Phishing breaches

170 breaches

NikkeiNikkei discloses breaches of employees’ Microsoft, Google email accounts1.8M affectedMediaJPUnverifiedOct 6Astrana HealthPhishing exposed health records, employment records, financial details and internal documents. Reported to the SEC 8-K.HealthcareUSSep 23RevolutPhishing exposed names, dates of birth, addresses, emails, phone numbers, government IDs, biometric data and financial details.FinanceGBUnverifiedSep 12McKessonPhishing exposed dates of birth, emails, employment records, names, health records, phone numbers, addresses and Social Security numbers.6.4M accountsHealthcareUSAug 28GRGreystar Real Estate PartnersPhishing, data exposed not stated. Reported to the Indiana AG.1,831 affectedLegal and servicesUSAug 27Levi StraussLevi's says social engineering of three employees led to corporate data theftRetailUSAug 7IIEHCybersecurity incident disclosed to the SEC (8-K Item 8.01)USAug 6Brinks HomePhishing exposed dates of birth, emails, names, payment cards, phone numbers, addresses, financial details, messages and employment records.732K accountsTechUSJul 30RingCentralPhishing exposed emails, names, phone numbers and addresses.1.6M accountsTechUSJul 28FBFive BelowCybersecurity incident disclosed to the SEC (8-K Item 8.01)USJul 22CHClover Health Investments, Corp. /DeCybersecurity incident disclosed to the SEC (8-K Item 8.01)HealthcareUSJul 17Abbott LaboratoriesAbbott probes Exact Sciences legacy system breach amid ShinyHunters claimsHealthcareUSUnverifiedJul 17AssuranceAmericaPhishing exposed names, emails, phone numbers, addresses, government IDs and insurance details.7.0M affectedInsuranceUSJul 8AdaptHealthPhishing exposed names, health records, emails, phone numbers, addresses, insurance details and dates of birth. Reported to the California AG.4.1M affectedHealthcareUSJul 2iRhythm TechnologiesiRhythm says patient health data stolen from third-party hosted apps8.2M affectedHealthcareUSJun 15AMAssuranceAmerica Managing General AgencyPhishing exposed names, government IDs, Social Security numbers, payment cards, financial details, addresses and dates of birth. Reported to the California AG.7.0M affectedInsuranceUSJun 15DINUMFrench government Tchap messenger breach affects 73,467 officials73K affectedGovernmentFRUnverifiedJun 9XsolisPhishing exposed names, health records, addresses, dates of birth, Social Security numbers and insurance details. Reported to the California AG.2.5M affectedHealthcareUSJun 5PHPlaza Home MortgagePhishing exposed Social Security numbers, dates of birth, addresses and names. Reported to the California AG.138K affectedFinanceUSMay 29Charter CommunicationsCharter confirms breach as ShinyHunters claims 40 million customer records4.9M accountsTelecomUSUnverifiedMay 26BCBoston Capital HoldingsPhishing exposed Social Security numbers, government IDs and names. Reported to the California AG.55K affectedFinanceUSMay 18Canada LifePhishing exposed emails, employment records, names, phone numbers and addresses.238K accountsTechMay 13Permanent TSBFraudsters posing as customers hijacked accounts via call centre; DPC fines of EUR 277,500FinanceIEMay 8South Staffordshire WaterPhishing-led cyber attack exposed data of 633,887 people; ICO fine of GBP 963,900634K affectedEnergyGBMay 7Marcus & MillichapPhishing exposed emails, employment records, names, phone numbers and addresses. Reported to the Washington AG.1.8M accountsTechUSMay 3CarnivalPhishing exposed names, government IDs, dates of birth, emails, location data and addresses. Reported to the California AG.6.0M affectedHospitalityUSApr 24ADTPhishing exposed names, Social Security numbers, dates of birth, emails, government IDs, phone numbers and addresses. Reported to the Delaware DOJ.332K affectedTechUSApr 24SDSpokane Digestive Disease Center, P.SPhishing exposed names and health records. Reported to the HHS OCR.2,157 affectedHealthcareUSApr 20Hims & HersPhishing exposed names, emails, phone numbers, messages and health records. Reported to the California AG.3,385 affectedHealthcareUSApr 2MAMercer AdvisorsPhishing exposed Social Security numbers, government IDs, health records, payment cards, financial details, dates of birth, addresses and names. Reported to the California AG.143K affectedFinanceUSMar 31AuraPhishing exposed emails, IP addresses, names, phone numbers and addresses.903K accountsTechUSMar 18StarbucksPhishing of Starbucks Partner Central exposes SSNs of 889 employees889 affectedRetailUSMar 10OptimizelyPhishing exposed names, emails and internal documents.TechUSUnverifiedFeb 23FTFigure Technology SolutionsPhishing exposed Social Security numbers, payment cards, financial details, dates of birth and addresses. Reported to the California AG.40K affectedFinanceUSFeb 23FigureFintech Figure breach via social engineering exposes nearly 1 million accounts967K accountsFinanceUSUnverifiedFeb 13Panera BreadPhishing exposed emails, names, phone numbers and addresses.5.1M accountsRetailUSUnverifiedJan 31Match GroupPhishing, data exposed not stated.TechUSUnverifiedJan 29BettermentPhishing exposed dates of birth, emails, employment records, location data, names, phone numbers and addresses. Reported to the Washington AG.1.4M accountsFinanceUSJan 10MixpanelPhishing exposed names, emails and location data.Data brokersUSUnverifiedNov 26, 2025Princeton UniversityPhishing attack exposes Princeton alumni and donor databaseEducationUSUnverifiedNov 15, 2025DoorDashSocial engineering breach exposes DoorDash users' contact detailsRetailUSUnverifiedNov 13, 2025MSMehri & SkaletPhishing exposed Social Security numbers, health records, insurance details, payment cards, financial details and names. Reported to the California AG.36K affectedUSOct 24, 2025EREmergency Responders Health CenterPhishing exposed names and health records. Reported to the HHS OCR.1,528 affectedHealthcareUSSep 26, 2025OOOutcomes OnePhishing exposed health records, insurance details and names. Reported to the California AG.257K affectedHealthcareUSSep 23, 2025WorkdayPhishing exposed names, emails and phone numbers.TechUSUnverifiedAug 15, 2025GoogleShinyHunters steal business contact data from Google Salesforce instanceTechUSUnverifiedAug 5, 2025CiscoVishing attack on Cisco CRM exposes Cisco.com user profilesTechUSUnverifiedAug 4, 2025Allianz LifeSalesforce CRM social engineering exposes 1.5 million Allianz Life records1.5M affectedInsuranceUSUnverifiedJul 26, 2025SSolixPhishing, data exposed not stated. Reported to the Vermont AG.USJul 18, 2025CDChristian Dior Couture SASPhishing, data exposed not stated. Reported to the California AG.79K affectedUSJul 18, 2025