Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

API

Security incidents tagged API. Newest first.

0 API incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
1
Days without an incident
1386
Longest quiet run: 1372 days (Jan 20–Oct 22)
Show 1 older incident

January 2023 1

  • HighT-Mobile: API abused to pull data on 37M accounts

    T-Mobile US No fix needed

    T-Mobile said an attacker had abused a single API since around Nov 25, 2022. They pulled names, billing addresses, emails, phone numbers, birth dates and plan details for about 37 million accounts until T-Mobile detected it on Jan 5, 2023.