Breachesby GlyphThe brief · Mon Nov 9A quiet day; the week: Drive Wealth confirmed a massive financial sector breach affecting 30,000,000 individuals. Healthcare providers and vendors saw major disclosures, including RevSpring affecting 1,974,069 people, Central Ohio Primary Care Physicians affecting 1,351,650, and Amplifon exposing 1,332,826 individuals' personal and financial data. Enterprise data management vendor Cohesity reported a hacking incident affecting 916 people.
Read more
This weekNov 3 to 9
Insight Credit UnionExposed Social Security numbers, government IDs, payment cards, financial details and names. Reported to the Texas AG.67K affectedFinanceUSNov 6Fisher59Exposed Social Security numbers, health records, insurance details, addresses and names. Reported to the Texas AG.1,065 affectedRetailUSNov 6Family Implant and DentistryExposed names, Social Security numbers and health records. Reported to the Vermont AG.HealthcareUSNov 6HTH CompaniesExposed Social Security numbers, government IDs, health records, insurance details, payment cards, financial details and names. Reported to the Texas AG.USNov 6IronBridge Wealth CounselExposed names, Social Security numbers, government IDs, payment cards and financial details. Reported to the Vermont AG.FinanceUSNov 6Nephrology AssociatesExposed names, Social Security numbers, government IDs, health records, payment cards and financial details. Reported to the Vermont AG.HealthcareUSNov 6QNAPQNAP says hackers breaching NAS devices in Plex2Shell attacksHackingUnverifiedNov 6AmplifonExposed Social Security numbers, government IDs, health records, insurance details, payment cards, financial details, dates of birth, addresses and names. Reported to the Texas AG.1.3M affectedHealthcareUSNov 5
Ufp TechnologiesExposed Social Security numbers, health records, insurance details, payment cards, financial details, addresses, names and government IDs. Reported to the Texas AG.11K affectedRetailUSNov 5DigiCertDigiCert data breach exposes customer information, identity documentsLost or stolen deviceUnverifiedNov 5Hands On Children's MuseumLost or stolen device, data exposed not stated. Reported to the Washington AG.Lost or stolen deviceNonprofitUSNov 5Killingly Public SchoolsExposed names, Social Security numbers, government IDs, payment cards and financial details. Reported to the Vermont AG.EducationUSNov 5Ninth CircuitNinth Circuit: Breach Of Confidence Confers Standing In Health Data Security CaseUnverifiedNov 5UK: Royal Cornwall Hospitals TrustUK: Royal Cornwall Hospitals Trust data breach exposed health details of 7,715 staffHealthcareUnverifiedNov 5Xplicit AudioExposed names and passwords. Reported to the Vermont AG.USNov 5RevSpringExposed names, Social Security numbers, dates of birth and addresses. Reported to the California AG.2.0M affectedHealthcareUSNov 4Byker & AssociatesExposed names and Social Security numbers. Reported to the Vermont AG.USNov 4Hoag Memorial Hospital PresbyterianBreach notice filed with the California AG, details not stated.HealthcareUSNov 4Lab 1Lab 1 warns breach data now exposes thousands more firmsHackingHealthcareUnverifiedNov 4New Century OphthamologyExposed names, Social Security numbers, government IDs and health records. Reported to the Vermont AG.HealthcareUSNov 4StudentStudent Data Breach Affects Up to 16 Icelandic SchoolsEducationUnverifiedNov 4Town of LincolnExposed names, Social Security numbers and government IDs. Reported to the Vermont AG.USNov 4Vanguard GroupExposed names and Social Security numbers. Reported to the Vermont AG.FinanceUSNov 4Yu Ming Charter SchoolBreach notice filed with the California AG, details not stated.EducationUSNov 4
Harvard UniversityHarvard University data breach exposed info of 851,000 accountsHacking851K affectedEducationUSUnverifiedNov 3Mavis Tire SupplyExposed Social Security numbers, health records, dates of birth, addresses, names, government IDs, payment cards and financial details. Reported to the Texas AG.72K affectedUSNov 3Fidelity Enrollment ServicesExposed Social Security numbers and names. Reported to the Texas AG.5,680 affectedRetailUSNov 3Center Theatre Group of Los AngelesExposed names and Social Security numbers. Reported to the California AG.NonprofitUSNov 3ISCO InternationalExposed names and Social Security numbers. Reported to the Vermont AG.USNov 3Liberation ProgramsExposed names, Social Security numbers and health records. Reported to the Vermont AG.HealthcareUSNov 3Mindbloom Provider GroupExposed names and health records. Reported to the Vermont AG.HealthcareUSNov 3Peninsula Corridor Joint Powers BoardBreach notice filed with the California AG, details not stated.USNov 3Ritz-Clark & Ben-AsherExposed names and Social Security numbers. Reported to the Vermont AG.USNov 3Upland Unified School DistrictBreach notice filed with the California AG, details not stated.EducationUSNov 3WorkOSWorkOS says attacker used ARTEX AI to breach internal sales appUnverifiedNov 3
Last weekOct 27 to Nov 2
University of Mississippi Medical CenterExposed Social Security numbers, government IDs, health records, insurance details, payment cards, financial details, dates of birth, addresses and names. Reported to the California AG.913K affectedHealthcareUSNov 2RevolveRevolve Data Breach Impacts at Least 180,000 PeopleHacking180K affectedUnverifiedNov 2Apex Clean Energy HoldingsExposed Social Security numbers, government IDs, health records, insurance details, payment cards, financial details and names. Reported to the Texas AG.14K affectedEnergyUSNov 2Sites MedicalBreach notice filed with the Indiana AG, details not stated.372 affectedHealthcareUSNov 2Michigan Financial CompaniesBreach notice filed with the Indiana AG, details not stated.32 affectedFinanceUSNov 2CottonBreach notice filed with the California AG, details not stated.USNov 2DreamHostHacking exposed names and passwords. Reported to the California AG.HackingUSNov 2KR: HYBEKR: HYBE data breach exposes employee medical records, financial detailsInsiderUnverifiedNov 2Magnolia ManagementExposed names and health records. Reported to the Vermont AG.HealthcareUSNov 2
ChainalysisChainalysis discloses data breach from "offensive agentic techniques"HackingTechUnverifiedOct 31FloridaFlorida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach4.9M affectedUnverifiedOct 30Hippo AnalyticsExposed dates of birth and names. Reported to the California AG.176K affectedInsuranceUSOct 30Baanx U.SBreach notice filed with the Indiana AG, details not stated.6,594 affectedUSOct 30Baanx USExposed names, Social Security numbers and dates of birth. Reported to the California AG.6,594 affectedUSOct 30Plateau ExcavationBreach notice filed with the Indiana AG, details not stated.5,598 affectedUSOct 30Vant GroupExposed Social Security numbers, payment cards, financial details, dates of birth, addresses and names. Reported to the Texas AG.500 affectedFinanceUSOct 30Uber Freight USBreach notice filed with the Indiana AG, details not stated.494 affectedTransportUSOct 30ApplebeeApplebee's exposed customers' personal data after leaving database password in appUnverifiedOct 30
BinanceBinance links $6.3 billion crypto theft to compromised DevOps laptopLost or stolen deviceTechUnverifiedOct 30El Camino HealthBreach notice filed with the California AG, details not stated.HealthcareUSOct 30Granbury ISDExposed names. Reported to the Texas AG.EducationUSOct 30Incredible TechnologiesExposed names and Social Security numbers. Reported to the Vermont AG.USOct 30Nueva SchoolBreach notice filed with the California AG, details not stated.EducationUSOct 30ResolveFashion retailer Resolve says hackers stole payment card informationHackingUnverifiedOct 30Trimera HealthExposed health records, addresses and names. Reported to the Texas AG.HealthcareUSOct 30VT Department of LaborExposed names and Social Security numbers. Reported to the Vermont AG.GovernmentUSOct 30Marathon HealthHacking exposed Social Security numbers, health records, insurance details, dates of birth, addresses and names. Reported to the California AG.Hacking5.7M affectedHealthcareUSOct 29Revolve GroupCybersecurity incident disclosed to the SEC (8-K Item 8.01)Hacking1.5M affectedRetailUSOct 29
HCA HealthcareExposed Social Security numbers, health records and insurance details. Reported to the California AG.29K affectedHealthcareUSOct 29Blossom BH OpcoExposed health records, insurance details and names. Reported to the California AG.28K affectedHealthcareUSOct 29Del Monte Foods Corporation IIExposed names, Social Security numbers, government IDs, health records, payment cards, financial details, insurance details, dates of birth and addresses. Reported to the California AG.27K affectedRetailUSOct 29ArtiFlex ManufacturingBreach notice filed with the Indiana AG, details not stated.3,804 affectedUSOct 29American Campus CommunitiesExposed Social Security numbers, government IDs, health records, insurance details, payment cards, financial details, addresses and names. Reported to the Indiana AG.699 affectedEducationUSOct 29Mazur & KittelBreach notice filed with the Indiana AG, details not stated.341 affectedUSOct 29
Freddie MacBreach notice filed with the Indiana AG, details not stated.115 affectedTechUSOct 29Three I DesignBreach notice filed with the Indiana AG, details not stated.25 affectedUSOct 29Bangkok Bank PCL - New York BranchBreach notice filed with the California AG, details not stated.FinanceUSOct 29BRANDcoExposed names, payment cards and financial details. Reported to the Vermont AG.USOct 29Extent of Crime StoppersExtent of Crime Stoppers data breach unknown: Sault Police chiefUnverifiedOct 29Research Foundation for Mental HealthExposed names and Social Security numbers. Reported to the Vermont AG.NonprofitUSOct 29Student SSNs and Medicaid IDsStudent SSNs and Medicaid IDs Exposed in Frontline School Software BreachHealthcareUnverifiedOct 29Metro Tulsa Foot & Ankle SpecialistExposed names, Social Security numbers, health records, payment cards, financial details, insurance details, dates of birth and addresses. Reported to the Texas AG.173K affectedHealthcareUSOct 28Troutman Pepper LockeExposed names and Social Security numbers. Reported to the California AG.63K affectedUSOct 28Apollo Asset ManagementExposed Social Security numbers, government IDs, dates of birth, addresses and names. Reported to the Texas AG.29K affectedFinanceUSOct 28Legacy CooperativeExposed names and Social Security numbers. Reported to the Indiana AG.8,836 affectedUSOct 28Southeast Colorado Hospital DistrictExposed Social Security numbers, health records, dates of birth and names. Reported to the Texas AG.8,589 affectedHealthcareUSOct 2811252227 CanadaExposed names, payment cards and financial details. Reported to the Indiana AG.1,534 affectedUSOct 28American Phytopathological SocietyBreach notice filed with the Indiana AG, details not stated.1,325 affectedNonprofitUSOct 28STP Nuclear OperatingExposed Social Security numbers, dates of birth and names. Reported to the Texas AG.1,175 affectedUSOct 28CodeSecureExposed names, Social Security numbers, health records and passwords. Reported to the Indiana AG.639 affectedUSOct 28DBA Tanya AlexanderExposed addresses and names. Reported to the Texas AG.425 affectedHealthcareUSOct 28American Contractors Insurance GroupBreach notice filed with the Indiana AG, details not stated.27 affectedInsuranceUSOct 28Gator Town Pediatrics, Family and Urgent CareExposed dates of birth and names. Reported to the Texas AG.HealthcareUSOct 28Japan AirlinesJapan Airlines warns of data breach as country grapples with multiple cyber incidentsHackingUnverifiedOct 28KR: BithumbKR: Bithumb discloses data leak after internal system breach; One of three financial firm breaches reported that dayInsiderUnverifiedOct 28