Skip to content
Breaches.

Breaches that exposed other

353 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Services AustraliaOpenAI research agents breached Medicare statistics portalSep 24yesterdayAI or modelUnknown
FBIFBI investigates ShinyHunters claim of FBIjobs.gov breach and defacementSep 223 days agoExtortionUnverifiedUnknown
Los Angeles City AttorneyLA City Attorney file share accessed with stolen credential, litigation data takenSep 187 days agoHackingUnknown
GyazoGyazo server flaw exploited to steal 23.62 million user recordsSep 169 days agoHacking24M
GoogleGemini accessed three real companies' systems during Irregular security testsSep 169 days agoAI or modelUnverifiedUnknown
AccelaGovtech vendor Accela file transfer portal breached, government client data takenSep 1411 days agoHackingUnknown
Florida Department of Highway Safety and Motor VehiclesFlorida DMV database breached with stolen police account, drivers' data leakedSep 112 weeks agoHackingUnknown
HibbettHibbett says attackers accessed HR personnel records of employeesSep 82 weeks agoHackingUnknown
DropboxLenovo ID verification flaw let attacker access about 5,000 Dropbox accountsSep 23 weeks agoVendor breachUnverified5,000
Manchester Airports GroupManchester Airports Group says hackers stole traveler booking dataAug 274 weeks agoHacking8.8Macct
AlationAI data catalog company Alation confirms cyberattack affecting customersAug 205 weeks agoUnverifiedUnknown
Sakura InternetSakura Internet sales system hack may expose 1,360,563 accountsAug 195 weeks agoHacking1.4M
DGFiPFrench tax authority breach exposes tax and property data of 678,000Aug 175 weeks agoHacking678K
Pokemon CenterPokemon Center UK and Germany customers exposed in CEVA Logistics hackAug 175 weeks agoVendor breachUnverifiedUnknown
SafePalSafePal order-tracking flaw exposes data of 39,798 wallet buyersAug 165 weeks agoHacking40K
TrezorTrezor customer data exposed via ShipMonk Metabase breach, 81,000 affectedAug 136 weeks agoVendor breach81K
See's CandiesSee's Candies ransomware attack leaks files with personal data on dark webAug 136 weeks agoRansomware24K
ValveValve warns European Steam hardware buyers of data theft at CEVAAug 106 weeks agoVendor breachUnverifiedUnknown
CEVA LogisticsCEVA Logistics breach exposes shipping data of Steam, bol and other customersAug 17 weeks agoHackingUnverifiedUnknown
OnTracOnTrac notifies customers after corporate network breach in MarchJul 242 months agoHackingUnverifiedUnknown
Upbound GroupUpbound says stolen data fueled $13 million in fraudulent Acima leasesJul 222 months agoHackingUnknown
Chick-fil-AChick-fil-A One loyalty accounts hit by credential stuffing, 13,322 affectedJul 202 months agoCredential stuffing13K
CranewareHospital billing software firm Craneware says hackers stole customer dataJul 202 months agoHackingUnknown
Ernst & YoungEY notifies clients of tax data theft from third-party support ticket systemJul 152 months agoVendor breach11K
LidlLidl online shop customer data stolen via IT service providerJul 132 months agoVendor breachUnverifiedUnknown
AssuranceAmericaAssuranceAmerica phishing breach exposes 6,998,886 driversJul 82 months agoPhishing7M
Aflac Life Insurance JapanAflac Japan breach exposes policy and bank data of 4.38 million customersJun 302 months agoHacking4.4M
Virta HealthVirta Health reports unauthorized access to separate data repositoryJun 302 months agoHacking602
KodakKodak confirms breach after ShinyHunters claims 2.2 million recordsJun 173 months agoExtortionUnverifiedUnknown
iRhythm TechnologiesiRhythm says patient health data stolen from third-party hosted appsJun 153 months agoPhishingUnknown
Novo NordiskNovo Nordisk discloses breach of clinical trial and doctor dataJun 123 months agoHackingUnknown
Kyushu Electric PowerKyushu Electric loses backup drive holding data of 10.9 million customersJun 113 months agoLost or stolen deviceUnverified11M
DINUMFrench government Tchap messenger breach affects 73,467 officialsJun 93 months agoPhishingUnverified73K
SoFi SecuritiesSoFi Hong Kong warns customers of breach at third-party vendor databaseJun 83 months agoVendor breachUnverifiedUnknown
Skoda AutoSkoda German online shop hacked, customer data stolenMay 124 months agoHackingUnknown
ZaraZara data stolen via Anodot tokens, 197,400 customers affectedMay 84 months agoVendor breachUnverified197Kacct
South Staffordshire WaterPhishing-led cyber attack exposed data of 633,887 people; ICO fine of GBP 963,900May 74 months agoPhishing634K
VimeoVimeo confirms Anodot-linked breach, 119,200 users' data leakedApr 275 months agoVendor breach119Kacct
CarnivalCarnival confirms social engineering breach exposing 5,995,277 customersApr 245 months agoPhishing6M
RitualsRituals confirms unauthorized download of loyalty membership databaseApr 225 months agoHackingUnverifiedUnknown
France TitresFrance Titres portal breach exposes 11.7 million citizen accountsApr 215 months agoHacking12M
ExpressExpress order page flaw exposed customer contact and order detailsApr 165 months agoExposed dataUnverifiedUnknown
AnodotAnodot token theft lets ShinyHunters raid customers' Snowflake and cloud dataApr 135 months agoSupply chainUnverifiedUnknown
Booking.comBooking.com resets reservation PINs after unauthorized access to booking dataApr 135 months agoHackingUnverifiedUnknown
Rockstar GamesShinyHunters leaks Rockstar Games analytics data stolen via AnodotApr 135 months agoVendor breachUnverifiedUnknown
AFC AjaxAjax hack exposed fan data and allowed season ticket hijackingMar 266 months agoHackingUnknown
Mazda MotorMazda discloses warehouse system breach exposing 692 employee and partner recordsMar 196 months agoHacking692
Sears Home ServicesAI repair chatbot 'Samantha' left 3.7M chat logs and 1.4M call recordings exposedMar 176 months agoExposed dataUnverifiedUnknown
England HockeyEngland Hockey investigates AiLock ransomware claim of 129 GB stolenMar 126 months agoRansomwareUnverifiedUnknown
Telus DigitalTelus Digital confirms breach after ShinyHunters claims 1 PB data theftMar 116 months agoSupply chainUnverifiedUnknown

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.