Skip to content
Breaches.

Vendor breach breaches

148 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
VeradigmVeradigm discloses patient data breach after Gentlemen gang claims 3.5M recordsSep 82 weeks agoVendor breachUnknown
Catalyst BrandsCatalyst Brands employee data stolen from third-party HR and payroll serversSep 43 weeks agoVendor breach187K
DropboxLenovo ID verification flaw let attacker access about 5,000 Dropbox accountsSep 23 weeks agoVendor breachUnverified5,000
Boston ScientificMaterial cybersecurity incident reported to the SEC (8-K Item 1.05)Aug 264 weeks agoVendor breachUnknown
Hospital for Sick ChildrenSickKids careers system flaw exposes employee and job applicant dataAug 215 weeks agoVendor breachUnknown
Pokemon CenterPokemon Center UK and Germany customers exposed in CEVA Logistics hackAug 175 weeks agoVendor breachUnverifiedUnknown
TrezorTrezor customer data exposed via ShipMonk Metabase breach, 81,000 affectedAug 136 weeks agoVendor breach81K
ValveValve warns European Steam hardware buyers of data theft at CEVAAug 106 weeks agoVendor breachUnverifiedUnknown
AmgenAmgen says patient health data exfiltrated from third-party cloud systemsJul 318 weeks agoVendor breach40K
HealthStreamCybersecurity incident disclosed to the SEC (8-K Item 8.01)Jul 298 weeks agoVendor breachUnknown
Ernst & YoungEY notifies clients of tax data theft from third-party support ticket systemJul 152 months agoVendor breach11K
LidlLidl online shop customer data stolen via IT service providerJul 132 months agoVendor breachUnverifiedUnknown
NavientNavient borrower SSNs exposed in ransomware attack on outside law firmJul 22 months agoVendor breachUnknown
Texas Parks and Wildlife DepartmentTexas Parks and Wildlife vendor breach exposes 3,087,721 license holdersJun 183 months agoVendor breach3.1M
PopularCybersecurity incident disclosed to the SEC (8-K Item 8.01)Jun 93 months agoVendor breachUnknown
SoFi SecuritiesSoFi Hong Kong warns customers of breach at third-party vendor databaseJun 83 months agoVendor breachUnverifiedUnknown
University of OxfordOxford CareerConnect platform breach at vendor Group GTI exposes student loginsJun 83 months agoVendor breachUnknown
Orrstown Financial ServicesCybersecurity incident disclosed to the SEC (8-K Item 8.01)May 293 months agoVendor breachUnknown
Oncology InstituteOncology Institute reports patient data exposed in software vendor breachMay 224 months agoVendor breachUnknown
ZaraZara data stolen via Anodot tokens, 197,400 customers affectedMay 84 months agoVendor breachUnverified197Kacct
NVIDIA GeForce NOWArmenian GeForce NOW partner breached, exposing user contact detailsMay 84 months agoVendor breachUnverifiedUnknown
VimeoVimeo confirms Anodot-linked breach, 119,200 users' data leakedApr 275 months agoVendor breach119Kacct
Rockstar GamesShinyHunters leaks Rockstar Games analytics data stolen via AnodotApr 135 months agoVendor breachUnverifiedUnknown
CrunchyrollCrunchyroll support tickets stolen via BPO agent's Okta accountMar 236 months agoVendor breachUnverified1.2Macct
HackerOneHackerOne employee SSNs exposed in Navia benefits breachMar 186 months agoVendor breach287
Divine SkinsMar 156 months agoVendor breach106Kacct
NYC Health + HospitalsNYC Health + Hospitals vendor breach exposes medical data and fingerprints of 1.8MMar 106 months agoVendor breach59K
EricssonEricsson US says vendor hack exposed data of 15,661 employees and customersMar 96 months agoVendor breach16K
HungerRushHacker emails HungerRush restaurant patrons after marketing platform breachMar 46 months agoVendor breachUnverifiedUnknown
ManoManoManoMano says Zendesk subcontractor breach exposed 38 million customersFeb 267 months agoVendor breachUnverified38M
Canada GooseFeb 177 months agoVendor breachUnverified582Kacct
FlickrFlickr warns users of exposure via third-party email provider flawFeb 67 months agoVendor breachUnverifiedUnknown
Korean Air Catering & Duty-FreeHack of catering supplier KC&D exposes Korean Air employee dataDec 29, 20259 months agoVendor breachUnverifiedUnknown
NissanNissan says 21,000 Fukuoka customers exposed in Red Hat breachDec 22, 20259 months agoVendor breachUnverified21K
PornhubHackers extort Pornhub over Premium members' viewing data from MixpanelDec 12, 20259 months agoVendor breachUnverifiedUnknown
Phoenix Education PartnersCybersecurity incident disclosed to the SEC (8-K Item 8.01)Dec 2, 20259 months agoVendor breachUnknown
OpenAIMixpanel analytics vendor breach exposed limited data on OpenAI API usersNov 26, 202510 months agoVendor breachUnverifiedUnknown
IberiaIberia customer names and loyalty IDs exposed via supplier breachNov 23, 202510 months agoVendor breachUnverifiedUnknown
VultrNov 20, 202510 months agoVendor breach188Kacct
VITAS Hospice ServicesCompromised vendor account exposes 319,177 VITAS hospice patientsNov 19, 202510 months agoVendor breach319K
MANGOMANGO marketing vendor breach exposes customer contact dataOct 14, 202511 months agoVendor breachUnverifiedUnknown
BK TechnologiesCybersecurity incident disclosed to the SEC (8-K Item 8.01)Oct 6, 202511 months agoVendor breachUnknown
DiscordDiscord vendor breach exposes ID photos of about 70,000 usersOct 3, 202511 months agoVendor breach75K
Renault UKRenault and Dacia UK customer data taken from third-party providerOct 2, 202511 months agoVendor breachUnverifiedUnknown
HarrodsThird-party breach exposes 430,000 Harrods e-commerce customer recordsSep 26, 202512 months agoVendor breachUnverified430K
CulturaSep 25, 20251 year agoVendor breachUnverified1.5Macct
VeradigmStolen credentials expose Veradigm storage account data of 2.67MSep 22, 20251 year agoVendor breach2.7M
StellantisStellantis North American customer service platform breachedSep 21, 20251 year agoVendor breachUnverifiedUnknown
Volvo Group North AmericaVolvo Group North America customer and staff data exposed in Conduent hackSep 17, 20251 year agoVendor breach17K
Chess.comHackers access Chess.com third-party file transfer app, 4,500 users hitSep 3, 20251 year agoVendor breach4,541

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.