Email addresses of 15 million Trello users leaked on hacking forum

A threat actor collected and publicly released 15,115,516 Trello member profiles—each containing a non-public email address—by abusing an unsecured Trello REST API; Atlassian confirmed the API was misused and has since restricted unauthenticated email-based queries. The leaked dataset enables large-scale phishing and doxxing, and the actor sold and later posted the full list on a hacking forum.