Breaches that exposed children's data

23 breaches

MathspaceSupply chain exposed names, emails, children's data and education records.Supply chain1.1M affectedEducationAUUnverifiedSep 3InstructureExtortion exposed names, emails, messages, children's data and education records.ExtortionEducationUSUnverifiedMay 2VSVenturEd SolutionsAdmissions platform bug exposed over 1.6 million student recordsExposed dataEducationUSUnverifiedFeb 19BBonduAI plush toy's open web console exposed 50,000 children's chat logsExposed dataAIUSUnverifiedJan 29Victorian Department of EducationHackers access Victorian school student database, passwords resetHackingEducationAUUnverifiedJan 14DDreamXAI image generator database exposed over 1M mostly explicit images, some of minorsExposed dataAIUnverifiedDec 4, 2025Illuminate EducationHacker used ex-employee's credentials to access data of 10.1M students; FTC orderHacking10M affectedEducationUSDec 1, 2025Kido InternationalRadiant hackers steal photos and data of 8,000 London nursery childrenExtortionEducationGBUnverifiedSep 25, 2025Baltimore City Public SchoolsRansomware exposed names, employment records, education records and children's data. Reported to the Indiana AG.Ransomware31K affectedEducationUSApr 22, 2025PowerSchoolHacker steals K-12 student and teacher records from PowerSchool SISHackingEducationUSJan 7, 2025Alder Hey Children's HospitalInc Ransom claims theft of patient records from Alder Hey Children's HospitalRansomwareHealthcareGBUnverifiedDec 4, 2024State of MaineMOVEit breach exposes data of 1.3 million people across Maine agenciesSupply chain1.3M affectedGovernmentUSNov 10, 2023BORN OntarioMOVEit breach exposes perinatal and child registry data of 3.4 millionSupply chain3.4M affectedHealthcareCAUnverifiedSep 25, 2023New York City Department of EducationMOVEit breach exposes data of about 45,000 NYC students and staffSupply chainEducationUSUnverifiedJun 26, 2023Herff JonesApril 2021 card breach hit thousands of students; USD 200,000 NY and PennsylvaniaHackingRetailUSDec 16, 2022Tusla Child and Family AgencyUnredacted documents revealed children's and foster carers' addresses; EUR 75,000 DPC fineInsiderGovernmentIENov 4, 2020Facebook2018 View As token theft hit 29M Facebook accounts; Irish DPC fines of EUR 251MHacking29M affectedTechUSSep 28, 2018VTech2015 breach exposed parent and child profiles; USD 650,000 FTC COPPA settlementHacking4.8M affectedManufacturingHKNov 25, 2015Medical Informatics EngineeringHack of EHR vendor and NoMoreClipboard exposes data of 3.9 millionHacking3.9M affectedHealthcareUSJun 19, 2015Princeton ReviewTest prep firm published student data and scores on its websiteExposed data108K affectedEducationUSUnverifiedAug 18, 2008Legal Aid AgencyTwo lost discs held child benefit data of 25 million UK residentsLost or stolen device25M affectedGovernmentGBUnverifiedNov 20, 2007Georgia Department of Community HealthVendor loses disk with 2.9 million Medicaid and PeachCare members' dataVendor breach2.9M affectedGovernmentUSUnverifiedApr 10, 2007Akron Children's HospitalOverseas hackers break into hospital computers with data of 235,903Hacking236K affectedHealthcareUSUnverifiedOct 26, 2006