Email hosting provider Cock.li confirmed a data breach where threat actors exploited vulnerabilities in its Roundcube webmail platform, resulting in the theft of over a million user records. The incident exposed all users who had logged in since 2016, estimated at 1,023,800 people, along with contact entries for an additional 93,000 users. Sensitive information such as email addresses, login timestamps, and contact details were compromised. The breach highlights the importance of better security practices and the removal of vulnerable software.