News: what changed, and what to do

14 October 2026 · Have I Been Pwned

Crunchbase leak puts 560,000 business contacts' details online

Data said to have been taken from Crunchbase in January 2026 has been published, and Have I Been Pwned has now added it. It covers about 560,000 email addresses, mostly sales leads and business contacts, with names, phone numbers, employers, job titles and postal addresses. No passwords.

What to do: Check your work addresses on Have I Been Pwned, and expect more convincing phishing at any address that appears.

Read it at Have I Been Pwned · Our guide: One email address for every account

12 October 2026 · Have I Been Pwned

Sharecare leak exposes 318,000 email addresses and sales contacts

After an extortion campaign against the digital health company Sharecare in August 2026, the attackers published about 318,000 email addresses. Most are business sales and marketing records; a small number of Brazilian health insurance members' records include their CPF (taxpayer) numbers. No passwords.

What to do: Check your work addresses on Have I Been Pwned, and treat unexpected mail that knows your name, employer and job title with extra care.

Read it at Have I Been Pwned · Our guide: One email address for every account

12 October 2026 · noyb

Norway fines Microsoft's Xandr 8.5 million euros over Grindr data

The Norwegian data protection authority fined the advertising company Xandr, now part of Microsoft, for handling personal data from the dating app Grindr, including details of sexual orientation, without a valid legal basis. The case began with complaints in 2020.

What to do: Nothing to do unless you use ad-funded apps that share sensitive details; check what each one lets advertisers see.

Read it at noyb

What changed, and what to do

Crunchbase leak puts 560,000 business contacts' details online

Sharecare leak exposes 318,000 email addresses and sales contacts

Norway fines Microsoft's Xandr 8.5 million euros over Grindr data

Want this set up for your business?