Technology & SaaS2025
Source: Google Threat Intelligence Group ·
Stolen integration tokens opened a path to customer data
Google documented data theft using compromised tokens associated with Salesloft Drift.
Read the briefingFilter briefings
Find a case like yours
Start with your industry, or explore the access decision you face.
Years refer to incidents or evaluations, not later source reports. Cases without a stated incident year are grouped separately. Filters can be combined.
All briefings
Page 2 of 5
Legal services · Government & public sector · Healthcare & life sciences2023
Source: National Disability Insurance Agency ·
HWL Ebsworth: legal files carried health and disability information
A legal supplier’s breach affected people whose information appeared in disability-related matters.
Read the briefingHealthcare & life sciences · Consumer services2023
Source: Information Commissioner’s Office ·
23andMe: personal information that cannot be replaced like a password
The ICO documented a credential-stuffing attack affecting sensitive information about UK users.
Read the briefingHealthcare & life sciences2019
Source: U.S. Department of Health and Human Services ·
PIH Health: patient records were exposed through employee email
A targeted phishing attack compromised 45 employee email accounts containing patient information.
Read the briefingLegal services2022
Source: Information Commissioner’s Office ·
DPP Law: a little-used administrator account exposed client files
Attackers used a legacy account to move across a law firm’s network and steal sensitive information.
Read the briefingHealthcare & life sciences · Technology & SaaS2022
Source: Information Commissioner’s Office ·
Advanced: one customer account exposed care information
An account without multi-factor authentication became a route into a health and care supplier’s systems.
Read the briefingConsumer services2014–2020
Source: Federal Trade Commission ·
Marriott and Starwood: years of guest data increased the stakes
An FTC settlement addressed repeated breaches and unnecessary retention of guest information.
Read the briefingGovernment & public sector2023
Source: Information Commissioner’s Office ·
PSNI: a request for staff totals exposed individual identities
A freedom-of-information response contained hidden spreadsheet data identifying the police workforce.
Read the briefingNo briefings match these filters
Try a broader search or remove a filter to explore related cases.
Why we’re building Vivendur
These briefings make the need for clearer access boundaries concrete. Vivendur is building private AI memory so organizations can choose what each tool receives for a task. The cases inform that work: limiting unnecessary disclosure, separating permissions between tools, and being clear about what happens after information is shared.
Our approach to reporting
We link to original disclosures, distinguish incident dates from publication dates, and label our interpretation. These cases raise different security questions; they do not establish that Vivendur could have prevented them.
See these access decisions in Vivendur in action