Skip to content

Breaches that exposed credentials and tokens

261 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Arbiter SportsAug 24, 20206 years agoHacking539K
Heifer Project InternationalAug 21, 20206 years agoRansomware475K
ElwynAug 21, 20206 years agoHacking42K
Filters FastCheckout skimmer ran for nearly a year, hitting 320,000 customers; USD 200,000 NY AGAug 14, 20206 years agoHacking323K
BlackbaudRansomware attack on donor software firm exposes nonprofit donor dataJul 16, 20206 years agoRansomwareUnknown
ZooskJun 3, 20206 years agoHacking25M
WishboneMay 28, 20206 years agoUnverified9.7Macct
MintedMay 27, 20206 years agoHacking4.3M
FabFitFunMay 25, 20206 years agoHacking210K
Magellan HealthMay 11, 20206 years agoRansomware1.7M
Main Event EntertainmentApr 29, 20206 years agoUnknown
VolusionApr 20, 20206 years agoHacking541K
Primo HogiesApr 17, 20206 years ago64K
Landry'sDec 31, 20196 years agoHackingUnknown
JambavDec 17, 20196 years ago2.7M
Macy'sNov 14, 20196 years agoHackingUnknown
Dunkin' BrandsCredential stuffing hit tens of thousands of accounts; USD 650,000 NY AG settlementSep 26, 20197 years agoCredential stuffingUnknown
Lumin PDFSep 18, 20197 years agoHackingUnverified15Macct
Amateur Athletic UnionSep 13, 20197 years agoHacking288K
ZyngaHackers access Zynga player account data including Words With FriendsAug 31, 20197 years agoHacking173Macct
CafePress2019 breach of 23M users covered up; FTC order and USD 500,000 redressAug 5, 20197 years agoHacking23M
Pearson2018 breach of student records misrepresented to investors; USD 1M SEC penaltyJul 31, 20197 years agoHackingUnverifiedUnknown
Board of Public Works City of LewesMay 29, 20197 years agoUnknown
AppartooMay 2, 20197 years agoUnverified50Kacct
ixigoMar 17, 20197 years agoUnverified17Macct
GoldSilverDec 19, 20187 years ago3,465
British Airways2018 web skimming attack exposed over 400,000 customers; ICO fine of GBP 20MSep 6, 20188 years agoHacking430K
MyHeritageJun 15, 20188 years ago92Macct
TransamericaJun 1, 20188 years ago227K
CBS InteractiveMay 24, 20188 years agoUnknown
TaskRabbitMay 9, 20188 years agoHackingUnknown
DeloitteHackers access Deloitte email system holding confidential client dataSep 25, 20179 years agoHackingUnverifiedUnknown
VerizonVendor NICE Systems left Verizon customer call data in public S3 bucketJul 12, 20179 years agoExposed data225
Health Now NetworksApr 7, 20179 years agoUnverified322Kacct
Bitcoin TalkMar 27, 20179 years agoHackingUnverified501Kacct
WishboneMar 15, 20179 years agoUnverified2.2Macct
WeeblyWeebly hack in February 2016 exposed 43 million user credentialsOct 20, 20169 years agoHackingUnverifiedUnknown
gPotatoSep 24, 201610 years agoUnverified2.1Macct
Qatar National BankMay 1, 201610 years agoUnverified89Kacct
KM.RUMar 3, 201610 years agoUnverified1.5Macct
TaxSlayerHackers took over nearly 9,000 TaxSlayer accounts to file fraudulent returnsJan 29, 201610 years agoCredential stuffing8,800
vBulletinJan 24, 201610 years agoUnverified519Kacct
NetellerNov 30, 201510 years agoUnverified3.6Macct
VTech2015 breach exposed parent and child profiles; USD 650,000 FTC COPPA settlementNov 25, 201510 years agoHacking4.8M
Paddy PowerOct 11, 201510 years agoUnverified591Kacct
Ashley Madison2015 hack exposed 36M users' profiles; FTC and states settlementJul 19, 201511 years agoHacking36M
US Office of Personnel ManagementBackground investigation files of 21.5 million people stolen from OPMJul 9, 201511 years agoHacking22M
Medical Informatics EngineeringHack of EHR vendor and NoMoreClipboard exposes data of 3.9 millionJun 19, 201511 years agoHacking3.9M
SlackSlack's central user database breached, exposing usernames and password hashesMar 27, 201511 years agoHackingUnverifiedUnknown
Apple iCloudCelebrity iCloud accounts compromised and private photos leakedSep 1, 201412 years agoUnverifiedUnknown

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.