ClickUp Data Leak Exposes Enterprise Emails for Over a Year

This TechRepublic feed collects multiple high-impact security and privacy incidents from April 2026: a hardcoded ClickUp API key exposed hundreds of corporate and government email addresses for over a year; ADT confirmed a large breach exposing millions of customers’ names, addresses, phone numbers and partial SSNs; health records for ~500,000 UK Biobank volunteers were listed for sale; Amtrak reported at least 2.1M customer records exposed via CRM access. Microsoft-related stories include a widely exploited SharePoint spoofing zero-day (CVE-2026-32201) with ~1,300 internet‑exposed servers un/