Skip to content

Incidents from

2007

Data breachResolved

gPotato data breach (2007)

In July 2007, the multiplayer game portal known as gPotato (link to archive of the site at that time) suffered a data breach and over 2 million user accounts were exposed. The site later merged into the Webzen portal where the original accounts still exist today.

Victim
gPotato
Records
2.1M
DDoSResolved

2007 cyberattacks on Estonia

A three-week wave of distributed denial-of-service attacks crippled Estonian government, banking, and media websites amid a dispute with Russia, becoming the first cyber assault on an entire nation-state and the birthplace of NATO's cyber-defence doctrine.

Victim
Republic of Estonia (government, banks, media)
Data breachResolved

TJX Companies (T.J. Maxx) card breach

Attackers led by Albert Gonzalez sniffed weakly-encrypted in-store Wi-Fi at a Marshalls outlet and pivoted to TJX's central systems, exfiltrating an estimated 94 million payment-card records over an 18-month intrusion — the largest U.S. retail data breach of its era.

Victim
The TJX Companies, Inc.
Loss
$256.0M
Records
94.0M