Breaches that exposed biometrics
36 breaches
Deposition SolutionsExposed names, Social Security numbers, government IDs, health records, payment cards, financial details, passwords and biometric data. Reported to the California AG.14K affectedUSOct 22STS Aviation GroupExposed Social Security numbers, government IDs, health records, insurance details, payment cards, financial details, dates of birth, addresses, names, passwords and biometric data. Reported to the California AG.54K affectedTransportUSOct 19PeoplesBankExposed names, government IDs and biometric data. Reported to the Vermont AG.FinanceUSSep 28Saber HealthcareExposed names, Social Security numbers, government IDs, health records, insurance details, payment cards, financial details, dates of birth, addresses and biometric data. Reported to the Delaware DOJ.427K affectedHealthcareUSSep 25
RevolutPhishing exposed names, dates of birth, addresses, emails, phone numbers, government IDs, biometric data and financial details.PhishingFinanceGBUnverifiedSep 12Wend America GroupExposed names, Social Security numbers, government IDs, health records, payment cards, financial details and biometric data. Reported to the Vermont AG.HospitalityUSSep 1
IDScan.netIDScan confirms cloud breach tied to 153 million stolen driver's license scansHacking13M affectedData brokersUSSep 1HUT American GroupExposed Social Security numbers, government IDs, health records, insurance details, payment cards, financial details, dates of birth, addresses, names and biometric data. Reported to the Delaware DOJ.135K affectedRetailUSAug 20Apple American Group LLC and Apple American Group IIRansomware exposed names, Social Security numbers, government IDs, health records, payment cards, financial details, biometric data and insurance details. Reported to the California AG.Ransomware283K affectedHospitalityUSAug 18Colorado Health NetworkHacking exposed names, health records, Social Security numbers, government IDs, insurance details, payment cards, financial details, dates of birth, addresses and biometric data. Reported to the HHS OCR.Hacking68K affectedHealthcareUSJun 18Legal Services of Long IslandExposed names, Social Security numbers, government IDs, health records, payment cards, financial details and biometric data. Reported to the Indiana AG.94K affectedNonprofitUSJun 1Active LeadgenUnofficial UK visa portal exposed 100,000 passport and selfie filesExposed data295 affectedAEMay 27Metropolitan Marine Maintenance Contractors' AssociationExposed names, Social Security numbers, government IDs, health records, payment cards, financial details and biometric data. Reported to the Indiana AG.26K affectedNonprofitUSMay 22ReqreaHotel check-in startup left over 1 million passports and IDs in open bucketExposed dataHospitalityJPUnverifiedMay 15American Lending CenterRansomware exposed Social Security numbers, government IDs, health records, payment cards, financial details, dates of birth, names and biometric data. Reported to the California AG.Ransomware123K affectedFinanceUSApr 28DualesMoney transfer app Duc left 360,000 ID and selfie files on open serverExposed dataFinanceCAUnverifiedApr 2Erie Family Health CentersHacking exposed names, health records, Social Security numbers, government IDs, payment cards, financial details and biometric data. Reported to the HHS OCR.Hacking570K affectedHealthcareUSMar 27
NYC Health + HospitalsVendor breach exposed health records, insurance details, financial details, Social Security numbers, government IDs, biometric data, location data and names. Reported to the HHS archive.Vendor breach59K affectedHealthcareUSMar 10
CodewayAndroid AI video app bucket exposed 8.27M media files including 2M private uploadsExposed dataAITRUnverifiedFeb 19
Flock SafetyLivestreams and admin panels of 60+ AI-enabled Flock Condor cameras left open onlineExposed dataTechUSUnverifiedDec 22, 2025DreamXAI image generator database exposed over 1M mostly explicit images, some of minorsExposed dataAIUnverifiedDec 4, 2025Secret DesiresErotic AI chatbot left nearly 2M user photos and videos in open storageExposed dataAIUnverifiedNov 19, 2025
Kido InternationalRadiant hackers steal photos and data of 8,000 London nursery childrenExtortionEducationGBUnverifiedSep 25, 2025
TeaOnHerExposed data exposed government IDs, biometric data and emails.Exposed dataTechUSUnverifiedAug 6, 2025
Tea Dating AdviceTea app exposed 72,000 user images and over a million private messagesExposed data4,244 affectedTechUSJul 25, 2025
MedusindMedical billing firm Medusind discloses breach of patient dataHacking701K affectedHealthcareUSJan 7, 2025
AscensionVendor breach exposed names, government IDs, health records, insurance details, credentials and tokens, biometric data, addresses, phone numbers, emails, dates of birth and Social Security numbers. Reported to the Delaware DOJ.Vendor breach437K affectedHealthcareUSDec 19, 2024
Healthcare Services GroupHacking exposed names, health records, insurance details, credentials and tokens, biometric data, Social Security numbers, government IDs and financial details. Reported to the California AG.Hacking624K affectedHealthcareUSOct 16, 2024Haverford TownshipExposed names, government IDs, health records, insurance details, credentials and tokens and biometric data. Reported to the Delaware DOJ.35K affectedGovernmentUSApr 2, 2024Infosys McCamish SystemsRansomware exposed names, government IDs, health records, insurance details, credentials and tokens and biometric data. Reported to the California AG.Ransomware6.1M affectedTechUSFeb 2, 2024
RingFTC: Ring staff viewed private customer videos and used them to train algorithmsInsiderTechUSUnverifiedMay 31, 2023Jim Koons AutomotiveExposed names, government IDs, health records, insurance details, credentials and tokens and biometric data. Reported to the California AG.114K affectedTransportUSJan 14, 2022Phillip GalyenExposed names, health records, insurance details, credentials and tokens and biometric data. Reported to the California AG.USMay 13, 2021HumanaInsider exposed names, health records, biometric data and Social Security numbers. Reported to the California AG.Insider6,836 affectedFinanceUSNov 21, 2017
COMELECHackers deface COMELEC site and leak voter database covering 55 millionHacking55M affectedGovernmentPHUnverifiedMar 27, 2016
US Office of Personnel ManagementBackground investigation files of 21.5 million people stolen from OPMHacking22M affectedGovernmentUSJul 9, 2015