Skip to content
Breaches.

Phishing breaches

167 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
TiffanyVishing attack on Tiffany Korea exposes customer dataMay 26, 20251 year agoPhishing4,600
Washington State Opportunity Scholarship FoundationMay 22, 20251 year agoPhishingUnknown
MedicareCompareUS filingMay 12, 20251 year agoPhishingUnknown
Troy Hunt's Mailchimp ListMar 25, 20251 year agoPhishingUnverified17Kacct
NumotionPhishing breach of Numotion email accounts exposes 529,000 peopleMar 25, 20251 year agoPhishingUnverified529K
Montana Health SolutionsMar 25, 20251 year agoPhishing8,225
MedicareCompareUSAMar 21, 20251 year agoPhishing5,782
Issaquah FinancialMar 21, 20251 year agoPhishingUnknown
CPS SolutionsFeb 10, 20251 year agoPhishing500
RegenceJan 31, 20251 year agoPhishingUnknown
Prizm MediaJan 30, 20251 year agoPhishingUnknown
American TrustJan 2, 20251 year agoPhishing8,489
Regional CareDec 16, 20241 year agoPhishing226K
Northwest Asthma & Allergy CenterDec 12, 20241 year agoPhishing1,000
Ardon HealthNov 22, 20241 year agoPhishing10K
United of Omaha Life InsuranceJul 26, 20242 years agoPhishing140K
Rite AidImpersonation attack exposes Rite Aid customer ID data from 2017 to 2018 purchasesJul 15, 20242 years agoPhishing2.2M
Goddard SystemsApr 12, 20242 years agoPhishing2,041
Pacific Guardian Life InsuranceApr 4, 20242 years agoPhishing167K
Spokane Valley Fire DepartmentMar 8, 20242 years agoPhishingUnknown
Orsini Pharmaceutical ServicesMar 8, 20242 years agoPhishing57K
Alpha Supported Living ServicesJan 12, 20242 years agoPhishingUnknown
Moses Lake Community Health CenterJan 5, 20242 years agoPhishingUnknown
Holiday by AtriaNov 3, 20232 years agoPhishingUnknown
ShadowSocial engineering attack on cloud gaming firm Shadow exposes customer dataOct 12, 20232 years agoPhishingUnverified543Kacct
Caesars EntertainmentSocial engineering of IT vendor leads to theft of Caesars Rewards loyalty databaseSep 14, 20233 years agoPhishingUnknown
Phished Data via CERT PolandAug 31, 20233 years agoPhishingUnverified68Kacct
KrollSIM swap of Kroll employee exposes data of FTX, BlockFi and Genesis bankruptcy claimantsAug 25, 20233 years agoPhishingUnverifiedUnknown
Sebastian KanczugowskiJun 28, 20233 years agoPhishingUnknown
Clallam County Public Utility DistrictJun 27, 20233 years agoPhishingUnknown
Mondelez GlobalJun 15, 20233 years agoPhishing51K
Sno-Isle Regional Library SystemApr 21, 20233 years agoPhishingUnknown
RedditPhishing attack on Reddit employee leads to theft of internal documents and codeFeb 9, 20233 years agoPhishingUnverifiedUnknown
Prudential Insurance Company of AmericaDec 28, 20223 years agoPhishing2.6M
Human InvestingDec 22, 20223 years agoPhishingUnknown
DropboxPhishing attack lets hacker steal 130 Dropbox GitHub repositoriesNov 1, 20223 years agoPhishingUnverifiedUnknown
focusITSep 29, 20223 years agoPhishing148K
MailchimpSocial engineering attack on Mailchimp targets crypto-related customer accountsAug 12, 20224 years agoPhishingUnverifiedUnknown
CiscoYanluowang-linked attacker breaches Cisco via employee's synced Google accountAug 10, 20224 years agoPhishingUnknown
Columbia River Mental Health ServicesAug 8, 20224 years agoPhishing18K
TwilioSMS phishing of employees gives 0ktapus hackers access to Twilio customer dataAug 7, 20224 years agoPhishingUnknown
R.R. Donnelley & SonsAug 5, 20224 years agoPhishingUnknown
Marriott InternationalSocial engineering at a Marriott hotel leads to theft of guest and card dataJul 6, 20224 years agoPhishingUnverifiedUnknown
Fuller & FullerJul 1, 20224 years agoPhishingUnknown
Carnival Cruise Line2019 employee email compromise exposed 180,000 people; USD 1.25M multistate settlementJun 23, 20224 years agoPhishing180K
Kaiser Foundation Health Plan of WashingtonJun 3, 20224 years agoPhishing70K
Private Client ServicesMay 27, 20224 years agoPhishingUnknown
WellDyneRXMay 6, 20224 years agoPhishing50K
PlanMember SecuritiesApr 15, 20224 years agoPhishing71K
Christie Business HoldingsMar 25, 20224 years agoPhishing503K

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.