This week's breach and leak round-up includes a breached database offered on dark-web forums. For organisations of every size, the lesson is consistent: assume exposure, rotate credentials, enforce MFA and monitor for suspicious activity. For steps you can take today, see the knowledgebase guidance on credentials, MFA and monitoring.