Skip to content
Breaches.

Breaches that exposed phone numbers

716 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Instant CheckmateFeb 4, 20233 years agoUnverified12Macct
Planet IceJan 31, 20233 years agoUnverified240Kacct
Hotai MotorCar rental app left 400,000+ customers' data in open database; Taiwan finesJan 30, 20233 years agoExposed dataUnverified400K
KomplettFritidJan 23, 20233 years agoUnverified139Kacct
AutotraderJan 23, 20233 years agoHackingUnverified20Kacct
T-MobileAbused API leaks account data of 37 million T-Mobile customersJan 19, 20233 years agoHacking37M
GeminiDec 16, 20223 years agoVendor breachUnverified5.3Macct
CoinTrackerDec 12, 20223 years agoUnverified1.6Macct
LastPassAttacker steals LastPass customer vault backups after earlier dev breachNov 30, 20223 years agoHacking1.6M
Get Revenge On Your ExNov 15, 20223 years agoHackingUnverified79Kacct
MicrosoftMisconfigured Microsoft storage exposes prospective customer business dataOct 19, 20223 years agoExposed dataUnverifiedUnknown
MedibankExtortion attack on health insurer exposes data of 9.7 million peopleOct 13, 20223 years agoRansomware9.7M
BhinnekaOct 6, 20223 years agoUnverified1.3Macct
CommonSpirit HealthRansomware attack on CommonSpirit exposes data of 623,774 patientsOct 5, 20223 years agoRansomware633K
TAP Air PortugalSep 23, 20224 years agoRansomwareUnverified6.1Macct
OptusCyberattack exposes ID and contact data of about 9.5 million AustraliansSep 22, 20224 years agoHacking9.5M
RevolutTargeted cyberattack exposes personal data of about 50,000 Revolut customersSep 19, 20224 years agoHackingUnverified50K
SamsungHack of US systems exposes Samsung customer names, contacts and birth datesSep 2, 20224 years agoHackingUnverifiedUnknown
DoorDashHackers linked to Twilio breach use vendor credentials to access DoorDash dataAug 25, 20224 years agoVendor breachUnverified367Kacct
BanorteAug 18, 20224 years agoHackingUnverified2.1Macct
SignalTwilio breach exposes phone numbers and SMS codes of about 1,900 Signal usersAug 15, 20224 years agoVendor breachUnverified1,900
TwilioSMS phishing of employees gives 0ktapus hackers access to Twilio customer dataAug 7, 20224 years agoPhishingUnknown
TwitterAPI flaw let attacker link emails and phone numbers to Twitter accountsAug 5, 20224 years agoHacking6.7Macct
Tuned GlobalAug 3, 20224 years agoHackingUnverified986Kacct
JukinMediaJul 17, 20224 years agoUnverified314Kacct
La Poste MobileJul 14, 20224 years agoRansomwareUnverified534Kacct
Shanghai National PoliceHacker offers alleged Shanghai police database on 1 billion Chinese residentsJul 4, 20224 years agoUnverifiedUnknown
Capital EconomicsJul 4, 20224 years agoUnverified264Kacct
Bourse des VolsJul 3, 20224 years agoUnverified1.5Macct
BookchorJul 3, 20224 years agoHackingUnverified498Kacct
CTARSMay 31, 20224 years agoHackingUnverified12Kacct
AdeccoMay 31, 20224 years agoHackingUnverified4.3Macct
MGM ResortsMay 29, 20224 years agoUnverified25Macct
Amart FurnitureMay 25, 20224 years agoHackingUnverified109Kacct
Wendy'sMay 24, 20224 years agoUnverified52Kacct
FanpassMay 24, 20224 years agoUnverified112Kacct
PayHereMay 2, 20224 years agoUnverified1.6Macct
TravelioApr 8, 20224 years agoUnverified471Kacct
Royal EnfieldMar 31, 20224 years agoLost or stolen deviceUnverified421Kacct
ZAP-HostingMar 19, 20224 years agoUnverified747Kacct
RedDoorzJan 28, 20224 years agoUnverified5.9Macct
UpstoxJan 19, 20224 years agoUnverified111Kacct
International Committee of the Red CrossHack of ICRC servers exposes data of more than 515,000 vulnerable peopleJan 18, 20224 years agoHacking515K
Aditya Birla Fashion and RetailJan 15, 20224 years agoRansomwareUnverified5.5Macct
Guns.comJan 13, 20224 years agoUnverified376Kacct
FlexBookerJan 6, 20224 years agoHackingUnverified3.8Macct
ProtempsDec 20, 20214 years agoUnverified50Kacct
Ducks UnlimitedNov 16, 20214 years agoUnverified1.3Macct
CyberServeNov 4, 20214 years agoRansomwareUnverified1.1Macct
PlaybookOct 11, 20214 years agoExposed dataUnverified51Kacct

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.