Loading story…
Blackpool Credit Union suffered a cyberattack on August 22, 2025, resulting in the compromise of member personal data. Exposed information includes names, addresses, contact numbers, dates of birth, and account details, with a risk of this data being shared on the dark web. The credit union's main banking system and PINs were not affected, and authorities have been notified.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
3 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcesecurityaffairs.com
Open sourceirishexaminer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
SoundCloud, Pornhub, and 700Credit have each confirmed significant data breaches impacting millions of users. SoundCloud reported unauthorized access to an ancillary service dashboard, affecting approximately 20% of its 140 million users—about 28 million people. The exposed data included email addresses and information already visible on public profiles, with no passwords or financial details compromised. The incident also caused temporary connectivity issues for some users, particularly those using VPNs, due to configuration changes made during the response. Pornhub notified select Premium subscribers that some user data was exposed following a breach at Mixpanel, a third-party analytics provider, but emphasized that sensitive information such as passwords, payment details, and government IDs were not affected. Pornhub had ceased using Mixpanel in 2021 and was informed of the breach by the vendor. 700Credit, a US-based provider of credit and identity verification services, suffered a third-party supply-chain attack that compromised the personal information of approximately 5.6 million individuals. The breach, which occurred between May and October 2025, involved unauthorized access to names, addresses, dates of birth, and Social Security numbers through a compromised API used by one of 700Credit's integration partners. 700Credit has since shut down the affected API, notified federal authorities, and is offering credit monitoring to victims. These incidents highlight the ongoing risks posed by third-party service providers and the importance of timely breach notification and response.
Jun 29, 2026
700Credit, a U.S.-based fintech and data services provider for auto, RV, and marine dealerships, suffered a significant data breach that exposed the personal information of at least 5.6 million people. The compromised data includes names, addresses, dates of birth, and Social Security numbers collected from dealership customers between May and October 2025. The company confirmed that the breach was limited to the application layer and did not impact its internal network or operations. In response, 700Credit has engaged cybersecurity experts, notified affected dealers and consumers, reported the incident to the FBI and FTC, and is offering credit monitoring services to those impacted. The breach was publicly disclosed in December 2025, with regulatory notifications underway and no evidence yet of identity theft or fraud resulting from the incident. The event is part of a broader trend of large-scale data breaches affecting financial services firms, as highlighted by concurrent reporting on similar incidents at other companies. 700Credit is coordinating with state attorneys general and regulatory bodies to ensure compliance and consumer protection in the aftermath of the breach.
Jun 29, 2026
Basic-Fit, Europe’s largest budget gym chain by club count, disclosed that hackers breached its membership visit-registration system and stole personal data belonging to about 1 million members across several European countries, including roughly 200,000 in the Netherlands. The company said it detected the intrusion and stopped the unauthorized access within minutes, but not before attackers downloaded a substantial volume of customer information from a central system used across multiple countries. The exposed data included names, addresses, email addresses, phone numbers, dates of birth, bank account details, subscription status, and recently visited gym locations. Basic-Fit said passwords and identity documents were not stored in the affected environment and have not been found among the stolen data. The company notified the Dutch Data Protection Authority under GDPR requirements, informed affected members directly, and warned customers to remain alert for phishing attempts while the investigation into the unidentified attackers continues.
Jun 29, 2026