Skip to content
Breaches.

Breaches that exposed other

353 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Garrett MotionMOVEit exploitation exposes Garrett Motion company, employee and customer dataAug 2, 20233 years agoSupply chainUnknown
MaximusMOVEit breach exposes personal and health data of 8 to 11 million peopleJul 26, 20233 years agoSupply chain9.2M
Johns Hopkins University and Health SystemMOVEit server breach at Johns Hopkins exposes personal informationJul 25, 20233 years agoSupply chainUnknown
1st Source BankUnauthorized party accessed 1st Source Bank's MOVEit serverJul 10, 20233 years agoSupply chain450K
F&G Annuities & LifeVendor PBI MOVEit breach exposes data of many F&G policyholdersJun 30, 20233 years agoVendor breachUnknown
UCLAUCLA confirms MOVEit Transfer compromise and notifies affected peopleJun 29, 20233 years agoSupply chainUnverifiedUnknown
Siemens EnergySiemens Energy confirms it was targeted in MOVEit attacksJun 29, 20233 years agoSupply chainUnverifiedUnknown
Jackson National Life InsuranceVendor PBI MOVEit breach exposes 700,000 to 800,000 Jackson customersJun 26, 20233 years agoVendor breach853K
Corebridge FinancialVendor MOVEit breach exposes Corebridge customers' SSNs and policy numbersJun 26, 20233 years agoVendor breach6.5M
PBI Research ServicesMOVEit breach at pension death-audit vendor exposes millions of insurer customersJun 22, 20233 years agoSupply chainUnknown
Genworth FinancialVendor MOVEit breach exposes data of 2.5 to 2.7 million life insurance customersJun 22, 20233 years agoVendor breach2.5M
US Department of EnergyTwo Department of Energy entities breached in MOVEit attacksJun 15, 20233 years agoSupply chainUnverifiedUnknown
Louisiana Office of Motor VehiclesMOVEit breach exposes data of all Louisiana license and ID holdersJun 15, 20233 years agoSupply chainUnverifiedUnknown
Transport for LondonTransport for London confirms it was hit by MOVEit mass hackJun 12, 20233 years agoSupply chainUnverifiedUnknown
Boots UKBoots staff data stolen through payroll provider Zellis's MOVEit serverJun 5, 20233 years agoVendor breachUnverifiedUnknown
Aer LingusAer Lingus staff data exposed in MOVEit payroll breachJun 5, 20233 years agoVendor breachUnverifiedUnknown
Progress SoftwareMOVEit Transfer zero-day exploited by Cl0p in mass data theft campaignMay 31, 20233 years agoSupply chainUnknown
Toyota MotorCloud misconfiguration exposed vehicle data of 2.15 million Toyota customers for a decadeMay 12, 20233 years agoExposed dataUnverified2.1M
Gen DigitalCCleaner paid customers' personal data stolen in MOVEit hackMay 12, 20233 years agoSupply chain6
CapitaRansomware attack on UK outsourcer Capita exposes data of over 6 million peopleApr 3, 20233 years agoRansomware6.6M
MetaMeta's LLaMA research model weights leaked on 4chan a week after releaseMar 8, 20233 years agoUnverifiedUnknown
Chick-fil-AAutomated credential stuffing attack compromises Chick-fil-A One accountsMar 2, 20233 years agoCredential stuffingUnknown
Cutout.ProOpen Elasticsearch instance leaked 9GB of Cutout.pro AI image editor user logsFeb 16, 20233 years agoExposed dataUnverifiedUnknown
DuolingoScraped profile data of 2.6 million Duolingo users sold then leakedJan 24, 20233 years agoScrapingUnverified2.7Macct
T-MobileAbused API leaks account data of 37 million T-Mobile customersJan 19, 20233 years agoHacking37M
Nuance CommunicationsMOVEit breach exposes patient data held by Nuance for healthcare providersNov 18, 20223 years agoSupply chain1.2M
Australian Clinical LabsMedlab Pathology cyberattack exposes data of 223,000 peopleOct 27, 20223 years agoHacking223K
Toyota MotorT-Connect source code on GitHub exposed 296,019 customer emails for five yearsOct 7, 20223 years agoExposed data296K
CommonSpirit HealthRansomware attack on CommonSpirit exposes data of 623,774 patientsOct 5, 20223 years agoRansomware633K
Morgan StanleySEC fines Morgan Stanley $35M over lost drives holding data of 15M customersSep 20, 20224 years agoVendor breach15M
Los Angeles Unified School DistrictRansomware attack disrupts IT systems of second-largest US school districtSep 6, 20224 years agoRansomwareUnknown
SamsungHack of US systems exposes Samsung customer names, contacts and birth datesSep 2, 20224 years agoHackingUnverifiedUnknown
MailchimpSocial engineering attack on Mailchimp targets crypto-related customer accountsAug 12, 20224 years agoPhishingUnverifiedUnknown
TwilioSMS phishing of employees gives 0ktapus hackers access to Twilio customer dataAug 7, 20224 years agoPhishingUnknown
Bandai NamcoBandai Namco confirms unauthorized access that may have exposed customer dataJul 13, 20224 years agoUnverifiedUnknown
Marriott InternationalSocial engineering at a Marriott hotel leads to theft of guest and card dataJul 6, 20224 years agoPhishingUnverifiedUnknown
Shanghai National PoliceHacker offers alleged Shanghai police database on 1 billion Chinese residentsJul 4, 20224 years agoUnverifiedUnknown
IKEA CanadaIKEA Canada says data breach involved personal information of 95,000 customersMay 6, 20224 years agoUnverified95K
OktaLapsus$ accesses Okta support engineer's machine at vendor SitelMar 22, 20224 years agoVendor breachUnknown
FacebookTwelve 2018 Facebook breach notifications; Irish DPC fine of EUR 17MMar 15, 20224 years agoUnknown
International Committee of the Red CrossHack of ICRC servers exposes data of more than 515,000 vulnerable peopleJan 18, 20224 years agoHacking515K
KaseyaREvil ransomware pushed through Kaseya VSA hits up to 1,500 businessesJul 2, 20215 years agoSupply chainUnknown
JBSRansomware attack halts meat plants; JBS pays $11 million ransomMay 31, 20215 years agoRansomwareUnverifiedUnknown
Air IndiaAttack on passenger system provider SITA exposes 4.5 million Air India customersMay 21, 20215 years agoVendor breachUnverified4.5M
SingtelSingtel customer data stolen through Accellion file sharing systemFeb 11, 20215 years agoSupply chainUnverifiedUnknown
AccellionZero-day attacks on legacy FTA file transfer appliance hit dozens of organizationsFeb 1, 20215 years agoSupply chainUnknown
Australian Securities and Investments CommissionASIC server breached through Accellion file transfer softwareJan 25, 20215 years agoSupply chainUnverifiedUnknown
FireEyeNation-state attacker steals FireEye red team assessment toolsDec 8, 20205 years agoSupply chainUnknown
TwitterPhone spear phishing gives attackers internal tools, 130 accounts targetedJul 15, 20206 years agoPhishing130
easyJetCyber-attack exposes email and travel details of nine million easyJet customersMay 19, 20206 years agoHackingUnverified9M

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.