cisco (Adaptive Security Appliance (ASA)... | web app exploit | Technology | - | 5/10 | View |
Unlock Full Breach Intelligence
Get complete access to our breach database with advanced search, API integration, threat actor attribution, and real-time monitoring for your security operations.
Contact access@breachsignal.com for enterprise pricing.